last executing test programs: 8.487432567s ago: executing program 0 (id=1044): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x0, 0x72}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 8.287547781s ago: executing program 0 (id=1039): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x4000000, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0xc, 0x5, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x4c}}, 0x0) 7.935126856s ago: executing program 0 (id=1047): syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x280c810, &(0x7f0000000100)=ANY=[], 0xfc, 0x5aa1, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x0) 5.263688224s ago: executing program 0 (id=1075): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88000, 0x54) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x6dd8, 0x11}) 3.672749618s ago: executing program 2 (id=1085): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000580)={0xf8, 0x2, 0x20000000, 0x2}) 3.184052951s ago: executing program 2 (id=1090): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x800803fc) shutdown(r0, 0x0) 2.934194485s ago: executing program 2 (id=1094): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) mlockall(0x6) 2.631299944s ago: executing program 2 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpquota}, {@grpquota}, {@dax}]}, 0xfd, 0xb9a4, &(0x7f0000017200)="$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") 2.499854211s ago: executing program 3 (id=1098): r0 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) unshare(0x22020600) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='&[&\x18\x00', &(0x7f0000000080)='i', 0x1) 2.386237383s ago: executing program 1 (id=1099): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/4069, 0xfe5}, {&(0x7f0000001300)=""/172, 0xac}, {&(0x7f0000000100)=""/50, 0x32}], 0x3}, 0x0) 2.134043169s ago: executing program 1 (id=1100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x3, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) 1.966229423s ago: executing program 3 (id=1101): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x181800) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "f6380000000000000000a93c"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x1, 0x6, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0x0, 0x5, 0x1}) 1.780098744s ago: executing program 1 (id=1102): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r0) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) 1.680204292s ago: executing program 2 (id=1103): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 1.648510859s ago: executing program 4 (id=1104): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff7f}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xd, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.56602581s ago: executing program 3 (id=1105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x1, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffff}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.481047886s ago: executing program 1 (id=1106): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) 1.26731226s ago: executing program 2 (id=1107): syz_mount_image$xfs(&(0x7f0000009580), &(0x7f00000095c0)='./file0\x00', 0x8080, &(0x7f0000009600), 0x1, 0x957a, &(0x7f0000009640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x80405880, &(0x7f0000000040)={0x1, 0x8000000000000002, 0xfffffffffffffffc}) 1.261835808s ago: executing program 4 (id=1108): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x2, 0xc2d, &(0x7f00000001c0)="$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") read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1.241608672s ago: executing program 1 (id=1109): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@usrjquota}, {@abort}, {@nombcache}, {@noload}, {@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@bsdgroups}, {@bh}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, 0x0) 1.201548451s ago: executing program 3 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) 956.459779ms ago: executing program 0 (id=1111): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 947.791239ms ago: executing program 3 (id=1112): capset(&(0x7f00000004c0)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff, 0xd}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000080)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0) 828.506727ms ago: executing program 4 (id=1113): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="00000000000000e8"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)}, 0x10) 668.577865ms ago: executing program 1 (id=1114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpquota}, {@grpquota}, {@dax}]}, 0xfd, 0xb9a4, &(0x7f0000017200)="$eJzs3WuMXGX9wPFntrvbLqRQ/qHl8hcplQIFabttoRSC3W3pluVSbgW3QIVKF6i0XErBlusSQgIqBjBeiGmUiNcoUSxEomA1olwsxhggviASMAZMGn0Fagxrzs6F3WEY3Wf7PJvSzyfpnjln9ne6M995zoSG7PT1nLckhNZQNhDqvfTW1ic/t7rnqZ98/oHtj9z9wqPlo12TKnd3Vbbdle2SMHSyocMt5UOtX9n2WEux0zL8vHt1dJT2CeGyuvMsLG9u7qx+32CdyuHp1ftbarulz5T/1OxdfPlt1+o1IYQpw+ZLIYS573mge6i+7uU9leckDOs2oXJ36d37hrat5T+Lnwth8fbwvq+PcVX8nFN6Jn/04PH+QXYHfd3Le+v6d1U6lyrrsat+De6J6l/nrz88+67KUzj0ehvHhGPS191zRmiyjo/798UzB8vXzbYQQnsIYWIIYdJ492DX6F4yv3jPbqnuV7JX1/+URq+LI+e9/s8QwrTibbx8vSi/FwC7l+4l85c2WP/tzdb/oju3vWn9w+6vt3vJ/GKt163/Sc3W/7pFq14sr/uuheWpd8b3QQAAAAAADV2/5aar1qxf37/RDTfccKN2Y7yvTEBq7y768f5JAAAAAAAAAAAAgP9Vjv+deLwfIwAAAAAAAAAAAAB8UPSu6N45oTTi0IThO4fs6B/aLni778pv3zu4trqt3H16g1OO+Jz/wcHBwUU7F1c+i729erj6edmT6oeL8w+0vv1MZber/vMH24aOtoVLL1+3vn9u8VctbQubi53O4lH0tIX7ip15xc7ytvCdYmf+0E5H2F7szL7smvVriwOnRjxbHzy9KwbChBHFwohXw/D+A20ztle3TU5ZPVtrqPTff//zN9bdV9W4/7vn736/zyVn1xhd/9mbq9smp3zP+j/ojZU/a3Tf+/evnX+J/mk1uP6PaFR/3a+7/k9vcMra/LSXnrmy6P/4U3evrByqfa58Zb9h/2HnX1rff+jktet/capTqtf/iSGEZWN6MvZAvSvu2Nls/Tfv31p5X681Lw3vf8ZJLywq+u8za9sfKofaRtn/lGbrvzT9PdcTRql3xUODdet/FP3DEQ1OWWvy5ZdPe67o/8NnVk4ddt9o+i+r7z9n04Zr51y/5aZj121Yc0X/Ff1XL5y74ITjOxcu6JwzdEUofx3bc7InGdv6H/r8/+EzpRBm1uZnHv/OhUX/ad/o6ascmjTK/j1N1/+lI39WhpnREtrbw+Y1mzZt7Cx/re7OK38tf1uD/qN4///IUZVv66hsSyEcWJtfeMDUA4v+Uycs+1DlUPso+y9v2n+g9vcSaYzrf23dzIj+A88/9OOi/4zvXVD9N4XRvv+f2qx/y9et/7HqXVH3Dz67WNH/z62zTowc7/Xff2nl6P/z/WeeFzl+mv5p5eh/4/8ftily/HT908rRv2PByXdEjp+hf1o5+m8/adG3IsfP1D+tHP2/esxxv4scX6F/Wjn6n3t45xuR42fpn1aO/n/5vy0XRY6frX9aOfrPOeTWWyLHz9E/rSb9z9p7F5y/6L9p8nVTI8fP1T+tHOv/yZYb5kWOn6d/Wjn6//LYdb+JHF+pf1o5+u89Y8OrkePn659Wjv5nz1tzT+T4BfqnlaP/gyf3PxI5/nH908rR/5KDH7s8crxP/7Ry9P/S1B91R46v0j+tHP13tD15VOT4hfqnlaN/615P7Bs5fpH+aeXof/PMb/4rcvxi/dPK0f/Rox96JXJ8tf5p5ej/5ok/2BY5/gn908rRf/px3/1C5Pgl+qeVo/+1h/3+5cjxS/VPK0f/J2a/+PfI8TX6p5Wj/2sf++ODkeOf1D+tHP2P6Xzlqcjxy/RPK0f/lR/+RaPfE/TfZ0sh6J9Wjv5b93t6feR4v/5p5ej/69KzbZHjl+ufVo7+++6zY0bk+BX6p5Wj/7OzDvlr5PiV+qeVo3844qAdkePr9E8rR/+Ljp/6cOT4p/RPK0f/Bxbtd2fk+FX6p5Wj/85pk2+MHF+vf1o5+h9+UMc5keMb9E8rR//bO9pOiBy/Wv+0cvR/vL10aOT4NfqnlaN/y9ze70eOX6t/Wjn6P7/4zM9Gjl+nf1o5+t83p/u1yPGN+qeVo/+q6cuejhy/Xv+0cvQ/Yt9Vsb+RfZP+aeXo/7ew+oDI8Rv0TytH/21TzrktcvxG/dPK0f/WQ89fFTn+6Zfe2jox6J9Mjv4/PeGu+yPHN1v/aeXov3HhHY9Hjm/RP60c/Wcdee+fIsdv0j+tHP1fPeqef0SO36x/Wjn6f23iFydHjt+if1o5+l8w6f6jI8dv1T+tHP0nH7h1aeT4bfqnlaP/rw54cG3k+O36AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/IcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cCr+lY+H/8zJgZa0j2ItlLdllSGGQpLdZk35esoayFqJAtKUrKmq0kSySk3U5lKylFtJBWSpj/a8yC8R1N/cvMb77v9+s15zzLfZ65zvW5r+ecOfd57gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP++jddYf9WBgSGjrx3ygvvvfOzUq4/efI1rrjj2hGsvPOKWi0fduspUo+9eZcQ4Bp55sFVG3jd41CZDTr707MEjrwx+7uNOM/XUg6YfGLRtHtWBW/yLYc8z5sLgsVcHHTXqz1jTPvO3z7j1RQMDAzP+i8ertfHwNdcYOXmj/oztNsXou0ffPvbykFF/VtxyYGDFzQbGu39MfE9tuMa6E3sM/xdsPHzNtcfpPzC68zPdx13frcbdz6c4fLNBEzXcf8nGw9dYZ2Tr8a3j/fY99pl9YGBgyGkDA0NOHxgYcsbAwJAzJ3YP/juGr7r0qiOf88dcH1X9kDHfEKTn90FPvP3SkV8zho76OjHkrDFfC4D/W4avuvRqYf0PG3N/Wv8PPHn/RtY//N+39vBVlx54zvf5o249ZMy/7+P6X2muq+6deCMGAAAA/l1PP3LlNaOP9Q0eGJh7YJzjvc8Y/XOBQRdde9ttE22gk4ZwnOyFvzPxf8zIzlOdP8/AwO4bTuyhMBFMFsex+Y/p303/bvp307+b/t3076Z/N/276d9N/276d9O/m/7FxnP8f8Yx7w+a4rLVR2+6wO0n7rLBuB8/8rapXvJRTzST6/H/gZ0HjWo5svnOAwMD7xi+3gYLDwwMbLDLibfPOzD2vuVH3rfiTFOMPkHAws+8fct4HnjMq8mfOVnDNGMf46JnHn/tEadPMWicQTzHdiOOOWenjR9fZtz3C47/8xh7fokb3nrXSWNeyzJ4nI3Gt6+Oefwxn8u4nUePfeGRY198n932XHzv/Q9YdOfdtt5x+x233325JZZZftkll1tmycV32HnX7ZcY9XZ8czbq1BWrTcicDRt3zh4Z/tw5G/dzG9+czfPic/bMI+503Z2zjpmzIf/mnK324nM2z85jxrrK0IGtnpmbkX/l6kMH9ht5ZckpR+5Co7edfeS2b5pp8MDA8c9+oiMvTTl2Hxx0yM7/hfOWjH4/fPT7VeN5Sy4b33lLBrYd53FWGPVun6vHbDfu66xH3zzB5y1ZaY3DFhq5Fsf5+P+F/+jr/wt6LT9o7ESNOWnI6G1G9Xr2PBNjpm2V55xnYrl0Lpn/pheMd57BY/frNN7Rr4sbNObjDx616Yu9Lm5g4Qe2umDU57XKcqM+6un/OEp+7ljn2dkLnvfcMfDizx1TPHvx2Vu3v3mucZ873jb+IT5vXYzZR6ccZ6PxPXdc9/iQQ0Y+/pgxj+e5Y52dR7/Q+NnnjpF/7WpjnjtGjn2NoQPHj7yy1Mgraw4dOHfklaWfuTL1wLUjryy27R67bjfyhrVeuN8uPOh5v/AY9ts1xtlvJ+D8OCvfMDCw8rXp8xr/dGZpvx32IuPNr+ceeNHXcy905JPrDwwMzDrqq/TIT3LU2P8TabxDXny84fwTAy92/omBFZa/YLX/8njHrrNn9rXRp4taazwf87x1NuML1tmhUzxnZUzo9zXbhe1HXZ597KNdcvqNh4yZo6HjPO6/+ho95nNJ/cd8z/dcg08bGPRic7PmhMzN9C8+NxP6/cvC8426f+oXmZvZZ5ltuTFzM+zfnJs1xzM3z/1++LkGHTIw9fPnZsgz3wPPP3pu1piQuZnuv7PfTBO2H3V5gbE3bfL0sguMmZswF/Hr/5jHX+PfnZutxu438z9z37yDB4YNG9hv63322WvJUW/HXF1q1NsXX4OrT8hcTvXfmcs5Rz/rDH7h5Iy9aYVbVlznP12Dq/+7cznPwOAx/+beedzF8t/j5z/d9O+mfzf9u+nfTf9u+nfTv9h4jv/PM+bngovcvPBto38YM/T6CzbabmKPdyKbrI//j+77vOP/2210wfWDB8be96LHZ0dtM0ken11u1LsDlxyz3bjHB0ffPMHHZ6867orNXqLjs/+RMWt1An5u6Pm/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvpX2w8x/+XGPN7AE8/vM99ow+EDt1m+Bz/8eusJhOT9fH/0X2fd/z/2jmGbzN4YOx9L3r8f9Q2Hcf/97rnwcMm5eP/Y9aq4//8C/p307+b/t3076Z/N/276d9N/276d9O/2/j637LYSzwQJgrrv5v+xcZz/H+VMb8HsOvTdzw65vcBbj1l1T0m9ngnssn1+L///7+X5/9u+nfTv5v+3fTvpn83/bvp303/bvpDL+u/m/7d9C82+vj/wDj/7eG77BdROP7/f9t4+q+rf9TSfz39o5b+6+sftfTfQP+opf+G+kct/TfSP2rp/279o5b+G+sftfR/j/5RS/9N9I9a+m+qf9TSfzP9o5b+m+sftfTfQv+opf+W+kct/bfSP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrHz2//2QwQ+Ppv4P+Ucv631H/qKX/TvpHLf131j9q6f9e/aOW/rvoH7X031X/qKX/bvpHLf131z9q6b+H/lFL/z31j1r6v0//qKX/XvpHLf331j9q6b+P/lFL//frH7X0/4D+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf0/qH/U0v9D+kct/Q/WP2rpf4j+UUv/Q/WPWvp/WP+opf9h+kct/Q/XP2rp/xH9o5b+H9U/aun/Mf2jlv5H6B+19D9S/6il/1H6Ry39P65/1NL/aP2jlv7H6B+19D9W/6il/3H6Ry39j39B/6lf0mFNqlr6f8L6j1r6n6B/1NL/k/pHLf1P1D9q6f8p/aOW/p/WP2rpf5L+UUv/k/WPWvp/Rv+opf9n9Y9a+p+if9TS/3P6Ry39T9U/aun/ef2jlv5f0D9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19D9b/6il/xf1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/wX6Ry39v6R/1NL/y/pHLf0v1D9q6f8V/aOW/hfpH7X0/6r+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0/5r+UUv/y/WPWvpfoX/U0v/r+kct/a/UP2rp/w39o5b+V+kftfS/Wv+opf81+kct/b+pf9TS/1r9o5b+39I/aun/bf2jlv7f0T9q6f9d/aOW/t/TP2rp/339o5b+P9A/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/W/VP2rpf5v+UUv/H+oftfT/kf5RS/8f6x+19L9d/6il/x36Ry3979Q/Gtt/xsm7/136Ry3r/279o5b+P9E/aun/U/2jlv736B+19P+Z/lFL/3v1j1r6/1z/qKX/L/SPWvrfp3/U0v+X+kct/X+lf9TS/379o5b+D+gftfT/tf5RS/8H9Y9a+j+kf9TS/zf6Ry39f6t/1NL/d/pHLf1/r3/U0v9h/aOW/o/oH7X0/4P+UUv/R/WPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6/1X/qKX/3/SPWvo/pn/U0v9x/aOW/n/XP2rp/w/9o5b+T+gftfT/p/5RS/8n9Y9a+j+lf9TS/2n9o5b+I/SPSvoPGtA/auk/SP+opf9g/aOW/lPoH7X0H6J/1NJ/qP5RS/9h+kct/afUP2rpP5X+UUv/qfWPWvpPo3/U0n9a/aOW/tPpH7X0f5n+UUv/6fWPWvrPoH/U0n9G/aOW/i/XP2rpP5P+UUv/V+gftfSfWf+opf8s+kct/WfVP2rpP5v+UUv/2fWPWvrPoX/U0n9O/aOW/q/UP2rp/yr9o5b+c+kftfSfW/+opf+r9Y9a+s+jf9TS/zX6Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf9r9Y9a+r9O/6il/yL6Ry39X69/1NJ/Uf2jlv6L6R+19F9c/6il/xL6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TS/w36Ry39l9U/aum/nP5RS//l9Y9a+q+gf9TS/436Ry39V9Q/aun/Jv2jlv5v1j9q6b+S/iNNNe4NLf1X1j9q6b+K/lFL/+H6Ry39V9U/aum/mv5RS//V9Y9a+r9F/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+r9V/6il/9v0j1r6r6N/1NL/7fpHLf3foX/U0v+d+kct/d+lf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/d+sftfTfWP+opf979I9a+m+if9TSf1P9o5b+m+kftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r6v1f/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NJ/T/2jlv7v0z+afPsPel7/vfSPJt/+z1//e+sftfTfR/+opf/79Y9a+n9A/6il/776Ry3999M/aum/v/5RS/8D9I9a+h+of9TS/yD9o5b+H9Q/aun/If2jlv4H6x+19D9E/6il/6H6Ry39P6x/1NL/MP2jlv6H1/QfMcrBE7Z1S/+P1PT/97T0/6j+UUv/j+kftfQ/Qv+opf+R+kct/Y/SP2rp/3H9o5b+R+sftfQ/Rv+opf+x+kct/Y/TP2rpf7z+UUv/T+gftfQ/Qf+opf8n9Y9a+p+of9TS/1P6Ry39P61/1NL/JP2jybf/4OfeOuhk/aPJt//z1/9n9I9a+n9W/6il/yn6Ry39P6d/1NL/VP2jlv6f1z9q6f8F/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6f1H/qKX/OfpHLf3P1T9q6X+e/lFL//P1j1r6X6B/1NL/S/pHLf2/rH/U0v9C/aOW/l/RP2rpf5H+UUv/r+oftfS/WP+opf8l+kct/S/VP2rpf5n+UUv/r+kftfS/fAL6j/6fU0b8L4c3qWnpf4X1H7X0/7r+UUv/K/WPWvp/Q/+opf9V+kct/a/WP2rpf43+UUv/b+oftfS/Vv+opf+39I9a+n9b/6il/3f0j1r6f1f/qKX/9/SPWvp/X/+opf8P9I9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9Nff0n6BdZW/rf3Nd/grT0v0X/qKX/rfpHLf1v0z9q6f9D/aOW/j/SP2rp/2P9o5b+t+sftfS/Q/+opf+d+kct/e/SP2rpf7f+UUv/n+gftfT/qf5RS/979I9a+v9M/6il/736Ry39f65/1NL/F/pHLf3v0z9q6f9L/aOW/r/SP2rpf7/+UUv/B/SPWvr/Wv+opf+D+kct/R/SP2rp/xv9o5b+v9U/aun/O/2jlv6/1z9q6f+w/lFL/0f0j1r6/0H/qKX/o/pHLf3/qH/U0v9P+kct/f+sf9TS/y/6Ry39/6p/1NL/b/pHLf0f0z9q6f+4/lFL/7/rH7X0/4f+UUv/J/SPWvr/U/+opf+T+kct/Z/SP2rp/7T+UUv/EfpHJf2fuaj/C7X0H6R/1NJ/sP5RS/8p9I9a+g/RP2rpP1T/qKX/MP2jlv5T6h+19J9K/6il/9T6Ry39p9E/auk/rf5RS//p9I9a+r9M/6il//T6Ry39Z9A/auk/o/5RS/+X6x+19J9J/6il/yv0j1r6z6x/NFn2H/qCWwfPon80WfYfffG5639W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6f9K/aOW/q/SP2rpP5f+UUv/ufWPWvq/Wv+opf88+kct/V+jf9TSf179o5b+8+kftfSfX/+opf8C+kct/RfUP5oM+z80bPTF5/ZfSP9oMuwf1//C+kct/V+rf9TS/3X6Ry39F9E/aun/ev2jlv6L/qv+Iw7+Hw9s0tTSfzHrP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/G/SPWvovq3/U0n85/aOW/svrH7X0X6G9/+B8c0v/N7b3H4+W/ivqH7X0f5P+UUv/N+sftfRfSf+opf/K+kct/VfRP2rpP1z/qKX/qvpHLf1X0z9q6b+6/lFL/7foH7X0X0P/qKX/mvpHLf3X0j9q6b+2/lFL/7fqH7X0f5v+UUv/dfSPWvq/Xf+opf879I9a+r9T/6il/7v0j1r6r6t/1NJ/Pf2jlv7r6x+19N9A/6il/4b6Ry39N9I/aun/bv2jlv4b6x+19H+P/lFL/030j1r6b6p/1NJ/M/2jlv6b6x+19N9C/6il/5b6Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/9+oftfTfRf+opf+u+kct/XfTP2rpv7v+UUv/PfSPWvrvqX/U0v99+kct/ffSP2rpv7f+UUv/ffSPWvq/X/+opf8H9I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rp/0H9o5b+H5qw/k/+z8Y1iWrpf7D1H7X0P0T/qKX/ofpHLf0/rH/U0v8w/aOW/ofrH7X0/4j+UUv/j+oftfT/mP5RS/8j9I9a+h+pf9TS/yj9o5b+H9c/aul/tP5RS/9j9I9a+h+rf9TS/zj9o5b+x+sftfT/hP5RS/8T9I9a+n9S/6il/4n6Ry39P6V/1NL/0/pHLf1P0j9q6X+y/lFL/8/oH7X0/6z+UUv/U/SPWvp/Tv+opf+p+kct/T+vf9TS/wv6Ry39T9M/aul/uv5RS/8z9I9a+p+pf9TS/yz9o5b+Z+sftfT/ov5RS/9z9I9a+p+rf9TS/zz9o5b+5+sftfS/QP+opf+X9I9a+n9Z/6il/4X6Ry39v6J/NPn1n3rsxef2v0j/aPLrn9f/V/WPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/1/SPWvpfrn/U0v8K/aOW/l/XP2rpf6X+UUv/b+gftfS/Sv+opf/V+kct/a/RP2rp/039o5b+1+oftfT/lv5RS/9v6x+19P+O/lFL/+/qH7X0/57+UUv/7+sftfT/gf5RS//r9I9a+l+vf9TS/wb9o5b+N+oftfS/Sf+opf/N+kct/W/RP2rpf6v+UUv/2/SPWvr/UP+opf+P9I9a+v9Y/6il/+36Ry3979A/aul/p/5RS/+79I9a+t+tf9TS/yf6Ry39f6p/1NL/Hv2jlv4/0z9q6X+v/lFL/5/rH7X0/4X+UUv/+/SPWvr/Uv+opf+v9I9a+t+vf9TS/wH9o5b+v9Y/aun/oP5RS/+H9I9a+v9G/6il/2/1j1r6/07/qKX/7/WPWvo/rH/U0v8R/aOW/n/QP2rp/6j+UUv/P+oftfT/k/5RS/8/6x+19P+L/lFL/7/qH7X0/5v+UUv/x/SPWvo/rn/U0v/v+kct/f+hf9TS/wn9o5b+/9Q/aun/pP5RS/+n9B9luROed7Wl/9P6Ry39R+gflfSfYkD/qKX/IP2jlv6D9Y9a+k+hf9TSf4j+UUv/ofpHLf2H6R+19J9S/6il/1T6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TS/2X6Ry39p9c/auk/g/5RS/8Z9Y9a+r9c/6il/0z6Ry39X6F/1NJ/Zv2jlv6z6B+19J9V/6il/2z6Ry39Z9c/auk/h/5RS/859Y9a+r9S/6il/6v0j1r6z6V/1NJ/bv2jlv6v1j9q6T+P/lFL/9foH7X0n1f/qKX/fPpHLf3n1z9q6b+A/lFL/wX1j1r6L6R/1NJ/Yf2jlv6v1T9q6f86/aOW/ovoH7X0f73+UUv/RfWPWvovpn/U0n9x/aOW/kvoH7X0X3JU/ykn1rAmVS39l7L+o5b+S+sftfRfRv+opf8b9I9a+i+rf9TSfzn9o5b+y+sftfRfQf+opf8b9Y9a+q+of9TS/036Ry3936x/1NJ/Jf2jlv4r6x+19F9F/6il/3D9o5b+q+oftfRfTf+opf/q+kct/d+if9TSfw39o5b+a+oftfRfS/+opf/a+kct/d+qf9TS/236Ry3919E/aun/dv2jlv7v0D9q6f9O/aOW/u/SP2rpv67+UUv/9fSPWvqvr3/U0n8D/aOW/hvqH7X030j/qKX/u/WPWvpvrH/U0v89+kct/TfRP2rpv+nz+z8x4iUf2KSppf9m1n/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/076Ry39d9Y/aun/Xv2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+r9P/6il/176Ry3999b/WZc/e7Gl/z76Ry39369/1NL/A/pHLf331T9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19P+g/lFL/w/pH7X0P1j/qKX/IfpHLf0P1T9q6f9h/aOW/ofpH7X0P1z/qKX/R/SPWvp/VP+opf/H9I9a+h+hf9TS/0j9o5b+R+kftfT/uP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8n9I9a+p+gf9TS/5P6Ry39T9Q/aun/Kf2jlv6f1j9q6X+S/lFL/5P1j1r6f0b/qKX/Z/WPWvqfon/U0v9z+kct/U/VP2rp/3n9o5b+X9A/aul/mv5RS//T9Y9a+p+hf9TS/0z9o5b+Z+kftfQ/W/+opf8X9Y9a+p+jf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39L9Q/aun/Ff2jlv4X6R+19P+q/lFL/4v1j1r6X6J/1NL/Uv2jlv6X6R+19P+a/lFL/8v1j1r6X6F/1NL/6/pHLf2v1D9q6f8N/aOW/lfpH7X0v1r/qKX/NfpHLf2/qX/U0v9a/aOW/t/SP2rp/239o5b+39E/aun/Xf2jlv7f0z9q6f99/aOW/j/QP2rpf53+UUv/6+v63z1BW7X0v6Gu/782rKj/jfpHLf1v0j9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv4/1D9q6f8j/aOW/j/WP2rpf7v+UUv/O/SPWvrfqX/U0v8u/aOW/nfrH7X0/4n+UUv/n+oftfS/R/+opf/P9I9a+t+rf9TS/+f6Ry39f6F/1NL/Pv2jlv6/1D9q6f8r/aOW/vfrH7X0f0D/qKX/r/WPWvo/qH/U0v8h/aOW/r/RP2rp/1v9o5b+v9M/aun/+4k1nklcS/+Hrf+opf8j+kct/f+gf9TS/1H9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/n/VP2rp/zf9o5b+j+kftfR/XP+opf/f9Y9a+v9D/6il/xP6Ry39/6l/1NL/Sf2jlv5P6R+19H9a/6il/wj9o5L+Qwb0j1r6D9I/auk/WP+opf8U+kct/YfoH7X0H6p/1NJ/mP5RS/8p9Y9a+k+lf9TSf2r9o5b+0+gftfSfVv+opf90+kct/V+mf9TSf3r9o5b+M7xY/2tfgnFNolr6z2j9Ry39X65/1NJ/Jv2jlv6v0D9q6T+z/lFL/1n0j1r6z6p/1NJ/Nv2jlv6z6x+19J9D/6il/5z6Ry39X6l/NKyk/6v0j1rW/1z6Ry3959Y/aun/av2jlv7z6B+19H+N/lFL/3n1j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aun/Wv2jlv6v0z9q6b+I/lFL/9frH7X0X1T/qKX/YvpHLf0X1z9q6b+E/lFL/yX1j1r6L6V/1NJ/af2jlv7L6B+19H+D/lFL/2X1j1r6L6d/1NJ/ef2jlv4r6B+19H+j/lFL/xX1j1r6v0n/qKX/m/WPWvqvpH/U0n9l/aOW/qvoH7X0H65/1NJ/Vf2jlv6r6R+19F9d/6il/1v0j1r6r6F/1NJ/Tf2jlv5r6R+19F9b/6il/1v1j1r6v03/qKX/OvpHLf3frn/U0v8d+kct/d+pf9TS/136Ry3919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfR/t/5RS/+N9Y9a+r9H/6il/yb6Ry39N9U/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/e/WPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6f8+/aOW/nvpH7X031v/qKX/PvpHLf3fr3/U0v8D+kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v9A/aNx+j8+YsSIiT2k/z/j6X+Q/lHL+v+g/lFL/w/pH7X0P1j/qKX/IfpHLf0P1T9q6