last executing test programs: 6.210547337s ago: executing program 3 (id=6420): creat(&(0x7f00000002c0)='./file0\x00', 0x1) syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@prjquota}, {@gquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$eJzs3QW8pGXBuP+zyy4sHYpgAVJikhIG0qGIkqKEIC0pIAJKhxIqKAIKKKAgokh3d0h3d3d3/D8LC+J6gfj/va/wcl3Xxz1zZuY5c+65v3M/njnPYWap+Raba2BgvIFXe+30H5252y3LLT72QusdtcuQq/feceH7R1w86qsn488x4nTOEadzDQwMDBpxO4NevWzI7EceNXhgyMDw//2jsUYfY/BYAwNjjDg74nYGZnn1ZMwDXtvu5ZHigU42/Nvt8Oq/Vxp7+I0M/2SZ5V9ce2BgYNgbvn74uKb7lzsqbak555/vH1avuw0ecfWgf1z3yumQV/+Nud/AwJj7DLz542P4tkPf8LX/zYZ/z/GmGFjilnfge/+fa6k5519wJP/ha3GUEZfNMnyNj7wGjY38ON9xsTXuHTGFg0ZM3JA3rJd34nH//6ul5pxvoYE3X8cDC8+76T0vv7LfHDLPwMCQeQcGhsw3MDBk/nfao/5nekcffFVVVfWONOdcMw5/zj54pJ8Hhr32cy39XHjuC9PfMTAwZOFXnycOWf6154JVVVVVVVVV9e5szrlmnBue/4/3Vs//Jzthm/F7/l9VVVVVVVX1f6cF55xrxuHP9Ud6/j/xWz3/f+S+g/d/9W//55jl1a966Z29E1VVVVVVVVX1ls23ID7/n+ytnv+ff+RkF/X8v6qqqqqqqur/Tou+/PLLm7/hdfZGXDzNa9fT8/+T7r5p2XdswFVVVVVVVVX1H/fSg8ef/I/XfJ9kYKTXe3+lEb8XGHToqZdc8o4N9N3RoH/9fcgW7/SY/l8b7jzsoMkGBtZe4p0eSr0D/Z95rfr6Xyl/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Jsf/X3/9/5MOX/G194L/+FQzXnP8P77ylff+H7Lwgg9u+Q4N/Z3ovXr8f2D1QQMDI3zHW31gYGDhORddfJqBgYHjr5lxqikHXr9u1uHXfWGCUV55g/jX/jORecfnG95i8ldPhz9QBt7/+m0c+srtL/jyvqMMGmkQb2j8o/fff7Wlnp5p5NOp3/x+DH79s7GPuu+1/5Zl8EgbDXuTL37t9l+7LyM7jxj7NMPHPu0Ga6077fobb/KZ1ddaYdWVV1157dlmmHn6mWabbeaZp11l9TVXnu7Vj282Z5O98nHutzNnY408Zw/O+cY5G/m+vdmcTfbWc/bKLe563rAvvzZnQ/7DOZv7redsstVHfKPx5xg6sPwrczNoYGD8eYYObDT8zPSjDQyMP++IbScevu0XJxg8MLDzP+7o8M9Ge/0xOGiL4dssNd9ic726mxoY+MfpP3qT97MfdcTI5xhxOueI07le/TbjDfzjoThk9iOPGjx8Lv5pOsYafYzBYw0MjDHi7IjbGZjt1ZMxTnhtuzd5n/WRBvrKy6zs8Oq/Vxp7YGBgzOGfTLLCSdsOn/r/wvu0///6//9/8Zp10OuPx0Ej/o3Y5lWvOedf8B/f65VpGD53o4y4bJbhJv/Db23/T/3LeCcbNjDZW4z3LV4X55Xo8bXm8RNu9T/1ujg03onfYrxv8Tq+bzreJe/Y495Xb+p/bLwj7esWeuXjHG9nXzfw1vu6UegGVr7woyPv67765kP8p93la3M02kgbvdm+buK9Jt1i+O3P8db7uoWGj33oP+3rBg8MjD/3a/u64Tu++YYO7Dz8zAzDz8w/dODA4WdmfOXM6AOnDj/z2RXXWXOl4Rcs8K+Pg2kG/dMfaMI6m2+kdTboDfd90Eh/3znk1dMx93vtPZzeZL85aMTd+rf7CnrcjvcW432L95/CeR5+2UqHDZvwf+r9p2i8w956vG/2ftlvOt6dnjrplv/h8b6+zoa+YboWeDvrbLJ/XmfD7+Iob1gZb/fnsJVg+1c/n/j1W9tws/te/5li6Ei3++9+pljgrdfZeKuP9HXb7zMw6K3mZv63Mzcf+Zd90JZvnJu3+/PWNFO8ev0obzE3o8223NSvzc2o/+HczP+fzs0cA6P889wMGZh3YGBgyhH7h/neztxM/NZz83YfN2PA9q9+vvLrF82z40FnvzY3I8/Fv5ub+f7TuZns9cfNlK9cN/nggVFHHdhohQ02WG/6Vz++dnaGVz++9Rqc5+3M5Xj/M3P5oSFvNpf/eKiOdcdF+/2bNfgv+/TXbn+e/3QuB16fy4HVR14s9W6t3/+5y99d/u7yd5e/u/zd5S/uTY7/v/76/7uP94VdRvxyY+hFk0603Ts93ne49/Tx/xG+/3T8f7uJJr1o8MDr173l8dlXt3lXHp+d5dWTMQ94bbuRjw/yQN/8+Ow+s82yzX/p+Oz/r15bq2/j93Dt/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7i3uT4/3Sv/R3A3dMv8tiIA6FD79966UXe6fG+w72nj/+P8P2n4/+LLL31/YMHXr/uLY//v7qN4/j/bc/Pt9O7+fj/a2u14//1b8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9yfH/OV77O4CDD95jk9f+HuCK8Xc4/p0e7zvce/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/ciOP/AyO9veU3elxgcPz//3Zv4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/M3/M4r9U/pjF/1v5Yxb/b+ePWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf87+WMW/+Xzxyz+K+SPWfy/mz9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+H8vf8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H8/f8ziv17+mMV//fwxi/8G+WMW/x/kj1n8N8wfs/j/MH/M4r9R/pjFf+P8MYv/JvljFv8f5Y9Z/H+cP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/yf5Yxb/n+aPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf9n+WMW/5/nj1n8f5E/ZvHfOX/M4r9L/pjF/5f5Yxb/X+WPWfx3zR+z+P86f8ziv1v+mMV/9/wxi/8e+WMW/9/kj1n8f5s/ZvHfM3/M4r9X/pjFf+/8MYv/7/LHLP6/zx+z+O+TP2bx3zd/zOK/X/6Yxf8P+WMW/z/mj1n8988fs/gfkD9m8f9T/pjF/8D8MYv/n/PHLP4H5Y9Z/P+SP2bx/2v+mMX/4Pwxi//f8scs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi//f8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fk/gPGsgfs/gPyh+z+A/OH7P4j5I/ZvEfkj9m8R+aP2bxHzV/zOI/Wv6YxX9Y/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW//flj1n8358/ZvGfMH/M4v+B/DGL/0T5Yxb/ifPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+E+SP2bxnzR/zOI/Wf6Yxf9j+WMW/8lf8x/2Do3rXZrFf4rWP2bxnzJ/zOI/Vf6YxX/q/DGL/8fzxyz+0+SPWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8f9c/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8Z88fs/h/OX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9X8scs/l/NH7P4L5Q/ZvH/Wv6YxX/h/DGL/9fzxyz+38gfs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+38wfs/gvlT9m8f9W/pjF/9v5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvH/Tv6YxX/5/DGL/wr5Yxb/7+aPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP7fyx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzx+z+K+XP2bxXz9/zOK/Qf6Yxf8H+WMW/w3zxyz+P8wfs/hvlD9m8d84f8ziv0n+mMX/R/ljFv8f549Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9J/pjF/6f5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvH/Wf6Yxf/n+WMW/1/kj1n8d84fs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP6/zh+z+O+WP2bx3z1/zOK/R/6Yxf83+WMW/9/mj1n898wfs/jvlT9m8d87f8zi/7v8MYv/7/PHLP775I9Z/PfNH7P475c/ZvH/Q/6Yxf+P+WMW//3zxyz+B+SPWfz/9M/+d/3Xx/UuzeJ/YOsfs/j/OX/M4n9Q/pjF/y/5Yxb/v+aPWfwPzh+z+P8tf8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//PzxyT+r5T/vybxH3RB/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/Nf1S60OL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH5P4v/Jp/v+axX9Q/pjFf3D+mMV/lPwxi/+Q/DGL/9D8MYv/qPljFv/R8scs/sPyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4vy9/zOL//vwxi/+E+WMW/w/kj1n8J8ofs/hPnD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf5L8MYv/pPljFv/J8scs/h/LH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv+P549Z/KfJH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi/+0+WMW/+nyxwadudvQgYGB97z/9PljlvU/Q/6YxX/G/DGL/0z5Yxb/z+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX/2/DGL/5fzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fyV/zOL/1fwxi/9C+WMW/6/lj1n8F84fs/h/PX/M4v+N/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4v/N/DGL/1L5Yxb/b+WPWfy/nT9m8V86f8ziv0z+mMV/2fwxi/9y+WMW/+/kj1n8l88fs/ivkD9m8f9u/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/738MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi//38MYv/evljFv/188cs/hvkj1n8f5A/ZvHfMH/M4v/D/DGL/0b5Yxb/jfPHLP6b5I9Z/H+UP2bx/3H+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/n+SPWfx/mj9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/5/lj1n8f54/ZvH/Rf6YxX/n/DGL/y75Yxb/X+aPWfx/lT9m8d81f8zi/+v8MYv/bvljFv/d88cs/nvkj1n8f5M/ZvH/bf6YxX/P/DGL/175Yxb/vfPHLP6/yx+z+P8+f8ziv0/+mMV/3/wxi/9++WMW/z/kj1n8/5g/ZvHfP3/M4n9A/pjF/0/5Yxb/A/PHLP5/zh+z+B+UP2bx/0v+mMX/r/ljFv+D88cs/n/LH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/3/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX9M4j/KQP6YxX9Q/pjFf3D+mMV/lPwxi/+Q/DGL/9D8MYv/qPljFv/R8scs/sPyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4vy9/zOL//vwxi/+E+WMW/w/kj1n8J8ofs/hPnD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjFf5L8MYv/pPljFv/J8scs/h/LH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv+P549Z/KfJH7P4fyJ/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bxnyl/zOL/ufwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+eP2bx/3L+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/r+SPWfy/mj9m8V8of8zi/7X8MYv/wvljFv+v549Z/L+RP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/L+ZP2bxXyp/zOL/rfwxi/+388cs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/538MYv/8vljFv8V8scs/t/NH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8v5c/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8v58/ZvFfL3/M4r9+/pjFf4P8MYv/D/LHLP4b5o9Z/H+YP2bx3yh/zOK/cf6YxX+T/DGL/4/yxyz+P84fs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/k/wxi/9P88cs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/7P8MYv/z/PHLP6/yB+z+O+cP2bx3yV/zOL/y/wxi/+v8scs/rvmj1n8f50/ZvHfLX/M4r97/pjFf4/8MYv/b/LHLP6/zR+z