last executing test programs: 7.690107632s ago: executing program 0 (id=4105): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0xf, [{{0x9, 0x4, 0x0, 0xf9, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x1, 0x90, 0x1, {0x22, 0x566}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x81, 0xff, 0x8}}}}}]}}]}}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0}) 6.34634219s ago: executing program 0 (id=4117): syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22890b09050c02"], 0x0) 4.619869299s ago: executing program 0 (id=4127): syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpquota}, {@grpquota}, {@dax}]}, 0x1, 0xb9a1, &(0x7f0000017200)="$eJzs3WuMXGX9wPFntrvbLqRQ/qHl8hcplQIFabttoRSC3W3pluVSbgW3QIVKF6i0XErBlusSQgIqBjBeiGmUiNcoUSxEomA1olwsxhggviASMAZMGn0Fagxrzs6F3WEY3Wf7PJvSzyfpnjln9ne6M995zoSG7PT1nLckhNZQNhDqvfTW1ic/t7rnqZ98/oHtj9z9wqPlo12TKnd3Vbbdle2SMHSyocMt5UOtX9n2WEux0zL8vHt1dJT2CeGyuvMsLG9u7qx+32CdyuHp1ftbarulz5T/1OxdfPlt1+o1IYQpw+ZLIYS573mge6i+7uU9leckDOs2oXJ36d37hrat5T+Lnwth8fbwvq+PcVX8nFN6Jn/04PH+QXYHfd3Le+v6d1U6lyrrsat+De6J6l/nrz88+67KUzj0ehvHhGPS191zRmiyjo/798UzB8vXzbYQQnsIYWIIYdJ492DX6F4yv3jPbqnuV7JX1/+URq+LI+e9/s8QwrTibbx8vSi/FwC7l+4l85c2WP/tzdb/oju3vWn9w+6vt3vJ/GKt163/Sc3W/7pFq14sr/uuheWpd8b3QQAAAAAADV2/5aar1qxf37/RDTfccKN2Y7yvTEBq7y768f5JAAAAAAAAAAAAgP9Vjv+deLwfIwAAAAAAAAAAAAB8UPSu6N45oTTi0IThO4fs6B/aLni778pv3zu4trqt3H16g1OO+Jz/wcHBwUU7F1c+i729erj6edmT6oeL8w+0vv1MZber/vMH24aOtoVLL1+3vn9u8VctbQubi53O4lH0tIX7ip15xc7ytvCdYmf+0E5H2F7szL7smvVriwOnRjxbHzy9KwbChBHFwohXw/D+A20ztle3TU5ZPVtrqPTff//zN9bdV9W4/7vn736/zyVn1xhd/9mbq9smp3zP+j/ojZU/a3Tf+/evnX+J/mk1uP6PaFR/3a+7/k9vcMra/LSXnrmy6P/4U3evrByqfa58Zb9h/2HnX1rff+jktet/capTqtf/iSGEZWN6MvZAvSvu2Nls/Tfv31p5X681Lw3vf8ZJLywq+u8za9sfKofaRtn/lGbrvzT9PdcTRql3xUODdet/FP3DEQ1OWWvy5ZdPe67o/8NnVk4ddt9o+i+r7z9n04Zr51y/5aZj121Yc0X/Ff1XL5y74ITjOxcu6JwzdEUofx3bc7InGdv6H/r8/+EzpRBm1uZnHv/OhUX/ad/o6ascmjTK/j1N1/+lI39WhpnREtrbw+Y1mzZt7Cx/re7OK38tf1uD/qN4///IUZVv66hsSyEcWJtfeMDUA4v+Uycs+1DlUPso+y9v2n+g9vcSaYzrf23dzIj+A88/9OOi/4zvXVD9N4XRvv+f2qx/y9et/7HqXVH3Dz67WNH/z62zTowc7/Xff2nl6P/z/WeeFzl+mv5p5eh/4/8ftily/HT908rRv2PByXdEjp+hf1o5+m8/adG3IsfP1D+tHP2/esxxv4scX6F/Wjn6n3t45xuR42fpn1aO/n/5vy0XRY6frX9aOfrPOeTWWyLHz9E/rSb9z9p7F5y/6L9p8nVTI8fP1T+tHOv/yZYb5kWOn6d/Wjn6//LYdb+JHF+pf1o5+u89Y8OrkePn659Wjv5nz1tzT+T4BfqnlaP/gyf3PxI5/nH908rR/5KDH7s8crxP/7Ry9P/S1B91R46v0j+tHP13tD15VOT4hfqnlaN/615P7Bs5fpH+aeXof/PMb/4rcvxi/dPK0f/Rox96JXJ8tf5p5ej/5ok/2BY5/gn908rRf/px3/1C5Pgl+qeVo/+1h/3+5cjxS/VPK0f/J2a/+PfI8TX6p5Wj/2sf++ODkeOf1D+tHP2P6Xzlqcjxy/RPK0f/lR/+RaPfE/TfZ0sh6J9Wjv5b93t6feR4v/5p5ej/69KzbZHjl+ufVo7+++6zY0bk+BX6p5Wj/7OzDvlr5PiV+qeVo3844qAdkePr9E8rR/+Ljp/6cOT4p/RPK0f/Bxbtd2fk+FX6p5Wj/85pk2+MHF+vf1o5+h9+UMc5keMb9E8rR//bO9pOiBy/Wv+0cvR/vL10aOT4NfqnlaN/y9ze70eOX6t/Wjn6P7/4zM9Gjl+nf1o5+t83p/u1yPGN+qeVo/+q6cuejhy/Xv+0cvQ/Yt9Vsb+RfZP+aeXo/7ew+oDI8Rv0TytH/21TzrktcvxG/dPK0f/WQ89fFTn+6Zfe2jox6J9Mjv4/PeGu+yPHN1v/aeXov3HhHY9Hjm/RP60c/Wcdee+fIsdv0j+tHP1fPeqef0SO36x/Wjn6f23iFydHjt+if1o5+l8w6f6jI8dv1T+tHP0nH7h1aeT4bfqnlaP/rw54cG3k+O36AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/IcdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cCr+lY+H/8zJjFFlLWItlLdllSGGQpLdZk35esoayFqJAtKUrKmq0kSySk3U5lKylFtJBWSpj/a8wS4zvT1L+M33zf79dr5jzLPc9cz/W5r+ecOfd57gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP++jddYf9WBgSFjrh3yvPvvfOzUq4/efI1rrjj2hGsvPOKWi0ffusrUY+5eZeR4Bp55sFVG3Td49CZDTr707MGjrgx+9uNOO800g2YYGLRtHtWBW/yLYc8z9sLgcVcHHTX61zjTPfO3z7T1RQMDAzP9i8ertfGINdcYNXmjf43rNtWYu8fcPu7ykNG/VtxyYGDFzQYmuH9Mfk9tuMa6k3sM/xdsPGLNtcfrPzCm8zPdx1/frcbfz6c6fLNBkzXcf8nGI9ZYZ1TrCa3j/fY99pl9YGBgyGkDA0NOHxgYcsbAwJAzJ3cP/jtGrLr0qqNe88deH139kLFfEKTX90FPvO3SUZ8zho7+PDHkrLGfC4D/W0asuvRqYf0PG3t/Wv8PPHn/RtY//N+39ohVlx541tf5o289ZOy/7+P6X2muq+6dfCMGAAAA/l1PP3LlNWOO9Q0eGJh7YLzjvc8Y832BQRdde9ttk22gLw7hONnzf2bi/5hRnac+f56Bgd03nNxDYTKYIo5j8x/Tv5v+3fTvpn83/bvp303/bvp307+b/t3076Z/N/2LTeD4/0xjPx401WWrj9l0gdtP3GWD8f/8qNumfsFHPdlMqcf/B3YeNLrlqOY7DwwMvH3EehssPDAwsMEuJ94+78C4+5Yfdd+KM0815gQBCz/z+5sn8MBj303+zMkaph33GBc98/hrjzx9qkHjDeJZtht5zDk7bfz4MuN/XHDCz2Pc+SVueMtdJ419L8vg8Taa0L469vHHPpfxO48Z+8Kjxr74Prvtufje+x+w6M67bb3j9jtuv/tySyyz/LJLLrfMkovvsPOu2y8x+vcJzdnoU1esNilzNmz8OXtkxLPnbPznNqE5m2fic/bMI+503Z2zjp2zIf/mnK028TmbZ+exY11l6MBWz8zNqL9y9aED+426suTwUbvQmG1nH7XtG2cePDBw/D+f6KhLw8ftg4MO2fm/cN6SMR9HjPm4ajxvyWUTOm/JwLbjPc4Koz/sc/XY7cZ/n/WYmyf5vCUrrXHYQqPW4nh//n/hP/r8/7xeyw8aN1FjTxoyZpvRvf55nomx07bKs84zsVw6l8x/0/PGO8/gcft1Gu+Y98UNGm/+J/a+uIGFH9jqgtHPa5XlRv+pp//jKPm1Y51/zl7wnNeOgYm/dkz1z4v/vHX7m+ca/7XjrRMe4nPWxdg5Gj7eRhN67bju8SGHjHr8sWOewGvHOjuPeaPxP187Rv21q4197Rg19jWGDhw/6spSo66sOXTg3FFXln7myjQD1466sti2e+y63agb1nr+frvwoOf8wGPYb9cYb7+dhPPjrHzDwMDK16bnNeHpzNJ+O2wi483v5x6Y6Pu5FzryyfUHBgZmHf1ZetSTHD32/0Qa75CJjzecf2JgYuefGFhh+QtW+y+Pd9w6e2ZfG3O6qLUm8Gees85met46O3SqZ62MSf26Zruw/ejLs497tEtOv/GQsXM0dLzH/Vefo8c+l9R/7Nd8zzb4tIFBE5ubNSdlbmaY+NxM6tcvC883+v5pJjI3s88y23Jj52bYvzk3a05gbp799fCzDTpkYJrnzs2QZ74Gnn/M3KwxKXMz/X9nv5k2bD/68gLjbtrk6WUXGDs3YS7i5/+xj7/Gvzs3W43bb+Z/5r55Bw8MGzaw39b77LPXkqN/H3t1qdG/T3wNrj4pczn1f2cu5xzzqjP4+ZMz7qYVbllxnf90Da7+787lPAODx/6be+fxF8t/j+//dNO/m/7d9O+mfzf9u+nfTf9iEzj+P8/Y7wsucvPCt435ZszQ6y/YaLvJPd7JbIo+/j+m73OO/2+30QXXDx4Yd99Ej8+O3uZFeXx2udEfDlxy7HbjHx8cc/MkH5+96rgrNnuBjs/+R8au1Un4vqHX/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn+xCRz/X2LszwE8/fA+9405EDp0mxFz/Mfvs5pCTNHH/8f0fc7x/2vnGLHN4IFx9030+P/obTqO/+91z4OHvZiP/49dq47/8y/o303/bvp307+b/t3076Z/N/276d9N/24T6n/LYi/wQJgsrP9u+hebwPH/Vcb+HMCuT9/x6NifB7j1lFX3mNzjncym1OP//v//Xl7/u+nfTf9u+nfTv5v+3fTvpn83/bvpD72s/276d9O/2Jjj/wPj/beH77RfROH4//9tE+i/rv5RS//19I9a+q+vf9TSfwP9o5b+G+oftfTfSP+opf+79I9a+m+sf9TS/936Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/7fSPWvpvr3/03P5TwAxNoP8O+kct639H/aOW/jvpH7X031n/qKX/e/SPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6f9e/aOW/nvpH7X031v/qKX/PvpHLf3fp3/U0v/9+kct/ffVP2rpv5/+UUv//fWPWvofoH/U0v9A/aOW/gfpH7X0/4D+UUv/D+oftfQ/WP+opf8h+kct/Q/VP2rp/yH9o5b+h+kftfQ/XP+opf+H9Y9a+n9E/6il/0f1j1r6H6F/1NL/SP2jlv5H6R+19P+Y/lFL/6P1j1r6H6N/1NL/WP2jlv7H6R+19D/+ef2neUGH9WLV0v/j1n/U0v8E/aOW/p/QP2rpf6L+UUv/T+oftfT/lP5RS/+T9I9a+p+sf9TS/9P6Ry39P6N/1NL/FP2jlv6f1T9q6X+q/lFL/8/pH7X0/7z+UUv/0/SPWvqfrn/U0v8M/aOW/mfqH7X0P0v/qKX/2fpHLf2/oH/U0v8c/aOW/ufqH7X0P0//qKX/+fpHLf0v0D9q6f9F/aOW/l/SP2rpf6H+UUv/L+sftfS/SP+opf9X9I9a+l+sf9TS/xL9o5b+l+oftfS/TP+opf9X9Y9a+l+uf9TS/wr9o5b+X9M/aul/pf5RS/+v6x+19L9K/6il/9X6Ry39r9E/aun/Df2jlv7X6h+19P+m/lFL/2/pH7X0/7b+UUv/7+gftfT/rv5RS//v6R+19P++/lFL/+v0j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aul/q/5RS//b9I9a+v9A/6il/w+b+i8w6Zu29P9RU/9/Q0v/2/WPWvrfoX/U0v9O/aNx/WeasvvfpX/Usv7v1j9q6f9j/aOW/j/RP2rpf4/+UUv/n+oftfS/V/+opf/P9I9a+v9c/6il/336Ry39f6F/1NL/l/pHLf3v1z9q6f+A/lFL/1/pH7X0f1D/qKX/Q/pHLf1/rX/U0v83+kct/X+rf9TS/3f6Ry39H9Y/aun/iP5RS//f6x+19H9U/6il/x/0j1r6/1H/qKX/n/SPWvr/Wf+opf9f9I9a+v9V/6il/2P6Ry39H9c/aun/N/2jlv5/1z9q6f+E/lFL/3/oH7X0f1L/qKX/U/pHLf2f1j9q6T9S/6ik/6AB/aOW/oP0j1r6D9Y/auk/lf5RS/8h+kct/YfqH7X0H6Z/1NJ/uP5RS/+p9Y9a+k+jf9TSf1r9o5b+0+kftfSfXv+opf9L9I9a+s+gf9TSf0b9o5b+M+kftfR/qf5RS/+Z9Y9a+r9M/6il/8v1j1r6z6J/1NJ/Vv2jlv6z6R+19J9d/6il/xz6Ry3959Q/aun/Cv2jlv6v1D9q6T+X/lFL/7n1j1r6v0r/qKX/PPpHLf1frX/U0n9e/aOW/vPpH7X0n1//qKX/AvpHLf0X1D9q6b+Q/lFL/4X1j1r6v0b/qKX/a/WPWvovon/U0v91+kct/RfVP2rpv5j+UUv/xfWPWvovoX/U0n9J/aOW/kvpPzzd2NJ/af2jlv7L6B+19H+9/lFL/2X1j1r6L6d/1NJ/ef2jlv4r6B+19H+D/lFL/xX1j1r6v1H/qKX/m/SPWvqvpH/U0n9l/aOW/qvoH7X0H6F/1NJ/Vf2jlv6r6R+19F9d/6il/5v1j1r6r6F/1NJ/Tf2jlv5r6R+19F9b/6il/1v0j1r6v1X/qKX/OvpHLf3fpn/U0v/t+kct/d+hf9TS/536Ry3919U/aum/nv5RS//19Y9a+m+gf9TSf0P9o5b+G+kftfR/l/5RS/+N9Y9a+r9b/6il/yb6Ry39N9U/aum/mf5RS//N9Y9a+m+hf9TSf0v9o5b+W+kftfTfWv+opf82+kct/bfVP2rpv53+UUv/7fWPWvrvoH/U0n9H/aOW/jvpH7X031n/qKX/e/SPWvrvon/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6f9e/aMpt/+g5/TfS/9oyu3/3PW/t/5RS/999I9a+r9P/6il//v1j1r676t/1NJ/P/2jlv776x+19D9A/6il/4H6Ry39D9I/aun/Af2jlv4f1D9q6X+w/lFL/0P0j1r6H6p/1NL/Q/pHLf0P0z9q6X94Tf+Rox08aVu39P9wTf9/T0v/j+gftfT/qP5RS/8j9I9a+h+pf9TS/yj9o5b+H9M/aul/tP5RS/9j9I9a+h+rf9TS/zj9o5b+x+sftfT/uP5RS/8T9I9a+n9C/6il/4n6Ry39P6l/1NL/U/pHLf1P0j+acvsPfvatg07WP5py+z93/X9a/6il/2f0j1r6n6J/1NL/s/pHLf1P1T9q6f85/aOW/p/XP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0P1v/qKX/F/SPWvqfo3/U0v9c/aOW/ufpH7X0P1//qKX/BfpHLf2/qH/U0v9L+kct/S/UP2rp/2X9o5b+F+kftfT/iv5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfT/qv5RS//LJ6H/mP85ZeT/cngvNi39r7D+o5b+X9M/aul/pf5RS/+v6x+19L9K/6il/9X6Ry39r9E/aun/Df2jlv7X6h+19P+m/lFL/2/pH7X0/7b+UUv/7+gftfT/rv5RS//v6R+19P++/lFL/+v0j1r6X69/1NL/Bv2jlv436h+19L+pr/8k/SBrS/+b+/pPkpb+t+gftfS/Vf+opf9t+kct/X+gf9TS/4f6Ry39f6R/1NL/dv2jlv536B+19L9T/6il/136Ry3979Y/aun/Y/2jlv4/0T9q6X+P/lFL/5/qH7X0v1f/qKX/z/SPWvr/XP+opf99+kct/X+hf9TS/5f6Ry3979c/aun/gP5RS/9f6R+19H9Q/6il/0P/ov/I4f/rgb04tfT/tfUftfT/jf5RS//f6h+19P+d/lFL/4f1j1r6P6J/1NL/9/pHLf0f1T9q6f8H/aOW/n/UP2rp/yf9o5b+f9Y/aun/F/2jlv5/1T9q6f+Y/lFL/8f1j1r6/03/qKX/3/WPWvo/oX/U0v8f+kct/Z/UP2rp/5T+UUv/p/WPWvqP1D8q6f/MRf2fr6X/IP2jlv6D9Y9a+k+lf9TSf4j+UUv/ofpHLf2H6R+19B+uf9TSf2r9o5b+0+gftfSfVv+opf90+kct/afXP2rp/xL9o5b+M+gftfSfUf+opf9M+kct/V+qf9TSf2b9o5b+L9M/aun/cv2jKbL/0OfdOngW/aMpsv+Yi89e/7PqH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/1foH7X0f6X+UUv/ufSPWvrPrX/U0v9V+kct/efRP2rp/2r9o5b+8+oftfSfT/+opf/8+kct/RfQP2rpv6D+0RTY/6FhYy4+u/9C+kdTYP+4/hfWP2rp/xr9o5b+r9U/aum/iP5RS//X6R+19F/0X/UfefD/eGAvTi39F7P+o5b+i+sftfRfQv+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvq/Xv+opf+y+kct/ZfTP2rpv7z+UUv/Fdr7D843t/R/Q3v/CWjpv6L+UUv/N+oftfR/k/5RS/+V9I9a+q+sf9TSfxX9o5b+I/SPWvqvqn/U0n81/aOW/qvrH7X0f7P+UUv/NfSPWvqvqX/U0n8t/aOW/mvrH7X0f4v+UUv/t+oftfRfR/+opf/b9I9a+r9d/6il/zv0j1r6v1P/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv7v0j9q6b+x/lFL/3frH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfR/j/5RS/9d9I9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf+e+kct/d+rf9TSfy/9o5b+e+sftfTfR/+opf/79I9a+r9f/6il/776Ry3999M/aum/v/5RS/8D9I9a+h+of9TS/yD9o5b+H9A/aun/wUnr/+T/bFwvUi39D7b+o5b+h+gftfQ/VP+opf+H9I9a+h+mf9TS/3D9o5b+H9Y/aun/Ef2jlv4f1T9q6X+E/lFL/yP1j1r6H6V/1NL/Y/pHLf2P1j9q6X+M/lFL/2P1j1r6H6d/1NL/eP2jlv4f1z9q6X+C/lFL/0/oH7X0P1H/qKX/J/WPWvp/Sv+opf9J+kct/U/WP2rp/2n9o5b+n9E/aul/iv5RS//P6h+19D9V/6il/+f0j1r6f17/qKX/afpHLf1P1z9q6X+G/lFL/zP1j1r6n6V/1NL/bP2jlv5f0D9q6X+O/lFL/3P1j1r6n6d/1NL/fP2jlv4X6B+19P+i/lFL/y/pH7X0v1D/qKX/l/WPprz+04y7+Oz+F+kfTXn98/r/iv5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfT/qv5RS//L9Y9a+l+hf9TS/2v6Ry39r9Q/aun/df2jlv5X6R+19L9a/6il/zX6Ry39v6F/NLr/kIEpvf+1+kct6/+b+kct/b+lf9TS/9v6Ry39v6N/1NL/u/pHLf2/p3/U0v/7+kct/a/TP2rpf73+UUv/G/SPWvrfqH/U0v8m/aOW/jfrH7X0v0X/qKX/rfpHLf1v0z9q6f8D/aOW/j/UP2rp/yP9o5b+t+sftfS/Q/+opf+d+kct/e/SP2rpf7f+UUv/H+sftfT/if5RS/979I9a+v9U/6il/736Ry39f6Z/1NL/5/pHLf3v0z9q6f8L/aOW/r/UP2rpf7/+UUv/B/SPWvr/Sv+opf+D+kct/R/SP2rp/2v9o5b+v9E/aun/W/2jlv6/0z9q6f+w/lFL/0f0j1r6/17/qKX/o/pHLf3/oH/U0v+P+kct/f+kf9TS/8/6Ry39/6J/1NL/r/pHLf0f0z9q6f+4/lFL/7/pH7X0/7v+UUv/J/SPWvr/Q/+opf+T+kct/Z/Sf7TlTnjO1Zb+T+sftfQfqX9U0n+qAf2jlv6D9I9a+g/WP2rpP5X+UUv/IfpHLf2H6h+19B+mf9TSf7j+UUv/qfWPWvpPo3/U0n9a/aOW/tPpH7X0n17/qKX/S/SPWvrPoH/U0n9G/aOW/jPpH7X0f6n+UUv/mfWPWvq/TP+opf/L9Y9a+s+if9TSf1b9o5b+s+kftfSfXf+opf8c+kct/efUP2rp/wr9o5b+r9Q/auk/l/5RS/+59Y9a+r9K/6il/zz6Ry39X61/1NJ/Xv2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+r9G/6il/2v1j1r6L6J/1NL/dfpHLf0X1T9q6b+Y/lFL/8X1j1r6L6F/1NJ/ydH9h0+uYb1YtfRfyvqPWvovrX/U0n8Z/aOW/q/XP2rpv6z+UUv/5fSPWvovr3/U0n8F/aOW/m/QP2rpv6L+UUv/N+oftfR/k/5RS/+V9I9a+q+sf9TSfxX9o5b+I/SPWvqvqn/U0n81/aOW/qvrH7X0f7P+UUv/NfSPWvqvqX/U0n8t/aOW/mvrH7X0f4v+UUv/t+oftfRfR/+opf/b9I9a+r9d/6il/zv0j1r6v1P/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv7v0j9q6b+x/lFL/3frH7X030T/qKX/ps/t/8TIF3xgL04t/Tez/qOW/pvrH7X030L/qKX/lvpHLf230j9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/476Ry39d9I/aum/s/5RS//36B+19N9F/6il/676Ry39d9M/aum/u/5RS/899I9a+u+pf9TS/736Ry3999I/aum/t/7/dPk/L7b030f/qKX/+/SPWvq/X/+opf+++kct/ffTP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/h/QP2rp/0H9o5b+B+sftfQ/RP+opf+h+kct/T+kf9TS/zD9o5b+h+sftfT/sP5RS/+P6B+19P+o/lFL/yP0j1r6H6l/1NL/KP2jlv4f0z9q6X+0/lFL/2P0j1r6H6t/1NL/OP2jlv7H6x+19P+4/lFL/xP0j1r6f0L/qKX/ifpHLf0/qX/U0v9T+kct/U/SP2rpf7L+UUv/T+sftfT/jP5RS/9T9I9a+n9W/6il/6n6Ry39P6d/1NL/8/pHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19P+C/lFL/3P0j1r6n6t/1NL/PP2jlv7n6x+19L9A/6il/xf1j1r6f0n/qKX/hfpHLf2/rH/U0v8i/aOW/l/RP2rpf7H+UUv/S/SPWvpfqn/U0v8y/aOW/l/VP2rpf7n+UUv/K/SPWvp/Tf+opf+V+kct/b+uf9TS/yr9o5b+V+sftfS/Rv+opf839I9a+l+rf9TS/5v6Ry39v6V/1NL/2/pHLf2/o3/U0v+7+kct/b+nf9TS//v6Ry39r9M/aul/fV3/uydpq5b+N9T1/9eGFfW/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v8H+kct/X+of9TS/0f6Ry39b9c/aul/h/5RS/879Y9a+t+lf9TS/279o5b+P9Y/aun/E/2jlv736B+19P+p/lFL/3v1j1r6/0z/qKX/z/WPWvrfp3/U0v8X+kct/X+pf9TS/379o5b+D+gftfT/lf5RS/8H9Y9a+j+kf9TS/9f6Ry39f6N/1NL/t/pHLf1/N7nG8yLX0v9h6z9q6f+I/lFL/9/rH7X0f1T/qKX/H/SPWvr/Uf+opf+f9I9a+v9Z/6il/1/0j1r6/1X/qKX/Y/pHLf0f1z9q6f83/aOW/n/XP2rp/4T+UUv/f+gftfR/Uv+opf9T+kct/Z/WP2rpP1L/qKT/kAH9o5b+g/SPWvoP1j9q6T+V/lFL/yH6Ry39h+oftfQfpn/U0n+4/lFL/6n1j1r6T6N/1NJ/Wv2jlv7T6R+19J9e/6il/0v0j1r6z6B/1NJ/xon1v/YFGNeLVEv/maz/qKX/S/WPWvrPrH/U0v9l+kct/V+uf9TSfxb9o5b+s+oftfSfTf+opf/s+kct/efQP2rpP6f+UUv/V+gfDSvp/0r9o5b1P5f+UUv/ufWPWvq/Sv+opf88+kct/V+tf9TSf179o5b+8+kftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvq/Rv+opf9r9Y9a+i+if9TS/3X6Ry39F9U/aum/mP5RS//F9Y9a+i+hf9TSf0n9o5b+S+kftfRfWv+opf8y+kct/V+vf9TSf1n9o5b+y+kftfRfXv+opf8K+kct/d+gf9TSf0X9o5b+b9Q/aun/Jv2jlv4r6R+19F9Z/6il/yr6Ry39R+gftfRfVf+opf9q+kct/VfXP2rp/2b9oymu/6BDYv819I+muP4TWP9r6h+19F9L/6il/9r6Ry3936J/1NL/rfpHLf3X0T9q6f82/aOW/m/XP2rp/w79o5b+79Q/aum/rv5RS//19I9a+q+vf9TSfwP9o5b+G+oftfTfSP+opf+79I9a+m+sf9TS/936Ry39N9E/aum/qf5RS//N9I9a+m+uf9TSfwv9o5b+W+oftfTfSv+opf/W+kct/bfRP2rpv63+UUv/7fSPWvpvr3/U0n8H/aOW/jvqH7X030n/qKX/zvpHLf3fo3/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL//fqH7X030v/qKX/3vpHLf330T9q6f8+/aOW/u/XP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH43X//GRI0dO7iH9/5lA/4P0j1rW/wf0j1r6f1D/qKX/wfpHLf0P0T9q6X+o/lFL/w/pH7X0P0z/qKX/4fpHLf0/rH/U0v8j+kct/T+qf9TS/wj9o5b+R+oftfQ/Sv+opf/H9I9a+h+tf9TS/xj9o5b+x+oftfQ/Tv+opf/x+kct/T+uf9TS/wT9o5b+n9A/aul/ov5RS/9P6h+19P+U/lFL/5P0j1r6n6x/1NL/0/pHLf0/o3/U0v8U/aOW/p/VP2rpf6r+UUv/z+kftfT/vP5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/b+gf9TS/xz9o5b+5+oftfQ/T/+opf/5+kct/S/QP2rp/0X9o5b+X9I/aul/of5RS/8v6x+19L9I/6il/1f0j1r6X6x/1NL/Ev2jlv6X6h+19L9M/6il/1f1j1r6X65/1NL/Cv2jlv5f0z9q6X+l/lFL/6/rH7X0v0r/qKX/1fpHLf2v0T9q6f8N/aOW/tfqH7X0/6b+UUv/b+kftfT/tv5RS//v6B+19P+u/lFL/+/pH7X0/77+UUv/6/SPWvpfr3/U0v8G/aOW/jfqH7X0v0n/qKX/zfpHLf1v0T9q6X+r/lFL/9v0j1r6/0D/qKX/D/WPWvr/SP+opf/t+kct/e/QP2rpf6f+UUv/u/SPWvrfrX/U0v/H+kct/X+if9TS/x79o5b+P9U/aul/r/5RS/+f6R+19P+5/lFL//v0j1r6/0L/qKX/L/WPWvrfr3/U0v8B/aOW/r/SP2rp/6D+UUv/h/SPWvr/Wv+opf9v9I9a+v9W/6il/+/0j1r6P6x/1NL/Ef2T81r6/17/qKX/o/pHLf3/oH/U0v+P+kct/f+kf9TS/8/6Ry39/6J/1NL/r/pHLf0f0z9q6f+4/lFL/7/pH7X0/3tr/80mfndL/yda+/8LLf3/oX/U0v9J/aOW/k/pH7X0f1r/qKX/SP2jkv5DB/SPWvoP0j9q6T9Y/6il/1T6Ry39h+gftfQfqn/U0n+Y/lFL/+H6Ry39p9Y/auk/jf5RS/9p9Y9a+k+nf9TSf3r9o5b+L9E/auk/g/5RS/8Z9Y9a+s+kf9TS/6X6Ry39Z9Y/aun/Mv2jlv4v1z9q6T+L/lFL/1n1j1r6z6Z/1NJ/dv2jlv5z6B+19J9T/6il/yv0j1r6v1L/qKX/XPpHLf3n1j9q6f8q/aOW/vPoH7X0f7X+UUv/efWPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6f8a/aOW/q/VP2rpv4j+UUv/1+kftfRfVP+opf9i+kct/RfXP2rpv4T+UUv/JfWPWvovpX/U0n9p/aOW/svoH7X0f73+UUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0f4P+UUv/FfWPWvq/Uf+opf+b9I9a+q+kf9TSf2X9o5b+q+gftfQfoX/U0n9V/aOW/qvpH7X0X13/qKX/m/WPWvqvoX/U0n9N/aOW/mvpH7X0X1v/qKX/W/SPWvq/Vf+opf86+kct/d+mf9TS/+36Ry3936F/1NL/nfpHLf3X1T+aMvuPnHFgvP7r6R9Nmf1He3b/9fWPWvpvoH/U0n9D/aOW/hvpH7X0f5f+UUv/jfWPWvq/W/+opf8m+kct/TfVP2rpv5n+UUv/zfWPWvpvoX/U0n9L/aOW/lvpH7X031r/qKX/NvpHLf231T9q6b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19N9Z/6il/3v0j1r676J/1NJ/V/2jlv676R+19N9d/6il/x76Ry3999Q/aun/Xv2jlv576R+19N9b/6il/z76Ry3936d/1NL//fpHLf331T9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19P+A/tHUAx39P6h/1LL+D9Y/aul/iP5RS/9D9Y9a+n9I/6il/2H6Ry39D9c/aun/Yf2jlv4f0T9q6f9R/aOW/kfoH7X0P1L/qKX/UfpHLf0/pn/U0v9o/aOW/sfoH7X0P1b/qKX/cfpHLf2P1z9q6f9x/aOW/ifoH7X0/4T+UUv/E/WPWvp/Uv+opf+n9I9a+p+kf9TS/2T9o5b+n55I/5HDX4iBvTi19P+M9R+19D9F/6il/2f1j1r6n6p/1NL/c/pHLf0/r//zTdPT/zT9o5b+p+sftfQ/Q/+opf+Z+kct/c/SP2rpf7b+UUv/L+gftfQ/R/+opf+5+kct/c/TP2rpf77+UUv/C/SPWvp/Uf+opf+X9I9a+l+of9TS/8v6Ry39L9I/aun/Ff2jlv4X6x+19L9E/6il/6X6Ry39L9M/aun/Vf2jlv6X6x+19L9C/6il/9f0j1r6X6l/1NL/6/pHLf2v0j9q6X+1/lFL/2v0j1r6f0P/qKX/tfpHLf2/qX/U0v9b+kct/b+tf9TS/zv6Ry39v6t/1NL/e/pHLf2/r3/U0v86/aOW/tfrH7X0v0H/qKX/jfpHLf1v0j9q6X+z/lFL/1v0j1r636p/1NL/Nv2jlv4/0D9q6f9D/aOW/j/SP2rpf7v+UUv/O/SPxvRfeUrvf6f+Ucv6v0v/qKX/3fpHLf1/rH/U0v8n+kct/e/RP2rp/1P9o5b+9+oftfT/mf5RS/+f6x+19L9P/6il/y/0j1r6/1L/qKX//fpHLf0f0D9q6f8r/aOW/g/qH7X0f0j/qKX/r/WPWvr/Rv+opf9v9Y9a+v9O/6il/8P6Ry39H9E/aun/e/2jlv6P6h+19P+D/lFL/z/qH7X0/5P+UUv/P+sftfT/i/5RS/+/6h+19H9M/6il/+P6Ry39/6Z/1NL/7/pHLf2f0D9q6f8P/aOW/k/qH7X0f0r/qKX/0/pHLf1H6h+V9B82oH/U0n9QX//Bk7JRS//Bff0nSUv/qfSPWvoP0T9q6T9U/6il/zD9o5b+w/WPWvpPrX/U0n8a/aOW/tPqH7X0n07/qKX/9PpHLf1fon/U0n8G/aOW/jPqH7X0n0n/qKX/S/WPWvrPrH/U0v9l+kct/V+uf9TSfxb9o5b+s+oftfSfTf+opf/s+kct/efQP2rpP6f+UUv/V+gftfR/pf5RS/+59I9a+s+tf9TS/1X6Ry3959E/aun/av2jlv7z6h+19J9P/6il//z6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TS/zX6R1Nq/yHj9X+t/tGU2n9gvP6L6B+19H+d/lFL/0X1j1r6L6Z/1NJ/cf2jlv5L6B+19F9S/6il/1L6Ry39l9Y/aum/jP5RS//X6x+19F9W/6il/3L6Ry39l9c/aum/gv5RS/836B+19F9R/6il/xv1j1r6v0n/qKX/SvpHLf1X1j9q6b+K/lFL/xH6Ry39V9U/aum/mv5RS//V9Y9a+r9Z/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+r9F/6il/1v1j1r6r6N/1NL/bfpHLf3frn/U0v8d+kct/d+pf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/d+kftfTfWP+opf+79Y9a+m+if9TSf1P9o5b+m+kftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r6v0f/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NJ/T/2jlv7v1T9q6b+X/lFL/731j1r676N/1NL/ffpHLf3fr3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/w/oH7X0/6D+UUv/g/WPWvofon/U0v9Q/aOW/h/SP2rpf5j+UUv/w/WPWvp/WP+opf9H9I9a+n9U/6il/xH6Ry39j9Q/aul/lP5RS/+P6R+19D9a/6il/zH6Ry39j9U/aul/nP5RS//j9Y9a+n9c/6il/wn6Ry39P6F/1NL/RP2jlv6f1D9q6f8p/aOW/ifpH7X0P1n/qKX/p/WPWvp/Rv+opf8p+kct/T+rf9TS/1T9o5b+n9M/aun/ef2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+n9B/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+l+gf9TS/4v6Ry39v6R/1NL/Qv2jlv5f1j9q6X+R/lFL/6/oH7X0v1j/qKX/JfpHLf0v1T9q6X+Z/lFL/6/qH7X0v1z/qKX/FfpHLf2/pn/U0v9K/aOW/l/XP2rpf5X+UUv/q/WPWvpfo3/U0v8b+kct/a/VP2rp/039o5b+39I/aun/bf2jlv7f0T9q6f9d/aOW/t/TP2rp/339o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0/4H+UUv/H+oftfT/kf5RS//b9Y9a+t+hf9TS/079o5b+d+kftfS/W/+opf+P9Y9a+v9E/6il/z36Ry39f6p/1NL/Xv2jlv4/0z9q6f9z/aOW/vfpH03J/Z/Ve9gv9I+m5P7PXv+/1D9q6X+//lFL/wf0j1r6/0r/qKX/g/pHLf0f0j9q6f9r/aOW/r/RP2rp/1v9o5b+v9M/aun/sP5RS/9H9I9a+v9e/6il/6P6Ry39/6B/1NL/j/pHLf3/pH/U0v/P+kct/f+if9TS/6/6Ry39H9M/aun/uP5RS/+/6R+19P+7/lFL/yf0j1r6/0P/qKX/k/pHLf2f0j9q6f+0/lFL/5H6RyX9hw/oH7X0H6R/1NJ/sP5RS/+p9I9a+g/RP2rpP1T/qKX/MP2jlv7D9Y9a+k+tf9TSfxr9o5b+0+oftfSfTv+opf/0+kct/V+if9TSfwb9o5b+M+oftfSfSf+opf9LJ9p/yP9+XC9SLf1ntv6jlv4v0z9q6f9y/aOW/rPoH7X0n1X/qKX/bPpHLf1n1z9q6T+H/lFL/zn1j1r6v0L/qKX/K/WPWvrPpX/U0n9u/aOW/q/SP2rpP4/+UUv/V+sftfSfV/+opf98+kct/efXP2rpv4D+UUv/BfWPWvovpP/4Zhgo6r+w/lFL/9foH7X0f63+UUv/RfSPWvq/Tv+opf+i+kct/RfTP2rpv7j+UUv/JfSPWvovqX/U0n8p/aOW/kvrH7X0X0b/qKX/6/WPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/G/SPpuT+z+o9fEX9oym5/7PX/xv1j1r6v0n/qKX/SvpHLf1X1j9q6b+K/lFL/xH6Ry39V9U/aum/mv5RS//V9Y9a+r9Z/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+r9F/6il/1v1j1r6r6N/1NL/bfpHLf3frn/U0v8d+kct/d+pf9TSf139o5b+6+kftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/d+kftfTfWP+opf+79Y9a+m+if9TSf1P9o5b+m+kftfTfXP+opf8W+kct/bfUP2rpv5X+UUv/rfWPWvpvo3/U0n9b/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r6v0f/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NJ/T/2jlv7v1T9q6b+X/lFL/731j1r676N/1NL/ffpHLf3fr3