f9h/aOW/ofpH7X0P1z/qKX/R/SPWvp/VP+opf/H9I9a+h+hf9TS/0j9o5b+R+kftfT/uP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8n9I9a+p+gf9TS/5P6Ry39T9Q/aun/Kf2jlv6f1j9q6X+S/lFL/5P1j1r6f0b/qKX/Z/WPWvqfon/U0v9z+kct/U/VP2rp/3n9o5b+X9A/aul/mv5RS//T9Y9a+p+hf9TS/0z9o5b+Z+kftfQ/W/+opf8X9Y9a+p+jf9TS/1z9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39L9Q/aun/Ff2jlv4X6R+19P+q/lFL/4v1j1r6X6J/1NL/Uv2jlv6X6R+19P+a/lFL/8v1j1r6X6F/1NL/6/pHLf2v1D9q6f8N/aOW/lfpH7X0v1r/qKX/NfpHLf2/qX/U0v9a/aOW/t/SP2rp/239o5b+39E/aun/Xf2jlv7f0z9q6f99/aOW/j/QP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/LfpHLf1v1T9q6X+b/lFL/x/qH7X0/5H+UUv/H+sftfS/Xf+opf8d+kct/e/UP2rpf5f+UUv/u/WPWvr/RP+opf9P9Y9a+t+jf9TS/2f6Ry3979U/aun/c/2jlv6/0D9q6X+f/lFL/1/qH7X0/5X+UUv/+/WPWvo/oH/U0v/X+kct/R/UP2rp/5D+UUv/3+gftfT/rf5RS//f6R+19P+9/lFL/4f1j1r6P6J/cl5L/z/oH7X0f1T/qKX/H/WPWvr/Sf+opf+f9Y9a+v9F/6il/1/1j1r6/03/qKX/Y/pHLf0f1z9q6f93/aOW/v9o7b/Zi9/d0v+J1v7/Qkv/f+oftfR/Uv+opf9T+kct/Z/WP2rpP0L/qKT/0AH9o5b+g/SPWvoP1j9q6T+F/lFL/yH6Ry39h+oftfQfpn/U0n9K/aOW/lPpH7X0n1r/qKX/NPpHLf2n1T9q6T+d/lFL/5fpH7X0n17/qKX/DPpHLf1n1D9q6f9y/aOW/jPpH7X0f4X+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6f9K/aOW/q/SP2rpP5f+UUv/ufWPWvq/Wv+opf88+kct/V+jf9TSf179o5b+8+kftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvq/Vv+opf/r9I9a+i+if9TS//X6Ry39F9U/aum/mP5RS//F9Y9a+i+hf9TSf0n9o5b+S+kftfRfWv+opf8y+kct/d+gf9TSf1n9o5b+y+kftfRfXv+opf8K+kct/d+of9TSf0X9o5b+b9I/aun/Zv2jlv4r6R+19F9Z/6il/yr6Ry39h+sftfRfVf+opf9q+kct/VfXP2rp/xb9o5b+a+gftfRfU/+opf9a+kct/dfWP2rp/1b9o5b+b9M/aum/jv5RS/+36x+19H+H/lFL/3fqH7X0f5f+UUv/dfWPJs/+I2YYGKf/evpHk2f/UZ7bf339o5b+G+gftfTfUP+opf9G+kct/d+tf9TSf2P9o5b+79E/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X031H/qKX/TvpHLf131j9q6f9e/aOW/rvoH7X031X/qKX/bvpHLf131z9q6b+H/lFL/z3H13/YSzSuSVRL//dZ/1FL/730j1r6761/1NJ/H/2jlv7v1z9q6f8B/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6f1D/qKX/h/SPWvofrH/U0v8Q/aOW/ofqH7X0/7D+UUv/w/SPWvofrn/U0v8j+kct/T+qf9TS/2P6Ry39j9A/aul/pP5RS/+j9I9a+n9c/6il/9H6Ry39j9E/aul/rP5RS//j9I9a+h+vf9TS/xP6Ry39T9A/aun/Sf2jlv4n6h+19P+U/lFL/0/rH7X0P0n/qKX/yfpHLf0/8yL9R0z5Ugxs0tTS/7PWf9TS/xT9o5b+n9M/aul/qv5RS//P6x+19P+C/i80dU//0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf2/qH/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0v0D9q6f8l/aOW/l/WP2rpf6H+UUv/r+gftfS/SP+opf9X9Y9a+l+sf9TS/xL9o5b+l+oftfS/TP+opf/X9I9a+l+uf9TS/wr9o5b+X9c/aul/pf5RS/9v6B+19L9K/6il/9X6Ry39r9E/aun/Tf2jlv7X6h+19P+W/lFL/2/rH7X0/47+UUv/7+oftfT/nv5RS//v6x+19P+B/lFL/+v0j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+v9Q/6il/4/0j1r6/1j/qKX/7fpHLf3v0D8a3X/lyb3/nfpHLev/Lv2jlv536x+19P+J/lFL/5/qH7X0v0f/qKX/z/SPWvrfq3/U0v/n+kct/X+hf9TS/z79o5b+v9Q/aun/K/2jlv736x+19H9A/6il/6/1j1r6P6h/1NL/If2jlv6/0T9q6f9b/aOW/r/TP2rp/3v9o5b+D+sftfR/RP9oMu8/aHT0oX/QP5rM+48x9FH9o5b+f9Q/aun/J/2jlv5/1j9q6f8X/aOW/n/VP2rp/zf9o5b+j+kftfR/XP+opf/f9Y9a+v9D/6il/xP6Ry39/6l/1NL/Sf2jlv5P6R+19H9a/6il/wj9o5L+wwb0j1r6D+rrP3hCNmrpP7iv/wRp6T+F/lFL/yH6Ry39h+oftfQfpn/U0n9K/aOW/lPpH7X0n1r/qKX/NPpHLf2n1T9q6T+d/lFL/5fpH7X0n17/qKX/DPpHLf1n1D9q6f9y/aOW/jPpH7X0f4X+UUv/mfWPWvrPon/U0n9W/aOW/rPpH7X0n13/qKX/HPpHLf3n1D9q6f9K/aOW/q/SP2rpP5f+UUv/ufWPWvq/Wv+opf88+kct/V+jf9TSf179o5b+8+kftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvq/Vv+opf/r9I9a+i+if9TS//X6Ry39F9U/aum/mP5RS//F9Y9a+i+hf9TSf0n9o5b+S+kftfRfWv+opf8y+kct/d+gf9TSf1n9o5b+y+kftfRfXv+opf8K+kct/d+of9TSf0X9o5b+b9I/aun/Zv2jlv4r6R+19F9Z/6il/yr6Ry39h+sftfRfVf+opf9q+kct/VfXP2rp/xb9o5b+a+gftfRfU/+opf9a+kct/dfWP2rp/1b9o5b+b9M/aum/jv5RS/+36x+19H+H/lFL/3fqH7X0f5f+UUv/dfWPWvqvp3/U0n99/aOW/hvoH7X031D/qKX/RvpHLf3frX/U0n9j/aOW/u/RP2rpv4n+UUv/TfWPWvpvpn/U0n9z/aOW/lvoH7X031L/qKX/VvpHLf231j9q6b+N/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/076Ry39d9Y/aun/Xv2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+r9P/6il/176Ry3999Y/aum/j/5RS//36x+19P+A/lFL/331j1r676d/1NJ/f/2jlv4H6B+19D9Q/6il/0H6Ry39P6h/1NL/Q/pHLf0P1j9q6X+I/lFL/0P1j1r6f1j/qKX/YfpHLf0P1z9q6f8R/aOW/h/VP2rp/zH9o5b+R+gftfQ/Uv+opf9R+kct/T+uf9TS/2j9o5b+x+gftfQ/Vv+opf9x+kct/Y/XP2rp/wn9o5b+J+gftfT/pP5RS/8T9Y9a+n9K/6il/6f1j1r6n6R/1NL/ZP2jlv6f0T9q6f9Z/aOW/qfoH7X0/5z+UUv/U/WPWvp/Xv+opf8X9I9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rp/0X9o5b+5+gftfQ/V/+opf95+kct/c/XP2rpf4H+UUv/L+kftfT/sv5RS/8L9Y9a+n9F/6il/0X6Ry39v6p/1NL/Yv2jlv6X6B+19L9U/6il/2X6Ry39v6Z/1NL/cv2jlv5X6B+19P+6/lFL/yv1j1r6f0P/qKX/VfpHLf2v1j9q6X+N/lFL/2/qH7X0v1b/qKX/t/SPWvp/W/+opf939I9a+n9X/6il//f0j1r6f1//qKX/D/SPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/h/pHLf1/pH/U0v/H+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/j/RP2rp/1P9o5b+9+gftfT/mf5RS/979Y9a+v9c/6il/y/0j1r636d/1NL/l/pHLf1/pX/U0v9+/aOW/g/oH7X0/7X+UUv/B/WPWvo/pH/U0v83+kct/X+rf9TS/3f6Ry39f69/1NL/Yf2jlv6P6B+19P+D/lFL/0f1j1r6/1H/qKX/n/SPWvr/Wf+opf9f9I9a+v9V/6il/9/0j1r6P6Z/1NL/cf2jlv5/1z9q6f8P/aOW/k/oH7X0/6f+UUv/J/WPWvo/pX/U0v9p/aOW/iP0j0r6Tzmgf9TSf5D+UUv/wfpHLf2n0D9q6T9E/6il/1D9o5b+w/SPWvpPqX/U0n8q/aOW/lPrH7X0n0b/qKX/tPpHLf2n0z9q6f8y/aOW/tPrH7X0n0H/qKX/jPpHLf1f/qL9h/zvxzWJauk/k/UftfR/hf5RS/+Z9Y9a+s+if9TSf1b9o5b+s+kftfSfXf+opf8c+kct/efUP2rp/0r9o5b+r9I/auk/l/5RS/+59Y9a+r9a/6il/zz6Ry39X6N/1NJ/Xv2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+r9W/6il/+v0j1r6L6J/1NL/9fpHLf0X1T8a239gYLLuv5j+Ucv6X1z/qKX/EvpHLf2X1D9q6b+U/lFL/6X1j1r6L6N/1NL/DfpHLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NL/jfpHk3P/5/SeckX9o8m5/3PX/5v0j1r6v1n/qKX/SvpHLf1X1j9q6b+K/lFL/+H6Ry39V9U/aum/mv5RS//V9Y9a+r9F/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+r9V/6il/9v0j1r6r6N/1NL/7fpHLf3foX/U0v+d+kct/d+lf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/d+sftfTfWP+opf979I9a+m+if9TSf1P9o5b+m+kftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/sEmgwcGOvrvrH/Usv7fq3/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL//fpH7X030v/qKX/3vpHLf330T9q6f9+/aOW/h/QP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/B/WPWvp/SP+opf/B+kct/Q/RP2rpf6j+UUv/D+sftfQ/TP+opf/h+kct/T+if9TS/6P6Ry39P6Z/1NL/CP2jlv5H6h+19D9K/6il/8f1j1r6H61/1NL/GP2jlv7H6h+19D9O/6il//H6Ry39P6F/1NL/BP2jlv6f1D9q6X+i/lFL/0/pH7X0/7T+UUv/k/SPWvqfrH/U0v8z+kct/T+rf9TS/xT9o5b+n9M/aul/qv5RS//P6x+19P+C/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/9n6Ry39v6h/1NL/HP2jlv7n6h+19D9P/6il//n6Ry39L9A/aun/Jf2jlv5f1j9q6X+h/lFL/6/oH7X0v0j/qKX/V/WPWvpfrH/U0v8S/aOW/pfqH7X0v0z/qKX/1/SPWvpfrn/U0v8K/aOW/l/XP2rpf6X+UUv/b+gftfS/Sv+opf/V+kct/a/RP2rp/039o5b+1+oftfT/lv5RS/9vT1j/66b4nw1s0tTS/zvWf9TS/7v6Ry39v6d/1NL/+/pHLf1/oH/U0v86/aOW/tfrH7X0v0H/qKX/jfpHLf1v0j9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv4/1D9q6f8j/aOW/j/WP2rpf7v+UUv/O/SPWvrfqX/U0v8u/aOW/nfrH7X0/4n+owx9/tWW/j/VP2rpf4/+UUv/n+kftfS/V/+opf/P9Y9a+v9C/6il/336Ry39f6l/1NL/V/pHLf3v1z9q6f+A/lFL/1/rH7X0f1D/qKX/Q/pHLf1/o3/U0v+3+kct/X+nf9TS//f6Ry39H9Y/aun/iP5RS/8/6B+19H9U/6il/x/1j1r6/0n/qKX/n0f333RijWtSMdXzr7b0/4v1H7X0/6v+UUv/v+kftfR/TP+opf/j+kct/f+uf9TS/x/6Ry39n9A/aun/T/2jlv5P6h+19H9K/6il/9P6Ry39R+gflfR/5qiX/i/U0n+Q/lFL/8H6Ry39p9A/auk/RP+opf9Q/aOW/sP0j1r6T6l/1NJ/Kv2jlv5T6x+19J9G/6il/7T6Ry39p9M/aun/Mv2jlv7T6x+19J9B/6il/4z6Ry39X65/1NJ/Jv2jlv6v0D9q6T+z/lFL/1n0j1r6z6p/1NJ/Nv2jlv6z6x+19J9D/6il/5z6Ry39X6l/1NL/VfpHLf3n0j9q6T+3/lFL/1frH7X0n0f/qKX/a/SPWvrPq3/U0n8+/aOW/vPrH7X0X0D/qKX/gvpHLf0X0j9q6b+w/lFL/9fqH7X0f53+UUv/RfSPWvq/Xv+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/G/SPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/G/WPWvqvqH/U0v9N+kct/d+sf9TSfyX9o5b+K+sftfRfRf+opf9w/aOW/qvqH7X0X03/qKX/6vpHLf3fon/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3fqn/U0v9t+kct/dfRP2rp/3b9o5b+79A/aun/Tv2jlv7v0j9q6b+u/lFL//X0j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/7v1j1r6b6x/1NL/PfpHLf030T9q6b+p/lFL/830j1r6b65/1NJ/C/2jZ/oPnfz7b6l/1LL+t9I/aum/tf5RS/9t9I9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/9+oftfTfRf+opf+u+kct/XfTP2rpv7v+UUv/PfSPWvrvqX/U0v99+kct/ffSP2rpv7f+UUv/ffSPWvq/X/+opf8H9I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rp/0H9o5b+H9I/aul/sP5RS/9D9I9a+h+qf9TS/8MT1H/I/25ck6iW/odZ/1FL/8P1j1r6f0T/qKX/R/WPWvp/TP+opf8R+kct/Y/UP2rpf5T+UUv/j+sftfQ/Wv+opf8x+kct/Y/VP2rpf5z+UUv/4/WPWvp/Qv+opf8J+kct/T+pf9TS/0T9o5b+n9I/aun/af2jlv4n6R819L9pYGCqk/WPGvqPXP+f0T9q6f9Z/aOW/qfoH7X0/5z+UUv/U/WPWvp/Xv+opf8X9I9a+p+mf9TS/3T9o5b+Z+gftfQ/U/+opf9Z+kct/c/WP2rp/0X9o5b+5+gftfQ/V/+opf95+kct/c/XP2rpf4H+UUv/L+kftfT/sv5RS/8L9Y9a+n9F/6il/0X6Ry39v6p/1NL/Yv2jlv6X6B+19L9U/6il/2X6Ry39v6Z/1NL/cv2jlv5X6B+19P+6/lFL/yv1j1r6f0P/qKX/VfpHLf2v1j9q6X+N/lFL/2/qH7X0v1b/qKX/t/SPWvp/W/+opf939I9a+n9X/6il//f0j1r6f1//qKX/D/SPWvpfp3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/1v1j1r636Z/1NL/h/pHLf1/pH/U0v/H+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/j8ZX//BL9G4JlEt/X9q/Uct/e/RP2rp/zP9o5b+9+oftfT/uf5RS/9f6B+19L9P/6il/y/1j1r6/0r/qKX//fpHLf0f0D9q6f9r/aOW/g/qH7X0f0j/qKX/b/SPWvr/Vv+opf/v9I9a+v9e/6il/8P6Ry39H9E/mrz7j5hy9MWp/qB/NHn3H2uqR/WPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6/1X/qKX/3/SPWvo/pn/U0v9x/aOW/n/XP2rp/w/9o5b+T+gftfT/p/5RS/8n9Y9a+j+lf9TS/2n9o5b+I/SPSvpPPZD6rzvDSzeuSVRL/0HWf9TSf7D+UUv/KfSPWvoP0T9q6T9U/6il/zD9o5b+U+oftfSfSv+opf/U+kct/afRP2rpP63+UUv/6fSPWvq/TP+opf/0+kct/WfQP2rpP6P+UUv/l+sftfSfaQL6z/y/HNckqqX/K6z/qKX/zPpHLf1n0T9q6T+r/lFL/9n0j1r6z65/1NJ/Dv2jlv5z6h+19H+l/lFL/1fpH7X0n0v/qKX/3PpHLf1frX/U0n8e/aOW/q/RP2rpP6/+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf1fq/+zVn/2Ykv/1+kftfRfRP+opf/r9Y9a+i+qf9TSfzH9o5b+i+sfTXb9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/8cOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTggAQAAABD0/3U7AgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpgAAAP//ZJZBgw==") 615.280923ms ago: executing program 4 (id=1115): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000004240)=0x40000006, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 542.954552ms ago: executing program 3 (id=1116): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0xec6, &(0x7f0000003d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0186e87, 0xfffffffffffffffe) 340.122711ms ago: executing program 4 (id=1117): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 698.264µs ago: executing program 0 (id=1118): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) 0s ago: executing program 4 (id=1119): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) kernel console output (not intermixed with test programs): (loop1): Ending clean mount [ 96.342021][ T6297] loop0: detected capacity change from 0 to 4096 [ 96.366305][ T6256] XFS (loop1): Quotacheck needed: Please wait. [ 96.379118][ T6297] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 96.444882][ T6256] XFS (loop1): Quotacheck: Done. [ 96.484301][ T6297] ntfs3(loop0): ino=19, mi_enum_attr [ 96.509846][ T6297] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 96.664892][ T5866] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.133285][ T6296] loop2: detected capacity change from 0 to 32768 [ 97.179720][ T6296] XFS (loop2): Invalid device [./bus], error=-16 [ 97.313276][ T6093] udevd[6093]: incorrect xfs checksum on /dev/loop2 [ 97.438992][ T6328] loop0: detected capacity change from 0 to 128 [ 97.479195][ T6328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.500991][ T6328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.521825][ T6328] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.577633][ T6328] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.646718][ T6328] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.727874][ T6328] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 97.778846][ T6324] loop4: detected capacity change from 0 to 32768 [ 97.822099][ T5860] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.189238][ T6318] loop3: detected capacity change from 0 to 40427 [ 98.210746][ T6318] F2FS-fs (loop3): build fault injection rate: 771 [ 98.231613][ T6318] F2FS-fs (loop3): invalid crc value [ 98.343620][ T6346] tipc: Started in network mode [ 98.354515][ T6346] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 98.395391][ T6346] tipc: Enabled bearer , priority 10 [ 98.528212][ T6318] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 98.591989][ T6318] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.749872][ T6356] loop2: detected capacity change from 0 to 1024 [ 98.793619][ T5874] syz-executor: attempt to access beyond end of device [ 98.793619][ T5874] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.831557][ T5874] CPU: 1 UID: 0 PID: 5874 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 98.831579][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.831596][ T5874] Call Trace: [ 98.831604][ T5874] [ 98.831612][ T5874] dump_stack_lvl+0x189/0x250 [ 98.831646][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.831667][ T5874] ? __pfx_queue_work_on+0x10/0x10 [ 98.831692][ T5874] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 98.831717][ T5874] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 98.831752][ T5874] f2fs_handle_critical_error+0x37c/0x540 [ 98.831782][ T5874] f2fs_write_end_io+0x886/0xb60 [ 98.831824][ T5874] __submit_merged_bio+0x27a/0x6a0 [ 98.831852][ T5874] __submit_merged_write_cond+0x255/0x530 [ 98.831881][ T5874] f2fs_write_data_pages+0x261d/0x3000 [ 98.831904][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.831956][ T5874] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.832018][ T5874] ? __mod_zone_page_state+0xd7/0x140 [ 98.832049][ T5874] ? folios_put_refs+0x58b/0x670 [ 98.832079][ T5874] ? __lock_acquire+0xab9/0xd20 [ 98.832109][ T5874] ? do_raw_spin_lock+0x121/0x290 [ 98.832139][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 98.832158][ T5874] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.832184][ T5874] do_writepages+0x32e/0x550 [ 98.832217][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 98.832240][ T5874] filemap_fdatawrite+0x199/0x240 [ 98.832272][ T5874] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 98.832338][ T5874] ? do_raw_spin_unlock+0x122/0x240 [ 98.832361][ T5874] f2fs_sync_dirty_inodes+0x31f/0x830 [ 98.832401][ T5874] f2fs_write_checkpoint+0x93e/0x2440 [ 98.832426][ T5874] ? stack_depot_save_flags+0x40/0x860 [ 98.832479][ T5874] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 98.832541][ T5874] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 98.832558][ T5874] ? kfree+0x199/0x6d0 [ 98.832588][ T5874] kill_f2fs_super+0x2cc/0x6d0 [ 98.832621][ T5874] ? __pfx_kill_f2fs_super+0x10/0x10 [ 98.832664][ T5874] ? shrinker_free+0x2ce/0x3e0 [ 98.832684][ T5874] deactivate_locked_super+0xbc/0x130 [ 98.832706][ T5874] cleanup_mnt+0x425/0x4c0 [ 98.832722][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.832751][ T5874] task_work_run+0x1d4/0x260 [ 98.832775][ T5874] ? __pfx_task_work_run+0x10/0x10 [ 98.832793][ T5874] ? __x64_sys_umount+0x122/0x160 [ 98.832817][ T5874] ? exit_to_user_mode_loop+0x40/0x130 [ 98.832843][ T5874] exit_to_user_mode_loop+0xec/0x130 [ 98.832866][ T5874] do_syscall_64+0x2bd/0xfa0 [ 98.832880][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.832905][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.832921][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 98.832943][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.832959][ T5874] RIP: 0033:0x7f547618fed7 [ 98.832980][ T5874] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 98.832994][ T5874] RSP: 002b:00007ffc75483828 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.833012][ T5874] RAX: 0000000000000000 RBX: 00007f5476211c05 RCX: 00007f547618fed7 [ 98.833024][ T5874] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc754838e0 [ 98.833034][ T5874] RBP: 00007ffc754838e0 R08: 0000000000000000 R09: 0000000000000000 [ 98.833044][ T5874] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc75484970 [ 98.833055][ T5874] R13: 00007f5476211c05 R14: 000000000001817c R15: 00007ffc754849b0 [ 98.833084][ T5874] [ 98.833092][ T5874] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 99.242574][ T6347] loop0: detected capacity change from 0 to 40427 [ 99.251083][ T6347] F2FS-fs: heap/no_heap options were deprecated [ 99.258463][ T6347] F2FS-fs (loop0): build fault injection rate: 19 [ 99.264977][ T6347] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 99.305086][ T6347] F2FS-fs (loop0): invalid crc value [ 99.389277][ T6347] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 99.508477][ T5977] tipc: Node number set to 10005162 [ 99.668027][ T6347] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 99.732799][ T6347] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 99.770907][ T6347] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.879590][ T6378] loop2: detected capacity change from 0 to 16 [ 99.894991][ T6360] loop4: detected capacity change from 0 to 32768 [ 99.939229][ T6360] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.132 (6360) [ 99.953200][ T6378] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 100.006649][ T6360] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.042732][ T6360] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 100.091211][ T6360] BTRFS error (device loop4): superblock checksum mismatch [ 100.106243][ T6381] sp0: Synchronizing with TNC [ 100.137982][ T6360] BTRFS error (device loop4): open_ctree failed: -22 [ 100.156152][ T6380] [U] è [ 100.392433][ T6388] capability: warning: `syz.4.152' uses deprecated v2 capabilities in a way that may be insecure [ 100.703820][ T6402] loop1: detected capacity change from 0 to 512 [ 100.782665][ T6402] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.157: iget: bad i_size value: 38620345925642 [ 100.833640][ T6402] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.157: couldn't read orphan inode 15 (err -117) [ 100.881362][ T6402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.222911][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.450322][ T6429] loop3: detected capacity change from 0 to 512 [ 101.504581][ T6427] loop1: detected capacity change from 0 to 1024 [ 101.512441][ T6429] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.524510][ T6431] loop0: detected capacity change from 0 to 512 [ 101.563973][ T6429] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.171: bad orphan inode 13 [ 101.594768][ T6431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.172: bg 0: block 5: invalid block bitmap [ 101.600028][ T6435] loop2: detected capacity change from 0 to 2048 [ 101.639324][ T6429] ext4_test_bit(bit=12, block=18) = 1 [ 101.644820][ T6429] is_bad_inode(inode)=0 [ 101.656063][ T6431] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 101.686424][ T6429] NEXT_ORPHAN(inode)=2130706432 [ 101.691383][ T6429] max_ino=32 [ 101.694588][ T6429] i_nlink=1 [ 101.698235][ T6435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.709492][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.735722][ T6431] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.172: invalid indirect mapped block 3 (level 2) [ 101.738475][ T6439] Bluetooth: MGMT ver 1.23 [ 101.783341][ T6431] EXT4-fs (loop0): 2 truncates cleaned up [ 101.818428][ T6431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.847562][ T6427] hfsplus: bad catalog entry type [ 101.854414][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.951863][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.982524][ T13] hfsplus: b-tree write err: -5, ino 4 [ 102.080038][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.321385][ T6457] loop2: detected capacity change from 0 to 64 [ 102.415264][ T30] audit: type=1804 audit(1757455225.782:11): pid=6457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.183" name="/newroot/39/file0/bus" dev="loop2" ino=8 res=1 errno=0 [ 102.527148][ T6460] loop0: detected capacity change from 0 to 2048 [ 102.527736][ T6463] loop3: detected capacity change from 0 to 256 [ 102.622062][ T6460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.719259][ T6463] FAT-fs (loop3): Directory bread(block 64) failed [ 102.764301][ T6463] FAT-fs (loop3): Directory bread(block 65) failed [ 102.796157][ T6463] FAT-fs (loop3): Directory bread(block 66) failed [ 102.802699][ T6463] FAT-fs (loop3): Directory bread(block 67) failed [ 102.828085][ T6463] FAT-fs (loop3): Directory bread(block 68) failed [ 102.889978][ T6463] FAT-fs (loop3): Directory bread(block 69) failed [ 102.910528][ T6463] FAT-fs (loop3): Directory bread(block 70) failed [ 102.934454][ T6463] FAT-fs (loop3): Directory bread(block 71) failed [ 102.978708][ T6463] FAT-fs (loop3): Directory bread(block 72) failed [ 102.985260][ T6463] FAT-fs (loop3): Directory bread(block 73) failed [ 103.087210][ T6476] loop4: detected capacity change from 0 to 4096 [ 103.276789][ T30] audit: type=1800 audit(1757455226.642:12): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.194" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 103.757594][ T929] IPVS: starting estimator thread 0... [ 103.861988][ T6509] IPVS: using max 27 ests per chain, 64800 per kthread [ 104.323151][ T6538] CUSE: DEVNAME unspecified [ 104.376088][ T5947] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.387003][ T5994] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.409727][ T6540] cifs: Bad value for 'port' [ 104.546163][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 104.554737][ T5994] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 104.575689][ T5947] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 104.590170][ T5994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.600184][ T5947] usb 5-1: config 0 has no interface number 0 [ 104.600650][ T6544] tipc: Started in network mode [ 104.611107][ T5994] usb 4-1: Product: syz [ 104.615747][ T5994] usb 4-1: Manufacturer: syz [ 104.615869][ T6544] tipc: Node identity ac141441, cluster identity 4711 [ 104.623256][ T5994] usb 4-1: SerialNumber: syz [ 104.623404][ T5947] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 104.645671][ T6531] loop0: detected capacity change from 0 to 40427 [ 104.652384][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.654234][ T6544] tipc: Enabled bearer , priority 10 [ 104.669368][ T6531] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 104.684561][ T5947] usb 5-1: Product: syz [ 104.693096][ T5947] usb 5-1: Manufacturer: syz [ 104.704798][ T6531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 104.735704][ T5947] usb 5-1: SerialNumber: syz [ 104.741254][ T6531] F2FS-fs (loop0): invalid crc value [ 104.757688][ T5947] usb 5-1: config 0 descriptor?? [ 104.769301][ T5947] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 104.786712][ T5947] usb 5-1: selecting invalid altsetting 1 [ 104.796523][ T5947] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 104.821135][ T5947] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 104.848629][ T5947] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 104.868320][ T5947] usb 5-1: media controller created [ 104.973089][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.985493][ T6531] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.003771][ T6531] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 105.017086][ T6531] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.070110][ T5947] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 105.082740][ T5947] zl10353_read_register: readreg error (reg=127, ret==-71) [ 105.092211][ T5947] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 105.238131][ T5947] usb 5-1: USB disconnect, device number 5 [ 105.310878][ T5994] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 105.331548][ T5994] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 105.348361][ T5994] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 105.371659][ T5994] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 105.437249][ T5994] usb 4-1: USB disconnect, device number 2 [ 105.647156][ T5868] tipc: Node number set to 2886997057 [ 106.120831][ T6562] loop1: detected capacity change from 0 to 32768 [ 106.141199][ T6560] loop2: detected capacity change from 0 to 32768 [ 106.168253][ T6562] [ 106.168253][ T6562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 106.168253][ T6562] [ 106.216464][ T6562] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 106.216464][ T6562] [ 106.255913][ T6560] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 106.272447][ T6562] ERROR: (device loop1): remounting filesystem as read-only [ 106.300396][ T6562] JFS: Invalid stbl[1] = -128 for inode 2, block = 0 [ 106.308044][ T6560] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.351246][ T6560] XFS (loop2): Ending clean mount [ 106.374789][ T6560] XFS (loop2): Quotacheck needed: Please wait. [ 106.430997][ T6586] loop3: detected capacity change from 0 to 64 [ 106.445547][ T6564] loop4: detected capacity change from 0 to 32768 [ 106.532589][ T6560] XFS (loop2): Quotacheck: Done. [ 106.580480][ T6564] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 106.653613][ T5859] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.832121][ T6564] XFS (loop4): Ending clean mount [ 106.909331][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.245'. [ 107.012656][ T6604] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 107.040987][ T6604] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 107.057670][ T6604] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.093508][ T6604] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 107.104842][ T5867] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 107.111530][ T6604] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 107.129917][ T6604] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 107.158667][ T6604] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.175765][ T6604] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 107.203030][ T6604] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 107.229549][ T6604] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 107.286796][ T6604] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 107.361192][ T6604] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 107.388023][ T6604] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 107.420770][ T6604] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 107.516152][ T6604] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 107.554927][ T6604] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 107.570867][ T6604] comedi comedi3: 8255: I/O port conflict (0xffffffffffffcadb,4) [ 107.614330][ T6617] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 107.614803][ T6604] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 107.656146][ T6617] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 108.155760][ T6637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.246025][ T5868] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.294539][ T6639] loop2: detected capacity change from 0 to 128 [ 108.363425][ T6621] loop4: detected capacity change from 0 to 32768 [ 108.410557][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 108.428135][ T6621] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.432366][ T5868] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.448101][ T5868] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.458557][ T5868] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.465197][ T5868] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 108.475082][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.528654][ T5868] usb 2-1: config 0 descriptor?? [ 108.650335][ T6621] XFS (loop4): Ending clean mount [ 108.673126][ T6621] XFS (loop4): Quotacheck needed: Please wait. [ 108.735080][ T6627] loop3: detected capacity change from 0 to 32768 [ 108.744785][ T6621] XFS (loop4): Quotacheck: Done. [ 108.839151][ T6627] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.886215][ T5867] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.916915][ T6627] XFS (loop3): Ending clean mount [ 108.955014][ T5868] smartjoyplus 0003:0B43:0003.0004: ignoring exceeding usage max [ 108.989949][ T5868] smartjoyplus 0003:0B43:0003.0004: unbalanced collection at end of report description [ 109.000392][ T5868] smartjoyplus 0003:0B43:0003.0004: parse failed [ 109.006879][ T5868] smartjoyplus 0003:0B43:0003.0004: probe with driver smartjoyplus failed with error -22 [ 109.073011][ T5874] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.100290][ T6635] loop0: detected capacity change from 0 to 32768 [ 109.109744][ T6661] loop2: detected capacity change from 0 to 128 [ 109.197909][ T30] audit: type=1800 audit(1757455232.572:13): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.267" name="file1" dev="loop2" ino=1048633 res=0 errno=0 [ 109.231170][ T6661] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 109.280508][ T5994] usb 2-1: USB disconnect, device number 4 [ 109.286759][ T6635] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.534491][ T6635] XFS (loop0): Ending clean mount [ 109.581846][ T6635] XFS (loop0): Quotacheck needed: Please wait. [ 109.711552][ T6635] XFS (loop0): Quotacheck: Done. [ 109.760948][ T6684] loop3: detected capacity change from 0 to 128 [ 109.853357][ T6684] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.898914][ T6684] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.934561][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.010992][ T5874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.052781][ T6692] loop1: detected capacity change from 0 to 512 [ 110.109184][ T6692] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.115601][ T6692] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 110.291208][ T6692] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 110.347433][ T6699] sp0: Synchronizing with TNC [ 110.359493][ T6692] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.276: attempt to clear invalid blocks 2 len 1 [ 110.417158][ T6692] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.276: invalid indirect mapped block 1819239214 (level 0) [ 110.425300][ T6704] loop2: detected capacity change from 0 to 64 [ 110.493311][ T6692] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.276: invalid indirect mapped block 1819239214 (level 1) [ 110.554318][ T6692] EXT4-fs (loop1): 1 truncate cleaned up [ 110.571762][ T6692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.632431][ T6708] Zero length message leads to an empty skb [ 110.637179][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.648654][ T6692] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 110.693243][ T6692] EXT4-fs error (device loop1): __ext4_remount:6746: comm syz.1.276: Abort forced by user [ 110.706135][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.714849][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.730222][ T6692] EXT4-fs (loop1): Remounting filesystem read-only [ 110.746174][ T6692] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 110.754784][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.758815][ T6712] raw_sendmsg: syz.3.285 forgot to set AF_INET. Fix it! [ 110.906115][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 111.010967][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.155570][ T6727] loop4: detected capacity change from 0 to 1024 [ 111.422545][ T6736] loop3: detected capacity change from 0 to 2048 [ 111.502322][ T6736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.583248][ T6736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.619295][ T6718] loop2: detected capacity change from 0 to 32768 [ 111.954296][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.038259][ T6752] loop2: detected capacity change from 0 to 4096 [ 112.083820][ T6752] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 112.154683][ T6752] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 112.179692][ T5977] kernel write not supported for file /dsp (pid: 5977 comm: kworker/0:4) [ 112.215017][ T6759] loop0: detected capacity change from 0 to 1024 [ 112.240901][ T30] audit: type=1800 audit(1757455235.602:14): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.304" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 112.486579][ T49] hfsplus: b-tree write err: -5, ino 4 [ 112.546412][ T6768] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 112.553942][ T6768] [U] J"—E:ÀÆ" [ 112.705788][ T6738] loop4: detected capacity change from 0 to 32768 [ 112.792272][ T6738] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.977992][ T6738] XFS (loop4): Ending clean mount [ 113.146091][ T5867] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.479269][ T6802] loop0: detected capacity change from 0 to 1764 [ 113.504701][ T6804] loop3: detected capacity change from 0 to 256 [ 113.545706][ T6804] msdos: Unknown parameter 'ÿÿ0x000000000000ee01' [ 113.556400][ T5934] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 113.679550][ T6779] loop2: detected capacity change from 0 to 32768 [ 113.749186][ T5934] usb 2-1: config index 0 descriptor too short (expected 19492, got 36) [ 113.764431][ T6779] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.765829][ T6811] netlink: 104 bytes leftover after parsing attributes in process `syz.0.328'. [ 113.774692][ T6807] loop4: detected capacity change from 0 to 512 [ 113.788989][ T5934] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 113.798747][ T5934] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 113.808019][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.819332][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.829610][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.842789][ T5934] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 113.852278][ T6807] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 113.852294][ T6807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 113.852493][ T6807] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.858126][ T6807] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.323: iget: bad i_size value: 12154761577498 [ 113.863284][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.922808][ T6807] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.323: couldn't read orphan inode 13 (err -117) [ 113.960556][ T5934] usb 2-1: config 0 descriptor?? [ 113.979361][ T6779] XFS (loop2): Ending clean mount [ 114.003473][ T6807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 114.053702][ T6779] XFS (loop2): Quotacheck needed: Please wait. [ 114.112029][ T6807] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.323: dx entry: limit 65535 != root limit 120 [ 114.165471][ T6807] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.323: Corrupt directory, running e2fsck is recommended [ 114.166927][ T6779] XFS (loop2): Quotacheck: Done. [ 114.331720][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.351646][ T5859] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.424293][ T5934] lg-g15 0003:046D:C225.0005: item fetching failed at offset 1/5 [ 114.424454][ T6831] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.476685][ T5934] lg-g15 0003:046D:C225.0005: probe with driver lg-g15 failed with error -22 [ 114.644472][ T5868] usb 2-1: USB disconnect, device number 5 [ 115.506885][ T6877] process 'syz.1.355' launched './file1' with NULL argv: empty string added [ 115.518001][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 115.677209][ T6887] netlink: 104 bytes leftover after parsing attributes in process `syz.4.359'. [ 115.765064][ T6890] loop0: detected capacity change from 0 to 2048 [ 115.858915][ T6894] loop2: detected capacity change from 0 to 2048 [ 115.900602][ T6897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.933364][ T6894] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.026120][ T5868] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.033721][ T6900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.034013][ T6894] syz.2.363: attempt to access beyond end of device [ 116.034013][ T6894] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 116.065714][ T6890] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.' [ 116.089763][ T6890] Remounting