+O+ZP2bx3yt/zOK/d/6Yxf93+WMW/9/nj1n898kfs/jvmz9m8d8vf8zi/4f8MYv/H/PHLP77549Z/A/IH7P4/yl/zOJ/YP6Yxf/P+WMW/4Pyxyz+f8kfs/j/NX/M4n9w/pjF/2/5Yxb/Qzz+o/8nG1v8D/X4/0dZ/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvH/e/6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549J/IcM5I9Z/Ae9Pf9R/9fG9S7N4j+49Y9Z/EfJH7P4D8kfs/gPzR+z+I+aP2bxHy1/zOI/LH/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi//78scs/u/PH7P4T5g/ZvH/QP6YxX+i/DGL/8T5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfwnyR+z+E+aP2bxnyx/zOL/sfwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bx/3j+mMV/mvwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/jPljFv+Z8scs/p/LH7P4z5w/ZvGfJX/M4j9r/pjFf7b8MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/7PljFv8v549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9K/pjF/6v5Yxb/hfLHLP5fyx+z+C+cP2bx/3r+mMX/G/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/m/ljFv+l8scs/t/KH7P4fzt/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7fyR+z+C+fP2bxXyF/zOL/3fwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf97+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6Yxf/7Rv9h/34Ti/96Rv+3kcV//fwxi/8G+WMW/x/kj1n8N8wfs/j/MH/M4r9R/pjFf+P8MYv/JvljFv8f5Y9Z/H+cP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/yf5Yxb/n+aPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf9n+WMW/5/nj1n8f5E/ZvHfOX/M4r9L/pjF/5f5Yxb/X+WPWfx3zR+z+P86f8ziv1v+mMV/9/wxi/8e+WMW/9/kj1n8f5s/ZvHfM3/M4r9X/pjFf+/8MYv/7/LHLP6/zx+z+O+TP2bx3zd/zOK/X/6Yxf8P+WMW/z/mj1n8988fs/gfkD9m8f9T/pjF/8D8MYv/n/PHLP4H5Y9Z/P+SP2bx/2v+mMX/4Pwxi//f8scs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi//f8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fk/gPHcgfs/gPyh+z+A/OH7P4j5I/ZvEfkj9m8R+aP2bxHzV/zOI/Wv6YxX9Y/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW//flj1n8358/ZvGfMH/M4v+B/DGL/0T5Yxb/ifPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+E+SP2bxnzR/zOI/Wf6Yxf9j+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bxnzp/zOL/8fwxi/80+WMW/0/kj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8P5c/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv/Z88cs/l/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/5X8MYv/V/PHLP4L5Y9Z/L+WP2bxXzh/zOL/9fwxi/83XP5D3u6GFv9FXP5vO4v/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8f9m/pjFf6n8MYv/t/LHLP7fzh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/3fyxyz+y+ePWfxXyB+z+H83f8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bx/17+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/37+mMV/vfwxi//6+WMW/w3yxyz+P8gfs/hvmD9m8f9h/pjFf6P8MYv/xvljFv9N8scs/j/KH7P4/zh/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/T/LHLP4/zR+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/8/yxyz+P88fs/j/In/M4r9z/pjFf5f8MYv/L/PHLP6/yh+z+O+aP2bx/3X+mMV/t/wxi//u+WMW/z3yxyz+v8kfs/j/Nn/M4r9n/pjFf6/8MYv/3vljFv/f5Y9Z/H+fP2bx3yd/zOK/b/6YxX+//DGL/x/yxyz+f8wfs/jvnz9m8T8gf8zi/6f8MYv/gfljFv8/549Z/A/KH7P4/yV/zOL/1/wxi//B+WMW/7/lj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/7/ljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD8m8R91IH/M4j8of8ziPzh/zOI/Sv6YxX9I/pjFf2j+mMV/1Pwxi/9o+WMW/2H5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n835c/ZvF/f/6YxX/C/DGL/wfyxyz+E+WPWfwnzh+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+H80f8ziP0n+mMV/0vwxi/9k+WMW/4/lj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi//H88cs/tPkj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvH/XP6YxX/m/DGL/yz5Yxb/WfPHRvYf+k4P6P+1N/GfLX/Msv4/nz9m8f9C/pjF/4v5Yxb/L+WPWfxnzx+z+H85f8ziP8e/9x/tf3Vc79Is/nO2/jGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/V/LHLP5fzR+z+C+UP2bx/1r+mMV/4fwxi//X88cs/t/IH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/t/MH7P4L5U/ZvH/Vv6Yxf/b+WMW/6Xzx96j/oNGsh51mfyx96j/K71x/S+bP2bxXy5/zOL/nfwxi//y+WMW/xXyxyz+380fs/ivmD826MxBI2bmve2/Uv6YZf2vnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/+/lj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/+/nj1n818sfs/ivnz9m8d8gf8zi/4P8MYv/hvljFv8f5o9Z/DfKH7P4b5w/ZvHfJH/M4v+j/DGL/4/zxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/yR/zOL/0/wxi//2+WMW/x3yxyz+O+aPWfx3yh+z+P8sf8zi//P8MYv/L/LHLP47549Z/HfJH7P4/zJ/zOL/q/wxi/+u+WMW/1/nj1n8d8sfs/jvnj9m8d8jf8zi/5v8MYv/b/PHLP575o9Z/PfKH7P4750/ZvH/Xf6Yxf/3+WMW/33yxyz+++aPWfz3yx+z+P8hf8zi/8f8MYv//vljFv8D8scs/n/KH7P4H5g/ZvH/c/6Yxf+g/DGL/1/yxyz+f80fs/gfnD9m8f9b/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8/54/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hf/jb9h/xvjetdmsX/itY/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kf/A6HCZxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88ck/qMN5I9Z/Aflj1n8B+ePWfxHyR+z+A/JH7P4D80fs/iPmj9m8R8tf8ziPyx/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/iMa9k/nLP4T5I9Z/N+XP2bxf3/+mMV/wvwxi/8H8scs/hPlj1n8J84fs/h/MH/M4v+h/LH3pv+rr3T2Rv8P54+9N/1f7Y3+H8kfs/h/NH/M4j9J/pjFf9L8MYv/ZPljFv+P5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/x/PHLP7T5I9Z/D+RP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bx/1z+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfxnzx+z+H85f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/1fyxyz+X80fs/gvlD9m8f9a/pjFf+H8MYv/1/PHLP7fyB+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP7fzB+z+C+VP2bx/1b+mMX/2/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9O/pjFf/n8MYv/CvljFv/v5o9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/t/LH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/PH7P4r5c/ZvFfP3/M4r9B/pjF/wf5Yxb/DfPHLP4/zB+z+G+UP2bx3zh/zOK/Sf6Yxf9H+WMW/x/nj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3Rf8eERb/7dLGLP4/yR+z+P80f8ziv33+mMV/h/wxi/+Or/q/+PI7Na53aRb/nVr/mMX/Z/ljFv+f549Z/H+RP2bx3zl/zOK/S/6Yxf+X+WMW/1/lj1n8d80fs/j/On/M4r9b/pjFf/f8MYv/HvljFv/f5I9Z/H+bP2bx3zN/zOK/V/6YxX/v/DGL/+/elv/Q/71xvUuz+P++9Y9Z/PfJH7P475s/ZvHfL3/M4v+H/DGL/x/zxyz+++ePWfwPyB+z+P8pf8zif2D+mMX/z/ljFv+D8scs/n/JH7P4/zV/zOJ/cP6Yxf9v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/3v+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePSfyHDeSPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL//vyxyz+788fs/hPmD9m8f9A/pjFf6L8MYv/xPljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/CfJH7P4T5o/ZvGfLH/M4v+x/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvH/eP6YxX+a/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/5nyxyz+n8sfs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//n88cs/l94S/89/vfH9S7N4v/F1j9m8f9S/pjFf/b8MYv/l/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/JX/M4v/V/DGL/0L5Yxb/r+WPWfwXzh+z+H89f8zi/438MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/838MYv/UvljFv9v5Y9Z/L+dP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/7+SPWfyXzx+z+K+QP2bx/27+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/vfwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL//fwxi/96+WMW//Xzxyz+G7yF/9D/xrjepVn8f9D6xyz+G+aPWfx/mD9m8d8of8ziv3H+mMV/k/wxi/+P8scs/j/OH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/5P8MYv/T/PHLP7b549Z/HfIH7P475g/ZvHfKX/M4v+z/DGL/8/zxyz+v8gfs/jvnD9m8d8lf8zi/8v8MYv/r/LHLP675o9Z/H+dP2bx3y1/zOK/e/6YxX+P/DGL/2/yxyz+v80fs/jvmT9m8d8rf8ziv3f+mMX/d/ljFv/f549Z/PfJH7P475s/ZvHfL3/M4v+H/DGL/x/zxyz+++ePWfwPyB+z+P8pf8zif2D+mMX/z/ljFv+D8scs/n/JH7P4/zV/zOJ/cP6Yxf9v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/3v+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N/7Vv7j/BfG9S7N4n9f6x+z+N+fP2bxfyB/zOL/YP6YwX/QkIFhD+WPGfyHr/+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHJP6jD+SPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL//vyxyz+788fs/hPmD9m8f9A/pjFf6L8MYv/xPljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/CfJH7P4T5o/ZvGfLH/M4v+x/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvH/eP6YxX+a/DGL/yfyxyz+n8wfs/h/Kn/M4v9pmf/0b3M7i/9nZP5vN4v/Z/PHLP7T