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/w/oH7X0/6D+UUv/g/WPWvofon/U0v9Q/aOW/h/SP2rpf5j+UUv/w/WPWvp/WP+opf9H9I9a+n9U/6il/xH6Ry39j9Q/aul/lP5RS/+P6R+19D9a/6il/zH6Ry39j9U/aul/nP5RS//j9Y9a+n9c/6il/wn6Ry39P6F/1NL/RP2jlv6f1D9q6f8p/aOW/ifpH7X0P1n/qKX/p/WPWvp/Rv+opf8p+kct/T+rf9TS/1T9o5b+n9M/aun/ef2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/+z9Y9a+n9B/6il/zn6Ry39z9U/aul/nv5RS//z9Y9a+l+gf9TS/4v6Ry39v6R/1NL/Qv2jlv5f1j9q6X+R/lFL/6/oH7X0v1j/qKX/JfpHLf0v1T9q6X+Z/lFL/6/qH7X0v1z/qKX/FfpHLf2/pn/U0v9K/aOW/l/XP2rpf5X+UUv/q/WPWvpfo3/U0v8b+kct/a/VP2rp/039o5b+39I/aun/bf2jlv7f0T9q6f9d/aOW/t/TP2rp/339o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvrfon/U0v9W/aOW/rfpH7X0/4H+UUv/H+oftfT/kf5RS//b9Y9a+t+hf9TS/079o5b+d+kftfS/W/+opf+P9Y9a+v9E/6il/z36Ry39f6p/1NL/Xv2jlv4/0z9q6f9z/aOW/vfpH7X0/4X+UUv/X+oftfS/X/+opf8D+kct/X+lf9TS/0H9o5b+D+kftfT/tf5RS//f6B+19P+t/lFL/9/pH7X0f1j/qKX/I/pHLf1/r3/U0v9R/aOW/n/QP2rp/0f9o5b+fxrTf9PJNa4Xi6mfe7Wl/5+t/6il/1/0j1r6/1X/qKX/Y/pHLf0f1z9q6f83/aOW/n/XP2rp/4T+UUv/f+gftfR/Uv+opf9T+kct/Z/WP2rpP1L/qKT/M0e99H++lv6D9I9a+g/WP2rpP5X+UUv/IfpHLf2H6h+19B+mf9TSf7j+UUv/qfWPWvpPo3/U0n9a/aOW/tPpH7X0n17/qKX/S/SPWvrPoH/U0n9G/aOW/jPpH7X0f6n+UUv/mfWPWvq/TP+opf/L9Y9a+s+if9TSf1b9o5b+s+kftfSfXf+opf8c+kct/efUP2rp/wr9o5b+r9Q/auk/l/5RS/+59Y9a+r9K/6il/zz6Ry39X61/1NJ/Xv2jlv7z6R+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+r9G/6il/2v1j1r6L6J/1NL/dfpHLf0X1T9q6b+Y/lFL/8X1j1r6L6F/1NJ/Sf2jlv5L6R+19F9a/6il/zL6Ry39X69/1NJ/Wf2jlv7L6R+19F9e/6il/wr6Ry3936B/1NJ/Rf2jlv5v1D9q6f8m/aOW/ivpH7X0X1n/qKX/KvpHLf1H6B+19F9V/6il/2r6Ry39V9c/aun/Zv2jlv5r6B+19F9T/6il/1r6Ry3919Y/aun/Fv2jlv5v1T9q6b+O/lFL/7fpH7X0f7v+UUv/d+gftfR/p/5RS/919Y9a+q+nf9TSf339o5b+G+gftfTfUP+opf9G+kct/d+lf9TSf2P9o5b+79Y/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gfPdN/6JTff0v9o5b1v5X+UUv/rfWPWvpvo3/U0n9b/aOW/tvpH7X0317/qKX/DvpHLf131D9q6b+T/lFL/531j1r6v0f/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NJ/T/2jlv7v1T9q6b+X/lFL/731j1r676N/1NL/ffpHLf3fr3/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/w/oH7X0/6D+UUv/g/WPWvofon/U0v9Q/aOW/h/SP2rpf5j+UUv/w/WPWvp/WP+opf9H9I9a+n9U/6il/xH6Ry39j9Q/aul/lP5RS/+P6R+19D9a/6il/zH6Ry39j9U/aul/nP5RS//j9Y9a+n9c/6il/wn6Ry39P6F/1NL/RP2jlv6f1D9q6f8p/aOW/ifpHzX0v2lgYOqT9Y8a+o9a/5/WP2rp/xn9o5b+p+gftfT/rP5RS/9T9Y9a+n9O/6il/+f1j1r6n6Z/1NL/dP2jlv5n6B+19D9T/6il/1n6Ry39z9Y/aun/Bf2jlv7n6B+19D9X/6il/3n6Ry39z9c/aul/gf5RS/8v6h+19P+S/lFL/wv1j1r6f1n/qKX/RfpHLf2/on/U0v9i/aOW/pfoH7X0v1T/qKX/ZfpHLf2/qn/U0v9y/aOW/lfoH7X0/5r+UUv/K/WPWvp/Xf+opf9V+kct/a/WP2rpf43+UUv/b+gftfS/Vv+opf839Y9a+n9L/6il/7f1j1r6f0f/qKX/d/WPWvp/T/+opf/39Y9a+l+nf9TS/3r9o5b+N+gftfS/Uf+opf9N+kct/W/WP2rpf4v+UUv/W/WPWvrfpn/U0v8H+kct/X+of9TS/0f6Ry39b9c/aul/h/5RS/879Y9a+t+lf9TS/279o5b+P55Q/8Ev0LhepFr6/8T6j1r636N/1NL/p/pHLf3v1T9q6f8z/aOW/j/XP2rpf5/+UUv/X+gftfT/pf5RS//79Y9a+j+gf9TS/1f6Ry39H9Q/aun/kP5RS/9f6x+19P+N/lFL/9/qH7X0/53+UUv/h/WPWvo/on80ZfcfOXzMxal/r380ZfcfZ+pH9Y9a+v9B/6il/x/1j1r6/0n/qKX/n/WPWvr/Rf+opf9f9Y9a+j+mf9TS/3H9o5b+f9M/aun/d/2jlv5P6B+19P+H/lFL/yf1j1r6P6V/1NL/af2jlv4j9Y9K+k8zkPqvO+MLN64XqZb+g6z/qKX/YP2jlv5T6R+19B+if9TSf6j+UUv/YfpHLf2H6x+19J9a/6il/zT6Ry39p9U/auk/nf5RS//p9Y9a+r9E/6il/wz6Ry39Z9Q/auk/k/5RS/+X6h+19J9Z/6il/8v0j1r6v1z/qKX/LPpHLf1n1T9q6T+b/lFL/9n1j1r6z6F/1NJ/Tv2jlv6v0D9q6f9K/aOW/nPpH7X0n1v/qKX/q/SPWvrPo3/U0v/V+kct/efVP2rpP5/+UUv/+fWPWvovoH/U0n9B/aOW/gvpH7X0X1j/qKX/a1r6D56EbVb/58WW/q9t6f9vaum/iP5RS//X6R+19F9U/6il/2L6Ry39F9c/muL6AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9jBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4ckAAAAAAI+v+6HYECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATQEAAP//h25AOg==") 3.219907621s ago: executing program 3 (id=4146): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.204435372s ago: executing program 3 (id=4147): mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX]) 3.002659148s ago: executing program 3 (id=4149): syz_usb_connect(0x0, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0f2000000010902290001000000000904000000e0010300052406400005240000000d240f"], 0x0) 2.86029612s ago: executing program 0 (id=4151): syz_usb_connect(0x0, 0x48, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1e, 0xd4, 0x72, 0x8, 0x112a, 0x5, 0x14a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x5a, 0x7, 0x66, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0xe}}, {{0x9, 0x5, 0x8}}]}}]}}]}}, 0x0) 2.11611797s ago: executing program 2 (id=4158): clock_nanosleep(0xfffff000, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 2.003578878s ago: executing program 2 (id=4159): syz_read_part_table(0x1047, &(0x7f0000001100)="$eJzsz80JAjEYBNCJxnUXtBu7soi1GluzA6+fLPiHdxHhvUMgk5lDwk8Ny3Fqj+sm6/lSVZUx6Znu8epjNY7JtBuej1XX89KvuXpVbZP04+F90VtPy/4VLJ20r/0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7JLQAA//+3URAb") 1.8644676s ago: executing program 2 (id=4160): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file2\x00', 0x1600008, &(0x7f0000000200)={[{@umask={'umask', 0x3d, 0x3}}, {}, {@part={'part', 0x3d, 0x7}}, {@barrier}, {@nobarrier}, {@uid={'uid', 0x3d, 0xee00}}, {@type={'type', 0x3d, "91260fae"}}]}, 0x3, 0x637, &(0x7f00000005c0)="$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") 1.772591267s ago: executing program 2 (id=4161): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x5a}, 0x28) 1.643997277s ago: executing program 2 (id=4162): syz_usb_connect(0x2, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00d505241301"], 0x0) 1.597521401s ago: executing program 3 (id=4163): syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0xff, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f}]}], "db9f49b2609ceb2ef48b2730155717d8"}}}}}}}, 0x0) 1.547090315s ago: executing program 3 (id=4164): syz_usb_connect(0x3, 0x217, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x3f, 0x45, 0xda, 0x8, 0x499, 0x1059, 0x4794, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x205, 0x3, 0x9, 0x3, 0x20, 0x5, [{{0x9, 0x4, 0x14, 0x3, 0xc, 0xad, 0xcc, 0x86, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x81}}], [{{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x80, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0xfeff}]}}, {{0x9, 0x5, 0x4, 0x8, 0x400, 0x7, 0x5, 0x7}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x7, 0x6, 0x4, [@generic={0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x78, 0x580d}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x0, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x30, 0x31}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xff, 0xfb}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x1, 0x80}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0x2}}, {{0x9, 0x5, 0x21de0d098b841e76, 0x0, 0x200, 0xdd, 0x8, 0x8, [@generic={0x7b, 0x4, "b7388013baf3251b48192bbb6b7253e038a84476f8e728f7021d7530dfd90436bcf876f6fdd3646b59110db0be002204ba642c9829eb0a47a28278f2e1f90c59334c63d44cb32d19e02923e09a245b92fb5911ed30ef57b7a75c0f5ab271e19df59284d975be73626c606ad4ac265c2219bc1c706ecb2a7dc5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x5e}]}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0xab, 0x8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}, @generic={0x6e, 0x24, "f54aa87276e340dadee0bd92961a844e5920f0cbacb3deac37e91e6f0906934664b3513fc91bc51767a7a16614243e75adf7bb9b364bac07d55db77de0505493e60cfb77db063e5ddef3f679ce5351edab87d1e3423156b450c44ac3736b99b237df6fa8b24f711ad2caf702"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x7, 0x9, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x80, 0x5, 0x4}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x5, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x100}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}]}}]}}, {{0x9, 0x4, 0xed, 0x1, 0x0, 0x31, 0x8c, 0x46, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0x1}, [@feature_unit={0xd, 0x24, 0x6, 0x6, 0x1, 0x3, [0x6, 0xa, 0x1], 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x1ff, 0x2, 0x2, 0xff, 0x3c, 0x4}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x8b}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x5, 0x1, [0xa]}]}]}}, {{0x9, 0x4, 0xad, 0x5, 0x1, 0x1b, 0x31, 0x7a, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0xbe, 0x9, 0x2, 0x9}}], [{{0x9, 0x5, 0x9, 0x2, 0x10, 0x80, 0x5, 0x9}}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 886.139728ms ago: executing program 0 (id=4167): syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @empty, @mcast2={0xe}}}}}}}, 0x0) 821.407833ms ago: executing program 0 (id=4168): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x4a4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x80, 0x8}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="040f"]}) 452.076513ms ago: executing program 1 (id=4169): semget(0x3, 0x1, 0x654) 451.936913ms ago: executing program 1 (id=4170): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x31, 0x2c]}}}}]}) 408.942626ms ago: executing program 2 (id=4171): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x200001, &(0x7f0000000700)={[{@localalloc={'localalloc', 0x3d, 0xf}}, {@heartbeat_none}, {@heartbeat_none}, {@inode64}, {@coherency_full}, {@resv_level={'resv_level', 0x3d, 0x20}}, {@err_cont}, {@preferred_slot}, {@acl}, {@data_writeback}, {@intr}, {}]}, 0x1, 0x444c, &(0x7f00000088c0)="$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") 372.562509ms ago: executing program 1 (id=4172): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 248.000879ms ago: executing program 1 (id=4173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xd3}, @exit], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) 194.236224ms ago: executing program 1 (id=4174): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000000000aa60000030000000e"], 0x50) 172.970375ms ago: executing program 3 (id=4175): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa99, &(0x7f0000000500)="$eJzs3U+MG1f9APCxd73JJukvTn8JDWlpEwq0Arrb7IbwJ4KmaiRE1FTcKlVcojQtEWlApBK0itQkJ260isIN8UeceqkKQqIXFPXEpRKNxKWnwoEDUZAicYCWxGi973ntb+yMnf3j9frzkcbPM++N35vZmdmZNzPvFcDYqjY/a83Py+9cOvKPz/19euH7E60U9ebnZNvYQupKGp8Mv/fhxGJ488a5E93CSjHX/MzjxTPXW/NuLYrifLG3uFLUiz2Xr77x3tzTxy4cvbjv/TcPXVuNZQcAgHHz7SuHDuz665/v3/HRWw8eLja1pufz83oa35bO+w+nE/98/l8tOscrbUO7qZBuMg3VkG6iS7r2fGo53ebO+WL+U+F3az3SbSrJf6JtWrflhlGWt+N6UanOdIxXqzMzi9fkRfO6fqoyc+bU6RfODqmgwIr710NFUew1GMZtaGxv7QRd4l8bevnWZmhbCwBDFe8X3uZ8rFlYntavTfaX//Unq93nhxVw5+3vwopv/3fKv9YtwRrm3zXBKudfnO8sx1rnX7b8v7ngiMPK6X9r2ryq5VhpebnyfrQtjcf7CPH5pUGPP/n3JsLvdT12dtHrPsKo3F+odv3aec9kPeu1nuN2sVF9PYV5PXwjxLfvP/FvOip/Y6C7f6+7+v/ppcINvSwDDZtHtNyGMR4awznsACMgPjfXSHJ8fK4vxm8qid9cEj9dEr+lJH5rSTyMs9+9/NPi9crSdX68pr9541xzZ+m3PizXs92Twv8bsDyxPnLQ+rj43O+glpt/fJ4Y1rM/HH/25Feef+7q4vP/ldb2fytt73vTeD3tW1dSglxfGOvVW8/+1zvzqfZId28ozz1d0je/7+xMV9m59DtF23HmtnLs7pxve690D3Smq4d002mId0Hi+cmWMF8+/8jH1by+JsPy1sJyTIVy5OPKjhSO1t0Y1qu8PfZ6/j9vn7uLWuWFU6dPPp7G83b6p4napoXp+9e43MDy9fv+z+6i8/2fba3ptWr7cWH70vRK+3GhHqbP9Zg+n8bz/7nvTkw3p8+c+P7p51d64WHMnX3l1e8dP3365A836pe3v7m4oOulPL74MhJfhn1kAlbb7Msv/WD27CuvPnbqpeMvnnzx5Jn5gwfn5+YOfnX+wGzzvH62/ewe2EiW/ukPuyQAAAAAAAAAAABAv3509MjVv7z75Q8W3/9fev8vv/+fn/zN7///JLz/H9+Tz+/B5/cAd3SJb6YJDaxOhXS1NPx/KO/OkM+uMN8nUtjqxy+9/5+zi+265vLcF6bH9ntzutCcwG3tpUyFNkhif4GfTuHFFP66gCGq/Lz75BSWtW+dt/XcPoV2KUZT/rvl9kxyOyb5/e9e7Trl4/+ONSgjK6+/9wEnlvU64bCXEejun+uu/e+NPrRdMQy9LIb1NtxsNBprmV+joRcPYH1otbfbqyHfVe7/M9d75vDMH7+1eWHIya4/2Xm8jO2XwnIMu//LoeWfKxbHdfn7zH+l+/9s9X/X9/Ev9JhXv7t8//OLax+0ZVvs6Tf/peWvNGfJ7UDvHCz/j1L+eWkeKfrLv/GrsP7jDaE+fRzy39Jn/tfD3//SoBmnDP+b8s+r7dGH+81/8Qcq1c5yxHrjfP8v1htnN8Py57Y9B13+u+2o8VbKH8bZqPQzO6hR6f+3l/gcxpfSeD4Q5ucc4mXSoOXPz1fk/wO7wu9XSv6/9dp+RqVWadz7//1aCsv2h9z/b94e613Gq23jtS7rdqMea2BUfej+n2HEh+YZzTooxygOjUaja4XSWp3/3GVt1vRKl2NcLaz/w0PMf9jXCcPOf3Vrk5cv9v8bz+Fj/78xPvb/G+Nj/78xvrmjf7zUaW+Mj/3/xvUZ+/+N8feFfGP/wLtL4j9ZEr+nJP7+kvgHSuI/VRK/ryT+wZL4h0ri7y2Jf7gk/jMl8Z+9Y3zjtaJk/kfvHD//45L5N7r8Psq4Lj+Ms/h+nv0fxke+/9Nr/99ZEg+Mrp+9tf+p5377nfri+/9TrfqQfB8v1w3V0rVzvF6K9ScTKe7dNP63EL/e6ztgnMT2M+L/90dK4oHRlZ/zsn/DGKp0b7Gn33arep3nM1o+n8IvpPCLKXwshTMpnE3h/hTOrVH5WB1Pvf37Q69Xlq73t4f4fp8nj+8DxXai5vssT6wfGPR59tiO36CWm/9dvg4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNXm54EDuytFcfmdS0eePXZqdmHKE60U9ebnZNtYrTVfUTyewokU/jJ9uXnj3In28FYKK8VcUSkqrenFM9dbOW0tiuJ8sbe4UtSLPZevvvHe3NPHLhy9uO/9Nw9dW701AAAAABvf/wIAAP//3RQW2g==") 0s ago: executing program 1 (id=4176): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") kernel console output (not intermixed with test programs): data to the device: -71 [ 453.809779][ T42] usb 3-1: unable to get target info from device [ 453.817226][ T42] usb 3-1: could not get target info (-71) [ 453.826049][ T42] usb 3-1: could not probe fw (-71) [ 453.952054][T13736] loop0: detected capacity change from 0 to 1024 [ 453.977495][T13736] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 453.977495][T13736] [ 454.003000][T13736] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 454.390017][T13748] loop1: detected capacity change from 0 to 8192 [ 454.871866][T13761] loop0: detected capacity change from 0 to 8192 [ 454.935663][T13761] Dev loop0: RDB in block 1 has bad checksum [ 455.373301][T13751] loop3: detected capacity change from 0 to 40427 [ 455.416525][T13751] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 455.431519][T13751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 455.432940][T13764] loop2: detected capacity change from 0 to 32768 [ 455.458709][T13751] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 455.510132][T13764] JBD2: Ignoring recovery information on journal [ 455.517863][T13751] F2FS-fs (loop3): invalid crc value [ 455.540950][T13764] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 455.543638][T13751] F2FS-fs (loop3): Found nat_bits in checkpoint [ 455.551153][T13764] JBD2: bad block at offset 32 [ 455.583277][T13764] (syz.2.3659,13764,1):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 455.659729][T13764] (syz.2.3659,13764,1):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 455.690598][T13764] (syz.2.3659,13764,1):ocfs2_check_volume:2462 ERROR: status = -22 [ 455.708098][T13751] F2FS-fs (loop3): Start checkpoint disabled! [ 455.716750][T13764] (syz.2.3659,13764,0):ocfs2_check_volume:2490 ERROR: status = -22 [ 455.745109][T13764] (syz.2.3659,13764,0):ocfs2_mount_volume:1822 ERROR: status = -22 [ 455.767651][T13751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 455.782293][ T9] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 455.790496][T13764] (syz.2.3659,13764,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 455.819274][T13751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 455.956365][T13772] loop1: detected capacity change from 0 to 40427 [ 455.998647][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 456.010180][T13772] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x7ffff [ 456.024222][ T9] usb 1-1: config 0 has no interface number 0 [ 456.030442][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 456.049927][T13772] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1 [ 456.061096][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 456.092333][T13772] F2FS-fs (loop1): invalid crc value [ 456.112363][T13772] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4552/0x6c20 [ 456.126211][ T9] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 456.147017][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.169555][T13772] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 456.177865][ T9] usb 1-1: Product: syz [ 456.182145][ T9] usb 1-1: Manufacturer: syz [ 456.201633][ T9] usb 1-1: SerialNumber: syz [ 456.226704][ T9] usb 1-1: config 0 descriptor?? [ 456.255631][ T9] cypress_m8 1-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 456.464889][ T9] usb 1-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 456.505727][ T9] usb 1-1: USB disconnect, device number 125 [ 456.532099][ T9] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 456.590320][ T9] cypress_m8 1-1:0.35: device disconnected [ 457.197653][T13786] loop2: detected capacity change from 0 to 40427 [ 457.205702][T13786] F2FS-fs (loop2): Corrupted extension count (720933 + 1 > 64) [ 457.216046][T13786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 457.254872][ T6329] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 457.453417][ T6329] usb 2-1: unable to get BOS descriptor or descriptor too short [ 457.469872][ T6329] usb 2-1: not running at top speed; connect to a high speed hub [ 457.489651][ T6329] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 457.506328][ T6329] usb 2-1: config 129 has no interface number 0 [ 457.522976][ T6329] usb 2-1: config 129 interface 28 has no altsetting 0 [ 457.548683][ T6329] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 457.557994][T13818] loop2: detected capacity change from 0 to 2048 [ 457.564930][ T23] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 457.577919][T13818] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh [ 457.584127][ T6329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.603529][T13818] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 457.604002][ T6329] usb 2-1: Product: syz [ 457.620698][T13818] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 457.622564][ T6329] usb 2-1: Manufacturer: syz [ 457.634947][T13818] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 457.645972][ T6329] usb 2-1: SerialNumber: syz [ 457.655443][ T6381] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 457.662849][T13818] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 457.678498][T13818] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 457.689799][T13818] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 457.700348][T13818] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 457.756303][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.779128][ T23] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 457.794234][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.811898][ T23] usb 1-1: Product: syz [ 457.828100][ T23] usb 1-1: Manufacturer: syz [ 457.841375][ T23] usb 1-1: SerialNumber: syz [ 457.854426][ T23] usb 1-1: config 0 descriptor?? [ 457.864368][ T6381] usb 4-1: config 128 has an invalid interface number: 138 but max is 0 [ 457.873025][ T6329] etas_es58x 2-1:129.28: Starting syz syz (Serial Number syz) [ 457.885665][ T23] usb 1-1: ucan: probing device on interface #0 [ 457.894386][ T6381] usb 4-1: config 128 has no interface number 0 [ 457.907227][ T23] usb 1-1: ucan: invalid EP count (0) [ 457.912841][ T23] usb 1-1: ucan: probe failed; try to update the device firmware [ 457.921112][ T6381] usb 4-1: config 128 interface 138 has no altsetting 0 [ 457.928603][ T6329] usb 2-1: USB disconnect, device number 120 [ 457.946881][ T6381] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=c1.78 [ 457.972466][ T6381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.980520][ T6381] usb 4-1: Product: syz [ 457.988150][ T6381] usb 4-1: Manufacturer: syz [ 457.993329][ T6381] usb 4-1: SerialNumber: syz [ 458.080959][ T23] usb 1-1: USB disconnect, device number 126 [ 458.211152][ T6381] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.138/input/input38 [ 458.248132][ T5142] bcm5974 4-1:128.138: could not read from device [ 458.265839][ T6381] usb 4-1: USB disconnect, device number 6 [ 458.275593][ T5142] bcm5974 4-1:128.138: could not read from device [ 458.285920][ T5142] bcm5974 4-1:128.138: could not read from device [ 458.380763][T13832] loop2: detected capacity change from 0 to 512 [ 458.399386][T13832] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.427816][T13832] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 458.443977][T13832] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3691: bg 0: block 248: padding at end of block bitmap is not set [ 458.470077][T13832] __quota_error: 5 callbacks suppressed [ 458.470095][T13832] Quota error (device loop2): write_blk: dquota write failed [ 458.483491][T13832] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 458.529695][T13832] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.3691: Failed to acquire dquot type 1 [ 458.567573][T13832] EXT4-fs (loop2): 1 truncate cleaned up [ 458.610111][T13832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 458.625654][T13841] loop0: detected capacity change from 0 to 136 [ 458.854416][ T6318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 459.104366][T13851] loop3: detected capacity change from 0 to 8192 [ 459.118950][T13851] REISERFS warning (device loop3): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run [ 459.118950][T13851] reiserfsck --rebuild-tree and wait for a completion. If that fails [ 459.118950][T13851] get newer reiserfsprogs package [ 459.211593][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 459.286822][ T968] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 459.366792][ T6381] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 459.388648][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 459.401204][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.410675][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.422107][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.431199][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 459.445725][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.454850][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.463903][ T9] usb 1-1: Product: syz [ 459.468088][ T9] usb 1-1: Manufacturer: syz [ 459.472777][ T9] usb 1-1: SerialNumber: syz [ 459.478030][ T968] usb 3-1: Using ep0 maxpacket: 32 [ 459.488232][ T968] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 459.498203][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.506454][ T968] usb 3-1: Product: syz [ 459.511658][ T968] usb 3-1: Manufacturer: syz [ 459.516326][ T968] usb 3-1: SerialNumber: syz [ 459.523219][ T968] usb 3-1: config 0 descriptor?? [ 459.531211][ T968] empeg 3-1:0.0: empeg converter detected [ 459.537201][ T968] usb 3-1: active config #0 != 1 ?? [ 459.551547][ T6381] usb 2-1: unable to get BOS descriptor or descriptor too short [ 459.563261][ T6381] usb 2-1: not running at top speed; connect to a high speed hub [ 459.574432][ T6381] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 459.582651][ T6381] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 459.597129][ T6381] usb 2-1: config 4 has no interface number 0 [ 459.606929][ T6381] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 459.616220][ T6381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.624408][ T6381] usb 2-1: Product: syz [ 459.628687][ T6381] usb 2-1: Manufacturer: syz [ 459.633360][ T6381] usb 2-1: SerialNumber: syz [ 459.658279][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 459.717439][ T9] usb 1-1: 0:2 : does not exist [ 459.742460][ T9] usb 1-1: USB disconnect, device number 127 [ 459.750967][ T6329] usb 3-1: USB disconnect, device number 122 [ 459.785043][ T6294] udevd[6294]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.844642][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 459.859594][ T23] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 459.871722][ T6381] usb 2-1: USB disconnect, device number 121 [ 459.879562][ T23] usb 4-1: config 0 has no interface number 0 [ 459.890617][ T23] usb 4-1: config 0 interface 128 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 459.903394][ T23] usb 4-1: config 0 interface 128 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 459.913597][ T23] usb 4-1: config 0 interface 128 has no altsetting 0 [ 459.923844][ T23] usb 4-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=8b.56 [ 459.934444][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.942647][ T23] usb 4-1: Product: syz [ 459.960378][ T23] usb 4-1: Manufacturer: syz [ 459.965141][ T23] usb 4-1: SerialNumber: syz [ 459.971965][ T23] usb 4-1: config 0 descriptor?? [ 459.979837][ T23] ti_usb_3410_5052 4-1:0.128: TI USB 3410 1 port adapter converter detected [ 459.990362][ T23] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 460.171094][ T6381] usb 4-1: USB disconnect, device number 7 [ 460.182382][ T6381] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 460.194371][ T6381] ti_usb_3410_5052 4-1:0.128: device disconnected [ 460.494632][T13877] cgroup: Need name or subsystem set [ 460.649768][T13885] syz.0.3715: attempt to access beyond end of device [ 460.649768][T13885] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 460.680003][T13885] VFS: unable to read V7 FS superblock on device nbd0. [ 460.709096][T13885] VFS: could not find a valid V7 on nbd0. [ 461.009725][ T968] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 461.179518][T13905] loop0: detected capacity change from 0 to 4096 [ 461.215105][ T968] usb 2-1: Using ep0 maxpacket: 8 [ 461.224500][ T968] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 461.233314][ T968] usb 2-1: config 0 has no interface number 0 [ 461.246872][ T968] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 461.257795][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.266644][T13905] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 461.287374][ T968] usb 2-1: Product: syz [ 461.291816][ T968] usb 2-1: Manufacturer: syz [ 461.296439][ T968] usb 2-1: SerialNumber: syz [ 461.301316][T13905] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 461.321817][ T968] usb 2-1: config 0 descriptor?? [ 461.345448][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 461.389020][T13905] ntfs: (device loop0): load_system_files(): Failed to load $Volume. [ 461.398073][T13905] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 461.530284][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 461.537118][ T968] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 461.554061][ T9] usb 4-1: config 1 has an invalid interface number: 247 but max is 0 [ 461.569305][ T968] usb 2-1: No streaming interface found for terminal 6. [ 461.582663][T13913] loop0: detected capacity change from 0 to 512 [ 461.589249][ T9] usb 4-1: config 1 has no interface number 0 [ 461.595573][ T9] usb 4-1: config 1 interface 247 has no altsetting 0 [ 461.606494][ T968] usb 2-1: USB disconnect, device number 122 [ 461.626165][T13913] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 461.658653][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=f5.8f [ 461.671700][T13913] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 461.686700][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.695608][ T9] usb 4-1: Product: syz [ 461.700154][T13913] FAT-fs (loop0): Filesystem has been set read-only [ 461.706830][ T9] usb 4-1: Manufacturer: syz [ 461.712360][ T9] usb 4-1: SerialNumber: syz [ 461.960609][ T9] usb 4-1: USB disconnect, device number 8 [ 462.130138][ T28] audit: type=1326 audit(1756137094.176:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13926 comm="syz.2.3736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33818ebe9 code=0x0 [ 462.268113][ T28] audit: type=1326 audit(1756137094.315:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13933 comm="syz.2.3740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33818ebe9 code=0x0 [ 462.325521][T13931] loop1: detected capacity change from 0 to 4096 [ 462.338962][T13931] ntfs: (device loop1): parse_ntfs_boot_sector(): Mft record size (8192) exceeds the PAGE_SIZE on your system (4096). This is not supported. Sorry. [ 462.358623][T13931] ntfs: (device loop1): ntfs_fill_super(): Unsupported NTFS filesystem. [ 462.920092][ T6381] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 462.975683][ T968] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 463.008386][T13957] loop0: detected capacity change from 0 to 2048 [ 463.055220][T13957] loop0: p3 p4 < > [ 463.116982][ T6381] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 463.134779][ T6381] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 463.155369][ T6381] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 463.169449][ T6381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 463.171975][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 463.180508][ T6381] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 463.219686][ T968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.241890][ T968] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 463.244042][ T6381] usb 3-1: language id specifier not provided by device, defaulting to English [ 463.270950][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.295762][ T968] usb 4-1: Product: syz [ 463.300130][ T968] usb 4-1: Manufacturer: syz [ 463.307104][ T968] usb 4-1: SerialNumber: syz [ 463.317979][ T6381] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 463.322420][ T968] usb 4-1: config 0 descriptor?? [ 463.333413][T13944] loop1: detected capacity change from 0 to 32768 [ 463.338416][ T968] dm9601: probe of 4-1:0.0 failed with error -22 [ 463.348881][ T6381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.352163][ T968] sr9700: probe of 4-1:0.0 failed with error -22 [ 463.376230][T13944] gfs2: fsid=: Unknown on-disk format, unable to mount [ 463.384962][ T6381] usb 3-1: Manufacturer: 牢 [ 463.427212][ T6381] usb 3-1: config 0 descriptor?? [ 463.458020][ T6381] hub 3-1:0.0: bad descriptor, ignoring hub [ 463.474624][ T6381] hub: probe of 3-1:0.0 failed with error -5 [ 463.535815][ T6381] input: 牢 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 463.634934][T13963] loop0: detected capacity change from 0 to 1764 [ 463.666259][ T23] usb 3-1: USB disconnect, device number 123 [ 463.724235][ T6381] usb 4-1: USB disconnect, device number 9 [ 463.801076][T13967] loop1: detected capacity change from 0 to 2048 [ 463.834302][T13967] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 463.872401][T13967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.263049][ T6381] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 464.291766][T13979] loop2: detected capacity change from 0 to 2048 [ 464.330346][T13979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.458983][ T6381] usb 1-1: Using ep0 maxpacket: 32 [ 464.469698][ T6381] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 464.493498][T13987] loop1: detected capacity change from 0 to 65 [ 464.504203][ T6381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.515453][ T6381] usb 1-1: Product: syz [ 464.519748][ T6381] usb 1-1: Manufacturer: syz [ 464.535447][T13987] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1 [ 464.559577][ T6381] usb 1-1: SerialNumber: syz [ 464.585989][ T6381] usb 1-1: config 0 descriptor?? [ 464.796223][ T6381] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 464.810640][ T6381] RobotFuzz Open Source InterFace, OSIF: probe of 1-1:0.0 failed with error -71 [ 464.822866][ T6381] usb 1-1: USB disconnect, device number 2 [ 464.878291][T13999] loop1: detected capacity change from 0 to 512 [ 464.886784][T13999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.919803][T13999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.3772: bg 0: block 5: invalid block bitmap [ 464.932847][ T6329] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 464.940740][T13999] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 464.950161][T13999] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3772: invalid indirect mapped block 3 (level 2) [ 464.966093][T13999] EXT4-fs (loop1): 2 truncates cleaned up [ 464.973719][T13999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.016488][ T23] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 465.039121][ T6323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.111269][ T6329] usb 4-1: Using ep0 maxpacket: 8 [ 465.118129][ T6329] usb 4-1: config 105 has an invalid interface number: 212 but max is 0 [ 465.126690][ T6329] usb 4-1: config 105 has no interface number 0 [ 465.137368][ T6329] usb 4-1: config 105 interface 212 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 465.152525][ T6329] usb 4-1: config 105 interface 212 altsetting 0 endpoint 0x5 has invalid maxpacket 431, setting to 64 [ 465.194238][ T6329] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=72.73 [ 465.205466][ T6329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.215457][ T6329] usb 4-1: Product: syz [ 465.220146][ T6329] usb 4-1: Manufacturer: syz [ 465.220267][ T23] usb 3-1: config 0 has an invalid interface number: 197 but max is 0 [ 465.240991][ T6329] usb 4-1: SerialNumber: syz [ 465.259725][T13991] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 465.268134][ T23] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 465.276812][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.289182][ T23] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 465.299209][ T23] usb 3-1: config 0 has no interface number 0 [ 465.305801][ T23] usb 3-1: config 0 has no interface number 1 [ 465.311996][ T23] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 465.342530][ T23] usb 3-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.375508][ T23] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 465.395860][ T23] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 465.415818][ T23] usb 3-1: config 0 interface 255 has no altsetting 0 [ 465.426201][ T23] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 465.439388][T14011] loop0: detected capacity change from 0 to 128 [ 465.446333][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.448360][T14011] FAT-fs (loop0): invalid media value (0x00) [ 465.475347][T14011] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 465.489013][ T23] usb 3-1: Product: syz [ 465.491768][T14011] FAT-fs (loop0): Can't find a valid FAT filesystem [ 465.507847][ T23] usb 3-1: Manufacturer: syz [ 465.519114][ T6329] port100 4-1:105.212: NFC: Could not find bulk-in or bulk-out endpoint [ 465.530351][ T23] usb 3-1: SerialNumber: syz [ 465.537722][ T23] usb 3-1: config 0 descriptor?? [ 465.549447][ T6329] usb 4-1: USB disconnect, device number 10 [ 465.559411][T13995] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 465.577900][ T23] qmi_wwan: probe of 3-1:0.197 failed with error -22 [ 465.596790][ T23] usb 3-1: selecting invalid altsetting 0 [ 465.604198][ T9] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 465.615925][ T23] usb 3-1: Could not set interface, error -22 [ 465.714847][T14015] loop0: detected capacity change from 0 to 1024 [ 465.741915][T14015] hfsplus: request for non-existent node 40 in B*Tree [ 465.757301][T14015] hfsplus: request for non-existent node 40 in B*Tree [ 465.773156][ T6329] usb 3-1: USB disconnect, device number 124 [ 465.792494][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 465.822192][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 465.840340][ T9] usb 2-1: config 187 has an invalid interface number: 139 but max is 0 [ 465.854421][ T9] usb 2-1: config 187 has no interface number 0 [ 465.861526][ T9] usb 2-1: config 187 interface 139 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 465.873669][ T9] usb 2-1: config 187 interface 139 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 465.885105][ T9] usb 2-1: config 187 interface 139 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.895425][ T9] usb 2-1: config 187 interface 139 has no altsetting 0 [ 465.909319][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=6b.3b [ 465.925755][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.935617][ T9] usb 2-1: Product: syz [ 465.943719][ T9] usb 2-1: Manufacturer: syz [ 465.951807][ T9] usb 2-1: SerialNumber: syz [ 465.964018][T14009] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 466.169774][ T9] ums-cypress 2-1:187.139: USB Mass Storage device detected [ 466.232562][ T9] usb 2-1: USB disconnect, device number 123 [ 466.246962][ T6329] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 466.473908][ T6329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 466.483347][ T6329] usb 1-1: not running at top speed; connect to a high speed hub [ 466.495684][ T6329] usb 1-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 466.504911][ T6329] usb 1-1: config 219 interface 0 has no altsetting 0 [ 466.512009][ T6329] usb 1-1: config 219 interface 0 has no altsetting 1 [ 466.521961][ T6329] usb 1-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 466.531097][ T6329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.539220][ T6329] usb 1-1: Product: syz [ 466.543536][ T6329] usb 1-1: Manufacturer: syz [ 466.548365][ T6329] usb 1-1: SerialNumber: syz [ 466.553245][T14039] loop2: detected capacity change from 0 to 8 [ 466.579305][T14039] unable to read id index table [ 466.591383][ T965] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 466.693400][T14041] loop2: detected capacity change from 0 to 128 [ 466.753619][ T5773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 466.777717][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 466.781381][ T6329] usb 1-1: selecting invalid altsetting 0 [ 466.795132][ T965] usb 4-1: config 184 has an invalid interface number: 240 but max is 0 [ 466.806310][ T6329] usb 1-1: selecting invalid altsetting 0 [ 466.836231][ T965] usb 4-1: config 184 has no interface number 0 [ 466.842656][ T965] usb 4-1: config 184 interface 240 altsetting 6 bulk endpoint 0x84 has invalid maxpacket 8 [ 466.883573][ T965] usb 4-1: config 184 interface 240 has no altsetting 0 [ 466.890206][ T6329] usb 1-1: USB disconnect, device number 3 [ 466.905480][ T965] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=cf.e7 [ 466.934106][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.960025][ T965] usb 4-1: Product: syz [ 466.981162][ T965] usb 4-1: Manufacturer: syz [ 466.997142][ T6292] udevd[6292]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:219.