filesystem read-only [ 116.163005][ T6902] loop4: detected capacity change from 0 to 512 [ 116.180943][ T5860] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 116.226303][ T5868] usb 4-1: config index 0 descriptor too short (expected 19492, got 36) [ 116.258899][ T6902] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.265286][ T6902] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 116.275990][ T5868] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 116.284602][ T5868] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 116.321546][ T6902] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 116.374396][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.396059][ T6902] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.366: attempt to clear invalid blocks 2 len 1 [ 116.427248][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.445812][ T6902] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.366: invalid indirect mapped block 1819239214 (level 0) [ 116.448832][ T6911] loop0: detected capacity change from 0 to 4096 [ 116.469321][ T6911] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 116.474646][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.501272][ T5868] usb 4-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 116.509046][ T6911] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 116.513017][ T6902] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.366: invalid indirect mapped block 1819239214 (level 1) [ 116.540112][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.549080][ T30] audit: type=1800 audit(1757455239.913:15): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.367" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 116.572872][ T5868] usb 4-1: config 0 descriptor?? [ 116.583156][ T6902] EXT4-fs (loop4): 1 truncate cleaned up [ 116.590728][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.694461][ T6902] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 116.765218][ T6902] EXT4-fs error (device loop4): __ext4_remount:6746: comm syz.4.366: Abort forced by user [ 116.829613][ T6902] EXT4-fs (loop4): Remounting filesystem read-only [ 116.857661][ T6902] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.000866][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.037093][ T5868] lg-g15 0003:046D:C225.0006: item fetching failed at offset 1/5 [ 117.070310][ T5868] lg-g15 0003:046D:C225.0006: probe with driver lg-g15 failed with error -22 [ 117.225500][ T6936] loop1: detected capacity change from 0 to 256 [ 117.269685][ T5977] usb 4-1: USB disconnect, device number 3 [ 117.283646][ T6936] msdos: Unknown parameter 'ÿÿ0x000000000000ee01' [ 117.644257][ T6953] loop4: detected capacity change from 0 to 2048 [ 117.667073][ T6953] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 117.707594][ T6954] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.707949][ T6953] syz.4.398: attempt to access beyond end of device [ 117.707949][ T6953] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 117.831788][ T6957] loop2: detected capacity change from 0 to 512 [ 117.871641][ T6957] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.906475][ T6957] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 117.938836][ T6957] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 117.954984][ T6957] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.389: attempt to clear invalid blocks 2 len 1 [ 117.983235][ T6957] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.389: invalid indirect mapped block 1819239214 (level 0) [ 118.059476][ T6957] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.389: invalid indirect mapped block 1819239214 (level 1) [ 118.117405][ T6957] EXT4-fs (loop2): 1 truncate cleaned up [ 118.131442][ T6957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.194787][ T6966] loop1: detected capacity change from 0 to 1024 [ 118.213287][ T6957] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 118.250418][ T6957] EXT4-fs error (device loop2): __ext4_remount:6746: comm syz.2.389: Abort forced by user [ 118.271254][ T6957] EXT4-fs (loop2): Remounting filesystem read-only [ 118.311194][ T6957] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 118.407087][ T13] hfsplus: b-tree write err: -5, ino 4 [ 118.420221][ T6951] loop0: detected capacity change from 0 to 32768 [ 118.440669][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.499322][ T6951] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.837750][ T6951] XFS (loop0): Ending clean mount [ 118.868185][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 118.978574][ T6973] loop3: detected capacity change from 0 to 32768 [ 119.062127][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.103798][ T6973] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 119.193559][ T6973] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.302245][ T6973] XFS (loop3): Ending clean mount [ 119.355225][ T6973] XFS (loop3): Quotacheck needed: Please wait. [ 119.450665][ T7014] loop4: detected capacity change from 0 to 1024 [ 119.455021][ T6973] XFS (loop3): Quotacheck: Done. [ 119.550026][ T7018] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 119.602138][ T5874] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.611584][ T7016] loop0: detected capacity change from 0 to 4096 [ 119.739444][ T12] hfsplus: b-tree write err: -5, ino 4 [ 120.059166][ T7027] loop2: detected capacity change from 0 to 2048 [ 120.128677][ T7033] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.171597][ T7035] loop3: detected capacity change from 0 to 1024 [ 120.235630][ T7027] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 120.237062][ T7027] Remounting filesystem read-only [ 120.347939][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.421'. [ 120.354159][ T5859] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 120.551666][ T7043] loop3: detected capacity change from 0 to 2048 [ 120.596290][ T7043] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 120.657113][ T7043] NILFS (loop3): mounting unchecked fs [ 120.664105][ T6264] udevd[6264]: incorrect nilfs2 checksum on /dev/loop3 [ 120.729264][ T7043] NILFS (loop3): recovery complete [ 120.795979][ T7052] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.976201][ T7058] netlink: 56 bytes leftover after parsing attributes in process `syz.0.429'. [ 120.985265][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.429'. [ 121.265857][ T7070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.436'. [ 121.501971][ T7047] loop4: detected capacity change from 0 to 32768 [ 121.603523][ T7047] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.683491][ T7093] loop1: detected capacity change from 0 to 2048 [ 121.815681][ T7093] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 121.833464][ T7047] XFS (loop4): Ending clean mount [ 121.862242][ T7047] XFS (loop4): Quotacheck needed: Please wait. [ 121.867958][ T7106] loop0: detected capacity change from 0 to 8 [ 121.885227][ T6264] udevd[6264]: incorrect nilfs2 checksum on /dev/loop1 [ 121.892165][ T7093] NILFS (loop1): mounting unchecked fs [ 121.958904][ T7106] SQUASHFS error: xz decompression failed, data probably corrupt [ 121.961808][ T7093] NILFS (loop1): recovery complete [ 121.975575][ T7047] XFS (loop4): Quotacheck: Done. [ 121.985609][ T7107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.997748][ T7106] SQUASHFS error: Failed to read block 0x108: -5 [ 122.052313][ T7106] SQUASHFS error: Unable to read metadata cache entry [106] [ 122.102419][ T7106] SQUASHFS error: Unable to read inode 0x11f [ 122.102820][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 122.214542][ T5867] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.563768][ T5934] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 122.626040][ T5934] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 122.654160][ T5934] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 122.680928][ T5934] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 122.775067][ T7126] loop2: detected capacity change from 0 to 4096 [ 122.825443][ T7126] ntfs3(loop2): ino=3, Correct links count -> 2. [ 122.861473][ T7130] fido_id[7130]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 122.932167][ T7126] ntfs3(loop2): ino=1a, mi_enum_attr [ 122.932194][ T7126] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 122.976107][ T5934] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.172140][ T5934] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 123.196657][ T5934] usb 5-1: config 0 has no interface number 0 [ 123.218801][ T5934] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 123.246003][ T5934] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.296119][ T5934] usb 5-1: config 0 interface 255 has no altsetting 0 [ 123.313112][ T5934] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 123.337073][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.350550][ T7145] loop0: detected capacity change from 0 to 128 [ 123.369371][ T5934] usb 5-1: config 0 descriptor?? [ 123.374298][ T7144] loop1: detected capacity change from 0 to 1024 [ 123.397360][ T5934] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 123.408127][ T7145] FAT-fs (loop0): error, clusters badly computed (1 != 0) [ 123.416309][ T7144] EXT4-fs: Ignoring removed bh option [ 123.436258][ T7145] FAT-fs (loop0): Filesystem has been set read-only [ 123.454010][ T7145] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 123.468409][ T7145] FAT-fs (loop0): error, clusters badly computed (3 != 2) [ 123.499959][ T7145] FAT-fs (loop0): error, clusters badly computed (4 != 3) [ 123.508494][ T7145] FAT-fs (loop0): error, clusters badly computed (5 != 4) [ 123.510750][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 123.515840][ T7145] FAT-fs (loop0): error, clusters badly computed (6 != 5) [ 123.541497][ T7145] FAT-fs (loop0): error, clusters badly computed (7 != 6) [ 123.552436][ T7145] FAT-fs (loop0): error, clusters badly computed (8 != 7) [ 123.561403][ T7145] FAT-fs (loop0): error, clusters badly computed (9 != 8) [ 123.568734][ T7145] FAT-fs (loop0): error, clusters badly computed (10 != 9) [ 123.591021][ T5934] usb 5-1: USB disconnect, device number 6 [ 123.707870][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 124.035767][ T7164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.044687][ T7160] loop0: detected capacity change from 0 to 4096 [ 124.061974][ T7120] loop3: detected capacity change from 0 to 65536 [ 124.104438][ T7120] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.233882][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 124.282351][ T7120] XFS (loop3): Ending clean mount [ 124.372846][ T7120] XFS (loop3): Quotacheck needed: Please wait. [ 124.441874][ T7120] XFS (loop3): Quotacheck: Done. [ 124.471687][ T7185] loop2: detected capacity change from 0 to 8 [ 124.490114][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 124.529742][ T7185] SQUASHFS error: xz decompression failed, data probably corrupt [ 124.559078][ T7120] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x8003 [ 124.572815][ T7185] SQUASHFS error: Failed to read block 0x108: -5 [ 124.607760][ T7120] XFS (loop3): Unmount and run xfs_repair [ 124.613514][ T7120] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.622446][ T7185] SQUASHFS error: Unable to read metadata cache entry [106] [ 124.641712][ T7185] SQUASHFS error: Unable to read inode 0x11f [ 124.673988][ T7120] 00000000: 58 41 46 4c 00 00 00 01 9b 73 48 e5 2f a0 41 a5 XAFL.....sH./.A. [ 124.760962][ T7120] 00000010: 95 26 c5 3a 67 8b 01 f3 00 00 00 00 00 00 00 00 .&.:g........... [ 124.785185][ T7190] loop4: detected capacity change from 0 to 1024 [ 124.791942][ T7120] 00000020: a7 57 40 a5 03 00 00 00 00 00 00 00 00 00 04 a1 .W@............. [ 124.791981][ T7120] 00000030: 00 00 04 a2 00 00 04 a3 ff ff ff ff ff ff ff ff ................ [ 124.791995][ T7120] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.792010][ T7120] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.792023][ T7120] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.792038][ T7120] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.856948][ T7120] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x8003 len 1 error 74 [ 124.879823][ T30] audit: type=1800 audit(1757455248.253:16): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.485" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 124.910833][ T5934] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 124.928883][ T5934] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 124.945632][ T5874] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 124.969305][ T5934] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x3 [ 124.990426][ T5874] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 125.018040][ T5934] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 125.019868][ T4304] hfsplus: b-tree write err: -5, ino 4 [ 125.166377][ T7198] mkiss: ax0: crc mode is auto. [ 125.173811][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 125.294563][ T7200] loop4: detected capacity change from 0 to 1024 [ 125.304005][ T7202] mmap: syz.2.490 (7202) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.703220][ T7214] netlink: 'syz.2.496': attribute type 29 has an invalid length. [ 125.728604][ T7214] netlink: 'syz.2.496': attribute type 29 has an invalid length. [ 125.884341][ T7222] netlink: 56 bytes leftover after parsing attributes in process `syz.3.487'. [ 125.893579][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 125.903859][ T5934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.064350][ T7228] loop4: detected capacity change from 0 to 512 [ 126.071597][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 126.078550][ T5934] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 126.113213][ T7228] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.503: iget: bad extended attribute block 1 [ 126.140926][ T5934] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 126.187706][ T7228] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.503: couldn't read orphan inode 15 (err -117) [ 126.214452][ T7233] loop3: detected capacity change from 0 to 128 [ 126.222535][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.244285][ T7233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.261245][ T5934] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 126.270488][ T7233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.292234][ T7228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.296254][ T7210] loop0: detected capacity change from 0 to 32768 [ 126.321250][ T7233] EXT4-fs (loop3): Test dummy encryption mode enabled [ 126.325489][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.347665][ T7233] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.369086][ T5934] usb 2-1: config 0 descriptor?? [ 126.400532][ T7233] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.441053][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.649471][ T5874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.811527][ T5934] gt683r_led 0003:1770:FF00.0009: unknown main item tag 0x2 [ 126.863729][ T5934] gt683r_led 0003:1770:FF00.0009: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 126.931207][ T7249] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 126.987590][ T7249] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 127.046915][ T5934] usb 2-1: USB disconnect, device number 6 [ 127.085113][ T5921] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19 [ 127.119877][ T7254] netlink: 56 bytes leftover after parsing attributes in process `syz.2.512'. [ 127.129209][ T5921] gt683r_led 0003:1770:FF00.0009: failed to send set report request: -19 [ 127.150695][ T7250] fido_id[7250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 127.192493][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.2.512'. [ 127.452712][ T7267] loop2: detected capacity change from 0 to 128 [ 127.490018][ T7267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.504205][ T7267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.525371][ T7267] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.607793][ T7267] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.651157][ T7267] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.860430][ T5859] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.155583][ T5977] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 128.178630][ T5977] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 128.206161][ T5977] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x3 [ 128.234390][ T5977] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 128.397111][ T7297] fido_id[7297]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.482481][ T7277] loop4: detected capacity change from 0 to 32768 [ 128.512432][ T7277] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.615128][ T7277] XFS (loop4): Ending clean mount [ 128.811615][ T7320] loop1: detected capacity change from 0 to 2048 [ 128.867918][ T5867] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.884572][ T7320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.966757][ T5977] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.098313][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.126462][ T5977] usb 4-1: Using ep0 maxpacket: 32 [ 129.145054][ T5977] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 129.196181][ T5977] usb 4-1: config 4 has no interface number 0 [ 129.216058][ T5977] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.246409][ T5977] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.265375][ T5977] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 129.284029][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.342780][ T5977] hub 4-1:4.128: USB hub found [ 129.383634][ T7335] loop1: detected capacity change