5o9Z/KcbGNj8nRrSuzmL//Stf8ziP0P+mMV/xvwxi/9M+WMW/8/lj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/9vwxi/+X88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H8lf8zi/9X8MYv/QvljFv+v5Y9Z/BfOH7P4fz1/zOL/jfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL/zfwxi/9S+WMW/2/lj1n8v50/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/v5I9Z/JfPH7P4r5A/ZvH/bv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v+9/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/9/DGL/3r5Yxb/9fPHLP4b5I9Z/H+QP2bx3zB/zOL/w/wxi/9G+WMW/43zxyz+m+SPWfx/lD9m8f9x/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/5/kj1n8f5o/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+f5Y9Z/H+eP2bx/0X+mMV/5/wxi/8u+WMW/1/mj1n8f5U/ZvHfNX/M4v/r/DGL/275Yxb/3fPHLP575I9Z/H+TP2bx/23+mMV/z/wxi/9e+WMW/73zxyz+v8sfs/j/Pn/M4r9P/pjFf9/8MYv/fvljFv8/5I9Z/P+YP2bx3z9/zOJ/QP6Yxf9P+WMW/wPzxyz+f84fs/gflD9m8f9L/pjF/6/5Yxb/g/PHLP5/yx+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/Cflj713/Pc97w6Wjn5g/9t71/+f1f1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4/z1/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHJP5jDOSPWfwH5Y9Z/Afnj1n8R8kfs/gPyR+z+A/NH7P4j5o/ZvEfTeU/+tve0uI/TOX/9rP4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/778MYv/+/PHLP4T5o9Z/D+QP2bxnyh/zOI/cf6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/0nyxyz+k+aPWfwnyx+z+H8sf8ziP3n+mMV/ivwxi/+U+WPvZf83NMZU+WPvZf83rv+p88cs/h/PH7P4T5M/ZvH/RP6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOI/U/6Yxf9z+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnz1/zOL/5fwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fyR+z+H81f8ziv1D+mMX/a/ljFv+F88cs/l/PH7P4fyN/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4fzN/zOK/VP6Yxf9b+WMW/2/nj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/O/ljFv/l88cs/ivkj1n8v5s/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/h/L3/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/h/P3/M4r9e/pjFf/38MYv/BvljFv8f5I9Z/DfMH7P4/zB/zOK/Uf6YxX/j/DGL/yb5Yxb/H+WPWfx/nD9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf8n+WMW/5/mj1n8t88fs/jvkD9m8d8xf8ziv1P+mMX/Z/ljFv+f549Z/H+RP2bx3zl/zOK/S/6Yxf+X+WMW/1/lj1n8d80fs/j/On/M4r9b/pjFf/f8MYv/HvljFv/f5I9Z/H+bP2bx3zN/zOK/V/6YxX/v/DGL/+/yxyz+v88fs/jvkz9m8d83f8ziv1/+mMX/D/ljFv8/5o9Z/PfPH7P4H5A/ZvH/U/6Yxf/A/DGL/5/zxyz+B+WPWfz/kj9m8f9r/pjF/+D8MYv/3/LHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif8Ib/Ae/E+N6l2bxP7H1j1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/v+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+eE/qO/jW0s/s8L/d9OFv8X8scs/i/mj1n8X8ofs/i/nD8m8R9zIH/M4j8of8ziPzh/zOI/Sv6YxX9I/pjFf2j+mMV/1Pwxi/9o+WMW/2H5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n835c/ZvF/f/6YxX/C/DGL/wfyxyz+E+WPWfwnzh+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+H80f8ziP0n+mMV/0vwxi/9k+WMW/4/lj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi//H88cs/tPkj1n8P5E/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4z5Q/ZvH/XP6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/D+fP2bxn2dY/pTF/4utf8zi/6X8MYv/7PljFv8v549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8f9K/pjF/6v5Yxb/hfLHLP5fyx+z+C+cP2bx/3r+mMX/G/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMX/m/ljFv+l8scs/t/KH7P4fzt/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7fyR+z+C+fP2bxXyF/zOL/3fwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf97+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6Yxf/7+WMW//Xyxyz+6+ePWfw3yB+z+P8gf8ziv2H+mMX/h/ljFv+N8scs/hvnj1n8N8kfs/j/KH/M4v/j/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4r91/pjFf5v8MYv/tvljFv/t8scs/j/JH7P4/zR/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP4/yx+z+P88f8zi/4v8sfec/xuQ3+i/c/7Ye87/Tdb/LvljFv9f5o9Z/H+VP2bx3zV/zOL/6/wxi/9u+WMW/93zxyz+e+SPWfx/kz9m8f9t/pjFf8/8MYv/XvljFv+988cs/r/LH7P4/z5/zOK/T/6YxX/f/DGL/375Yxb/P+SPWfz/mD9m8d8/f8zif0D+mMX/T/ljFv8D88cs/n/OH7P4H5Q/ZvH/S/6Yxf+v+WMW/4Pzxyz+f8sfs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Y6/5DwwbGHgv+5+YP2ZZ/yflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/9/zxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGHf/JvlsN/YMz7exRgFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/JvEfayB/zOI/KH/M4j/Y6r/iW19t8R/F6v9vsvgPyR+z+A/NH7P4j5o/ZvEfLX/M4j8sf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL//vyxyz+788fs/hPmD9m8f9A/pjFf6L8MYv/xPljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/CfJH7P4T5o/ZvGfLH/M4v+x/DGL/+T5Yxb/KfLHRviPPvg97j9l/phl/U+VP2bxnzp/zOL/8fwxi/80+WMW/0/kj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8P5c/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv/Z88cs/l/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/5X8MYv/V/PHLP4L5Y9Z/L+WP2bxXzh/zOL/9fwxi/838scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8388cs/kvlj1n8v5U/ZvH/dv6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+TP2bxXz5/zOK/Qv6Yxf+7+WMW/xXzxyz+Kxn938YdtvivbPR/G1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/e/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/+/ljFv/18scs/uvnj1n8N8gfs/j/IH/M4r9h/pjF/4f5Yxb/jfLHLP4b549Z/DfJH7P4/yh/zOL/4/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP4/yR+z+P80f8ziv33+mMV/h/wxi/+O+WMW/53yxyz+P8sfs/j/PH/M4v+L/DGL/875Yxb/XfLHLP6/zB+z+P8qf8ziv2v+mMX/1/ljFv/d8scs/rvnj1n898gfs/j/Jn/M4v/b/DGL/575Yxb/vfLHLP57549Z/H+XP2bx/33+mMV/n/wxi/+++WMW//3yxyz+f8gfs/j/MX/M4r9//pjF/4D8MYv/n/LHLP4H5o9Z/P+cP2bxPyh/zOL/l/wxi/9f88cs/gfnj1n8/5Y/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv+/549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N8I/uP9N8f1Lu297X/La5eOdVPrH3tv+7/eWDfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyx96j/lONdOlYd+ePvUf9X+mN6/+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6YxH/sgfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/6H5Yxb/UfPHLP6j5Y9Z/Iflj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxf1/+mMX//fljFv8J88cs/h/IH7P4T5Q/ZvGfOH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+WP2bxnzx/zOI/Rf6YxX/K/AfuhMss/lPlj1n8p84fs/h/PH/M4j9N/pjF/xP5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/0z5Yxb/z+WPWfxnzh+z+M+SP2bxnzV/7J/8R1w23js8pv+n3sR/tvwxy/r/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfPX/M4v/l/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/l/JH7P4fzV/zOK/UP6Yxf9r+WMW/4Xzxyz+X88fs/h/I3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/M3/M4r9U/pjF/1v5Yxb/b+ePWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf87+WMW/+Xzxyz+K+SPWfy/mz9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+H8vf8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H8/f8ziv17+mMV//fwxi/8G+WMW/x/kj1n8N8wfs/j/MH/M4r9R/pjFf+P8MYv/JvljFv8f5Y9Z/H+cP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/yf5Yxb/n+aPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf9n+WMW/5/nj1n8f5E/ZvHfOX/M4r9L/th71X/YSP6/zB97r/oPjOT/q/wxi/+u+WMW/1/nj1n8d8sfs/jvnj9m8d8jf8zi/5v8MYv/b/PHLP575o9Z/PfKH7P4750/ZvH/Xf6Yxf/3+WMW/33yxyz+++aPWfz3yx+z+P8hf8zi/8f8MYv//vljFv8D8scs/n/KH7P4H5g/ZvH/c/6Yxf+g/DGL/1/yxyz+f80fs/gfnD9m8f9b/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8/54/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3SP7b/FfHte7NIv/Pa1/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cPybxH2cgf8ziPyh/zOI/OH/M4j9K/pjFf0j+mMV/aP6YxX/U/DGL/2j5Yxb/YfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfzflz9m8X9//pjFf8L8MYv/B/LHLP4T5Y9Z/CfOH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOI/Sf6YxX/S/DGL/2T5Yxb/j+WPWfwnzx+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/8fzxyz+0+SPWfw/kT9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8Z8wfs/jPlD9m8f9c/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8Z88fs/h/We2//Jhvdo3Ffw61/5tn8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/lfwxi/9