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.020178][ T965] usb 4-1: SerialNumber: syz [ 467.047585][T14031] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.106942][T14049] loop1: detected capacity change from 0 to 164 [ 467.149530][T14049] rock: directory entry would overflow storage [ 467.156092][T14049] rock: sig=0x4543, size=28, remaining=18 [ 467.287807][ T965] kvaser_usb 4-1:184.240: Cannot get usb endpoint(s) [ 467.297737][T14051] loop2: detected capacity change from 0 to 4096 [ 467.325057][ T965] usb 4-1: USB disconnect, device number 11 [ 467.328160][T14051] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 467.373699][T14051] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 467.382239][T14051] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 467.389769][T14051] ntfs3: loop2: Failed to load $Bitmap (-22). [ 467.396705][T14051] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 467.588285][T14056] loop0: detected capacity change from 0 to 4096 [ 467.601355][T14056] ntfs: (device loop0): parse_options(): The show_sys_files option requires a boolean argument. [ 467.606981][ T968] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 467.848232][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 467.886182][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 467.921994][ T968] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 467.950266][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.986862][ T968] usb 2-1: config 0 descriptor?? [ 468.212922][ T968] ath6kl: Failed to submit usb control message: -71 [ 468.219613][ T968] ath6kl: unable to send the bmi data to the device: -71 [ 468.264644][T14057] loop2: detected capacity change from 0 to 32768 [ 468.269124][ T968] ath6kl: Unable to send get target info: -71 [ 468.282353][ T968] ath6kl: Failed to init ath6kl core: -71 [ 468.283578][T14057] jfs_mount: Failed to read FILESYSTEM_I [ 468.304764][ T968] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 468.311753][T14057] Mount JFS Failure: -5 [ 468.311771][T14057] jfs_mount failed w/return code = -5 [ 468.343700][T14074] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 468.390351][ T968] usb 2-1: USB disconnect, device number 124 [ 468.746154][T14069] loop3: detected capacity change from 0 to 32768 [ 468.772123][ T9] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 468.940280][ T23] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 468.968552][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 469.008008][ T9] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 469.024449][ T9] usb 3-1: config 0 has no interface number 0 [ 469.052873][ T9] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c [ 469.077760][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.097963][ T9] usb 3-1: Product: syz [ 469.102188][ T9] usb 3-1: Manufacturer: syz [ 469.122839][ T9] usb 3-1: SerialNumber: syz [ 469.132273][ T9] usb 3-1: config 0 descriptor?? [ 469.137294][ T23] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 469.137318][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.137336][ T23] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 469.137354][ T23] usb 1-1: config 1 has no interface number 1 [ 469.140174][ T23] usb 1-1: string descriptor 0 read error: -22 [ 469.176361][ T9] flexcop_usb: set interface failed. [ 469.218563][ T23] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.224364][ T9] b2c2_flexcop_usb: probe of 3-1:0.204 failed with error -22 [ 469.228076][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.278942][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 469.291614][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 469.311039][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 469.445346][ T9] usb 3-1: USB disconnect, device number 125 [ 469.492532][T14097] loop3: detected capacity change from 0 to 2048 [ 469.522680][T14097] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=26504, location=26504 [ 469.568206][T14097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 469.600201][T14102] loop1: detected capacity change from 0 to 512 [ 469.658451][ T965] usb 1-1: USB disconnect, device number 4 [ 469.730837][T14102] EXT4-fs error (device loop1): __ext4_iget:5053: inode #14: block 1886221359: comm syz.1.3820: invalid block [ 469.757031][T14102] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3820: couldn't read orphan inode 14 (err -117) [ 469.777504][T14102] EXT4-fs (loop1): mounted filesystem 07000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.801736][T14102] ext4 filesystem being mounted at /866/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.813178][T14108] Can't find a SQUASHFS superblock on nullb0 [ 469.896961][ T6323] EXT4-fs (loop1): unmounting filesystem 07000000-0000-0000-0000-000000000000. [ 469.921950][T14110] loop3: detected capacity change from 0 to 512 [ 470.014623][T14110] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 470.043638][T14114] loop1: detected capacity change from 0 to 8 [ 470.056223][T14110] EXT4-fs (loop3): orphan cleanup on readonly fs [ 470.095176][T14110] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 470.139046][T14114] SQUASHFS error: xz decompression failed, data probably corrupt [ 470.162539][T14110] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 470.204493][T14114] SQUASHFS error: Failed to read block 0x108: -5 [ 470.231677][T14110] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 470.244503][T14114] SQUASHFS error: Unable to read metadata cache entry [106] [ 470.251850][T14114] SQUASHFS error: Unable to read inode 0x11f [ 470.266065][T14110] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.3822: bg 0: block 40: padding at end of block bitmap is not set [ 470.297279][T14110] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 470.331117][T14110] EXT4-fs (loop3): 1 truncate cleaned up [ 470.348265][T14110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.387222][T14123] loop0: detected capacity change from 0 to 1764 [ 470.476503][ T6319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.506126][ T6502] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 470.804470][T14137] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 470.938318][T14143] IPv6: addrconf: prefix option has invalid lifetime [ 471.091159][T14149] loop2: detected capacity change from 0 to 512 [ 471.110300][T14149] EXT4-fs error (device loop2): ext4_init_orphan_info:586: comm syz.2.3840: inode #0: comm syz.2.3840: iget: illegal inode # [ 471.128957][T14149] EXT4-fs (loop2): get orphan inode failed [ 471.137450][T14149] EXT4-fs (loop2): mount failed [ 471.154027][ T968] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 471.316420][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 471.364539][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 471.376077][ T968] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 471.389221][T14160] loop2: detected capacity change from 0 to 64 [ 471.393626][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.413948][T14160] hfs: get root inode failed [ 471.437178][ T968] usb 2-1: Product: syz [ 471.447851][ T968] usb 2-1: Manufacturer: syz [ 471.462177][ T968] usb 2-1: SerialNumber: syz [ 471.482480][ T968] usb 2-1: config 0 descriptor?? [ 471.513079][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 471.523903][ T9] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 471.541452][ T9] usb 4-1: config 95 has no interface number 0 [ 471.557306][ T9] usb 4-1: config 95 interface 1 has no altsetting 0 [ 471.576290][ T9] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 471.586362][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.590884][T14164] loop2: detected capacity change from 0 to 8192 [ 471.594385][ T9] usb 4-1: Product: syz [ 471.618970][ T9] usb 4-1: Manufacturer: syz [ 471.628439][ T9] usb 4-1: SerialNumber: syz [ 471.629776][T14164] REISERFS warning (device loop2): super-6514 reiserfs_parse_options: unknown quota format specified. [ 471.670995][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 471.714279][ T968] usb 2-1: USB disconnect, device number 125 [ 471.785871][T14168] loop2: detected capacity change from 0 to 64 [ 471.802996][T14168] hfs: invalid gid -1 [ 471.807246][T14168] hfs: unable to parse mount options [ 471.847345][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 471.854367][ T23] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 471.868934][ T23] usb 1-1: config 0 has no interface number 0 [ 471.875130][ T23] usb 1-1: config 0 interface 128 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.912113][ T23] usb 1-1: config 0 interface 128 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.939006][ T23] usb 1-1: config 0 interface 128 has no altsetting 0 [ 471.961743][ T23] usb 1-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=8b.56 [ 471.971788][ T9] usb 4-1: USB disconnect, device number 12 [ 471.977597][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.985720][ T23] usb 1-1: Product: syz [ 472.008770][ T23] usb 1-1: Manufacturer: syz [ 472.013791][ T23] usb 1-1: SerialNumber: syz [ 472.072657][ T23] usb 1-1: config 0 descriptor?? [ 472.113672][ T6294] udevd[6294]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.134253][ T23] ti_usb_3410_5052 1-1:0.128: TI USB 3410 1 port adapter converter detected [ 472.164582][ T23] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 472.178049][T14172] loop2: detected capacity change from 0 to 4096 [ 472.197232][T14172] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 472.314478][T14172] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 472.339945][T14172] ntfs3: loop2: Failed to load $Extend (-22). [ 472.351972][ T23] usb 1-1: USB disconnect, device number 5 [ 472.358191][T14172] ntfs3: loop2: Failed to initialize $Extend. [ 472.377160][ T23] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 472.428588][ T23] ti_usb_3410_5052 1-1:0.128: device disconnected [ 472.638766][ T28] audit: type=1326 audit(1756137105.444:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14181 comm="syz.2.3854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa33818ebe9 code=0x0 [ 472.794314][T14184] loop1: detected capacity change from 0 to 4096 [ 472.815009][T14184] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 472.937359][T14184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 472.961293][T14184] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 473.254748][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 473.366757][ T6381] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 473.436449][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 473.453848][ T9] usb 1-1: config 1 has an invalid interface number: 193 but max is 1 [ 473.467063][ T9] usb 1-1: config 1 has no interface number 1 [ 473.474398][ T9] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 473.494506][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 473.504280][ T9] usb 1-1: config 1 interface 193 has no altsetting 0 [ 473.522173][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 473.531498][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.544056][ T9] usb 1-1: Product: syz [ 473.548288][ T9] usb 1-1: Manufacturer: syz [ 473.553135][ T968] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 473.566585][ T9] usb 1-1: SerialNumber: syz [ 473.598196][ T6381] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 473.606997][T14216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.613302][ T6381] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 473.630648][ T6381] usb 4-1: Product: syz [ 473.634859][ T6381] usb 4-1: Manufacturer: syz [ 473.640196][ T6381] usb 4-1: SerialNumber: syz [ 473.650828][ T6381] usb 4-1: config 0 descriptor?? [ 473.659177][ T6381] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 473.668747][ T6381] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 473.741691][ T968] usb 2-1: not running at top speed; connect to a high speed hub [ 473.751038][ T968] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 473.759818][ T968] usb 2-1: config 95 has no interface number 0 [ 473.766081][ T968] usb 2-1: config 95 interface 1 has no altsetting 0 [ 473.781409][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 473.789479][ T968] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 473.800555][ T9] smsusb:smsusb_probe: board id=8, interface number 193 [ 473.807777][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.818412][ T9] usb 1-1: USB disconnect, device number 6 [ 473.824415][ T968] usb 2-1: Product: syz [ 473.828599][ T968] usb 2-1: Manufacturer: syz [ 473.833696][ T968] usb 2-1: SerialNumber: syz [ 473.861317][ T965] usb 4-1: USB disconnect, device number 13 [ 474.067672][ T968] usb 2-1: USB disconnect, device number 126 [ 474.128835][ T6294] udevd[6294]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.408329][T14226] loop0: detected capacity change from 0 to 256 [ 474.506925][ T5773] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 474.551297][T14231] dccp_invalid_packet: P.Data Offset(0) too small [ 474.780729][T14239] loop2: detected capacity change from 0 to 1764 [ 474.922389][ T968] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 475.058597][T14251] loop2: detected capacity change from 0 to 1024 [ 475.084736][T14251] hfsplus: failed to load root directory [ 475.108513][ T968] usb 4-1: Using ep0 maxpacket: 8 [ 475.141788][ T968] usb 4-1: unable to get BOS descriptor or descriptor too short [ 475.164957][ T968] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 475.187641][ T968] usb 4-1: config 0 has no interface number 0 [ 475.190989][T14253] loop2: detected capacity change from 0 to 128 [ 475.197340][ T968] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 475.229918][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 475.250368][ T968] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 475.271217][ T968] usb 4-1: config 0 interface 88 has no altsetting 0 [ 475.291433][ T968] usb 4-1: string descriptor 0 read error: -22 [ 475.303022][ T968] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 475.326265][ T968] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 475.352360][ T968] usb 4-1: config 0 descriptor?? [ 475.377523][ T968] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input40 [ 475.434601][ T9] usb 1-1: config 5 has an invalid interface number: 179 but max is 0 [ 475.464290][ T9] usb 1-1: config 5 has no interface number 0 [ 475.479088][ T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c [ 475.497842][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.514337][ T9] usb 1-1: Product: syz [ 475.518922][ T9] usb 1-1: Manufacturer: syz [ 475.523944][ T9] usb 1-1: SerialNumber: syz [ 475.559900][T14248] loop1: detected capacity change from 0 to 32768 [ 475.568304][T14248] (syz.1.3887,14248,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 475.578708][ T5773] udevd[5773]: Error opening device "/dev/input/event4": Input/output error [ 475.604460][ T5773] udevd[5773]: Unable to EVIOCGABS device "/dev/input/event4" [ 475.614576][ T5773] udevd[5773]: Unable to EVIOCGABS device "/dev/input/event4" [ 475.625320][ T5773] udevd[5773]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 475.630286][ T968] usb 4-1: USB disconnect, device number 14 [ 475.637464][ T6502] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 475.692829][ T5157] udevd[5157]: worker [5773] terminated by signal 6 (Aborted) [ 475.709816][ T5157] udevd[5157]: worker [5773] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input40/event4' [ 475.737745][ T9] usb 1-1: bad CDC descriptors [ 475.754405][ T9] usb 1-1: USB disconnect, device number 7 [ 475.770334][ T965] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 475.983831][ T965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 475.998530][ T965] usb 3-1: config 124 has an invalid interface number: 93 but max is 0 [ 476.006964][ T965] usb 3-1: config 124 has no interface number 0 [ 476.013520][ T965] usb 3-1: config 124 interface 93 has no altsetting 0 [ 476.027703][ T965] usb 3-1: New USB device found, idVendor=13d3, idProduct=3323, bcdDevice=22.97 [ 476.036944][T14262] loop1: detected capacity change from 0 to 8192 [ 476.037347][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.059112][T14262] REISERFS warning (device loop1): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 476.059112][T14262] [ 476.073196][ T965] usb 3-1: Product: syz [ 476.073233][ T965] usb 3-1: Manufacturer: syz [ 476.073247][ T965] usb 3-1: SerialNumber: syz [ 476.279396][ T965] r8712u: register rtl8712_netdev_ops to netdev_ops [ 476.312314][ T965] usb 3-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 476.356839][ T965] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 476.375703][ T965] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 476.388225][ T965] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 476.429019][ T965] usb 3-1: USB disconnect, device number 126 [ 476.639573][T14271] loop0: detected capacity change from 0 to 8192 [ 476.661720][T14271] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 476.676980][T14277] loop1: detected capacity change from 0 to 8192 [ 476.685884][T14271] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 476.698316][T14271] REISERFS (device loop0): using ordered data mode [ 476.712413][T14271] REISERFS warning (device loop0): sh-457 journal_init_dev: journal_init_dev: Cannot open './cgroup': -15 [ 476.726428][T14277] loop1: p1 < > p2 p3 < p5 > [ 476.731874][T14277] loop1: partition table partially beyond EOD, truncated [ 476.739803][T14271] REISERFS warning (device loop0): sh-462 journal_init: unable to initialize journal device [ 476.750444][T14277] loop1: p1 start 4177526784 is beyond EOD, truncated [ 476.757251][T14277] loop1: p2 start 163840 is beyond EOD, truncated [ 476.765318][T14277] loop1: p5 start 163840 is beyond EOD, truncated [ 476.842192][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 477.028842][ T6502] udevd[6502]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 477.052563][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 477.064283][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 477.075675][ T23] usb 4-1: config 127 has an invalid interface number: 224 but max is 0 [ 477.085944][ T23] usb 4-1: config 127 has no interface number 0 [ 477.092270][ T23] usb 4-1: config 127 interface 224 has no altsetting 0 [ 477.110482][ T23] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=ea.9e [ 477.120343][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.129880][ T23] usb 4-1: Product: syz [ 477.137281][ T23] usb 4-1: Manufacturer: syz [ 477.166892][ T23] usb 4-1: SerialNumber: syz [ 477.214189][ T6381] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 477.232869][ T5262] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 477.390395][ T6381] usb 1-1: Using ep0 maxpacket: 32 [ 477.406647][ T23] usb 4-1: Found UVC 0.00 device syz (30c9:0093) [ 477.414035][ T6381] usb 1-1: config 0 has an invalid interface number: 193 but max is 0 [ 477.428069][ T23] usb 4-1: No valid video chain found. [ 477.434772][ T6381] usb 1-1: config 0 has no interface number 0 [ 477.445415][ T5262] usb 2-1: Using ep0 maxpacket: 32 [ 477.455808][ T23] usb 4-1: USB disconnect, device number 15 [ 477.465418][ T6381] usb 1-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=f2.70 [ 477.477374][ T5262] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 477.488814][ T6381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.504683][ T5262] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 477.522448][ T6381] usb 1-1: Product: syz [ 477.527466][ T6381] usb 1-1: Manufacturer: syz [ 477.532538][ T5262] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.545879][ T6381] usb 1-1: SerialNumber: syz [ 477.560829][ T5262] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 477.571375][ T6381] usb 1-1: config 0 descriptor?? [ 477.581841][ T5262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.591084][ T6381] usb 1-1: selecting invalid altsetting 1 [ 477.597909][ T6381] catc 1-1:0.193: Can't set altsetting 1. [ 477.603828][ T5262] usb 2-1: Product: syz [ 477.608756][ T6381] catc: probe of 1-1:0.193 failed with error -5 [ 477.615740][ T5262] usb 2-1: Manufacturer: syz [ 477.620475][ T5262] usb 2-1: SerialNumber: syz [ 477.803125][ T9] usb 1-1: USB disconnect, device number 8 [ 477.811886][T14306] loop2: detected capacity change from 0 to 256 [ 477.821861][T14306] exfat: Deprecated parameter 'namecase' [ 477.827615][T14306] exfat: Deprecated parameter 'utf8' [ 477.833830][T14306] exfat: Deprecated parameter 'utf8' [ 477.844165][T14306] exfat: Deprecated parameter 'namecase' [ 477.854395][T14306] exfat: Deprecated parameter 'codepage' [ 477.858823][ T5262] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 477.863257][T14306] exfat: Bad value for 'codepage' [ 477.866861][ T5262] cdc_ncm 2-1:1.0: bind() failure [ 477.887695][ T5262] usb 2-1: USB disconnect, device number 127 [ 478.031384][T14308] loop2: detected capacity change from 0 to 128 [ 478.051573][T14308] hpfs: hpfs_map_sector(): read error [ 