from 0 to 1024 [ 129.420823][ T7335] EXT4-fs: Ignoring removed orlov option [ 129.442230][ T7335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.512214][ T7335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.582693][ T5977] hub 4-1:4.128: 9 ports detected [ 129.596039][ T5977] hub 4-1:4.128: Using single TT (err -22) [ 129.604120][ T5977] hub 4-1:4.128: insufficient power available to use all downstream ports [ 129.701368][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.788717][ T5977] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 129.808804][ T5977] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 129.835326][ T7354] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 129.851185][ T7354] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 129.877582][ T5977] usb 4-1: USB disconnect, device number 4 [ 130.417590][ T7374] loop4: detected capacity change from 0 to 256 [ 130.559759][ T7374] FAT-fs (loop4): Directory bread(block 64) failed [ 130.586108][ T5977] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.589584][ T7374] FAT-fs (loop4): Directory bread(block 65) failed [ 130.615992][ T7374] FAT-fs (loop4): Directory bread(block 66) failed [ 130.633244][ T7374] FAT-fs (loop4): Directory bread(block 67) failed [ 130.684615][ T7374] FAT-fs (loop4): Directory bread(block 68) failed [ 130.712152][ T7374] FAT-fs (loop4): Directory bread(block 69) failed [ 130.746854][ T7374] FAT-fs (loop4): Directory bread(block 70) failed [ 130.773050][ T5977] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 130.778834][ T7374] FAT-fs (loop4): Directory bread(block 71) failed [ 130.791760][ T5977] usb 3-1: config 0 has no interface number 0 [ 130.802558][ T5977] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 130.809720][ T7374] FAT-fs (loop4): Directory bread(block 72) failed [ 130.824611][ T5977] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 130.854364][ T7374] FAT-fs (loop4): Directory bread(block 73) failed [ 130.882918][ T5977] usb 3-1: config 0 interface 255 has no altsetting 0 [ 130.896049][ T5977] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 130.915769][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.953256][ T5977] usb 3-1: config 0 descriptor?? [ 130.991109][ T5977] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 131.018742][ T7394] loop3: detected capacity change from 0 to 512 [ 131.224819][ T5977] usb 3-1: USB disconnect, device number 5 [ 131.233219][ T5921] IPVS: starting estimator thread 0... [ 131.336872][ T7404] IPVS: using max 26 ests per chain, 62400 per kthread [ 131.666701][ T7422] netlink: 84 bytes leftover after parsing attributes in process `syz.4.582'. [ 131.754872][ T7424] loop3: detected capacity change from 0 to 2048 [ 131.841221][ T7424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.909240][ T7432] loop2: detected capacity change from 0 to 1024 [ 131.914588][ T5868] IPVS: starting estimator thread 0... [ 131.946312][ T7432] EXT4-fs: Ignoring removed orlov option [ 132.002596][ T7432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.030948][ T7433] IPVS: using max 27 ests per chain, 64800 per kthread [ 132.105912][ T7432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.183205][ T7439] loop3: detected capacity change from 0 to 64 [ 132.286971][ T7426] loop0: detected capacity change from 0 to 32768 [ 132.300766][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.336047][ T30] audit: type=1804 audit(1757455255.703:17): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.589" name="/newroot/119/file0/bus" dev="loop3" ino=8 res=1 errno=0 [ 132.426495][ T7426] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.437270][ T7443] mkiss: ax0: crc mode is auto. [ 132.622223][ T7426] XFS (loop0): Ending clean mount [ 132.645884][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.656031][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.677832][ T7426] XFS (loop0): Quotacheck needed: Please wait. [ 132.771646][ T7426] XFS (loop0): Quotacheck: Done. [ 132.797272][ T7430] loop1: detected capacity change from 0 to 32768 [ 132.847498][ T7430] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.934578][ T7430] XFS (loop1): Ending clean mount [ 132.975355][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.018781][ T7468] loop2: detected capacity change from 0 to 128 [ 133.101042][ T7468] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.144062][ T5866] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.169996][ T7468] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.290881][ T7468] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 268435455 (only 1 groups) [ 133.473833][ T5859] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.983239][ T7472] loop3: detected capacity change from 0 to 32768 [ 134.045591][ T7472] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.597 (7472) [ 134.125650][ T7472] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 134.159992][ T7493] loop0: detected capacity change from 0 to 1024 [ 134.166579][ T7472] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 134.197754][ T7493] EXT4-fs: Ignoring removed orlov option [ 134.236148][ T7493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.315318][ T7493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.349886][ T7472] BTRFS info (device loop3): rebuilding free space tree [ 134.367561][ T7484] loop1: detected capacity change from 0 to 32768 [ 134.520212][ T7472] BTRFS info (device loop3): disabling free space tree [ 134.576308][ T7472] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.611878][ T7472] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.655105][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.689870][ T7472] BTRFS info (device loop3): setting nodatasum [ 134.704801][ T7472] BTRFS info (device loop3): allowing degraded mounts [ 134.719945][ T7472] BTRFS info (device loop3): enabling ssd optimizations [ 134.735623][ T7472] BTRFS info (device loop3): force clearing of disk cache [ 134.744806][ T7472] BTRFS info (device loop3): force zlib compression, level 3 [ 134.890679][ T7522] sp0: Synchronizing with TNC [ 134.934238][ T7521] [U] è [ 135.010881][ T5874] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 135.237323][ T7513] loop2: detected capacity change from 0 to 32768 [ 135.350502][ T7513] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.376435][ T5994] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.522500][ T7513] XFS (loop2): Ending clean mount [ 135.558273][ T5994] usb 5-1: Using ep0 maxpacket: 32 [ 135.570362][ T7513] XFS (loop2): Quotacheck needed: Please wait. [ 135.570746][ T5994] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 135.609699][ T5994] usb 5-1: config 4 has no interface number 0 [ 135.629167][ T5994] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.643187][ T7513] XFS (loop2): Quotacheck: Done. [ 135.691490][ T5994] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.722971][ T5994] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 135.753570][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.796156][ T5859] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 135.824545][ T5994] hub 5-1:4.128: USB hub found [ 136.041542][ T5994] hub 5-1:4.128: 9 ports detected [ 136.051755][ T5994] hub 5-1:4.128: Using single TT (err -22) [ 136.069204][ T5994] hub 5-1:4.128: insufficient power available to use all downstream ports [ 136.246538][ T5977] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.280158][ T5994] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 136.300311][ T5994] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 136.349360][ T5994] usb 5-1: USB disconnect, device number 7 [ 136.429390][ T5977] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.456795][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.488076][ T5977] usb 2-1: config 0 descriptor?? [ 136.504618][ T5977] cp210x 2-1:0.0: cp210x converter detected [ 136.701012][ T7574] loop3: detected capacity change from 0 to 512 [ 136.789971][ T7574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 136.834350][ T7574] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.898443][ T7564] loop0: detected capacity change from 0 to 32768 [ 136.923233][ T7564] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 137.037351][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 137.069103][ T7564] XFS (loop0): Ending clean mount [ 137.113362][ T5977] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 137.156678][ T5977] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 137.189555][ T5977] usb 2-1: cp210x converter now attached to ttyUSB0 [ 137.234185][ T5977] usb 2-1: USB disconnect, device number 7 [ 137.271030][ T5977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.307580][ T5977] cp210x 2-1:0.0: device disconnected [ 137.317088][ T5860] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 137.918204][ T7594] loop4: detected capacity change from 0 to 32768 [ 137.981881][ T7594] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 138.044963][ T7594] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.071462][ T7621] netlink: 44 bytes leftover after parsing attributes in process `syz.1.649'. [ 138.104434][ T7598] loop3: detected capacity change from 0 to 32768 [ 138.199967][ T7614] loop0: detected capacity change from 0 to 4096 [ 138.203384][ T7594] XFS (loop4): Ending clean mount [ 138.222043][ T7598] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 138.241781][ T7594] XFS (loop4): Quotacheck needed: Please wait. [ 138.316226][ T7594] XFS (loop4): Quotacheck: Done. [ 138.424503][ T5867] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 138.461020][ T30] audit: type=1800 audit(1757455261.833:18): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.647" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 138.485469][ T5874] ocfs2: Unmounting device (7,3) on (node local) [ 138.778780][ T7642] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 138.801363][ T7642] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 139.506571][ T7661] loop3: detected capacity change from 0 to 128 [ 139.529236][ T7661] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.582015][ T7661] hpfs: filesystem error: improperly stopped [ 139.596165][ T7661] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.615476][ T7661] hpfs: You really don't want any checks? You are crazy... [ 139.652409][ T7661] hpfs: hpfs_map_sector(): read error [ 139.693405][ T7643] loop0: detected capacity change from 0 to 32768 [ 139.704706][ T7661] hpfs: code page support is disabled [ 139.737906][ T7661] hpfs: hpfs_map_4sectors(): unaligned read [ 139.743968][ T7661] hpfs: hpfs_map_4sectors(): unaligned read [ 139.756120][ T7643] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.655 (7643) [ 139.784803][ T7661] hpfs: filesystem error: unable to find root dir [ 139.799964][ T7643] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 139.836196][ T7643] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 139.991689][ T7669] loop1: detected capacity change from 0 to 4096 [ 140.017961][ T7643] BTRFS info (device loop0): enabling ssd optimizations [ 140.070580][ T7643] BTRFS info (device loop0): enabling free space tree [ 140.113947][ T7687] loop2: detected capacity change from 0 to 128 [ 140.122553][ T7689] loop3: detected capacity change from 0 to 128 [ 140.164401][ T7687] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.231310][ T7687] hpfs: filesystem error: improperly stopped [ 140.251362][ T7689] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.275484][ T5860] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.306408][ T7687] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.313053][ T7657] loop4: detected capacity change from 0 to 32768 [ 140.314192][ T7687] hpfs: You really don't want any checks? You are crazy... [ 140.358199][ T7687] hpfs: hpfs_map_sector(): read error [ 140.363715][ T7687] hpfs: code page support is disabled [ 140.374818][ T7687] hpfs: hpfs_map_4sectors(): unaligned read [ 140.382788][ T7687] hpfs: hpfs_map_4sectors(): unaligned read [ 140.390461][ T7687] hpfs: filesystem error: unable to find root dir [ 140.400271][ T7689] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.423745][ T30] audit: type=1800 audit(1757455263.793:19): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.668" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 140.456524][ T7689] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 268435455 (only 1 groups) [ 140.689038][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 140.712766][ T5874] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.326120][ T5994] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 141.492730][ T5994] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 141.532591][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.570889][ T5994] usb 5-1: config 0 descriptor?? [ 141.603634][ T5994] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 141.630139][ T7726] loop1: detected capacity change from 0 to 1024 [ 141.658375][ T7722] loop2: detected capacity change from 0 to 4096 [ 141.763939][ T30] audit: type=1800 audit(1757455265.133:20): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.687" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 141.810888][ T1163] hfsplus: b-tree write err: -5, ino 4 [ 142.017923][ T5994] gp8psk: usb in 137 operation failed. [ 142.025361][ T5994] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 142.069308][ T5994] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 142.115820][ T5994] usb 5-1: USB disconnect, device number 8 [ 142.239920][ T7710] loop3: detected capacity change from 0 to 40427 [ 142.315573][ T7710] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 142.354435][ T7710] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 142.375284][ T7710] F2FS-fs (loop3): invalid crc value [ 142.387901][ T7741] loop1: detected capacity change from 0 to 128 [ 142.417360][ T7741] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.464347][ T7724] loop0: detected capacity change from 0 to 32768 [ 142.487441][ T7741] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.634761][ T5866] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.748222][ T7710] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 142.763883][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.782908][ T7710] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 142.810640][ T7710] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.820094][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.885315][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.952005][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.007669][ T7761] loop4: detected capacity change from 0 to 1024 [ 143.152063][ T49] hfsplus: b-tree write err: -5, ino 4 [ 143.716337][ T7752] loop2: detected capacity change from 0 to 32768 [ 143.802276][ T7752] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.854657][ T7780] loop3: detected capacity change from 0 to 128 [ 143.946501][ T7757] loop1: detected capacity change from 0 to 32768 [ 143.971310][ T7757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.701 (7757) [ 143.985499][ T30] audit: type=1800 audit(1757455267.363:21): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.703" name="file1" dev="loop3" ino=1048657 res=0 errno=0 [ 144.011821][ T7780] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 144.041436][ T7752] XFS (loop2): Ending clean mount [ 144.069690][ T7757] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 144.083675][ T7752] XFS (loop2): Quotacheck needed: Please wait. [ 144.106314][ T7757] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 144.245474][ T7752] XFS (loop2): Quotacheck: Done. [ 144.306905][ T5859] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.428516][ T7757] BTRFS info (device loop1): enabling ssd optimizations [ 144.467160][ T7757] BTRFS info (device loop1): enabling free space tree [ 144.716373][ T5866] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 145.074515][ T7789] loop0: detected capacity change from 0 to 32768 [ 145.193616][ T7789] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.315786][ T7795] loop3: detected capacity change from 0 to 32768 [ 145.398480][ T7789] XFS (loop0): Ending clean mount [ 145.434005][ T7789] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 145.584240][ T7835] loop1: detected capacity change from 0 to 256 [ 145.671170][ T5860] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.696369][ T7835] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 145.836026][ T5977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.979933][ T7821] loop2: detected capacity change from 0 to 32768 [ 146.031402][ T7814] loop4: detected capacity change from 0 to 32768 [ 146.037987][ T5977] usb 4-1: Using ep0 maxpacket: 8 [ 146.059892][ T5977] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.091344][ T5977] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.116230][ T5977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 146.122944][ T5977] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 146.126212][ T7821] JBD2: Ignoring recovery information on journal [ 146.142245][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.157033][ T7814] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 146.177043][ T5977] usb 4-1: config 0 descriptor?? [ 146.206964][ T7814] JBD2: Ignoring recovery information on journal [ 146.268309][ T7821] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 146.282217][ T7814] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 146.392890][ T5859] ocfs2: Unmounting device (7,2) on (node local) [ 146.481697][ T5867] ocfs2: Unmounting device (7,4) on (node local) [ 146.653549][ T7848] loop1: detected capacity change from 0 to 128 [ 146.653843][ T5977] smartjoyplus 0003:0B43:0003.000B: ignoring exceeding usage max [ 146.728047][ T5977] smartjoyplus 0003:0B43:0003.000B: unbalanced collection at end of report description [ 146.786749][ T5977] smartjoyplus 0003:0B43:0003.000B: parse failed [ 146.789683][ T7848] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 146.793267][ T5977] smartjoyplus 0003:0B43:0003.000B: probe with driver smartjoyplus failed with error -22 [ 146.801787][ T30] audit: type=1800 audit(1757455270.163:22): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="file1" dev="loop1" ino=1048662 res=0 errno=0 [ 146.905276][ T5977] usb 4-1: USB disconnect, device number 5 [ 147.489974][ T7846] loop4: detected capacity change from 0 to 32768 [ 147.558843][ T7846] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 147.563686][ T30] audit: type=1326 audit(1757455270.933:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 147.650498][ T30] audit: type=1326 audit(1757455270.973:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 147.677541][ T30] audit: type=1326 audit(1757455270.973:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 147.716383][ T30] audit: type=1326 audit(1757455270.983:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 147.781081][ T30] audit: type=1326 audit(1757455270.983:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 147.854849][ T7846] XFS (loop4): Ending clean mount [ 147.888793][ T7846] XFS (loop4): Quotacheck needed: Please wait. [ 147.895116][ T30] audit: type=1326 audit(1757455270.983:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 147.959224][ T30] audit: type=1326 audit(1757455270.983:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 148.033784][ T7846] XFS (loop4): Quotacheck: Done. [ 148.056075][ T30] audit: type=1326 audit(1757455270.983:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7863 comm="syz.3.