X88cs/gvlj1n8v5Y/ZvFfOH/M4v/1/DGL/zfyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/zfzxyz+S+WPWfy/lT9m8f92/pjFf+n8MYv/MvljFv9l88cs/svlj1n8v5M/ZvFfPn/M4r9C/pjF/7v5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/9/LHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/9/PHLP7r5Y9Z/NfPH7P4b5A/ZvH/Qf6YxX/D/DGL/w/zxyz+G+WPWfw3zh+z+G+SP2bx/1H+AwMDo//LJRb/H+ePWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvH/Sf6Yxf+n+WMW/+3zxyz+O+SPWfx3zB+z+O+UP2bx/1n+mMX/5/ljFv9f5I9Z/HfOH7P475I/ZvH/Zf6Yxf9X+WMW/13zxyz+v84fs/jvlj9m8d89f8ziv0f+mMX/N/ljFv/f5o9Z/PfMH7P475U/ZvHfO3/M4v+7/DGL/+/zxyz+++SPWfz3zR+z+O+XP2bx/0P+mMX/j/ljFv/988cs/gfkj1n8/5Q/ZvE/MH/M4v/n/DGL/0H5Yxb/v+SPWfz/mj9m8T84f8zi/7f8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/j/PX/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88ck/uMO5I9Z/Aflj1n8B+ePWfxHyR+z+A/JH7P4D80fs/iPmj9m8R8tf8ziPyx/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4v//sXP/4VrX9R3Hb36T5exjm7q04dCYazMSGY1aiIri8ccpE838jXoEEkR+SIApsNFKHZsudbNgEwvHnK1a4nBz/VrRsKzZGrG1yimuhTHmYJE5Y9eBcwjO3p5r58u+X1fvx+MPzrnv4/tOeV4v79uL66roH8rS/2D9Q1n6v0L/UJb+P61/KEv/n9E/lKX/IfqHsvQ/VP9Qlv6H6R/K0v9n9Q9l6f9K/UNZ+h+ufyhL/yP0D2Xp/yr9Q1n6/5z+oSz9h+kfytL/SP1DWfr/vP6hLP2H6x/K0v8o/UNZ+h+tfyhL/1frH8rSf4T+oSz9f0H/UJb+x+gfytL/F/UPZen/Gv1DWfr/kv6hLP1/Wf9Qlv7H6h/K0v+1+oey9B+pfyhL/9fpH8rS/zj9Q1n6j9I/lKX/8fqHsvQfrX8oS/9f0T+Upf8Y/UNZ+r9e/1CW/r+qfyhL/7H6h7L0f4P+oSz936h/KEv/X9M/lKX/m/QPZek/Tv9Qlv4n6B/K0n+8/qEs/U/UP5Sl/0n6h7L0P1n/UJb+E/QPZel/iv6hLP1P1T+Upf9E/UNZ+p+mfyhL/zb9Q1n6n65/KEv/M/QPZel/pv6hLP3P0j+UpX+7/qEs/d+sfyhL/7foH8rS/2z9Q1n6v1X/UJb+5+gfytJ/kv6hLP3P1T+Upf95+oey9H+b/qEs/c/XP5Sl/9v1D2Xpf4H+oSz9L9Q/lKX/RfqHsvS/WP9Qlv6X6B/K0v9S/UNZ+l+mfyhL/8n6h7L0v1z/UJb+V+gfytL/Sv1DWfp36B/K0v8q/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/O/QPZel/tf6hLP2n6x/K0n+G/qEs/a/RP5Sl/0z9Q1n6X6t/KEv/WfqHsvSfrX8oS/85+oey9J+rfyhL/+v0D2XpP0//UJb+79Q/lKX/fP1DWfov0D+Upf9C/UNZ+l+vfyhL/3fpH8rS/wb9Q1n636h/KEv/RfqHsvRfrH8oS/8l+oey9P91/UNZ+v+G/qEs/ZfqH8rS/936h7L0/039Q1n6v0f/UJb+79U/lKX/TfqHsvS/Wf9Qlv636B/K0v+39A9l6b9M/1CW/r+tfyhL/9/RP5Sl/636h7L0v03/UJb+v6t/KEv/9+kfytL/dv1DWfrfoX8oS/879Q9l6f97+oey9P99/UNZ+t+lfyhL//frH8rS/wP6h7L0X65/KEv/FfqHsvT/A/1DWfr/of6hLP3v1j+Upf9K/UNZ+t+jfyhL/w/qH8rS/0P6h7L0X6V/KEv/e/UPZen/R/qHsvRfrX8oS/8/1j+Upf99+oey9P8T/UNZ+t+vfyhL/w/rH8rS/0/1D2Xp/xH9Q1n6f1T/UJb+H9M/lKX/n+kfytL/4/qHsvR/QP9Qlv5r9A9l6f+g/qEs/f9c/1CW/mv1D2Xp/5D+oSz9/0L/UJb+f6l/KEv/h/UPZen/V/qHsvT/hP6hLP0/qX8oS/9P6R/K0v/T+oey9P+M/qEs/f9a/1CW/p/VP5Sl/+f0D2Xpv07/UJb+n9c/lKX/3+gfytJ/vf6hLP0f0T+Upf8X9A9l6f9F/UNZ+j+qfyhL/y/pH8rS/8v6h7L0/1v9Q1n6P6Z/KEv/r+gfytL/7/QPZen/Vf1DWfr/vf6hLP036B/K0v9r+oey9N+ofyhL/3/QP5Sl/z/qH8rS/+v6h7L0/yf9Q1n6f0P/UJb+39Q/lKX/t/QPZen/uP6hLP3/Wf9Qlv5P6B/K0v9J/UNZ+m/SP5Sl/1P6h7L0/xf9Q1n6f1v/UJb+/6p/KEv/7+gfytJ/s/6hLP2f1j+Upf939Q9l6b9F/1CW/v+mfyhL/636h7L0/3f9Q1n6P6N/KEv//9A/lKX/Nv1DWfpv1z+Upf9/6h/K0v97+oey9N+hfyhL/+/rH8rS/1n9Q1n6/0D/UJb+z+kfytL/v/QPZen/vP6hLP1/qH8oS/+d+oeS9H95S/9Qlv799A9l6d9f/1CW/gP0D2XpP1D/UJb+g/QPZek/WP9Qlv5D9A9l6T9U/1CW/i/RP5Sl/wH6h7L0f6n+oSz9X6Z/KEv/A/UPZen/U/qHsvQ/SP/QT1x/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2/mLFh49eTp0ztm+8Y3vvHNnm9e7H8zAQAA/9d+9KH/xf47AQAAAAAAAAAAAAAAAAAAgLya+L8Te7H/GQEAAAAAAAAAAAAA4MddW/uJWwb02+epAXs/eNWjHbu+jt5x/tRVqx4s3V+7fnxG8JL9936wc+fOnSueGTeh6+GQVqvV+b/28q7HQ3sed77+4mHLD9v9qIz/7J2PXzLpwDNnr7lt4NdW3NL+9KBdzw5qXXbVtOkdr+vfapWTB7Xmdz44rl+rVU4d1Lq188GozgcTB7VWdz44fteDl7Q+1fngtVfMnH5l5xOnVf49g58Ube2LWwP2WWxrn38b7L3/xcOemNr9tZeX7H61ga2u/Q9f84VDe/ys2wvsv/v1y4k999/nf0DgBfVt/89u7P7ay0v+j/f/D67fsTD62Qvvv/v1y0n2D/UJPv/vs9Gen/t7fP4/MnjJPfcnDF1/e+f+286974iupwb+bz7//+j1y8k9999/n8//nZ/jJ3R//h/SapVT9vO3A1Jpa1+ypbf3/973P/CVPW767b3/e7606WWd+7/3udbSrqcG9XH/E3p7/7+px98r0Ddt7St39nj/78P+WyOCl9yz/81rDtz1+X/T/VccstfP+rL/U3ruf+TcGdeOnLNg4bHTZkye0jGl45qxo8YcN3rs2DFjRu76RLD71/38TYEk9u/9v3VAj5t+rVbHnvt1990yoXP/Wx9a+qGup4b2cf+n9vr+f6T3fwgN798aPLg1f/LcubOP2/1r98NRu3/d/ZcF++/Df/8fdUzXX9b9Z4b9Wq3D9tyPuGTskM79Xz+rrO16anAf9z+x1/2P3/fPKoG+2c/3/yt73Oyz/xM23zivc/9Hf+/gTV1P9fW//0/rdf93e/+H/dHW3qr1TbRz/8cPWXJ6tevS5s//oD5N7H/Ytlu3V7sup9s/1KeJ/U9a9sbLq12XM+wf6tPE/h+ccemyatflTPuH+jSx/+dfsf3watflLPuH+jSx/8e+/dSqatel3f6hPk3s//13tR9f7bq82f6hPk3s/9jrvj+u2nV5i/1DfZrY/1UvPWd1tetytv1DfZrY/+k7Tzqk2nV5q/1DfZrYf78l31lc7bqcY/9Qnyb2/+TkZTOrXZdJ9g/1aWL/q4eNeLbadTnX/qE+Tex/6dOvn1jtupxn/1CfJvb/5TuWP1bturzN/qE+Tez/YxcdvLzadTnf/qE+Tez/B8MfOqDadXm7/UN9mtj/hg2rH6h2XS6wf6hPE/tfsXrA8GrX5UL7h/o0sf9Fp015tNp1ucj+oT5N7H/0mC9eWO26XGz/UJ8m9n/YZ77xVLXrcon9Q32a2P85D8+bU+26XGr/UJ8m9j/v8I/+sNp1ucz+oT5N7P9NHYdPrXZdJts/1KeJ/ZfbDthQ7bpcbv9Qnyb2f8HWleOrXZcr7B/q08T+1x70uY9Uuy5X2j/Up4n9b5t1zdhq16XD/qE+Tez/W+9e9J5q1+Uq+4f6NLH/25/7aql2XabYP9Snif1vHnXBRdWuy1T7h/o0sf+VZz7zSLXrMs3+oT5N7H/Z2sfnVrsu77B/qE8T+1+37ownql2Xq+0f6tPE/o8eMfLAatdluv1DfZrY/8zzl36g2nWZYf9Qnyb2f/L9d7y62nW5xv6hPk3sf+hXxn282nWZaf9Qnyb2/8lx7/1Etetyrf1DfZrY//bxRx1T7brMsn+oTxP73/jAqDurXZfZ9g/1aWL/73vkrorXZY79Q32a2P+s1zy/tdp1mWv/UJ8m9v+GSectqHZdrrN/qE8T+z/k7omfr3Zd5tk/1KeJ/V/8ze+eXe26vNP+oT5N7P+oQy8/otp1mW//UJ8m9j912vqbq12XBfYP9Wli/xNWbBxd7bostH+oTxP7P+jJOfdUuy7X2z/Up4n9bxlw6FnVrsu77B/q08T+773h4a9Xuy432D/Up4n933zThzuqXZcb7R/q08T+P71j8LZq12WR/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8NztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOoncDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CgAAP//qPHpNA==") 3.057671123s ago: executing program 3 (id=6455): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7fffffff, 0x101040) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 2.855257849s ago: executing program 3 (id=6460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x105}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20050800) 2.572242842s ago: executing program 3 (id=6463): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x40000000, 0x80000804, 0x81, 0xfffffffb, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071102800000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58) 2.416701264s ago: executing program 3 (id=6466): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)={[{}]}, 0x1, 0x232, &(0x7f0000000000)="$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") syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905"], 0x0) 1.924621214s ago: executing program 0 (id=6473): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000100)={0xffffffff, "0e94846bd206b03b7c17e7fffffffffa714c0ff136a9697fbe99433a27215896", 0x2, 0x20, 0x5, 0x80000000, 0x4, 0x2, 0x215f1ee0, 0x365}) 1.85950478s ago: executing program 1 (id=6474): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x1000404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x1236, &(0x7f00000037c0)="$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") truncate(&(0x7f0000000a80)='./file2\x00', 0x6e8) 1.720215571s ago: executing program 0 (id=6476): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) 1.499944339s ago: executing program 0 (id=6479): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000080)=@ipv6_newrule={0x54, 0x20, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x10, 0xbc, 0x55, 0x0, 0x0, 0x1, 0x10004}, [@FRA_SRC={0x14, 0x2, @private1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x18, 0xfffffffd}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x200408f0}, 0x4800) 1.315623214s ago: executing program 2 (id=6480): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x6, 0x8201) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.254643139s ago: executing program 1 (id=6481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000020000103"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.212799752s ago: executing program 0 (id=6482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 1.199961143s ago: executing program 