478.059158][T14308] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 478.077681][T14308] hpfs: hpfs_map_sector(): read error [ 478.321446][T14318] loop2: detected capacity change from 0 to 47 [ 478.512877][T14326] (syz.3.3924,14326,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 478.527302][T14326] (syz.3.3924,14326,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 478.762639][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 478.789600][ T5262] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 478.957553][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 478.971742][ T9] usb 3-1: config 184 has an invalid interface number: 240 but max is 0 [ 478.997015][ T5262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 478.997482][ T9] usb 3-1: config 184 has no interface number 0 [ 479.015505][ T5262] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 479.034722][ T5262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.042197][ T9] usb 3-1: config 184 interface 240 altsetting 6 bulk endpoint 0x84 has invalid maxpacket 8 [ 479.056048][ T5262] usb 2-1: Product: syz [ 479.063422][ T9] usb 3-1: config 184 interface 240 has no altsetting 0 [ 479.071034][ T5262] usb 2-1: Manufacturer: syz [ 479.078442][ T9] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=cf.e7 [ 479.081912][T14342] loop3: detected capacity change from 0 to 512 [ 479.094109][ T5262] usb 2-1: SerialNumber: syz [ 479.097383][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.106215][ T5262] usb 2-1: config 0 descriptor?? [ 479.128359][ T9] usb 3-1: Product: syz [ 479.132583][ T9] usb 3-1: Manufacturer: syz [ 479.135926][T14334] loop0: detected capacity change from 0 to 32768 [ 479.144468][ T9] usb 3-1: SerialNumber: syz [ 479.144706][T14342] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 479.178891][T14342] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 479.196330][T14342] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 479.215811][T14325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.224954][T14342] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 479.233234][T14342] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 479.244782][T14342] EXT4-fs (loop3): failed to initialize system zone (-117) [ 479.255010][T14342] EXT4-fs (loop3): mount failed [ 479.280639][T14334] (syz.0.3928,14334,1):ocfs2_read_journal_inode:1659 ERROR: status = -13 [ 479.290867][T14334] (syz.0.3928,14334,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13 [ 479.299499][T14334] (syz.0.3928,14334,1):ocfs2_check_volume:2478 ERROR: status = -13 [ 479.308594][T14334] (syz.0.3928,14334,1):ocfs2_check_volume:2490 ERROR: status = -13 [ 479.316836][T14334] (syz.0.3928,14334,1):ocfs2_mount_volume:1822 ERROR: status = -13 [ 479.375081][T14334] (syz.0.3928,14334,1):ocfs2_fill_super:1178 ERROR: status = -13 [ 479.431078][ T5262] usb 2-1: USB disconnect, device number 2 [ 479.454871][ T9] kvaser_usb 3-1:184.240: Cannot get usb endpoint(s) [ 479.516936][ T9] usb 3-1: USB disconnect, device number 127 [ 479.536698][ T6519] udevd[6519]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.721977][ T6381] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 479.917297][ T6381] usb 4-1: Using ep0 maxpacket: 16 [ 479.928689][ T6381] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 479.937981][ T6381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.946064][ T6381] usb 4-1: Product: syz [ 479.950257][ T6381] usb 4-1: Manufacturer: syz [ 479.956017][ T6381] usb 4-1: SerialNumber: syz [ 479.962226][ T6381] r8152-cfgselector 4-1: config 0 descriptor?? [ 480.035068][T14357] loop1: detected capacity change from 0 to 1024 [ 480.050799][T14357] hfsplus: failed to load catalog file [ 480.100165][ T965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 480.183247][ T6381] r8152-cfgselector 4-1: Unknown version 0x0000 [ 480.197259][ T6381] r8152-cfgselector 4-1: bad CDC descriptors [ 480.214106][ T6381] r8152-cfgselector 4-1: Unknown version 0x0000 [ 480.233450][ T6381] r8152-cfgselector 4-1: USB disconnect, device number 16 [ 480.301430][ T965] usb 1-1: Using ep0 maxpacket: 16 [ 480.332339][ T965] usb 1-1: config 4 has an invalid interface number: 141 but max is 0 [ 480.347122][ T965] usb 1-1: config 4 has no interface number 0 [ 480.369766][ T965] usb 1-1: New USB device found, idVendor=a168, idProduct=0617, bcdDevice= 0.d4 [ 480.392663][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.400714][ T965] usb 1-1: Product: syz [ 480.404996][ T965] usb 1-1: Manufacturer: syz [ 480.409620][ T965] usb 1-1: SerialNumber: syz [ 480.613856][ T965] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0617 [ 480.616804][ T5262] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 480.635618][ T965] gspca_sn9c20x: Write register 1000 failed -71 [ 480.648403][ T965] gspca_sn9c20x: Device initialization failed [ 480.658144][ T965] gspca_sn9c20x: probe of 1-1:4.141 failed with error -71 [ 480.671512][ T965] usb 1-1: USB disconnect, device number 9 [ 480.732230][T14369] loop1: detected capacity change from 0 to 32768 [ 480.750756][T14369] XFS: attr2 mount option is deprecated. [ 480.796234][ T5262] usb 3-1: Using ep0 maxpacket: 16 [ 480.801799][T14369] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 480.815888][ T5262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.833007][ T5262] usb 3-1: config 1 has an invalid interface number: 26 but max is 1 [ 480.843006][ T5262] usb 3-1: config 1 has an invalid interface number: 89 but max is 1 [ 480.856160][ T5262] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.867277][ T5262] usb 3-1: config 1 has no interface number 0 [ 480.873927][ T5262] usb 3-1: config 1 has no interface number 1 [ 480.880395][ T5262] usb 3-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 480.894175][ T5262] usb 3-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 480.905496][T14369] XFS (loop1): Ending clean mount [ 480.907917][ T5262] usb 3-1: config 1 interface 26 has no altsetting 0 [ 480.923624][ T5262] usb 3-1: config 1 interface 89 has no altsetting 0 [ 480.942644][ T5262] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 480.952193][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.955516][T14369] XFS (loop1): Quotacheck needed: Please wait. [ 480.960194][ T5262] usb 3-1: Product: syz [ 480.960214][ T5262] usb 3-1: Manufacturer: syz [ 480.960226][ T5262] usb 3-1: SerialNumber: syz [ 481.007397][ T3520] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1147 dinode [ 481.018803][ T3520] XFS (loop1): Unmount and run xfs_repair [ 481.030544][ T3520] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 481.041769][ T3520] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 481.056608][ T3520] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 481.068979][ T3520] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 481.081723][ T3520] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 23 28 4.Xh..........#( [ 481.097785][ T3520] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 481.107073][ T3520] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 26 5e 39 07 ............&^9. [ 481.122732][ T3520] 00000060: ff ff ff ff 7b 71 11 b8 00 00 00 00 00 00 00 06 ....{q.......... [ 481.134146][ T3520] 00000070: 00 00 00 01 00 00 00 10 01 01 00 00 00 00 00 08 ................ [ 481.201249][ T5262] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 481.210940][T14369] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 481.239665][ T5262] usb 3-1: 26:2 : does not exist [ 481.265919][T14383] loop3: detected capacity change from 0 to 4096 [ 481.275796][ T5262] usb 3-1: unknown interface protocol 0x13, assuming v1 [ 481.294530][ T5262] usb 3-1: 89:0 : does not exist [ 481.326892][T14383] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 481.362381][T14383] ntfs3: loop3: try to read out of volume at offset 0x1ffc00 [ 481.390599][T14383] ntfs3: loop3: Failed to load $MFT. [ 481.395384][ T5262] usb 3-1: USB disconnect, device number 2 [ 481.460616][ T6323] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 481.469988][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.642273][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 481.847188][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 481.862247][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 481.899659][ T9] usb 1-1: config 8 has an invalid interface number: 24 but max is 1 [ 481.912119][ T9] usb 1-1: config 8 has an invalid interface number: 242 but max is 1 [ 481.930685][ T9] usb 1-1: config 8 has no interface number 0 [ 481.944254][ T9] usb 1-1: config 8 has no interface number 1 [ 481.958852][ T9] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 481.983751][ T9] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 482.003787][T14393] loop2: detected capacity change from 0 to 4096 [ 482.015142][ T9] usb 1-1: config 8 interface 24 has no altsetting 0 [ 482.022123][ T9] usb 1-1: config 8 interface 242 has no altsetting 0 [ 482.024934][T14393] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 482.031482][ T9] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 482.047312][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.055371][ T9] usb 1-1: Product: syz [ 482.059583][ T9] usb 1-1: Manufacturer: syz [ 482.064291][ T9] usb 1-1: SerialNumber: syz [ 482.083531][T14387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 482.152384][T14393] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 482.177801][T14393] ntfs3: loop2: Failed to load $Extend (-22). [ 482.202064][T14393] ntfs3: loop2: Failed to initialize $Extend. [ 482.254948][T14399] loop1: detected capacity change from 0 to 128 [ 482.343914][ T9] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 482.384743][ T9] vmk80xx 1-1:8.242: driver 'vmk80xx' failed to auto-configure device. [ 482.405840][T14391] loop3: detected capacity change from 0 to 32768 [ 482.439161][ T9] usb 1-1: USB disconnect, device number 10 [ 482.492130][T14391] JBD2: Ignoring recovery information on journal [ 482.529609][T14391] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 482.622841][T14391] JBD2: bad block at offset 32 [ 482.634699][T14404] loop1: detected capacity change from 0 to 128 [ 482.656854][T14391] (syz.3.3952,14391,0):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 482.694737][T14391] (syz.3.3952,14391,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 482.706437][T14404] hpfs: hpfs_map_sector(): read error [ 482.711868][T14404] hpfs: filesystem error: can't load hotfix map; already mounted read-only [ 482.730080][T14391] (syz.3.3952,14391,0):ocfs2_check_volume:2462 ERROR: status = -22 [ 482.744155][T14391] (syz.3.3952,14391,0):ocfs2_check_volume:2490 ERROR: status = -22 [ 482.763787][T14391] (syz.3.3952,14391,0):ocfs2_mount_volume:1822 ERROR: status = -22 [ 482.769584][T14404] hpfs: hpfs_map_sector(): read error [ 482.819814][T14391] (syz.3.3952,14391,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 483.026380][T14409] loop1: detected capacity change from 0 to 128 [ 483.068200][T14409] FAT-fs (loop1): bogus number of FAT structure [ 483.077312][T14409] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 483.096758][T14409] FAT-fs (loop1): Can't find a valid FAT filesystem [ 483.172427][T14402] loop2: detected capacity change from 0 to 40427 [ 483.186801][T14402] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 483.204254][T14402] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xeffa [ 483.233294][T14402] F2FS-fs (loop2): invalid crc value [ 483.271671][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 483.288269][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 483.309856][T14402] F2FS-fs (loop2): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x458d/0x6c20 [ 483.336050][T14402] F2FS-fs (loop2): Failed to initialize F2FS node manager (-12) [ 483.377326][T14415] loop1: detected capacity change from 0 to 128 [ 483.430432][T14417] loop0: detected capacity change from 0 to 4096 [ 483.442622][ T6294] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 483.487842][T14417] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 483.488910][ T9] usb 4-1: config index 0 descriptor too short (expected 13649, got 18) [ 483.519360][T14417] NILFS (loop0): mounting unchecked fs [ 483.558076][T14417] NILFS (loop0): recovery required for readonly filesystem [ 483.561510][ T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=a3.c0 [ 483.592960][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.600990][T14417] NILFS (loop0): write access will be enabled during recovery [ 483.634838][T14417] NILFS (loop0): invalid segment: Checksum error in super root [ 483.661885][ T9] usb 4-1: Product: syz [ 483.664443][ T6502] udevd[6502]: incorrect nilfs2 checksum on /dev/loop0 [ 483.678025][T14419] loop1: detected capacity change from 0 to 128 [ 483.682138][T14417] NILFS (loop0): error -22 while loading super root [ 483.684691][ T9] usb 4-1: Manufacturer: syz [ 483.717447][T14419] hpfs: bad mount options. [ 483.732939][ T9] usb 4-1: SerialNumber: syz [ 483.852006][ T6502] udevd[6502]: incorrect nilfs2 checksum on /dev/loop0 [ 483.967848][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 484.015720][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 484.041036][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 484.071774][ T9] usb 4-1: USB disconnect, device number 17 [ 484.356962][T14435] loop1: detected capacity change from 0 to 128 [ 484.382959][T14435] ufs: You didn't specify the type of your ufs filesystem [ 484.382959][T14435] [ 484.382959][T14435] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 484.382959][T14435] [ 484.382959][T14435] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 484.426505][T14435] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 484.502462][T14427] loop0: detected capacity change from 0 to 32768 [ 484.520999][T14427] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 484.534776][T14427] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 484.559670][T14427] BTRFS info (device loop0): using free space tree [ 484.586523][T14443] loop1: detected capacity change from 0 to 8 [ 484.592931][ T5262] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 484.656362][T14443] SQUASHFS error: lzo decompression failed, data probably corrupt [ 484.691007][T14443] SQUASHFS error: Failed to read block 0x91: -5 [ 484.697373][T14443] SQUASHFS error: Unable to read metadata cache entry [8f] [ 484.711584][T14443] SQUASHFS error: Unable to read inode 0x11f [ 484.717721][T14427] BTRFS info (device loop0): enabling ssd optimizations [ 484.725768][T14427] BTRFS info (device loop0): auto enabling async discard [ 484.740897][T14454] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 484.764524][ T5262] usb 3-1: Using ep0 maxpacket: 32 [ 484.777011][ T5262] usb 3-1: config 0 has an invalid interface number: 84 but max is 1 [ 484.799506][ T5262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 484.822109][ T5262] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.861694][ T5262] usb 3-1: config 0 has no interface number 0 [ 484.883278][ T5262] usb 3-1: config 0 interface 84 altsetting 127 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.910166][ T6317] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 484.921909][ T5262] usb 3-1: config 0 interface 84 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 15 [ 484.976669][ T5262] usb 3-1: config 0 interface 84 has no altsetting 0 [ 484.995375][ T5262] usb 3-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=db.55 [ 485.021124][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.039319][ T5262] usb 3-1: Product: syz [ 485.048850][ T5262] usb 3-1: Manufacturer: syz [ 485.073623][ T5262] usb 3-1: SerialNumber: syz [ 485.092473][ T5262] usb 3-1: config 0 descriptor?? [ 485.228563][T14461] loop0: detected capacity change from 0 to 512 [ 485.269588][T14461] EXT4-fs: Ignoring removed orlov option [ 485.307032][ T5262] appletouch 3-1:0.84: Could not find int-in endpoint [ 485.313959][ T5262] appletouch: probe of 3-1:0.84 failed with error -5 [ 485.314933][T14461] EXT4-fs: Ignoring removed nomblk_io_submit option [ 485.356549][ T5262] usbhid 3-1:0.84: couldn't find an input interrupt endpoint [ 485.387892][ T5262] usb 3-1: USB disconnect, device number 3 [ 485.408266][T14461] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.3976: inode #0: comm syz.0.3976: iget: illegal inode # [ 485.468317][T14461] EXT4-fs (loop0): Remounting filesystem read-only [ 485.476351][T14461] EXT4-fs (loop0): get orphan inode failed [ 485.482624][T14461] EXT4-fs (loop0): mount failed [ 485.795918][T14457] loop1: detected capacity change from 0 to 32768 [ 485.830283][T14459] loop3: detected capacity change from 0 to 40427 [ 485.842691][T14459] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 485.857528][T14457] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 485.892884][T14459] F2FS-fs (loop3): invalid crc value [ 485.911255][T14459] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:5, type:0, next_blkoff:0, blkofs:0 [ 485.996675][ T6398] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 486.022835][T14459] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 486.049535][T14457] XFS (loop1): Ending clean mount [ 486.145479][ T6323] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 486.226158][ T6398] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 486.244837][ T6398] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 486.287931][ T965] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 486.296642][ T6398] usb 1-1: config 0 has no interface number 0 [ 486.327385][ T6398] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 486.358740][ T6398] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.374057][ T6398] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 486.396488][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 486.439035][ T6398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.454568][ T6398] usb 1-1: config 0 descriptor?? [ 486.516790][ T965] usb 3-1: Using ep0 maxpacket: 8 [ 486.525630][ T965] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4 [ 486.535199][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.543700][ T965] usb 3-1: Product: syz [ 486.547987][ T965] usb 3-1: Manufacturer: syz [ 486.552629][ T965] usb 3-1: SerialNumber: syz [ 486.570114][ T965] usb 3-1: bad CDC descriptors [ 486.612110][ T9] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 486.620902][ T9] usb 4-1: config 0 has no interface number 0 [ 486.627455][ T9] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.638560][ T9] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.651584][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 486.666323][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.675470][ T6398] usb 1-1: USB disconnect, device number 11 [ 486.681619][ T9] usb 4-1: Product: syz [ 486.687896][ T9] usb 4-1: Manufacturer: syz [ 486.693588][ T9] usb 4-1: SerialNumber: syz [ 486.700990][ T9] usb 4-1: config 0 descriptor?? [ 486.707251][ T5262] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 486.709814][ T9] yurex 4-1:0.50: Could not submitting URB [ 486.721223][ T9] yurex: probe of 4-1:0.50 failed with error -5 [ 486.760639][ T6329] usb 3-1: USB disconnect, device number 4 [ 486.784319][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.792205][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.891956][ T5262] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 486.902314][ T5262] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 