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547618eba9 code=0x7ffc0000 [ 148.098941][ T7852] loop1: detected capacity change from 0 to 32768 [ 148.158179][ T7852] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.725 (7852) [ 148.204340][ T7852] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 148.226623][ T7852] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 148.339319][ T5867] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.435667][ T7852] BTRFS info (device loop1): enabling ssd optimizations [ 148.466003][ T7852] BTRFS info (device loop1): enabling free space tree [ 148.802852][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.743'. [ 148.882053][ T7903] loop2: detected capacity change from 0 to 2048 [ 148.930940][ T5866] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 148.973132][ T7903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.174714][ T7870] loop3: detected capacity change from 0 to 32768 [ 149.207326][ T7870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.729 (7870) [ 149.259311][ T7910] loop4: detected capacity change from 0 to 64 [ 149.317469][ T7870] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 149.406159][ T7870] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 149.704537][ T7936] loop4: detected capacity change from 0 to 256 [ 149.734802][ T7870] BTRFS info (device loop3): enabling ssd optimizations [ 149.786952][ T7870] BTRFS info (device loop3): enabling free space tree [ 149.857658][ T7936] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 149.936485][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 150.029997][ T5874] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.150103][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 150.164702][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 150.176224][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.214455][ T10] usb 1-1: config 0 descriptor?? [ 150.259981][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 150.612610][ T7954] loop2: detected capacity change from 0 to 4096 [ 150.676109][ T10] gp8psk: usb in 137 operation failed. [ 150.698308][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 150.739029][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 150.788265][ T10] usb 1-1: USB disconnect, device number 4 [ 151.351462][ T7953] loop1: detected capacity change from 0 to 40427 [ 151.361898][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 151.384878][ T7953] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 151.403273][ T7953] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 151.455433][ T7981] loop4: detected capacity change from 0 to 2048 [ 151.531502][ T7981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.611868][ T30] audit: type=1326 audit(1757455274.983:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 151.636318][ T5868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.699476][ T30] audit: type=1326 audit(1757455274.983:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 151.783949][ T7953] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 151.805480][ T30] audit: type=1326 audit(1757455275.013:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 151.846718][ T7953] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 151.860950][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 151.872467][ T7953] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.882624][ T5868] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.893898][ T30] audit: type=1326 audit(1757455275.013:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 151.931323][ T30] audit: type=1326 audit(1757455275.013:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 151.947372][ T5868] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.998094][ T30] audit: type=1326 audit(1757455275.013:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 152.003493][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.049417][ T30] audit: type=1326 audit(1757455275.013:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 152.098504][ T5868] usb 3-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 152.130299][ T30] audit: type=1326 audit(1757455275.013:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7987 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3bb8eba9 code=0x7ffc0000 [ 152.138222][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.234311][ T5868] usb 3-1: config 0 descriptor?? [ 152.404464][ T8005] netlink: 'syz.0.783': attribute type 3 has an invalid length. [ 152.445418][ T8007] loop4: detected capacity change from 0 to 256 [ 152.685275][ T5868] smartjoyplus 0003:0B43:0003.000C: ignoring exceeding usage max [ 152.747787][ T5868] smartjoyplus 0003:0B43:0003.000C: unbalanced collection at end of report description [ 152.780048][ T5868] smartjoyplus 0003:0B43:0003.000C: parse failed [ 152.798735][ T7990] loop3: detected capacity change from 0 to 32768 [ 152.813694][ T5868] smartjoyplus 0003:0B43:0003.000C: probe with driver smartjoyplus failed with error -22 [ 152.871268][ T7990] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.921710][ T5868] usb 3-1: USB disconnect, device number 6 [ 152.976738][ T7990] XFS (loop3): Ending clean mount [ 153.042066][ T7990] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 153.172270][ T5874] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 153.245259][ T8009] loop0: detected capacity change from 0 to 32768 [ 153.286046][ T5921] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 153.329479][ T8009] ERROR: (device loop0): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 153.329479][ T8009] [ 153.375302][ T8009] ERROR: (device loop0): remounting filesystem as read-only [ 153.393977][ T8009] ERROR: (device loop0): jfs_rename: [ 153.393977][ T8009] [ 153.454668][ T5860] ERROR: (device loop0): xtTruncate: xt_getpage: xtree page corrupt [ 153.454668][ T5860] [ 153.526255][ T5921] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 153.535365][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.570184][ T5921] usb 2-1: config 0 descriptor?? [ 153.610591][ T5921] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 153.894776][ T8023] loop4: detected capacity change from 0 to 32768 [ 153.967874][ T8023] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.048441][ T5921] gp8psk: usb in 137 operation failed. [ 154.054119][ T5921] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 154.086017][ T5921] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 154.105259][ T5921] usb 2-1: USB disconnect, device number 8 [ 154.138228][ T8023] XFS (loop4): Ending clean mount [ 154.213737][ T5867] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.693050][ T8058] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.747705][ T8031] loop3: detected capacity change from 0 to 40427 [ 154.755629][ T8031] F2FS-fs (loop3): Wrong segment_count / block_count (64 > 16384) [ 154.756509][ T8059] (syz.4.795,8059,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 154.765465][ T8031] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.829703][ T8059] (syz.4.795,8059,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 154.992296][ T8066] loop1: detected capacity change from 0 to 128 [ 155.067003][ T8066] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 155.099759][ T8031] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 155.137580][ T8031] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 155.144806][ T8066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.169016][ T8031] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 155.323404][ T8049] loop2: detected capacity change from 0 to 32768 [ 155.380321][ T8049] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.658548][ T8049] XFS (loop2): Ending clean mount [ 155.681952][ T8049] XFS (loop2): Quotacheck needed: Please wait. [ 155.825346][ T8049] XFS (loop2): Quotacheck: Done. [ 155.959239][ T8076] loop4: detected capacity change from 0 to 40427 [ 155.982176][ T8076] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 155.984619][ T5859] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.019612][ T8092] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 156.028157][ T8076] F2FS-fs (loop4): invalid crc value [ 156.043567][ T8092] macvtap1: entered promiscuous mode [ 156.065241][ T8092] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 156.203006][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 156.320646][ T8076] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 156.369024][ T8076] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.464460][ T8099] (syz.0.815,8099,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 156.525666][ T8099] (syz.0.815,8099,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 156.660144][ T8108] loop1: detected capacity change from 0 to 16 [ 156.691213][ T8108] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 156.841861][ T8115] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0 [ 156.957725][ T8122] syz.0.824 (8122): /proc/8120/oom_adj is deprecated, please use /proc/8120/oom_score_adj instead. [ 157.042404][ T8124] loop1: detected capacity change from 0 to 512 [ 157.111482][ T8124] EXT4-fs (loop1): Test dummy encryption mode enabled [ 157.156390][ T8124] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.209359][ T8124] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.825: bad orphan inode 131083 [ 157.283736][ T8124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.519257][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.910202][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'. [ 158.189732][ T8141] loop0: detected capacity change from 0 to 32768 [ 158.238096][ T30] audit: type=1326 audit(1757455281.603:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.4.844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff79c58eba9 code=0x0 [ 158.294038][ T8141] JBD2: Ignoring recovery information on journal [ 158.472855][ T8141] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 158.612278][ T8167] loop2: detected capacity change from 0 to 32768 [ 158.628939][ T8167] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.845 (8167) [ 158.670866][ T5860] ocfs2: Unmounting device (7,0) on (node local) [ 158.683218][ T8167] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 158.693543][ T8180] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 158.721127][ T8180] macvtap1: entered promiscuous mode [ 158.722320][ T8167] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 158.775263][ T8180] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 158.967141][ T8167] BTRFS info (device loop2): enabling ssd optimizations [ 158.974141][ T8167] BTRFS info (device loop2): enabling free space tree [ 159.028242][ T8202] loop1: detected capacity change from 0 to 1024 [ 159.040817][ T8203] loop0: detected capacity change from 0 to 1024 [ 159.127487][ T8203] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 159.150320][ T8203] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 159.164079][ T8203] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.852: Failed to acquire dquot type 0 [ 159.177142][ T8202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.183080][ T8203] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 159.211881][ T8203] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.852: corrupted inode contents [ 159.228360][ T8203] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.852: mark_inode_dirty error [ 159.231569][ T8202] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.297081][ T8203] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.852: corrupted inode contents [ 159.315051][ T5859] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 159.351849][ T8203] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.852: mark_inode_dirty error [ 159.412597][ T8203] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.852: corrupted inode contents [ 159.484270][ T8203] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 159.502267][ T8203] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.852: corrupted inode contents [ 159.520975][ T8216] loop4: detected capacity change from 0 to 16 [ 159.547409][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.553484][ T8216] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 159.565568][ T8203] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.852: mark_inode_dirty error [ 159.611550][ T8203] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 159.699801][ T8203] EXT4-fs (loop0): 1 truncate cleaned up [ 159.707892][ T8203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.927781][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.145208][ T8232] loop2: detected capacity change from 0 to 1024 [ 160.185157][ T8232] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 160.202582][ T8232] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 160.256240][ T8232] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.865: Failed to acquire dquot type 0 [ 160.272210][ T8232] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 160.295493][ T8232] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.865: corrupted inode contents [ 160.346455][ T8232] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.865: mark_inode_dirty error [ 160.400197][ T8232] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.865: corrupted inode contents [ 160.467747][ T8232] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.865: mark_inode_dirty error [ 160.511772][ T8232] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.865: corrupted inode contents [ 160.524352][ T8242] loop3: detected capacity change from 0 to 2048 [ 160.587951][ T8232] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 160.612743][ T8232] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.865: corrupted inode contents [ 160.629608][ T8242] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.631012][ T8232] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.865: mark_inode_dirty error [ 160.659569][ T8232] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 160.700430][ T8232] EXT4-fs (loop2): 1 truncate cleaned up [ 160.711515][ T8232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.863676][ T8232] EXT4-fs: Ignoring removed orlov option [ 160.872723][ T8252] loop1: detected capacity change from 0 to 4096 [ 160.880765][ T8232] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 160.925647][ T8232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 160.979205][ T8259] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.010366][ T8232] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 161.114597][ T8252] overlayfs: upper fs does not support tmpfile. [ 161.148545][ T8252] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 161.206031][ T8252] overlayfs: failed to set xattr on upper [ 161.224488][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.236215][ T8252] overlayfs: ...falling back to redirect_dir=nofollow. [ 161.276825][ T8252] overlayfs: ...falling back to metacopy=off. [ 161.302850][ T8252] overlayfs: ...falling back to index=off. [ 161.332729][ T8252] overlayfs: ...falling back to uuid=null. [ 161.358388][ T8267] loop0: detected capacity change from 0 to 1024 [ 161.395367][ T8267] EXT4-fs: Ignoring removed orlov option [ 161.428809][ T8269] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 161.484938][ T8267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.496232][ T8269] macvtap1: entered promiscuous mode [ 161.520103][ T8269] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 161.673402][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.727402][ T5868] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 161.756315][ T5868] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 161.790425][ T5868] Remounting filesystem read-only [ 161.795484][ T5868] NILFS (loop1): error -5 truncating bmap (ino=12) [ 161.896289][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 161.979367][ T8282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 