2 (id=6483): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, &(0x7f000005ffe4)={0xa, 0x4e24, 0xfffffffc, @mcast1, 0x9}, 0xffcb) 993.04374ms ago: executing program 1 (id=6484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}, {@in=@broadcast, 0x0, 0x2b}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x81}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) 982.268871ms ago: executing program 2 (id=6485): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000740), 0x1, 0x0) 944.538894ms ago: executing program 0 (id=6486): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0x80004509, 0x0) 767.020808ms ago: executing program 1 (id=6487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x48}}, 0x0) 759.802859ms ago: executing program 2 (id=6488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x120}}, 0x0) 564.135504ms ago: executing program 0 (id=6489): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) 450.727514ms ago: executing program 1 (id=6490): r0 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r0) 416.323437ms ago: executing program 2 (id=6491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x2c, 0x14, @void}, 0x10) 24.825539ms ago: executing program 3 (id=6492): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 631.911µs ago: executing program 2 (id=6493): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x10, 0x8004, 0x1, 0xffff, 0x9, 0x1ed, 0x2, 0x3, 0xbb, 0x7, 0x2070, 0xfec, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) 0s ago: executing program 1 (id=6494): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) close_range(r0, r0, 0x0) kernel console output (not intermixed with test programs): =1, Product=2, SerialNumber=3 [ 451.014329][ T2193] usb 2-1: Manufacturer: syz [ 451.019884][ T2193] usb 2-1: SerialNumber: syz [ 451.032863][ T27] usb 3-1: Product: syz [ 451.044748][ T27] usb 3-1: Manufacturer: syz [ 451.049688][ T27] usb 3-1: SerialNumber: syz [ 451.067107][ T2193] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 451.087419][ T2193] cdc_ncm 2-1:1.0: bind() failure [ 451.310152][ T27] snd-usb-audio: probe of 3-1:5.64 failed with error -71 [ 451.324713][ T2193] cdc_mbim 2-1:1.1: CDC Union missing and no IAD found [ 451.346365][ T2193] cdc_mbim 2-1:1.1: bind() failure [ 451.353078][ T27] usb 3-1: USB disconnect, device number 17 [ 451.362729][T16620] loop3: detected capacity change from 0 to 256 [ 451.445384][T16620] FAT-fs (loop3): Directory bread(block 64) failed [ 451.473441][T16620] FAT-fs (loop3): Directory bread(block 65) failed [ 451.502041][T16620] FAT-fs (loop3): Directory bread(block 66) failed [ 451.520071][T16620] FAT-fs (loop3): Directory bread(block 67) failed [ 451.529161][T16620] FAT-fs (loop3): Directory bread(block 68) failed [ 451.540602][T16620] FAT-fs (loop3): Directory bread(block 69) failed [ 451.548859][T16620] FAT-fs (loop3): Directory bread(block 70) failed [ 451.559206][T16620] FAT-fs (loop3): Directory bread(block 71) failed [ 451.584664][ T788] usb 2-1: USB disconnect, device number 19 [ 451.598107][T16620] FAT-fs (loop3): Directory bread(block 72) failed [ 451.620861][T16620] FAT-fs (loop3): Directory bread(block 73) failed [ 452.360499][T16632] loop2: detected capacity change from 0 to 4096 [ 452.384813][T16638] netlink: 'syz.3.4971': attribute type 10 has an invalid length. [ 452.423455][T16638] syz_tun: entered promiscuous mode [ 452.483876][T16638] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 452.609334][T16624] loop0: detected capacity change from 0 to 32768 [ 452.668704][T16624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4964 (16624) [ 452.731924][T16643] loop1: detected capacity change from 0 to 16 [ 452.753359][T16624] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 452.774105][T16624] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 452.797823][T16643] erofs: (device loop1): mounted with root inode @ nid 36. [ 452.818496][T16624] BTRFS info (device loop0): using free space tree [ 452.908545][T16643] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 1929 in[58, 4038] out[2639] [ 452.968405][T16643] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 39 of nid 36 [ 453.127622][T16624] BTRFS info (device loop0): enabling ssd optimizations [ 453.153704][T16624] BTRFS info (device loop0): auto enabling async discard [ 453.449723][ T5791] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 453.490637][T16678] loop2: detected capacity change from 0 to 512 [ 453.524928][T16678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 453.619145][T16678] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4983: invalid indirect mapped block 4294967295 (level 1) [ 453.646882][T16678] EXT4-fs (loop2): Remounting filesystem read-only [ 453.653858][T16678] EXT4-fs (loop2): 2 truncates cleaned up [ 453.662278][T16678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.781747][T16684] comedi comedi1: pcl812: a I/O base address must be specified [ 453.926841][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.198006][T16695] loop0: detected capacity change from 0 to 128 [ 454.286535][T16695] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.347472][T16695] ext4 filesystem being mounted at /1269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 454.607437][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.614190][T16710] loop2: detected capacity change from 0 to 512 [ 454.661102][T16710] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.4997: bad orphan inode 15 [ 454.708994][T16710] ext4_test_bit(bit=14, block=5) = 0 [ 454.742848][T16710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.862547][T16710] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.4997: reserved inode found cleared - inode=1 [ 455.046562][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.364772][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 455.411387][T16737] loop3: detected capacity change from 0 to 256 [ 455.423471][T16737] exfat: Deprecated parameter 'utf8' [ 455.445532][T16737] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 455.570262][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 455.590719][ T9] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 455.624074][ T9] usb 2-1: config 0 has no interface number 0 [ 455.657602][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 455.678493][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.701622][ T9] usb 2-1: Product: syz [ 455.714737][ T9] usb 2-1: Manufacturer: syz [ 455.726646][ T9] usb 2-1: SerialNumber: syz [ 455.743383][T16746] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 (while UP) [ 455.772168][ T9] usb 2-1: config 0 descriptor?? [ 456.166428][ T5797] Bluetooth: hci2: unexpected cc 0x2039 length: 9 > 1 [ 456.175889][ T5797] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 456.228920][ T9] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 456.271209][ T9] usb 2-1: No valid video chain found. [ 456.312837][ T9] usb 2-1: USB disconnect, device number 20 [ 456.732227][T16776] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.971994][T16783] SET target dimension over the limit! [ 457.756312][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'. [ 458.135593][T16821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'. [ 458.150592][T16815] loop0: detected capacity change from 0 to 4096 [ 459.013033][T16814] loop3: detected capacity change from 0 to 32768 [ 459.110665][T16814] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.334991][T16814] XFS (loop3): Ending clean mount [ 459.388387][T16814] XFS (loop3): Quotacheck needed: Please wait. [ 459.493573][T16814] XFS (loop3): Quotacheck: Done. [ 459.615562][T16858] loop2: detected capacity change from 0 to 4096 [ 459.721124][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 459.747489][T16867] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.821474][T16858] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 459.886767][T16858] Remounting filesystem read-only [ 460.187573][ T5797] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 460.219500][ T5797] Bluetooth: hci2: Injecting HCI hardware error event [ 460.229556][ T50] Bluetooth: hci2: hardware error 0x00 [ 460.461004][T16883] x_tables: unsorted entry at hook 3 [ 460.643314][T16888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.756465][T16892] delete_channel: no stack [ 460.850296][T16897] ieee802154 phy0 wpan0: encryption failed: -90 [ 461.681249][T16931] lo: entered promiscuous mode [ 461.693103][T16931] lo: entered allmulticast mode [ 461.704471][T16931] tunl0: entered promiscuous mode [ 461.724890][T16931] tunl0: entered allmulticast mode [ 461.730916][T16931] gre0: entered promiscuous mode [ 461.774894][T16931] gre0: entered allmulticast mode [ 461.800321][T16931] gretap0: entered promiscuous mode [ 461.813062][T16931] gretap0: entered allmulticast mode [ 461.830633][T16931] erspan0: entered promiscuous mode [ 461.846604][T16931] erspan0: entered allmulticast mode [ 461.870026][T16931] ip_vti0: entered promiscuous mode [ 461.910457][T16931] ip_vti0: entered allmulticast mode [ 461.927365][T16931] ip6_vti0: entered promiscuous mode [ 461.958143][T16931] ip6_vti0: entered allmulticast mode [ 461.958158][T16941] binder: 16939:16941 ioctl c00c620f 0 returned -14 [ 461.985668][T16931] sit0: entered promiscuous mode [ 461.990777][T16931] sit0: entered allmulticast mode [ 462.016724][T16931] ip6tnl0: entered promiscuous mode [ 462.055055][T16931] ip6tnl0: entered allmulticast mode [ 462.090513][T16931] ip6gre0: entered promiscuous mode [ 462.097924][T16931] ip6gre0: entered allmulticast mode [ 462.106279][T16931] syz_tun: entered promiscuous mode [ 462.111688][T16931] syz_tun: entered allmulticast mode [ 462.118698][T16931] ip6gretap0: entered promiscuous mode [ 462.126549][T16931] ip6gretap0: entered allmulticast mode [ 462.132565][T16945] overlay: Bad value for 'verity' [ 462.139170][T16931] bridge0: entered promiscuous mode [ 462.154043][T16931] bridge0: entered allmulticast mode [ 462.168789][T16931] vcan0: entered promiscuous mode [ 462.174075][T16931] vcan0: entered allmulticast mode [ 462.206804][T16931] team0: entered promiscuous mode [ 462.235275][T16931] team_slave_0: entered promiscuous mode [ 462.270390][T16931] team_slave_1: entered promiscuous mode [ 462.293217][T16931] team0: entered allmulticast mode [ 462.302895][T16931] team_slave_0: entered allmulticast mode [ 462.314008][T16931] team_slave_1: entered allmulticast mode [ 462.323706][T16931] dummy0: entered promiscuous mode [ 462.329905][T16931] dummy0: entered allmulticast mode [ 462.336796][T16931] nlmon0: entered promiscuous mode [ 462.342561][T16931] nlmon0: entered allmulticast mode [ 462.348523][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 462.369169][T16931] 0ªX¹¦À: entered promiscuous mode [ 462.376029][T16931] 0ªX¹¦À: entered allmulticast mode [ 462.381550][T16931] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 462.398719][T16933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5096'. [ 462.417692][T16933] veth4: entered allmulticast mode [ 462.438454][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5104'. [ 462.805383][T16961] loop3: detected capacity change from 0 to 1024 [ 462.875620][ T50] Bluetooth: hci3: unexpected cc 0x2039 length: 9 > 1 [ 462.884359][ T50] Bluetooth: hci3: unexpected event for opcode 0x2039 [ 463.351979][T16973] loop3: detected capacity change from 0 to 4096 [ 463.376494][T16973] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 463.513036][T16973] ntfs: volume version 3.1. [ 463.633508][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5120'. [ 463.643010][T16983] tc_dump_action: action bad kind [ 463.938913][T16991] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.5123'. [ 464.444803][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 464.491005][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5133'. [ 464.654707][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 464.663015][ T27] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 464.674693][ T27] usb 3-1: config 0 has no interface number 0 [ 464.681126][ T27] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 464.729090][ T27] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 464.751173][ T27] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 464.780032][ T27] usb 3-1: Product: syz [ 464.790494][ T27] usb 3-1: SerialNumber: syz [ 464.809521][ T27] usb 3-1: config 0 descriptor?? [ 464.846628][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input21 [ 464.955869][T17024] cgroup: Unexpected value for 'cpuset_v2_mode' [ 465.123273][T17029] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5143'. [ 465.158064][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 465.158187][ T5853] usb 3-1: USB disconnect, device number 18 [ 465.165650][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 465.221468][ T5853] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 465.380905][T17035] loop3: detected capacity change from 0 to 512 [ 465.485945][T17035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.564927][T17035] ext4 filesystem being mounted at /1269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 465.661803][T17035] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 465.724366][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.542650][T17079] loop2: detected capacity change from 0 to 2048 [ 466.570033][T17079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.584963][ T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 466.645098][T17079] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.5165: inline data xattr refers to an external xattr inode [ 466.675587][T17086] ieee802154 phy0 wpan0: encryption failed: -22 [ 466.728685][T17079] EXT4-fs (loop2): Remounting filesystem read-only [ 466.827656][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 466.828140][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.835192][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.872198][ T27] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 466.904974][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 466.914058][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 466.925020][ T50] Bluetooth: hci3: hardware error 0x00 [ 466.934865][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.943052][ T27] usb 4-1: Product: syz [ 466.947504][ T27] usb 4-1: Manufacturer: syz [ 466.952146][ T27] usb 4-1: SerialNumber: syz [ 466.959727][ T27] usb 4-1: config 0 descriptor?? [ 466.969045][ T27] usb 4-1: bad CDC descriptors [ 467.015807][ T27] usb 4-1: unsupported MDLM descriptors [ 467.078014][T17094] loop1: detected capacity change from 0 to 1024 [ 467.283271][ T5853] usb 4-1: USB disconnect, device number 17 [ 467.655058][ T27] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 467.856356][ T27] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 467.895515][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.911897][ T27] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 467.931993][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.962542][ T27] usb 2-1: Product: syz [ 467.981193][ T27] usb 2-1: Manufacturer: syz [ 467.992865][ T27] usb 2-1: SerialNumber: syz [ 468.020638][ T27] usb 2-1: config 0 descriptor?? [ 