486.929622][ T5262] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.945205][ T5262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 486.946378][ T6398] usb 4-1: USB disconnect, device number 18 [ 486.953800][ T5262] usb 2-1: SerialNumber: syz [ 486.976261][T14480] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 486.990947][ T5262] usb 2-1: bad CDC descriptors [ 487.193830][ T5262] usb 2-1: USB disconnect, device number 3 [ 487.469040][ T6398] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 487.544123][T14486] loop3: detected capacity change from 0 to 4096 [ 487.552396][T14486] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 487.587887][T14486] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 487.596836][T14486] ntfs3: loop3: Failed to load $Extend (-22). [ 487.603844][T14486] ntfs3: loop3: Failed to initialize $Extend. [ 487.658805][ T6398] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 487.671235][ T6398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.703428][ T6398] usb 1-1: config 0 descriptor?? [ 487.723465][ T6398] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 487.739405][ T6398] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 487.929342][ T6398] usb 1-1: USB disconnect, device number 12 [ 487.948159][ T6398] ftdi_sio 1-1:0.0: device disconnected [ 488.200353][T14490] loop1: detected capacity change from 0 to 32768 [ 488.210574][T14490] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.3984 (14490) [ 488.212644][T14488] loop3: detected capacity change from 0 to 32768 [ 488.230934][T14488] XFS: ikeep mount option is deprecated. [ 488.263375][T14488] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 488.281636][T14490] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 488.308309][T14490] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 488.334650][T14490] BTRFS info (device loop1): enabling ssd optimizations [ 488.345418][T14490] BTRFS info (device loop1): using spread ssd allocation scheme [ 488.374327][T14490] BTRFS info (device loop1): disabling free space tree [ 488.391040][T14490] BTRFS info (device loop1): max_inline at 0 [ 488.398509][T14488] XFS (loop3): Internal error head_block >= tail_block || head_cycle != tail_cycle + 1 at line 1649 of file fs/xfs/xfs_log_recover.c. Caller xlog_clear_stale_blocks+0x2d6/0x420 [ 488.409594][T14490] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 488.453227][T14488] CPU: 1 PID: 14488 Comm: syz.3.3983 Not tainted 6.6.102-syzkaller #0 [ 488.457371][T14490] BTRFS info (device loop1): use lzo compression, level 0 [ 488.461514][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 488.461535][T14488] Call Trace: [ 488.461545][T14488] [ 488.461555][T14488] dump_stack_lvl+0x16c/0x230 [ 488.489708][T14488] ? show_regs_print_info+0x20/0x20 [ 488.493264][T14490] BTRFS info (device loop1): turning off barriers [ 488.494938][T14488] xfs_corruption_error+0x122/0x170 [ 488.506557][T14488] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 488.512315][T14488] xlog_clear_stale_blocks+0x377/0x420 [ 488.517903][T14488] ? xlog_clear_stale_blocks+0x2d6/0x420 [ 488.521583][T14490] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 488.523549][T14488] xlog_find_tail+0x7ac/0xa00 [ 488.537167][T14488] xlog_recover+0x4c/0x450 [ 488.541668][T14488] xfs_log_mount+0x2c2/0x470 [ 488.546289][T14488] xfs_mountfs+0xc48/0x1d20 [ 488.550850][T14488] ? lockdep_softirqs_off+0x430/0x430 [ 488.556269][T14488] ? xfs_default_resblks+0x70/0x70 [ 488.559928][T14490] BTRFS error (device loop1): cannot disable free space tree [ 488.561391][T14488] ? init_timer_key+0x161/0x2a0 [ 488.573728][T14488] ? rcu_is_watching+0x15/0xb0 [ 488.578532][T14488] ? trace_xfs_inode_timestamp_range+0x84/0x1d0 [ 488.581998][T14490] BTRFS error (device loop1): open_ctree failed: -22 [ 488.584784][T14488] xfs_fs_fill_super+0x112f/0x13a0 [ 488.596670][T14488] get_tree_bdev+0x3e4/0x510 [ 488.601379][T14488] ? vfs_parse_fs_string+0x160/0x160 [ 488.606709][T14488] ? xfs_fs_warn_deprecated+0x190/0x190 [ 488.612282][T14488] ? setup_bdev_super+0x660/0x660 [ 488.617335][T14488] ? apparmor_capable+0x137/0x1a0 [ 488.622391][T14488] ? bpf_lsm_capable+0x9/0x10 [ 488.627100][T14488] ? security_capable+0x89/0xb0 [ 488.631995][T14488] vfs_get_tree+0x8c/0x280 [ 488.636454][T14488] do_new_mount+0x24b/0xa40 [ 488.641010][T14488] __se_sys_mount+0x2da/0x3c0 [ 488.645725][T14488] ? __x64_sys_mount+0xc0/0xc0 [ 488.650524][T14488] ? lockdep_hardirqs_on+0x98/0x150 [ 488.655761][T14488] ? __x64_sys_mount+0x20/0xc0 [ 488.660558][T14488] do_syscall_64+0x55/0xb0 [ 488.665097][T14488] ? clear_bhb_loop+0x40/0x90 [ 488.669810][T14488] ? clear_bhb_loop+0x40/0x90 [ 488.674531][T14488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.680554][T14488] RIP: 0033:0x7ffb6cf9038a [ 488.684998][T14488] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.704633][T14488] RSP: 002b:00007ffb6dd21e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 488.713080][T14488] RAX: ffffffffffffffda RBX: 00007ffb6dd21ef0 RCX: 00007ffb6cf9038a [ 488.721094][T14488] RDX: 0000200000009600 RSI: 0000200000009640 RDI: 00007ffb6dd21eb0 [ 488.726672][ T965] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 488.729081][T14488] RBP: 0000200000009600 R08: 00007ffb6dd21ef0 R09: 0000000000200800 [ 488.729099][T14488] R10: 0000000000200800 R11: 0000000000000246 R12: 0000200000009640 [ 488.729111][T14488] R13: 00007ffb6dd21eb0 R14: 0000000000009636 R15: 0000200000000100 [ 488.729137][T14488] [ 488.756090][T14488] XFS (loop3): Corruption detected. Unmount and run xfs_repair [ 488.774603][T14488] XFS (loop3): failed to locate log tail [ 488.780293][T14488] XFS (loop3): log mount/recovery failed: error -117 [ 488.807420][T14488] XFS (loop3): log mount failed [ 488.819548][ T6398] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 488.928102][ T6294] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by udevd (6294) [ 489.015348][ T6398] usb 1-1: Using ep0 maxpacket: 8 [ 489.030988][ T6398] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 489.039737][ T6398] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.062773][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 489.072754][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 489.087207][ T6398] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 489.097660][ T6398] usb 1-1: config 1 has no interface number 0 [ 489.113935][ T6398] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.125438][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 489.135554][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 489.147345][ T6398] usb 1-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.169763][ T6398] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 489.179330][ T6398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.188149][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 489.201575][ T6398] usb 1-1: Product: syz [ 489.205798][ T6398] usb 1-1: Manufacturer: syz [ 489.217367][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 489.227512][ T6398] usb 1-1: SerialNumber: syz [ 489.243303][ T6398] cdc_wdm 1-1:1.128: skipping garbage [ 489.252057][ T6398] cdc_wdm 1-1:1.128: cdc-wdm0: USB WDM device [ 489.259281][ T6398] cdc_wdm 1-1:1.128: Unknown control protocol [ 489.266533][ T965] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 489.286375][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.294504][ T965] usb 3-1: Product: syz [ 489.306635][ T965] usb 3-1: Manufacturer: syz [ 489.331401][ T965] usb 3-1: SerialNumber: syz [ 489.351360][ T965] usb 3-1: config 0 descriptor?? [ 489.378706][ T965] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 489.412410][ T965] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 489.480192][ T965] usb 1-1: USB disconnect, device number 13 [ 489.620302][ T6398] usb 3-1: USB disconnect, device number 5 [ 490.036519][ T965] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 490.051543][T14518] loop1: detected capacity change from 0 to 40427 [ 490.072083][T14518] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 490.084265][T14518] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 490.122783][T14518] F2FS-fs (loop1): Found nat_bits in checkpoint [ 490.229065][ T965] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 490.248577][ T965] usb 4-1: config 0 has no interface number 0 [ 490.255596][ T965] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 490.273188][T14518] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 490.292043][T14518] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 490.303569][ T965] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 490.325830][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.343855][ T965] usb 4-1: Product: syz [ 490.366849][ T965] usb 4-1: Manufacturer: syz [ 490.371600][ T965] usb 4-1: SerialNumber: syz [ 490.405515][ T965] usb 4-1: config 0 descriptor?? [ 490.420442][T14520] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 490.461974][ T965] ums-karma 4-1:0.46: USB Mass Storage device detected [ 490.517208][ T965] ums-karma: probe of 4-1:0.46 failed with error -5 [ 490.715547][ T5262] usb 4-1: USB disconnect, device number 19 [ 490.756125][T14522] loop0: detected capacity change from 0 to 40427 [ 490.771386][T14522] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 490.782087][T14522] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 490.813338][T14522] F2FS-fs (loop0): invalid crc value [ 490.847751][T14522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 490.917060][ T965] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 490.945433][T14522] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 490.961553][T14522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 491.112406][ T965] usb 3-1: Using ep0 maxpacket: 8 [ 491.119568][ T965] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.143268][ T965] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 491.159346][ T965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.184055][ T965] usb 3-1: Product: syz [ 491.193365][ T965] usb 3-1: Manufacturer: syz [ 491.202712][ T965] usb 3-1: SerialNumber: syz [ 491.210826][ T965] usb 3-1: config 0 descriptor?? [ 491.227766][ T965] usb 3-1: invalid MIDI EP [ 491.236972][ T965] usb 3-1: snd-bcd2000: error during probing [ 491.256944][ T965] snd-bcd2000: probe of 3-1:0.0 failed with error -22 [ 491.380446][T14541] loop1: detected capacity change from 0 to 32768 [ 491.474892][ T6329] usb 3-1: USB disconnect, device number 6 [ 491.513102][T14541] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 491.597382][ T3520] (kworker/u4:7,3520,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 491.710647][ T6323] (syz-executor,6323,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70 [ 491.744057][ T6323] (syz-executor,6323,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 491.814543][ T6323] ocfs2: Unmounting device (7,1) on (node local) [ 492.055454][T14549] loop0: detected capacity change from 0 to 32768 [ 492.083246][T14549] XFS: noattr2 mount option is deprecated. [ 492.185729][T14549] XFS (loop0): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 492.584334][T14567] syz.0.4010: attempt to access beyond end of device [ 492.584334][T14567] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 492.636871][T14546] loop3: detected capacity change from 0 to 32768 [ 492.650859][T14567] vxfs: unable to read disk superblock at 1 [ 492.657169][T14567] syz.0.4010: attempt to access beyond end of device [ 492.657169][T14567] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 492.700968][T14546] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 492.700968][T14546] [ 492.723375][T14567] vxfs: unable to read disk superblock at 8 [ 492.753897][T14546] ERROR: (device loop3): remounting filesystem as read-only [ 492.761333][T14546] xtLookup: xtSearch returned -5 [ 492.769580][T14567] vxfs: can't find superblock. [ 492.804555][T14546] read_mapping_page failed! [ 492.837744][T14546] jfs_mount: dbMount failed w/rc = -5 [ 492.843429][T14546] Mount JFS Failure: -5 [ 492.871922][T14546] jfs_mount failed w/return code = -5 [ 493.266437][ T6398] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 493.361176][T14563] loop1: detected capacity change from 0 to 40427 [ 493.392505][T14563] F2FS-fs (loop1): invalid crc value [ 493.470436][ T6398] usb 1-1: Using ep0 maxpacket: 32 [ 493.487639][ T6398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.524855][ T6398] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 493.557360][ T6398] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 493.570288][ T6398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.580366][ T6398] usb 1-1: Product: syz [ 493.588183][T14563] F2FS-fs (loop1): Start checkpoint disabled! [ 493.595207][ T6398] usb 1-1: Manufacturer: syz [ 493.600181][ T6398] usb 1-1: SerialNumber: syz [ 493.601733][ T5262] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 493.607385][T14563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 493.621725][ T6398] usb 1-1: config 0 descriptor?? [ 493.631277][ T6398] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 493.797379][ T6329] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 493.817479][ T5262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 493.827534][ T5262] usb 3-1: config 7 has an invalid interface number: 174 but max is 0 [ 493.843993][ T5262] usb 3-1: config 7 has no interface number 0 [ 493.850144][ T5262] usb 3-1: config 7 interface 174 has no altsetting 0 [ 493.865674][ T6301] usb 1-1: USB disconnect, device number 14 [ 493.875198][ T5262] usb 3-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=92.f8 [ 493.902220][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.918029][ T5262] usb 3-1: Product: syz [ 493.922685][ T5262] usb 3-1: Manufacturer: syz [ 493.927305][ T5262] usb 3-1: SerialNumber: syz [ 493.993304][ T6329] usb 4-1: Using ep0 maxpacket: 16 [ 494.000816][ T6329] usb 4-1: config index 0 descriptor too short (expected 17170, got 18) [ 494.010173][ T6329] usb 4-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 494.019126][ T6329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 494.032156][ T6329] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 494.041825][ T6329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.050388][ T6329] usb 4-1: Product: syz [ 494.054626][ T6329] usb 4-1: Manufacturer: syz [ 494.060208][ T6329] usb 4-1: SerialNumber: syz [ 494.072421][ T6329] usb 4-1: config 0 descriptor?? [ 494.088542][ T6329] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 494.111774][T14594] loop1: detected capacity change from 0 to 1764 [ 494.153140][ T5262] zaurus 3-1:7.174: More than one union descriptor, skipping ... [ 494.163358][ T5262] usb 3-1: bad CDC descriptors [ 494.170223][ T5775] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.201090][ T5262] usb 3-1: USB disconnect, device number 7 [ 494.331279][ T6301] usb 4-1: USB disconnect, device number 20 [ 494.511725][T14605] loop1: detected capacity change from 0 to 764 [ 494.541738][T14605] rock: directory entry would overflow storage [ 494.548829][T14605] rock: sig=0x5245, size=8, remaining=5 [ 494.855403][T14615] loop2: detected capacity change from 0 to 128 [ 494.888950][T14615] affs: Error parsing options [ 494.961085][ T6502] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 495.229034][T14629] loop1: detected capacity change from 0 to 4096 [ 495.254194][T14629] ntfs: (device loop1): map_mft_record_page(): Attempt to read mft record 0x1, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 495.299358][T14629] ntfs: (device loop1): map_mft_record(): Failed with error code 2. [ 495.323945][T14629] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 495.368751][T14629] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 495.383418][ T968] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 495.409770][T14629] ntfs: (device loop1): map_mft_record_page(): Attempt to read mft record 0x0, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 495.426026][T14629] ntfs: (device loop1): map_mft_record(): Failed with error code 2. [ 495.435587][T14629] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 495.460983][T14629] ntfs: (device loop1): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 495.471526][T14629] ntfs: (device loop1): ntfs_fill_super(): Failed to load system files. [ 495.561775][ T968] usb 3-1: config 0 has an invalid interface number: 161 but max is 0 [ 495.570278][ T968] usb 3-1: config 0 has no interface number 0 [ 495.576392][ T968] usb 3-1: config 0 interface 161 has no altsetting 0 [ 495.605443][ T968] usb 3-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=33.62 [ 495.606426][T14619] loop0: detected capacity change from 0 to 32768 [ 495.629231][T14619] XFS: attr2 mount option is deprecated. [ 495.640408][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.682420][ T968] usb 3-1: config 0 descriptor?? [ 495.690906][ T968] cxacru 3-1:0.161: usbatm_usb_probe: bind failed: -19! [ 495.695972][T14619] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 495.754709][T14619] XFS (loop0): Ending clean mount [ 495.777310][T14619] XFS (loop0): Quotacheck needed: Please wait. [ 495.803787][ T1070] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x2b9/0x1140, inode 0x1147 dinode [ 495.820376][ T1070] XFS (loop0): Unmount and run xfs_repair [ 495.826160][ T1070] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 495.835145][ T1070] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 495.844627][ T1070] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 495.858514][ T1070] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 495.869734][ T1070] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 23 28 4.Xh..........#( [ 495.894641][ T1070] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 495.915392][ T1070] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 26 5e 39 07 ............&^9. [ 495.937112][ T968] usb 3-1: USB disconnect, device number 8 [ 495.943230][ T1070] 00000060: ff ff ff ff 7b 71 11 b8 00 00 00 00 00 00 00 06 ....{q.......... [ 495.961532][ T1070] 00000070: 00 00 00 01 00 00 00 10 01 01 00 00 00 00 00 08 ................ [ 496.011654][T14619] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 496.195174][T14645] loop1: detected capacity change from 0 to 512 [ 496.213726][ T6317] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 496.226229][T14645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 496.242154][T14645] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 496.256804][T14645] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 496.272088][T14645] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 496.307161][T14645] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 496.319966][T14645] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 496.329942][T14645] EXT4-fs (loop1): too many log groups per flexible block group [ 496.339130][T14645] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 496.346125][T14645] EXT4-fs (loop1): mount failed [ 496.886419][T14653] loop1: detected capacity change from 0 to 1024 [ 496.950580][T14653] hfsplus: failed to load extents file [ 497.009039][T14659] loop0: detected capacity change from 0 to 512 [ 497.016477][T14659] EXT4-fs: Ignoring removed mblk_io_submit option [ 497.026595][T14659] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 497.068514][T14659] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 497.097570][ T6398] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 497.110612][T14659] EXT4-fs (loop0): orphan cleanup on readonly fs [ 497.155626][T14659] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.4049: Invalid block bitmap block 0 in block_group 0 [ 497.175109][T14659] EXT4-fs (loop0): Remounting filesystem read-only [ 497.182321][T14659] Quota error (device loop0): write_blk: dquota write failed [ 497.190662][T14659] EXT4-fs (loop0): 1 orphan inode deleted [ 497.206071][T14659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.311875][ T6398] usb 3-1: Using ep0 maxpacket: 8 [ 497.321623][ T6398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.359107][ T6398] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 497.380474][ T6398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.409493][ T6398] usb 3-1: Product: syz [ 497.418679][ T6398] usb 3-1: Manufacturer: syz [ 497.429852][ T6317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.433258][ T6398] usb 3-1: SerialNumber: syz [ 497.481788][ T6398] usb 3-1: config 0 descriptor?? [ 497.496100][ T6398] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 497.569013][T14675] loop1: detected capacity change from 0 to 512 [ 497.605606][T14675] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 497.639359][T14675] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 497.693611][ T5262] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 497.754961][ T6398] usb 3-1: USB disconnect, device number 9 [ 497.874066][ T5262] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 497.892129][ T5262] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 497.901847][ T5262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.918171][ T5262] usb 4-1: Product: syz [ 497.922395][ T5262] usb 4-1: Manufacturer: syz [ 497.935179][ T5262] usb 4-1: SerialNumber: syz [ 497.953574][ T5262] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input42 [ 497.969623][T14687] loop0: detected capacity change from 0 to 512 [ 497.980888][T14687] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.023321][T14689] loop1: detected capacity change from 0 to 2048 [ 498.032415][T14689] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 498.145375][ T5142] bcm5974 4-1:1.0: could not read from device [ 498.172121][ T5262] usb 4-1: USB disconnect, device number 21 [ 498.193616][ T5142] bcm5974 4-1:1.0: could not read from device [ 498.258877][ T5775] udevd[5775]: Error opening device "/dev/input/event4": No such file or directory [ 498.281287][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 498.289101][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 498.297658][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 498.311296][ T5775] udevd[5775]: Unable to EVIOCGABS device "/dev/input/event4" [ 498.526127][T14697] loop2: detected capacity change from 0 to 4096 [ 498.559216][T14697] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 498.568347][T14697] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 498.577367][T14697] ntfs3: loop2: mft corrupted [ 498.588533][T14697] ntfs3: loop2: Failed to load root (-22). [ 498.607562][T14697] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 498.800443][T14705] loop2: detected capacity change from 0 to 764 [ 498.815272][T14705] rock: directory entry would overflow storage [ 498.827509][T14705] rock: sig=0x5850, size=36, remaining=22 [ 498.835203][T14707] loop3: detected capacity change from 0 to 1024 [ 498.848849][T14707] hfsplus: gid requires an argument [ 498.868510][T14707] hfsplus: unable to parse mount options [ 499.123515][T14715] loop2: detected capacity change from 0 to 2048 [ 499.144253][T14715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.245241][T14699] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 499.251821][T14699] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 499.273290][T14699] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 499.283905][T14699] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 499.291213][T14699] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 499.308905][T14699] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 499.314397][T14719] IPv6: addrconf: prefix option has invalid lifetime [ 499.315333][T14699] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 499.523553][T14727] loop2: detected capacity change from 0 to 512 [ 499.537295][T14727] EXT4-fs: Ignoring removed oldalloc option [ 499.588666][T14727] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.4081: corrupted in-inode xattr: e_value size too large [ 499.591532][T14730] loop1: detected capacity change from 0 to 128 [ 499.618553][ T6301] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 499.626602][ T5262] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 499.632356][T14727] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.4081: couldn't read orphan inode 15 (err -117) [ 499.649683][T14727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.650286][ T6502] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 499.713982][ T6318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.800671][ T6301] usb 1-1: Using ep0 maxpacket: 32 [ 499.812805][ T6301] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 499.823331][ T5262] usb 4-1: unable to get BOS descriptor or descriptor too short [ 499.837743][ T6301] usb 1-1: config 0 has no interface number 0 [ 499.847297][ T5262] usb 4-1: not running at top speed; connect to a high speed hub [ 499.865418][ T6301] usb 1-1: config 0 interface 68 has no altsetting 0 [ 499.873545][ T5262] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 499.897101][ T5262] usb 4-1: config 1 has no interface number 0 [ 499.914529][ T5262] usb 4-1: config 1 interface 138 has no altsetting 0 [ 499.924207][ T6301] usb 1-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 499.940614][ T6301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.954372][ T5262] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 499.968141][ T5262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.976471][ T6301] usb 1-1: Product: syz [ 499.983030][ T6301] usb 1-1: Manufacturer: syz [ 499.988189][ T5262] usb 4-1: Product: syz [ 499.992429][ T6301] usb 1-1: SerialNumber: syz [ 499.997649][ T5262] usb 4-1: Manufacturer: syz [ 500.002275][ T5262] usb 4-1: SerialNumber: syz [ 500.007244][T14739] loop2: detected capacity change from 0 to 512 [ 500.015617][ T6301] usb 1-1: config 0 descriptor?? [ 500.015730][T14739] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.069987][T14739] EXT4-fs: journaled quota format not specified [ 500.130363][T14741] loop1: detected capacity change from 0 to 512 [ 500.148888][T14741] EXT4-fs: Ignoring removed mblk_io_submit option [ 500.159187][T14741] EXT4-fs: Conflicting test_dummy_encryption options [ 500.242398][ T6301] sisusb 1-1:0.68: Invalid USB2VGA device [ 500.270576][ T5262] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 500.277785][ T6301] sisusb: probe of 1-1:0.68 failed with error -22 [ 500.296090][ T6301] usb 1-1: USB disconnect, device number 15 [ 500.397985][ T5262] usb 4-1: USB disconnect, device number 22 [ 500.425333][ T6320] Bluetooth: hci0: command 0x0406 tx timeout [ 500.475446][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.817463][ T6398] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 500.825118][ T968] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 500.993934][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 501.018555][ T6398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.040957][ T968] usb 3-1: unable to get BOS descriptor or descriptor too short [ 501.051772][ T6398] usb 2-1: not running at top speed; connect to a high speed hub [ 501.060486][ T968] usb 3-1: config 79 has an invalid interface number: 237 but max is 0 [ 501.075678][ T968] usb 3-1: config 79 has no interface number 0 [ 501.082735][ T968] usb 3-1: config 79 interface 237 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 1024 [ 501.096081][ T6398] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 501.104210][ T6398] usb 2-1: config 0 has no interface number 0 [ 501.115113][ T6398] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 501.132195][ T968] usb 3-1: config 79 interface 237 has no altsetting 0 [ 501.140786][ T6398] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 501.157889][ T6398] usb 2-1: config 0 interface 88 has no altsetting 0 [ 501.168167][ T968] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=4a.4f [ 501.177401][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 501.177458][T14765] Bluetooth: hci2: command 0x0406 tx timeout [ 501.195517][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.204115][ T968] usb 3-1: Product: syz [ 501.208741][ T968] usb 3-1: Manufacturer: syz [ 501.213404][ T968] usb 3-1: SerialNumber: syz [ 501.221640][ T6398] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 501.231310][ T6398] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 501.241478][T14752] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 501.248790][T14765] Bluetooth: hci3: command 0x0406 tx timeout [ 501.250630][ T6398] usb 2-1: Product: syz [ 501.260278][ T6398] usb 2-1: Manufacturer: syz [ 501.268087][ T6398] usb 2-1: SerialNumber: syz [ 501.275174][ T6398] usb 2-1: config 0 descriptor?? [ 501.447820][ T968] pn533_usb 3-1:79.237: NFC: Could not find bulk-in or bulk-out endpoint [ 501.462453][ T968] usb 3-1: USB disconnect, device number 10 [ 501.482289][ T6398] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input43 [ 501.507679][ T6398] usb 2-1: USB disconnect, device number 4 [ 501.818309][T14763] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 501.825207][T14763] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 501.832483][T14763] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 501.838632][T14763] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.913404][T14771] loop3: detected capacity change from 0 to 512 [ 501.930557][T14771] EXT4-fs: Ignoring removed mblk_io_submit option [ 501.954883][T14771] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 501.981122][T14771] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 502.031646][T14771] EXT4-fs (loop3): orphan cleanup on readonly fs [ 502.088607][T14771] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.4100: Invalid block bitmap block 0 in block_group 0 [ 502.144610][T14771] EXT4-fs (loop3): Remounting filesystem read-only [ 502.160912][T14771] __quota_error: 2 callbacks suppressed [ 502.160939][T14771] Quota error (device loop3): write_blk: dquota write failed [ 502.186974][T14771] Quota error (device loop3): write_blk: dquota write failed [ 502.194988][T14771] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 502.206772][T14771] EXT4-fs (loop3): 1 orphan inode deleted [ 502.230737][T14771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.319949][ T5262] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 502.345134][ T6319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.429268][ T6301] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 502.495985][T14792] loop3: detected capacity change from 0 to 736 [ 502.507632][ T5262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 502.527541][ T5262] usb 3-1: config 0 has an invalid interface number: 238 but max is 0 [ 502.543450][ T5262] usb 3-1: config 0 has no interface number 0 [ 502.551533][ T5262] usb 3-1: config 0 interface 238 has no altsetting 0 [ 502.562878][ T5262] usb 3-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d [ 502.572828][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.583440][ T5262] usb 3-1: Product: syz [ 502.588648][ T5262] usb 3-1: Manufacturer: syz [ 502.593388][ T5262] usb 3-1: SerialNumber: syz [ 502.604514][ T5262] usb 3-1: config 0 descriptor?? [ 502.605971][ T6398] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 502.617716][ T6301] usb 1-1: unable to get BOS descriptor or descriptor too short [ 502.628037][ T6301] usb 1-1: not running at top speed; connect to a high speed hub [ 502.647109][ T6301] usb 1-1: config 1 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.671051][ T6301] usb 1-1: config 1 interface 0 has no altsetting 0 [ 502.692284][ T6301] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 502.708131][ T6301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.727010][ T6301] usb 1-1: Product: syz [ 502.740442][ T6301] usb 1-1: Manufacturer: syz [ 502.754714][ T6301] usb 1-1: SerialNumber: syz [ 502.792363][ T6398] usb 2-1: Using ep0 maxpacket: 32 [ 502.807443][ T6398] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 502.815445][ T5262] gspca_main: spca501-2.14.0 probing 1776:501c [ 502.824527][ T6398] usb 2-1: config 0 has no interface number 0 [ 502.829671][ T5262] gspca_spca501: reg write: error -71 [ 502.836169][ T5262] spca501 3-1:0.238: Reg write failed for 0x02,0x07,0x05 [ 502.840827][ T6398] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 502.848009][ T6398] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 502.864393][ T5262] spca501: probe of 3-1:0.238 failed with error -22 [ 502.871458][ T6398] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 502.885426][ T6398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.892479][ T5262] usb 3-1: USB disconnect, device number 11 [ 502.894044][ T6398] usb 2-1: Product: syz [ 502.894067][ T6398] usb 2-1: Manufacturer: syz [ 502.909557][ T6398] usb 2-1: SerialNumber: syz [ 502.923773][ T6398] usb 2-1: config 0 descriptor?? [ 502.930978][T14786] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 502.939142][T14786] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 502.950358][ T6398] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 502.972429][ T6301] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input44 [ 502.993883][ T5142] bcm5974 1-1:1.0: could not read from device [ 503.003060][ T5142] bcm5974 1-1:1.0: could not read from device [ 503.018015][ T5142] bcm5974 1-1:1.0: could not read from device [ 503.034877][ T6301] usb 1-1: USB disconnect, device number 16 [ 503.041895][T14765] Bluetooth: hci0: command 0x0406 tx timeout [ 503.052208][ T5142] bcm5974 1-1:1.0: could not read from device [ 503.100662][ T968] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 503.173410][ T6398] usb 2-1: USB disconnect, device number 5 [ 503.279608][ T968] usb 4-1: unable to get BOS descriptor or descriptor too short [ 503.289009][ T968] usb 4-1: config 147 has an invalid interface number: 50 but max is 0 [ 503.297384][ T968] usb 4-1: config 147 has no interface number 0 [ 503.303703][ T968] usb 4-1: config 147 interface 50 altsetting 2 endpoint 0x8F has an invalid bInterval 129, changing to 11 [ 503.315947][ T968] usb 4-1: config 147 interface 50 has no altsetting 0 [ 503.335152][ T968] usb 4-1: New USB device found, idVendor=0f11, idProduct=2040, bcdDevice=2a.ec [ 503.351840][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.372350][ T968] usb 4-1: Product: syz [ 503.376639][ T968] usb 4-1: Manufacturer: syz [ 503.381383][ T968] usb 4-1: SerialNumber: syz [ 503.599225][ T968] ldusb 4-1:147.50: Interrupt out endpoint not found (using control endpoint instead) [ 503.619141][ T968] ldusb 4-1:147.50: LD USB Device #0 now attached to major 180 minor 0 [ 503.624123][T14808] loop2: detected capacity change from 0 to 8 [ 503.634908][ T968] usb 4-1: USB disconnect, device number 23 [ 503.651461][ T968] ldusb 4-1:147.50: LD USB Device #0 now disconnected [ 503.664378][T14808] unable to read fragment index table [ 503.706240][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 503.708824][ T6502] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 503.712628][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 503.732365][T14765] Bluetooth: hci3: command 0x0406 tx timeout [ 503.820128][ T6301] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 504.001934][T14811] loop1: detected capacity change from 0 to 32768 [ 504.012001][T14811] (syz.1.4120,14811,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 504.022972][ T6301] usb 1-1: Using ep0 maxpacket: 16 [ 504.024296][T14811] (syz.1.4120,14811,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 66 [ 504.042662][T14811] (syz.1.4120,14811,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 504.043632][ T6301] usb 1-1: config 8 has an invalid interface number: 206 but max is 0 [ 504.051803][T14811] (syz.1.4120,14811,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 504.051834][T14811] (syz.1.4120,14811,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 504.051854][T14811] (syz.1.4120,14811,0):ocfs2_initialize_super:2256 ERROR: status = -22 [ 504.051973][T14811] (syz.1.4120,14811,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 504.100740][ T6301] usb 1-1: config 8 has no interface number 0 [ 504.107198][ T6398] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 504.144817][ T6301] usb 1-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping [ 504.157274][ T6301] usb 1-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 504.167664][ T6301] usb 1-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 504.209446][ T6301] usb 1-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 504.252877][ T6301] usb 1-1: config 8 interface 206 has no altsetting 0 [ 504.267638][ T6301] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 504.285812][ T6398] usb 3-1: config 0 has an invalid interface number: 130 but max is 0 [ 504.288407][ T6301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.302551][ T6398] usb 3-1: config 0 has no interface number 0 [ 504.319200][ T6398] usb 3-1: config 0 interface 130 altsetting 0 endpoint 0x8B has an invalid bInterval 68, changing to 10 [ 504.353709][ T6301] usb 1-1: Product: syz [ 504.357936][ T6301] usb 1-1: Manufacturer: syz [ 504.358856][ T6398] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e2.ca [ 504.372425][ T6301] usb 1-1: SerialNumber: syz [ 504.391594][ T6398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.431567][ T6398] usb 3-1: config 0 descriptor?? [ 504.466722][ T6398] usb 3-1: Found UVC 0.00 device (8086:0b5b) [ 504.485840][ T6398] usb 3-1: No valid video chain found. [ 504.587877][ T6301] garmin_gps 1-1:8.206: Garmin GPS usb/tty converter detected [ 504.610008][ T6301] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 504.617227][ T6301] garmin_gps: probe of ttyUSB0 failed with error -22 [ 504.636988][T14821] loop3: detected capacity change from 0 to 4096 [ 504.644162][ T6301] usb 1-1: USB disconnect, device number 17 [ 504.658646][ T6301] garmin_gps 1-1:8.206: device disconnected [ 504.704180][ T965] usb 3-1: USB disconnect, device number 12 [ 504.749654][T14821] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 504.786935][T14821] ntfs3: loop3: Failed to load $BadClus (-22). [ 504.862936][T14817] loop1: detected capacity change from 0 to 32768 [ 504.895682][T14823] loop3: detected capacity change from 0 to 512 [ 504.934775][T14823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.937878][T14817] (syz.1.4123,14817,0):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small! [ 504.960335][T14817] (syz.1.4123,14817,1):ocfs2_check_volume:2405 ERROR: Could not initialize journal! [ 504.974262][T14823] EXT4-fs (loop3): orphan cleanup on readonly fs [ 504.986036][T14817] (syz.1.4123,14817,1):ocfs2_check_volume:2490 ERROR: status = -22 [ 504.994362][T14817] (syz.1.4123,14817,1):ocfs2_mount_volume:1822 ERROR: status = -22 [ 505.000101][T14823] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 505.013231][T14817] (syz.1.4123,14817,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 