162.008132][ T8284] Illegal XDP return value 4294967274 on prog (id 56) dev N/A, expect packet loss! [ 162.066519][ T8273] loop2: detected capacity change from 0 to 32768 [ 162.096937][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 162.104090][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.121537][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.130886][ T8273] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 162.130886][ T8273] [ 162.141945][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.141971][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.142011][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.142032][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.245277][ T8288] use of bytesused == 0 is deprecated and will be removed in the future, [ 162.256865][ T8273] ERROR: (device loop2): remounting filesystem as read-only [ 162.258790][ T8288] use the actual size instead. [ 162.265408][ T8273] ERROR: (device loop2): jfs_rename: [ 162.265408][ T8273] [ 162.411438][ T5921] usb 4-1: usb_control_msg returned -71 [ 162.436169][ T5859] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt [ 162.436169][ T5859] [ 162.440546][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 162.503508][ T5921] usb 4-1: USB disconnect, device number 6 [ 162.663283][ T8294] loop0: detected capacity change from 0 to 65 [ 162.708031][ T8294] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 162.780945][ T8280] loop4: detected capacity change from 0 to 32768 [ 162.848956][ T8280] JBD2: Ignoring recovery information on journal [ 162.981111][ T8290] loop1: detected capacity change from 0 to 32768 [ 163.041510][ T8290] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.075741][ T8303] loop0: detected capacity change from 0 to 64 [ 163.099680][ T8280] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.309111][ T5867] ocfs2: Unmounting device (7,4) on (node local) [ 163.315585][ T8290] XFS (loop1): Ending clean mount [ 163.385799][ T8290] XFS (loop1): Quotacheck needed: Please wait. [ 163.451366][ T8314] loop2: detected capacity change from 0 to 512 [ 163.487095][ T8290] XFS (loop1): Quotacheck: Done. [ 163.529858][ T8317] netlink: 'syz.4.897': attribute type 10 has an invalid length. [ 163.544313][ T8314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.557492][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'. [ 163.780761][ T5866] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 163.845077][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.848032][ T8317] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 163.889802][ T8315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.896955][ T8325] loop3: detected capacity change from 0 to 256 [ 164.071022][ T8325] FAT-fs (loop3): Directory bread(block 64) failed [ 164.086249][ T8329] loop0: detected capacity change from 0 to 2048 [ 164.112170][ T8325] FAT-fs (loop3): Directory bread(block 65) failed [ 164.133951][ T8325] FAT-fs (loop3): Directory bread(block 66) failed [ 164.144794][ T8329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.175149][ T8325] FAT-fs (loop3): Directory bread(block 67) failed [ 164.213796][ T8325] FAT-fs (loop3): Directory bread(block 68) failed [ 164.250926][ T8325] FAT-fs (loop3): Directory bread(block 69) failed [ 164.286385][ T8325] FAT-fs (loop3): Directory bread(block 70) failed [ 164.292939][ T8325] FAT-fs (loop3): Directory bread(block 71) failed [ 164.335895][ T8325] FAT-fs (loop3): Directory bread(block 72) failed [ 164.342780][ T8325] FAT-fs (loop3): Directory bread(block 73) failed [ 164.612574][ T8341] loop4: detected capacity change from 0 to 256 [ 164.667165][ T8337] loop2: detected capacity change from 0 to 4096 [ 164.693882][ T8343] loop3: detected capacity change from 0 to 1024 [ 164.729648][ T8343] EXT4-fs: Ignoring removed orlov option [ 164.802753][ T8345] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.851663][ T8343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.981286][ T8337] overlayfs: upper fs does not support tmpfile. [ 165.006920][ T8337] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 165.026718][ T8337] overlayfs: failed to set xattr on upper [ 165.042941][ T8339] loop1: detected capacity change from 0 to 32768 [ 165.051193][ T8337] overlayfs: ...falling back to redirect_dir=nofollow. [ 165.060958][ T8337] overlayfs: ...falling back to metacopy=off. [ 165.074361][ T8337] overlayfs: ...falling back to index=off. [ 165.081515][ T8337] overlayfs: ...falling back to uuid=null. [ 165.082222][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.102055][ T8339] JBD2: Ignoring recovery information on journal [ 165.160930][ T8353] loop4: detected capacity change from 0 to 1024 [ 165.175593][ T8339] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 165.272566][ T8353] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 165.317327][ T8353] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 165.343037][ T929] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 165.407012][ T8353] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.915: Failed to acquire dquot type 0 [ 165.424263][ T929] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12) [ 165.447601][ T8353] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 165.476919][ T929] Remounting filesystem read-only [ 165.490001][ T929] NILFS (loop2): error -5 truncating bmap (ino=12) [ 165.500386][ T5866] ocfs2: Unmounting device (7,1) on (node local) [ 165.518907][ T8353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.915: corrupted inode contents [ 165.553687][ T8353] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.915: mark_inode_dirty error [ 165.599976][ T8353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.915: corrupted inode contents [ 165.643321][ T8353] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.915: mark_inode_dirty error [ 165.693262][ T8353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.915: corrupted inode contents [ 165.765641][ T8353] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 165.797319][ T8353] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.915: corrupted inode contents [ 165.824451][ T8353] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.915: mark_inode_dirty error [ 165.864940][ T8353] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 165.885035][ T8353] EXT4-fs (loop4): 1 truncate cleaned up [ 165.897610][ T8353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.132721][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.244851][ T8379] loop2: detected capacity change from 0 to 64 [ 166.414252][ T8363] loop3: detected capacity change from 0 to 32768 [ 166.449402][ T8363] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.920 (8363) [ 166.536331][ T8363] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 166.585000][ T8363] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 166.794748][ T8363] BTRFS info (device loop3): enabling ssd optimizations [ 166.836531][ T8363] BTRFS info (device loop3): enabling free space tree [ 166.990475][ T8407] loop2: detected capacity change from 0 to 4096 [ 167.021745][ T8407] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 167.164016][ T5874] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 167.188182][ T8423] loop4: detected capacity change from 0 to 65 [ 167.263049][ T8423] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 167.576676][ T8436] qrtr: Invalid version 0 [ 168.193989][ T8455] loop2: detected capacity change from 0 to 256 [ 168.632930][ T8465] loop4: detected capacity change from 0 to 4096 [ 168.723178][ T8470] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.796421][ T8432] loop0: detected capacity change from 0 to 32768 [ 168.907021][ T8432] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.063735][ T8432] XFS (loop0): Ending clean mount [ 169.142533][ T8432] XFS (loop0): Quotacheck needed: Please wait. [ 169.205431][ T8490] netlink: 'syz.2.969': attribute type 10 has an invalid length. [ 169.318792][ T8432] XFS (loop0): Quotacheck: Done. [ 169.331700][ T8494] loop4: detected capacity change from 0 to 512 [ 169.389180][ T8461] loop1: detected capacity change from 0 to 32768 [ 169.396751][ T8490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 169.410803][ T8461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.958 (8461) [ 169.412375][ T8489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.440837][ T30] audit: type=1800 audit(1757455292.813:40): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.971" name="file2" dev="loop4" ino=1048691 res=0 errno=0 [ 169.472620][ T8461] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.485746][ T8461] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 169.509001][ T5860] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.590254][ T8461] BTRFS info (device loop1): enabling ssd optimizations [ 169.635056][ T8461] BTRFS info (device loop1): enabling free space tree [ 169.648661][ T8514] loop3: detected capacity change from 0 to 512 [ 169.700911][ T8514] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.974: iget: bad extended attribute block 1 [ 169.825402][ T8514] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.974: couldn't read orphan inode 15 (err -117) [ 169.865246][ T30] audit: type=1800 audit(1757455293.233:41): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.958" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 169.920397][ T8514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.936547][ T8520] loop0: detected capacity change from 0 to 256 [ 169.982361][ T8523] loop4: detected capacity change from 0 to 256 [ 169.989737][ T5866] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 170.049842][ T8514] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 170.133155][ T8523] FAT-fs (loop4): Directory bread(block 64) failed [ 170.176877][ T8523] FAT-fs (loop4): Directory bread(block 65) failed [ 170.183525][ T8523] FAT-fs (loop4): Directory bread(block 66) failed [ 170.234230][ T8523] FAT-fs (loop4): Directory bread(block 67) failed [ 170.251343][ T8523] FAT-fs (loop4): Directory bread(block 68) failed [ 170.260361][ T8523] FAT-fs (loop4): Directory bread(block 69) failed [ 170.274293][ T8523] FAT-fs (loop4): Directory bread(block 70) failed [ 170.302207][ T8523] FAT-fs (loop4): Directory bread(block 71) failed [ 170.323219][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.345527][ T8523] FAT-fs (loop4): Directory bread(block 72) failed [ 170.364522][ T8523] FAT-fs (loop4): Directory bread(block 73) failed [ 170.522528][ T8531] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 170.905019][ T8544] loop2: detected capacity change from 0 to 4096 [ 170.925396][ T8549] loop1: detected capacity change from 0 to 512 [ 170.984765][ T8549] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.011418][ T8549] EXT4-fs (loop1): orphan cleanup on readonly fs [ 171.020621][ T8551] loop0: detected capacity change from 0 to 512 [ 171.035173][ T8549] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 171.050713][ T8549] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.989: attempt to clear invalid blocks 2 len 1 [ 171.072245][ T8549] EXT4-fs (loop1): Remounting filesystem read-only [ 171.080324][ T8551] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.990: iget: bad extended attribute block 1 [ 171.124371][ T8549] EXT4-fs (loop1): 1 truncate cleaned up [ 171.124685][ T8551] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.990: couldn't read orphan inode 15 (err -117) [ 171.132748][ T8549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.149047][ T8544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.261232][ T8551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.345368][ T8549] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 171.436791][ T8551] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 171.524398][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.561081][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.579396][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.750652][ T8572] netlink: 504 bytes leftover after parsing attributes in process `syz.0.999'. [ 172.054697][ T30] audit: type=1326 audit(1757455295.423:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79c58eba9 code=0x7ffc0000 [ 172.112411][ T8586] loop4: detected capacity change from 0 to 512 [ 172.140377][ T30] audit: type=1326 audit(1757455295.423:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79c58eba9 code=0x7ffc0000 [ 172.140387][ T8586] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.210690][ T8588] loop1: detected capacity change from 0 to 4096 [ 172.220804][ T30] audit: type=1326 audit(1757455295.423:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff79c58eba9 code=0x7ffc0000 [ 172.243558][ T30] audit: type=1326 audit(1757455295.423:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff79c58ebe3 code=0x7ffc0000 [ 172.253653][ T8586] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 172.265901][ T8588] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 172.293266][ T30] audit: type=1326 audit(1757455295.423:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff79c58d65f code=0x7ffc0000 [ 172.318986][ T30] audit: type=1326 audit(1757455295.423:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff79c58ec37 code=0x7ffc0000 [ 172.341513][ T30] audit: type=1326 audit(1757455295.423:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff79c58d510 code=0x7ffc0000 [ 172.362700][ T8586] EXT4-fs (loop4): 1 truncate cleaned up [ 172.401980][ T8586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.421925][ T8597] loop0: detected capacity change from 0 to 256 [ 172.438780][ T30] audit: type=1326 audit(1757455295.423:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff79c58e7ab code=0x7ffc0000 [ 172.495471][ T8597] exfat: Deprecated parameter 'namecase' [ 172.519785][ T8599] loop2: detected capacity change from 0 to 512 [ 172.565209][ T30] audit: type=1326 audit(1757455295.493:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff79c58d80a code=0x7ffc0000 [ 172.587231][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.629755][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.639214][ T8601] loop3: detected capacity change from 0 to 64 [ 172.645440][ T30] audit: type=1326 audit(1757455295.493:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff79c58d80a code=0x7ffc0000 [ 172.667449][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.681036][ T8597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 172.726965][ T8599] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1010: iget: bad extended attribute block 1 [ 172.821298][ T8599] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1010: couldn't read orphan inode 15 (err -117) [ 172.907955][ T8599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.069926][ T8599] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 173.282292][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.502014][ T8630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1028'. [ 173.518833][ T8628] loop2: detected capacity change from 0 to 1024 [ 173.564107][ T8628] hfsplus: small dir entry [ 173.798855][ T8641] loop4: detected capacity change from 0 to 512 [ 173.803031][ T8641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.848753][ T8641] EXT4-fs: Ignoring removed i_version option [ 173.905721][ T8641] EXT4-fs (loop4): 1 orphan inode deleted [ 173.938410][ T8641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.042498][ T8647] loop1: detected capacity change from 0 to 512 [ 174.061968][ T5867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.130251][ T8647] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1034: iget: bad extended attribute block 1 [ 174.266299][ T8647] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1034: couldn't read orphan inode 15 (err -117) [ 174.301121][ T8660] netlink: 'syz.0.1039': attribute type 5 has an invalid length. [ 174.394216][ T8647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.516498][ T8647] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 174.568253][ T8670] loop2: detected capacity change from 0 to 64 [ 174.636449][ T8669] loop3: detected capacity change from 0 to 4096 [ 174.638623][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.696013][ T8675] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.806641][ T8677] loop4: detected capacity change from 0 to 256 [ 174.822345][ T8677] exfat: Deprecated parameter 'utf8' [ 174.830965][ T8677] exfat: Deprecated parameter 'namecase' [ 174.869408][ T8677] exfat: Deprecated parameter 'namecase' [ 174.875615][ T8677] exfat: Deprecated parameter 'utf8' [ 174.951089][ T8677] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 175.488612][ T8693] IPVS: Scheduler module ip_vs_sip not found [ 175.621978][ T8698] loop2: detected capacity change from 0 to 4096 [ 175.701489][ T8708] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.796512][ T8674] loop0: detected capacity change from 0 to 32768 [ 176.146594][ T8720] loop4: detected capacity change from 0 to 1764 [ 176.154942][ T8725] loop1: detected capacity change from 0 to 4096 [ 176.172771][ T8722] loop3: detected capacity change from 0 to 1024 [ 176.234547][ T8720] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 176.258950][ T8722] EXT4-fs: Ignoring removed orlov option [ 176.270279][ T8728] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.321732][ T8674] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 176.321763][ T8674] allowing incompatible features above 0.0: (unknown version) [ 176.321775][ T8674] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 176.326001][ T8722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.418313][ T8674] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 176.480510][ T8674] bcachefs (loop0): initializing new filesystem [ 176.491626][ T8722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.567452][ T8674] bcachefs (loop0): going read-write [ 176.633546][ T8674] bcachefs (loop0): marking superblocks [ 176.675023][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.697876][ T8674] bcachefs (loop0): initializing freespace [ 176.737302][ T8674] bcachefs (loop0): done initializing freespace [ 176.790038][ T8674] bcachefs (loop0): reading snapshots table [ 176.817326][ T8674] bcachefs (loop0): reading snapshots done [ 176.836210][ T5868] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 176.932976][ T8674] bcachefs (loop0): done starting filesystem [ 176.988902][ T5868] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 177.006264][ T5868] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.016339][ T5868] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 177.034451][ T8727] loop2: detected capacity change from 0 to 32768 [ 177.047849][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.068891][ T5868] usb 5-1: config 0 descriptor?? [ 177.074568][ T8734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.096080][ T8727] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1065 (8727) [ 177.110556][ T8674] syz.0.1047 (8674) used greatest stack depth: 16296 bytes left [ 177.116207][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 177.116223][ T30] audit: type=1800 audit(1757455300.483:62): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1047" name="file1" dev="loop0" ino=4098 res=0 errno=0 [ 177.173045][ T8727] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.230491][ T8727] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 177.253032][ T5860] bcachefs (loop0): shutting down [ 177.286738][ T5860] bcachefs (loop0): going read-only [ 177.311768][ T5860] bcachefs (loop0): finished waiting for writes to stop [ 177.342117][ T5860] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 177.360215][ T8727] BTRFS info (device loop2): enabling ssd optimizations [ 177.404268][ T8727] BTRFS info (device loop2): enabling free space tree [ 177.473017][ T5860] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 177.537041][ T5860] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 177.561104][ T5860] bcachefs (loop0): marking filesystem clean [ 177.562826][ T5868] konepure 0003:1E7D:2DBE.000D: item fetching failed at offset 0/2 [ 177.576913][ T5868] konepure 0003:1E7D:2DBE.000D: parse failed [ 177.582974][ T5868] konepure 0003:1E7D:2DBE.000D: probe with driver konepure failed with error -22 [ 177.677314][ T49] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 177.722639][ T5859] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.725067][ T5860] bcachefs (loop0): shutdown complete [ 177.774475][ T5868] usb 5-1: USB disconnect, device number 9 [ 177.893359][ T8739] loop1: detected capacity change from 0 to 32768 [ 177.964091][ T8739] (syz.1.1073,8739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.016906][ T8739] (syz.1.1073,8739,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.035183][ T8744] loop3: detected capacity change from 0 to 32768 [ 178.084454][ T8744] [ 178.084454][ T8744] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.084454][ T8744] [ 178.134634][ T8739] JBD2: Ignoring recovery information on journal [ 178.210609][ T8744] read_mapping_page failed! [ 178.215328][ T8744] ERROR: (device loop3): txCommit: [ 178.215328][ T8744] [ 178.294595][ T8768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'. [ 178.322978][ T8739] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 178.433797][ T5874] [ 178.433797][ T5874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.433797][ T5874] [ 178.483082][ T5866] ocfs2: Unmounting device (7,1) on (node local) [ 178.489287][ T5874] [ 178.489287][ T5874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 178.489287][ T5874] [ 178.924151][ T8783] loop2: detected capacity change from 0 to 512 [ 179.030557][ T8783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.056834][ T8783] EXT4-fs: Ignoring removed i_version option [ 179.118291][ T8783] EXT4-fs (loop2): 1 orphan inode deleted [ 179.147799][ T8783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.307818][ T5859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.755781][ T8806] loop3: detected capacity change from 0 to 4096 [ 179.848969][ T8810] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.297766][ T8798] loop4: detected capacity change from 0 to 32768 [ 180.367418][ T8798] [ 180.367418][ T8798] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.367418][ T8798] [ 180.493223][ T8813] loop2: detected capacity change from 0 to 65536 [ 180.536565][ T8798] read_mapping_page failed! [ 180.541122][ T8798] ERROR: (device loop4): txCommit: [ 180.541122][ T8798] [ 180.560915][ T8813] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 180.637997][ T8813] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 180.718388][ T8813] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 180.731939][ T8813] XFS (loop2): failed to locate log tail [ 180.737919][ T8813] XFS (loop2): log mount/recovery failed: error -74 [ 180.749710][ T8813] XFS (loop2): log mount failed [ 180.822057][ T8837] loop0: detected capacity change from 0 to 512 [ 180.852688][ T5867] [ 180.852688][ T5867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.852688][ T5867] [ 180.902240][ T5867] [ 180.902240][ T5867] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.902240][ T5867] [ 181.000371][ T8837] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1075: bg 0: block 248: padding at end of block bitmap is not set [ 181.124542][ T8837] Quota error (device loop0): write_blk: dquota write failed [ 181.178015][ T8837] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.265013][ T8837] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.1075: Failed to acquire dquot type 1 [ 181.342942][ T8856] loop1: detected capacity change from 0 to 512 [ 181.352912][ T8852] loop4: detected capacity change from 0 to 2048 [ 181.360637][ T8837] EXT4-fs (loop0): 1 truncate cleaned up [ 181.381547][ T8856] EXT4-fs: Ignoring removed oldalloc option [ 181.394141][ T8837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.418891][ T8856] EXT4-fs: Ignoring removed bh option [ 181.441397][ T8852] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.463961][ T8856] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1109: corrupted in-inode xattr: e_value size too large [ 181.482040][ T8837] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.490211][ T8856] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1109: couldn't read orphan inode 15 (err -117) [ 181.559182][ T8859] loop3: detected capacity change from 0 to 512 [ 181.579883][ T5860] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.629253][ T8856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.687816][ T8859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.762548][ T8859] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.828851][ T5866] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.903193][ T8865] loop0: detected capacity change from 0 to 512 [ 181.949020][ T8865] EXT4-fs: Ignoring removed i_version option [ 181.969396][ T5874] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.006993][ T8865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.088200][ T8865] EXT4-fs (loop0): 1 truncate cleaned up [ 182.095345][ T8865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.455480][ T5860] EXT4-fs warning (device loop0): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting [ 182.485185][ T8872] loop3: detected capacity change from 0 to 4096 [ 182.523387][ T5860] ------------[ cut here ]------------ [ 182.525502][ T8870] loop1: detected capacity change from 0 to 65536 [ 182.529271][ T5860] WARNING: fs/ext4/xattr.c:1470 at ext4_xattr_inode_lookup_create+0xa85/0x1c20, CPU#1: syz-executor/5860 [ 182.547954][ T5860] Modules linked in: [ 182.552166][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 182.563114][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.574081][ T5860] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 182.581289][ T5860] Code: 8b 74 24 10 e9 d4 03 00 00 e8 37 b3 39 ff 48 89 df 48 c7 c6 8e 27 b8 8d ba bd 05 00 00 48 c7 c1 c0 dd bf 8b e8 ac 24 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 182.601260][ T5860] RSP: 0018:ffffc9000402f3e0 EFLAGS: 00010246 [ 182.607396][ T5860] RAX: 38f22682966dda00 RBX: ffff8880310e0000 RCX: 38f22682966dda00 [ 182.615390][ T5860] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 182.623421][ T5860] RBP: ffffc9000402f570 R08: ffffc9000402efc7 R09: 1ffff92000805df8 [ 182.631694][ T5860] R10: dffffc0000000000 R11: fffff52000805df9 R12: 1ffff92000805e90 [ 182.639762][ T5860] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805665bc20 [ 182.647789][ T5860] FS: 00005555920be500(0000) GS:ffff888125af1000(0000) knlGS:0000000000000000 [ 182.658889][ T5860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.665505][ T5860] CR2: 00007ff79d3056c0 CR3: 0000000029af8000 CR4: 00000000003526f0 [ 182.674709][ T5860] Call Trace: [ 182.678389][ T5860] [ 182.681356][ T5860] ? __pfx___might_resched+0x10/0x10 [ 182.687438][ T5860] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 182.694805][ T5860] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 182.700273][ T5860] ext4_xattr_block_set+0x223/0x2ac0 [ 182.705598][ T5860] ? __pfx___might_resched+0x10/0x10 [ 182.710980][ T5860] ? fs_reclaim_acquire+0x7d/0x100 [ 182.716408][ T5860] ? fs_reclaim_acquire+0x7d/0x100 [ 182.718664][ T8870] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 182.721549][ T5860] ? __pfx_check_xattrs+0x10/0x10 [ 182.734370][ T5860] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 182.739441][ T8870] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 182.740171][ T5860] ? ext4_xattr_block_find+0x2d4/0x350 [ 182.754178][ T5860] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 182.761537][ T5860] __ext4_expand_extra_isize+0x30d/0x400 [ 182.764033][ T8883] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.768114][ T5860] __ext4_mark_inode_dirty+0x46c/0x700 [ 182.783508][ T5860] ext4_dirty_inode+0xd0/0x110 [ 182.788670][ T5860] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 182.794082][ T5860] __mark_inode_dirty+0x2e9/0xe10 [ 182.799184][ T5860] iput+0x1ee/0x9d0 [ 182.803033][ T5860] __dentry_kill+0x209/0x660 [ 182.807681][ T5860] ? shrink_kill+0x8d/0x2c0 [ 182.812205][ T5860] shrink_kill+0xa9/0x2c0 [ 182.814090][ T8870] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 182.816898][ T5860] shrink_dentry_list+0x2e0/0x5e0 [ 182.832592][ T5860] shrink_dcache_parent+0xa1/0x2c0 [ 182.833543][ T8870] XFS (loop1): failed to locate log tail [ 182.837790][ T5860] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 182.837824][ T5860] ? call_rcu+0x6ff/0x9c0 [ 182.837856][ T5860] do_one_tree+0x23/0xe0 [ 182.837877][ T5860] shrink_dcache_for_umount+0xa0/0x170 [ 182.843528][ T8870] XFS (loop1): log mount/recovery failed: error -74 [ 182.849557][ T5860] generic_shutdown_super+0x67/0x2c0 [ 182.857918][ T8870] XFS (loop1): log mount failed [ 182.882467][ T5860] kill_block_super+0x44/0x90 [ 182.887217][ T5860] ext4_kill_sb+0x68/0xb0 [ 182.891578][ T5860] deactivate_locked_super+0xbc/0x130 [ 182.897038][ T5860] cleanup_mnt+0x425/0x4c0 [ 182.901479][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.907037][ T5860] task_work_run+0x1d4/0x260 [ 182.911660][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 182.916811][ T5860] ? __x64_sys_umount+0x122/0x160 [ 182.921868][ T5860] ? exit_to_user_mode_loop+0x40/0x130 [ 182.927401][ T5860] exit_to_user_mode_loop+0xec/0x130 [ 182.932708][ T5860] do_syscall_64+0x2bd/0xfa0 [ 182.937620][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.942858][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.949248][ T5860] ? clear_bhb_loop+0x60/0xb0 [ 182.953974][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.959924][ T5860] RIP: 0033:0x7ffb3bb8fed7 [ 182.965541][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 182.986102][ T5860] RSP: 002b:00007ffda7bdcc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.994951][ T5860] RAX: 0000000000000000 RBX: 00007ffb3bc11c05 RCX: 00007ffb3bb8fed7 [ 183.003004][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7bdcd40 [ 183.011030][ T5860] RBP: 00007ffda7bdcd40 R08: 0000000000000000 R09: 0000000000000000 [ 183.019375][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda7bdddd0 [ 183.027584][ T5860] R13: 00007ffb3bc11c05 R14: 000000000002c821 R15: 00007ffda7bdde10 [ 183.035599][ T5860] [ 183.038704][ T5860] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.046015][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 183.055492][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.065556][ T5860] Call Trace: [ 183.068854][ T5860] [ 183.071806][ T5860] dump_stack_lvl+0x99/0x250 [ 183.076434][ T5860] ? __asan_memcpy+0x40/0x70 [ 183.081043][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.086270][ T5860] ? __pfx__printk+0x10/0x10 [ 183.090898][ T5860] vpanic+0x237/0x6d0 [ 183.094896][ T5860] ? __pfx_vpanic+0x10/0x10 [ 183.099412][ T5860] ? is_bpf_text_address+0x292/0x2b0 [ 183.104726][ T5860] ? is_bpf_text_address+0x26/0x2b0 [ 183.109932][ T5860] panic+0xb9/0xc0 [ 183.113654][ T5860] ? __pfx_panic+0x10/0x10 [ 183.118084][ T5860] __warn+0x334/0x4c0 [ 183.122060][ T5860] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 183.128411][ T5860] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 183.134745][ T5860] report_bug+0x2be/0x4f0 [ 183.139081][ T5860] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 183.145418][ T5860] ? ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 183.151750][ T5860] ? ext4_xattr_inode_lookup_create+0xa87/0x1c20 [ 183.158082][ T5860] handle_bug+0x84/0x160 [ 183.162321][ T5860] exc_invalid_op+0x1a/0x50 [ 183.166826][ T5860] asm_exc_invalid_op+0x1a/0x20 [ 183.171676][ T5860] RIP: 0010:ext4_xattr_inode_lookup_create+0xa85/0x1c20 [ 183.178623][ T5860] Code: 8b 74 24 10 e9 d4 03 00 00 e8 37 b3 39 ff 48 89 df 48 c7 c6 8e 27 b8 8d ba bd 05 00 00 48 c7 c1 c0 dd bf 8b e8 ac 24 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d [ 183.198233][ T5860] RSP: 0018:ffffc9000402f3e0 EFLAGS: 00010246 [ 183.204297][ T5860] RAX: 38f22682966dda00 RBX: ffff8880310e0000 RCX: 38f22682966dda00 [ 183.212267][ T5860] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 183.220236][ T5860] RBP: ffffc9000402f570 R08: ffffc9000402efc7 R09: 1ffff92000805df8 [ 183.228202][ T5860] R10: dffffc0000000000 R11: fffff52000805df9 R12: 1ffff92000805e90 [ 183.236186][ T5860] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88805665bc20 [ 183.244183][ T5860] ? __pfx___might_resched+0x10/0x10 [ 183.249493][ T5860] ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10 [ 183.256115][ T5860] ? ext4_xattr_block_set+0xd6/0x2ac0 [ 183.261487][ T5860] ext4_xattr_block_set+0x223/0x2ac0 [ 183.266776][ T5860] ? __pfx___might_resched+0x10/0x10 [ 183.272058][ T5860] ? fs_reclaim_acquire+0x7d/0x100 [ 183.277194][ T5860] ? fs_reclaim_acquire+0x7d/0x100 [ 183.282343][ T5860] ? __pfx_check_xattrs+0x10/0x10 [ 183.287391][ T5860] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 183.293118][ T5860] ? ext4_xattr_block_find+0x2d4/0x350 [ 183.298592][ T5860] ext4_expand_extra_isize_ea+0x12da/0x1ea0 [ 183.304538][ T5860] __ext4_expand_extra_isize+0x30d/0x400 [ 183.310192][ T5860] __ext4_mark_inode_dirty+0x46c/0x700 [ 183.315660][ T5860] ext4_dirty_inode+0xd0/0x110 [ 183.320430][ T5860] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 183.325807][ T5860] __mark_inode_dirty+0x2e9/0xe10 [ 183.330842][ T5860] iput+0x1ee/0x9d0 [ 183.334668][ T5860] __dentry_kill+0x209/0x660 [ 183.339269][ T5860] ? shrink_kill+0x8d/0x2c0 [ 183.343781][ T5860] shrink_kill+0xa9/0x2c0 [ 183.348112][ T5860] shrink_dentry_list+0x2e0/0x5e0 [ 183.353145][ T5860] shrink_dcache_parent+0xa1/0x2c0 [ 183.358265][ T5860] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 183.363995][ T5860] ? call_rcu+0x6ff/0x9c0 [ 183.368327][ T5860] do_one_tree+0x23/0xe0 [ 183.372599][ T5860] shrink_dcache_for_umount+0xa0/0x170 [ 183.378082][ T5860] generic_shutdown_super+0x67/0x2c0 [ 183.383379][ T5860] kill_block_super+0x44/0x90 [ 183.388061][ T5860] ext4_kill_sb+0x68/0xb0 [ 183.392398][ T5860] deactivate_locked_super+0xbc/0x130 [ 183.397792][ T5860] cleanup_mnt+0x425/0x4c0 [ 183.402206][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.407417][ T5860] task_work_run+0x1d4/0x260 [ 183.412008][ T5860] ? __pfx_task_work_run+0x10/0x10 [ 183.417118][ T5860] ? __x64_sys_umount+0x122/0x160 [ 183.422144][ T5860] ? exit_to_user_mode_loop+0x40/0x130 [ 183.427608][ T5860] exit_to_user_mode_loop+0xec/0x130 [ 183.432904][ T5860] do_syscall_64+0x2bd/0xfa0 [ 183.437485][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.442690][ T5860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.448758][ T5860] ? clear_bhb_loop+0x60/0xb0 [ 183.453446][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.459343][ T5860] RIP: 0033:0x7ffb3bb8fed7 [ 183.463763][ T5860] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 183.483373][ T5860] RSP: 002b:00007ffda7bdcc88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 183.491793][ T5860] RAX: 0000000000000000 RBX: 00007ffb3bc11c05 RCX: 00007ffb3bb8fed7 [ 183.499772][ T5860] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda7bdcd40 [ 183.507751][ T5860] RBP: 00007ffda7bdcd40 R08: 0000000000000000 R09: 0000000000000000 [ 183.515732][ T5860] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda7bdddd0 [ 183.523708][ T5860] R13: 00007ffb3bc11c05 R14: 000000000002c821 R15: 00007ffda7bdde10 [ 183.531696][ T5860] [ 183.535029][ T5860] Kernel Offset: disabled [ 183.539359][ T5860] Rebooting in 86400 seconds..