468.026086][T17123] loop0: detected capacity change from 0 to 1024 [ 468.036995][ T27] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 468.070589][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 468.129986][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 468.148432][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 468.178829][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 468.218269][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 468.274778][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 468.293051][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 468.320088][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 468.333036][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 468.344492][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 468.352348][T17131] netlink: 'syz.2.5191': attribute type 3 has an invalid length. [ 468.357520][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 468.391838][ T27] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 468.416223][ T27] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 468.453355][ T27] usb 2-1: USB disconnect, device number 21 [ 468.496954][ T27] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 468.543841][ T27] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 468.568699][ T27] keyspan 2-1:0.0: device disconnected [ 469.047236][ T28] audit: type=1326 audit(2000000127.500:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 469.076008][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 469.139408][ T28] audit: type=1326 audit(2000000127.540:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 469.238094][ T28] audit: type=1326 audit(2000000127.550:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 469.261638][ T28] audit: type=1326 audit(2000000127.550:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17150 comm="syz.2.5201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 470.265363][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 470.477944][T17170] loop2: detected capacity change from 0 to 32768 [ 470.487614][T17170] XFS: attr2 mount option is deprecated. [ 470.491334][T17200] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 470.533602][T17170] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 470.565818][T17170] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 470.636391][T17170] XFS (loop2): Ending clean mount [ 470.673068][T17170] XFS (loop2): Quotacheck needed: Please wait. [ 470.711823][T17212] overlayfs: conflicting options: userxattr,redirect_dir=on [ 470.763993][T17170] XFS (loop2): Quotacheck: Done. [ 470.982471][T17220] loop0: detected capacity change from 0 to 512 [ 471.077870][T17220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.105129][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 471.139408][T17220] ext4 filesystem being mounted at /1343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.196877][T17220] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 471.200866][T17227] loop1: detected capacity change from 0 to 64 [ 471.346348][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.670097][T17235] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5238'. [ 471.714660][T17235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5238'. [ 471.763195][T17241] ipt_REJECT: TCP_RESET invalid for non-tcp [ 471.935193][T17243] tmpfs: Bad value for 'mpol' [ 472.132902][T17248] loop1: detected capacity change from 0 to 4096 [ 472.173033][T17248] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 472.227116][T17257] kernel read not supported for file /  (pid: 17257 comm: syz.0.5246) [ 472.243196][ T28] audit: type=1800 audit(2000000130.700:162): pid=17257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5246" name=200120 dev="mqueue" ino=43114 res=0 errno=0 [ 472.291103][T17248] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 472.345577][T17248] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 472.383871][T17248] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 472.393907][T17259] loop2: detected capacity change from 0 to 256 [ 472.411353][T17248] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 472.522915][T17259] FAT-fs (loop2): Directory bread(block 64) failed [ 472.552638][T17259] FAT-fs (loop2): Directory bread(block 65) failed [ 472.575017][T17248] ntfs: volume version 3.1. [ 472.594735][T17259] FAT-fs (loop2): Directory bread(block 66) failed [ 472.602747][T17259] FAT-fs (loop2): Directory bread(block 67) failed [ 472.694792][T17259] FAT-fs (loop2): Directory bread(block 68) failed [ 472.702956][T17259] FAT-fs (loop2): Directory bread(block 69) failed [ 472.745615][T17259] FAT-fs (loop2): Directory bread(block 70) failed [ 472.754891][T17259] FAT-fs (loop2): Directory bread(block 71) failed [ 472.761656][T17259] FAT-fs (loop2): Directory bread(block 72) failed [ 472.814771][T17259] FAT-fs (loop2): Directory bread(block 73) failed [ 473.565188][ T5853] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 473.774717][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 473.782443][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.806375][ T5853] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 473.816016][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.824056][ T5853] usb 2-1: Product: syz [ 473.857082][ T5853] usb 2-1: Manufacturer: syz [ 473.861756][ T5853] usb 2-1: SerialNumber: syz [ 473.915981][ T5853] usb 2-1: config 0 descriptor?? [ 473.936809][ T5853] usb 2-1: bad CDC descriptors [ 473.942234][ T5853] usb 2-1: unsupported MDLM descriptors [ 474.194971][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 474.197036][ T5853] usb 2-1: USB disconnect, device number 22 [ 474.384184][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5280'. [ 474.405381][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 474.412861][ T23] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 474.423169][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.446672][ T23] usb 4-1: config 0 descriptor?? [ 474.455459][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 474.900872][ T23] gspca_vc032x: reg_w err -71 [ 474.914626][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 474.930684][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 474.934394][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5288'. [ 474.950574][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 474.972536][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 474.990919][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.017575][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.034684][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.055766][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.071995][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.082120][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.094003][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.113630][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.130634][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.145143][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.154930][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.168290][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.168960][T17344] netlink: 'syz.1.5291': attribute type 7 has an invalid length. [ 475.194070][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.202534][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 475.202569][T17344] netlink: 'syz.1.5291': attribute type 8 has an invalid length. [ 475.214570][ T23] gspca_vc032x: Unknown sensor... [ 475.236660][ T23] vc032x: probe of 4-1:0.0 failed with error -22 [ 