505.069498][T14823] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 505.104350][T14823] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4126: Failed to acquire dquot type 1 [ 505.161737][T14823] EXT4-fs (loop3): 1 truncate cleaned up [ 505.200892][T14823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 505.382809][ T6319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.626731][ T6301] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 505.675235][T14839] syz.3.4133 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 505.825054][ T6301] usb 2-1: Using ep0 maxpacket: 32 [ 505.846043][ T6301] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 505.869213][ T6301] usb 2-1: config 0 has no interface number 0 [ 505.878623][ T6301] usb 2-1: config 0 interface 68 has no altsetting 0 [ 505.891787][ T6301] usb 2-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06 [ 505.910548][ T6301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.928750][ T6301] usb 2-1: Product: syz [ 505.933070][ T6301] usb 2-1: Manufacturer: syz [ 505.948376][ T6301] usb 2-1: SerialNumber: syz [ 505.969116][ T6301] usb 2-1: config 0 descriptor?? [ 506.183670][ T6301] sisusb 2-1:0.68: Invalid USB2VGA device [ 506.199521][ T6301] sisusb: probe of 2-1:0.68 failed with error -22 [ 506.226471][ T6301] usb 2-1: USB disconnect, device number 6 [ 506.435518][T14827] loop0: detected capacity change from 0 to 65536 [ 506.484058][T14827] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 506.493782][T14866] loop2: detected capacity change from 0 to 8 [ 506.520106][T14827] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 506.549868][T14866] unable to read xattr id index table [ 506.638319][T14875] 9pnet_fd: Insufficient options for proto=fd [ 506.644708][T14827] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 506.659342][T14827] XFS (loop0): Starting recovery (logdev: internal) [ 506.705665][T14827] XFS (loop0): Ending recovery (logdev: internal) [ 506.722637][T14827] XFS (loop0): Quotacheck needed: Please wait. [ 506.807379][T14827] XFS (loop0): Quotacheck: Done. [ 506.978309][ T6317] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 507.174837][ T6301] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 507.211254][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 507.270836][T14887] loop2: detected capacity change from 0 to 4096 [ 507.344015][T14887] Cannot load nls cp12"1 [ 507.373709][ T6301] usb 2-1: Using ep0 maxpacket: 32 [ 507.381219][ T6301] usb 2-1: config index 0 descriptor too short (expected 243, got 36) [ 507.398759][ T6301] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 507.407675][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 507.424766][ T23] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=f2.b0 [ 507.439946][ T6301] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 507.454794][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.473855][ T6301] usb 2-1: config 5 has 0 interfaces, different from the descriptor's value: 9 [ 507.497104][ T6301] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 507.508255][ T23] usb 4-1: config 0 descriptor?? [ 507.520879][ T23] usb 4-1: bad CDC descriptors [ 507.535954][ T6301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.558110][ T6301] usb 2-1: Product: syz [ 507.566674][ T6301] usb 2-1: Manufacturer: syz [ 507.571331][ T6301] usb 2-1: SerialNumber: syz [ 507.720593][ T23] usb 4-1: USB disconnect, device number 24 [ 507.800185][ T965] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 507.802789][ T6301] usb 2-1: USB disconnect, device number 7 [ 507.891394][T14900] loop2: detected capacity change from 0 to 8192 [ 508.014416][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 508.030416][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 508.053146][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 508.070742][ T965] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 508.084462][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 508.095904][ T965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 508.111903][ T965] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 508.131363][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.159390][ T965] usb 1-1: Product: syz [ 508.163748][ T965] usb 1-1: Manufacturer: syz [ 508.168377][ T965] usb 1-1: SerialNumber: syz [ 508.177065][ T965] usb 1-1: config 0 descriptor?? [ 508.190721][ T965] redrat3 1-1:0.0: Couldn't find all endpoints [ 508.410116][ T6301] usb 1-1: USB disconnect, device number 18 [ 508.425805][T14912] loop1: detected capacity change from 0 to 2048 [ 508.434483][ T23] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 508.459641][T14912] EXT4-fs (loop1): #clusters per group too big: 16390 [ 508.544080][ T965] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 508.631040][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.644644][ T23] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 508.653969][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.662041][ T23] usb 3-1: Product: syz [ 508.666480][ T23] usb 3-1: Manufacturer: syz [ 508.671092][ T23] usb 3-1: SerialNumber: syz [ 508.679086][ T23] usb 3-1: config 0 descriptor?? [ 508.721161][ T965] usb 4-1: Using ep0 maxpacket: 8 [ 508.729017][ T965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 508.741199][ T965] usb 4-1: config 9 has an invalid interface number: 20 but max is 2 [ 508.749565][ T965] usb 4-1: config 9 has 1 interface, different from the descriptor's value: 3 [ 508.758545][ T965] usb 4-1: config 9 has no interface number 0 [ 508.768946][ T965] usb 4-1: config 9 interface 20 altsetting 3 bulk endpoint 0x9 has invalid maxpacket 16 [ 508.782515][ T965] usb 4-1: config 9 interface 20 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 508.800783][ T965] usb 4-1: config 9 interface 20 has no altsetting 0 [ 508.810629][ T965] usb 4-1: Dual-Role OTG device on HNP port [ 508.817126][ T965] usb 4-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice=47.94 [ 508.826287][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.834387][ T965] usb 4-1: Product: syz [ 508.838578][ T965] usb 4-1: Manufacturer: syz [ 508.843251][ T965] usb 4-1: SerialNumber: syz [ 508.850858][T14910] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 508.885091][ T23] usb 3-1: bad CDC descriptors [ 508.891677][ T23] usb 3-1: unsupported MDLM descriptors [ 508.905063][ T23] usb 3-1: USB disconnect, device number 13 [ 509.063024][ T965] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 509.082263][ T965] snd-usb-audio: probe of 4-1:9.20 failed with error -2 [ 509.097746][ T965] usb 4-1: USB disconnect, device number 25 [ 509.119025][ T6294] udevd[6294]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:9.20/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.280209][ T6398] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 509.457790][ T6398] usb 1-1: Using ep0 maxpacket: 8 [ 509.484380][ T6398] usb 1-1: unable to get BOS descriptor or descriptor too short [ 509.504943][ T6398] usb 1-1: config 1 interface 0 has no altsetting 0 [ 509.513887][ T6398] usb 1-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 509.532350][ T6398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.540408][ T6398] usb 1-1: Product: syz [ 509.570687][ T6398] usb 1-1: Manufacturer: syz [ 509.575352][ T6398] usb 1-1: SerialNumber: syz [ 509.737066][T14932] loop3: detected capacity change from 0 to 2048 [ 509.799779][T14932] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 509.827127][ T6398] usbhid 1-1:1.0: can't add hid device: -71 [ 509.857059][T14934] loop1: detected capacity change from 0 to 512 [ 509.859140][ T6398] usbhid: probe of 1-1:1.0 failed with error -71 [ 509.886169][T14932] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 509.896524][T14935] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 509.907512][T14934] ================================================================== [ 509.915593][T14934] BUG: KASAN: slab-use-after-free in __ext4_iget+0x2bd/0x3e70 [ 509.923080][T14934] Read of size 8 at addr ffff888074c38c70 by task syz.1.4176/14934 [ 509.924004][ T6398] usb 1-1: USB disconnect, device number 19 [ 509.930969][T14934] [ 509.930983][T14934] CPU: 1 PID: 14934 Comm: syz.1.4176 Not tainted 6.6.102-syzkaller #0 [ 509.931002][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.931013][T14934] Call Trace: [ 509.931022][T14934] [ 509.931031][T14934] dump_stack_lvl+0x16c/0x230 [ 509.968302][T14934] ? __lock_acquire+0x7c80/0x7c80 [ 509.973336][T14934] ? show_regs_print_info+0x20/0x20 [ 509.978526][T14934] ? load_image+0x3b0/0x3b0 [ 509.983025][T14934] ? __virt_addr_valid+0x469/0x540 [ 509.988135][T14934] print_report+0xac/0x220 [ 509.992543][T14934] ? __ext4_iget+0x2bd/0x3e70 [ 509.997228][T14934] kasan_report+0x117/0x150 [ 510.001722][T14934] ? do_raw_spin_unlock+0x121/0x230 [ 510.006912][T14934] ? __ext4_iget+0x2bd/0x3e70 [ 510.011582][T14934] __ext4_iget+0x2bd/0x3e70 [ 510.016092][T14934] ? apply_workqueue_attrs+0x180/0x180 [ 510.021550][T14934] ? ext4_get_projid+0x140/0x140 [ 510.026480][T14934] ? mb_cache_create+0x433/0x530 [ 510.031416][T14934] ext4_fill_super+0x4a79/0x6620 [ 510.036353][T14934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 510.042594][T14934] ? vscnprintf+0x80/0x80 [ 510.046929][T14934] ? down_read_killable+0x340/0x340 [ 510.052124][T14934] ? setup_bdev_super+0x56b/0x660 [ 510.057138][T14934] get_tree_bdev+0x3e4/0x510 [ 510.061725][T14934] ? vfs_parse_fs_string+0x160/0x160 [ 510.067095][T14934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 510.073334][T14934] ? setup_bdev_super+0x660/0x660 [ 510.078351][T14934] ? apparmor_capable+0x137/0x1a0 [ 510.083376][T14934] ? bpf_lsm_capable+0x9/0x10 [ 510.088050][T14934] ? security_capable+0x89/0xb0 [ 510.092896][T14934] vfs_get_tree+0x8c/0x280 [ 510.097299][T14934] do_new_mount+0x24b/0xa40 [ 510.101798][T14934] __se_sys_mount+0x2da/0x3c0 [ 510.106647][T14934] ? __x64_sys_mount+0xc0/0xc0 [ 510.111397][T14934] ? lockdep_hardirqs_on+0x98/0x150 [ 510.116587][T14934] ? __x64_sys_mount+0x20/0xc0 [ 510.121347][T14934] do_syscall_64+0x55/0xb0 [ 510.125763][T14934] ? clear_bhb_loop+0x40/0x90 [ 510.130429][T14934] ? clear_bhb_loop+0x40/0x90 [ 510.135263][T14934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.141220][T14934] RIP: 0033:0x7fc568d9038a [ 510.145627][T14934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.165224][T14934] RSP: 002b:00007fc569c34e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 510.173626][T14934] RAX: ffffffffffffffda RBX: 00007fc569c34ef0 RCX: 00007fc568d9038a [ 510.181611][T14934] RDX: 0000200000000080 RSI: 0000200000000540 RDI: 00007fc569c34eb0 [ 510.189574][T14934] RBP: 0000200000000080 R08: 00007fc569c34ef0 R09: 000000000000808d [ 510.197548][T14934] R10: 000000000000808d R11: 0000000000000246 R12: 0000200000000540 [ 510.205509][T14934] R13: 00007fc569c34eb0 R14: 0000000000000504 R15: 00002000000000c0 [ 510.213477][T14934] [ 510.216483][T14934] [ 510.218801][T14934] Allocated by task 6481: [ 510.223117][T14934] kasan_set_track+0x4e/0x70 [ 510.227696][T14934] __kasan_slab_alloc+0x6c/0x80 [ 510.232532][T14934] slab_post_alloc_hook+0x6e/0x4d0 [ 510.237746][T14934] kmem_cache_alloc_lru+0x115/0x2e0 [ 510.242934][T14934] reiserfs_alloc_inode+0x2a/0xc0 [ 510.247948][T14934] new_inode_pseudo+0x63/0x1d0 [ 510.252781][T14934] new_inode+0x22/0x1b0 [ 510.256917][T14934] reiserfs_mkdir+0x189/0x970 [ 510.261587][T14934] reiserfs_xattr_init+0x33c/0x6a0 [ 510.266710][T14934] reiserfs_fill_super+0x1f85/0x2340 [ 510.272022][T14934] mount_bdev+0x22b/0x2d0 [ 510.276352][T14934] legacy_get_tree+0xea/0x180 [ 510.281020][T14934] vfs_get_tree+0x8c/0x280 [ 510.285418][T14934] do_new_mount+0x24b/0xa40 [ 510.289910][T14934] __se_sys_mount+0x2da/0x3c0 [ 510.294572][T14934] do_syscall_64+0x55/0xb0 [ 510.299062][T14934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.304957][T14934] [ 510.307269][T14934] Last potentially related work creation: [ 510.313051][T14934] kasan_save_stack+0x3e/0x60 [ 510.317723][T14934] __kasan_record_aux_stack+0xaf/0xc0 [ 510.323080][T14934] call_rcu+0x158/0x930 [ 510.327230][T14934] evict+0x7db/0x870 [ 510.331120][T14934] evict_inodes+0x5fe/0x690 [ 510.335609][T14934] generic_shutdown_super+0x97/0x2b0 [ 510.340892][T14934] kill_block_super+0x44/0x90 [ 510.345557][T14934] deactivate_locked_super+0x97/0x100 [ 510.350940][T14934] cleanup_mnt+0x429/0x4c0 [ 510.355364][T14934] task_work_run+0x1ce/0x250 [ 510.359953][T14934] exit_to_user_mode_loop+0xe6/0x110 [ 510.365239][T14934] exit_to_user_mode_prepare+0xb1/0x140 [ 510.370860][T14934] syscall_exit_to_user_mode+0x1a/0x50 [ 510.376333][T14934] do_syscall_64+0x61/0xb0 [ 510.380765][T14934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.386663][T14934] [ 510.389167][T14934] The buggy address belongs to the object at ffff888074c386a0 [ 510.389167][T14934] which belongs to the cache reiser_inode_cache of size 1568 [ 510.403901][T14934] The buggy address is located 1488 bytes inside of [ 510.403901][T14934] freed 1568-byte region [ffff888074c386a0, ffff888074c38cc0) [ 510.418299][T14934] [ 510.420622][T14934] The buggy address belongs to the physical page: [ 510.427065][T14934] page:ffffea0001d30e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888074c3a7c0 pfn:0x74c38 [ 510.438509][T14934] head:ffffea0001d30e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 510.447448][T14934] memcg:ffff888023457601 [ 510.451696][T14934] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 510.459676][T14934] page_type: 0xffffffff() [ 510.463994][T14934] raw: 00fff00000000840 ffff8880186d1c80 dead000000000122 0000000000000000 [ 510.472563][T14934] raw: ffff888074c3a7c0 000000008013000c 00000001ffffffff ffff888023457601 [ 510.481148][T14934] page dumped because: kasan: bad access detected [ 510.487574][T14934] page_owner tracks the page as allocated [ 510.493373][T14934] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6481, tgid 6480 (syz.2.535), ts 81489760754, free_ts 81011774295 [ 510.517687][T14934] post_alloc_hook+0x1cd/0x210 [ 510.522455][T14934] get_page_from_freelist+0x195c/0x19f0 [ 510.528025][T14934] __alloc_pages+0x1e3/0x460 [ 510.532799][T14934] alloc_slab_page+0x5d/0x170 [ 510.537474][T14934] new_slab+0x87/0x2e0 [ 510.541555][T14934] ___slab_alloc+0xc6d/0x12f0 [ 510.546249][T14934] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 510.551453][T14934] reiserfs_alloc_inode+0x2a/0xc0 [ 510.556477][T14934] iget5_locked+0xa2/0x260 [ 510.560913][T14934] reiserfs_fill_super+0x1170/0x2340 [ 510.566208][T14934] mount_bdev+0x22b/0x2d0 [ 510.570546][T14934] legacy_get_tree+0xea/0x180 [ 510.575241][T14934] vfs_get_tree+0x8c/0x280 [ 510.579663][T14934] do_new_mount+0x24b/0xa40 [ 510.584153][T14934] __se_sys_mount+0x2da/0x3c0 [ 510.588817][T14934] do_syscall_64+0x55/0xb0 [ 510.593222][T14934] page last free stack trace: [ 510.597875][T14934] free_unref_page_prepare+0x7ce/0x8e0 [ 510.603330][T14934] free_unref_page+0x32/0x2e0 [ 510.607998][T14934] __slab_free+0x35e/0x410 [ 510.612405][T14934] qlist_free_all+0x75/0xe0 [ 510.616896][T14934] kasan_quarantine_reduce+0x143/0x160 [ 510.622343][T14934] __kasan_slab_alloc+0x22/0x80 [ 510.627178][T14934] slab_post_alloc_hook+0x6e/0x4d0 [ 510.632291][T14934] __kmem_cache_alloc_node+0x13e/0x260 [ 510.637748][T14934] __kmalloc+0xa4/0x240 [ 510.641936][T14934] tomoyo_realpath_from_path+0xe3/0x5d0 [ 510.647573][T14934] tomoyo_path_perm+0x20f/0x4b0 [ 510.652422][T14934] security_inode_getattr+0xd3/0x120 [ 510.657700][T14934] __x64_sys_newfstat+0x101/0x1f0 [ 510.662716][T14934] do_syscall_64+0x55/0xb0 [ 510.667118][T14934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.673004][T14934] [ 510.675321][T14934] Memory state around the buggy address: [ 510.680955][T14934] ffff888074c38b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 510.689101][T14934] ffff888074c38b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 510.697149][T14934] >ffff888074c38c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 510.705300][T14934] ^ [ 510.713025][T14934] ffff888074c38c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 510.721105][T14934] ffff888074c38d00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 510.729174][T14934] ================================================================== [ 510.791075][T14934] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 510.798432][T14934] CPU: 1 PID: 14934 Comm: syz.1.4176 Not tainted 6.6.102-syzkaller #0 [ 510.806615][T14934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.816695][T14934] Call Trace: [ 510.819990][T14934] [ 510.822931][T14934] dump_stack_lvl+0x16c/0x230 [ 510.827629][T14934] ? show_regs_print_info+0x20/0x20 [ 510.832860][T14934] ? load_image+0x3b0/0x3b0 [ 510.837482][T14934] panic+0x2c0/0x710 [ 510.841421][T14934] ? bpf_jit_dump+0xd0/0xd0 [ 510.845950][T14934] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 510.851887][T14934] ? _raw_spin_unlock+0x40/0x40 [ 510.856750][T14934] ? print_memory_metadata+0x314/0x400 [ 510.862216][T14934] ? __ext4_iget+0x2bd/0x3e70 [ 510.866886][T14934] check_panic_on_warn+0x84/0xa0 [ 510.871820][T14934] ? __ext4_iget+0x2bd/0x3e70 [ 510.876490][T14934] end_report+0x6f/0x140 [ 510.880731][T14934] kasan_report+0x128/0x150 [ 510.885235][T14934] ? do_raw_spin_unlock+0x121/0x230 [ 510.890516][T14934] ? __ext4_iget+0x2bd/0x3e70 [ 510.895195][T14934] __ext4_iget+0x2bd/0x3e70 [ 510.899789][T14934] ? apply_workqueue_attrs+0x180/0x180 [ 510.905255][T14934] ? ext4_get_projid+0x140/0x140 [ 510.910190][T14934] ? mb_cache_create+0x433/0x530 [ 510.915121][T14934] ext4_fill_super+0x4a79/0x6620 [ 510.920058][T14934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 510.926290][T14934] ? vscnprintf+0x80/0x80 [ 510.930611][T14934] ? down_read_killable+0x340/0x340 [ 510.935805][T14934] ? setup_bdev_super+0x56b/0x660 [ 510.940815][T14934] get_tree_bdev+0x3e4/0x510 [ 510.945393][T14934] ? vfs_parse_fs_string+0x160/0x160 [ 510.950757][T14934] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 510.956986][T14934] ? setup_bdev_super+0x660/0x660 [ 510.962084][T14934] ? apparmor_capable+0x137/0x1a0 [ 510.967107][T14934] ? bpf_lsm_capable+0x9/0x10 [ 510.971775][T14934] ? security_capable+0x89/0xb0 [ 510.976617][T14934] vfs_get_tree+0x8c/0x280 [ 510.981021][T14934] do_new_mount+0x24b/0xa40 [ 510.985535][T14934] __se_sys_mount+0x2da/0x3c0 [ 510.990228][T14934] ? __x64_sys_mount+0xc0/0xc0 [ 510.994997][T14934] ? lockdep_hardirqs_on+0x98/0x150 [ 511.000194][T14934] ? __x64_sys_mount+0x20/0xc0 [ 511.004948][T14934] do_syscall_64+0x55/0xb0 [ 511.009353][T14934] ? clear_bhb_loop+0x40/0x90 [ 511.014017][T14934] ? clear_bhb_loop+0x40/0x90 [ 511.018681][T14934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.024567][T14934] RIP: 0033:0x7fc568d9038a [ 511.028968][T14934] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.048580][T14934] RSP: 002b:00007fc569c34e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 511.057010][T14934] RAX: ffffffffffffffda RBX: 00007fc569c34ef0 RCX: 00007fc568d9038a [ 511.065005][T14934] RDX: 0000200000000080 RSI: 0000200000000540 RDI: 00007fc569c34eb0 [ 511.073380][T14934] RBP: 0000200000000080 R08: 00007fc569c34ef0 R09: 000000000000808d [ 511.083357][T14934] R10: 000000000000808d R11: 0000000000000246 R12: 0000200000000540 [ 511.091463][T14934] R13: 00007fc569c34eb0 R14: 0000000000000504 R15: 00002000000000c0 [ 511.099533][T14934] [ 511.102775][T14934] Kernel Offset: disabled [ 511.107101][T14934] Rebooting in 86400 seconds..