475.274251][ T23] usb 4-1: USB disconnect, device number 18 [ 476.120262][T17376] xt_limit: Overflow, try lower: 65536/2147483648 [ 476.710036][T17397] loop0: detected capacity change from 0 to 256 [ 477.230923][T17417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5327'. [ 477.255612][T17417] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 478.297579][T17460] loop3: detected capacity change from 0 to 256 [ 479.106150][ T2193] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 479.146683][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5363'. [ 479.294747][ T2193] usb 3-1: Using ep0 maxpacket: 32 [ 479.310200][ T2193] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 479.332644][ T2193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.351236][ T2193] usb 3-1: Product: syz [ 479.358324][ T2193] usb 3-1: Manufacturer: syz [ 479.363171][ T2193] usb 3-1: SerialNumber: syz [ 479.374470][ T2193] usb 3-1: config 0 descriptor?? [ 479.602288][T17505] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 479.821536][ T2193] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 479.838729][ T2193] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 479.916900][ T2193] peak_usb: probe of 3-1:0.0 failed with error -71 [ 479.937654][ T2193] usb 3-1: USB disconnect, device number 19 [ 479.965483][T17511] loop3: detected capacity change from 0 to 2048 [ 480.055533][T17511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.205932][T17499] loop0: detected capacity change from 0 to 32768 [ 480.225717][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.262240][T17499] (syz.0.5367,17499,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 480.294873][T17499] (syz.0.5367,17499,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 480.348911][T17499] JBD2: Ignoring recovery information on journal [ 480.475125][T17499] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 480.808352][ T5791] ocfs2: Unmounting device (7,0) on (node local) [ 481.064218][T17544] netlink: zone id is out of range [ 481.090540][T17544] netlink: zone id is out of range [ 481.124614][T17544] netlink: zone id is out of range [ 481.129812][T17544] netlink: zone id is out of range [ 481.144948][T17544] netlink: zone id is out of range [ 481.155039][T17544] netlink: zone id is out of range [ 481.160213][T17544] netlink: zone id is out of range [ 481.175841][T17544] netlink: zone id is out of range [ 481.181117][T17544] netlink: zone id is out of range [ 481.218905][T17544] netlink: zone id is out of range [ 481.289250][T17547] loop1: detected capacity change from 0 to 2048 [ 481.336779][T17547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.127886][T17571] loop3: detected capacity change from 0 to 4096 [ 482.141426][T17571] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 482.184204][T17571] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 482.210296][T17571] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 482.234946][T17575] loop2: detected capacity change from 0 to 1024 [ 482.249439][T17571] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 482.290445][T17571] ntfs: volume version 3.1. [ 482.303166][T17575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.306350][T17571] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 482.334900][T17575] ext4 filesystem being mounted at /1345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.342594][T17571] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 482.425727][T17571] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 482.500124][T17571] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 482.534758][T17571] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 482.574945][T17571] ntfs: (device loop3): load_and_init_quota(): Failed to load $Quota/$Q index. [ 482.612868][T17581] netlink: 'syz.0.5405': attribute type 1 has an invalid length. [ 482.632850][T17581] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.5405'. [ 482.691661][T17565] loop1: detected capacity change from 0 to 32768 [ 482.714712][ T788] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 482.759962][T17565] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 482.759962][T17565] [ 482.914638][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 482.922195][ T788] usb 3-1: config 4 has an invalid interface number: 244 but max is 0 [ 482.931044][ T788] usb 3-1: config 4 has no interface number 0 [ 482.944619][ T788] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 482.955869][ T788] usb 3-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid maxpacket 65267, setting to 1024 [ 482.967543][ T788] usb 3-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 482.977966][ T788] usb 3-1: config 4 interface 244 has no altsetting 0 [ 482.988096][ T788] usb 3-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 483.004677][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.022987][ T788] usb 3-1: Product: syz [ 483.028031][ T788] usb 3-1: Manufacturer: syz [ 483.032671][ T788] usb 3-1: SerialNumber: syz [ 483.061414][T17575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 483.113083][T17588] netlink: 'syz.1.5408': attribute type 2 has an invalid length. [ 483.145194][T17588] netlink: 'syz.1.5408': attribute type 1 has an invalid length. [ 483.174417][T17588] netlink: 'syz.1.5408': attribute type 1 has an invalid length. [ 483.316342][ T788] ipheth 3-1:4.244: Unable to find endpoints [ 483.339780][ T788] usb 3-1: USB disconnect, device number 20 [ 483.951564][T17516] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 484.001858][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.195591][T17618] loop0: detected capacity change from 0 to 4096 [ 484.209246][T17621] usb usb3: usbfs: process 17621 (syz.2.5423) did not claim interface 0 before use [ 484.219464][T17618] ntfs3: loop0: ino=3, Correct links count -> 2. [ 485.764435][T17674] loop2: detected capacity change from 0 to 512 [ 485.847827][T17674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.874832][T17674] ext4 filesystem being mounted at /1354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.962822][T17681] loop0: detected capacity change from 0 to 64 [ 486.118643][T17660] loop1: detected capacity change from 0 to 32768 [ 486.173490][T17685] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5456'. [ 486.206530][T17660] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 486.207174][T17685] netlink: 492 bytes leftover after parsing attributes in process `syz.3.5456'. [ 486.224794][T17687] netlink: 'syz.0.5455': attribute type 1 has an invalid length. [ 486.224816][T17687] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5455'. [ 486.267761][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.309202][T17660] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 486.504761][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 486.548424][T17696] QAT: Device 208 not found [ 486.798638][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 486.981125][T17709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5466'. [ 486.999666][T17709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5466'. [ 487.034699][T17709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5466'. [ 487.498783][T17725] loop1: detected capacity change from 0 to 256 [ 488.008682][T17741] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5481'. [ 488.027716][T17741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5481'. [ 488.040158][T17737] loop0: detected capacity change from 0 to 4096 [ 488.045780][T17741] ip6gretap3: entered allmulticast mode [ 488.052429][T17736] loop3: detected capacity change from 0 to 4096 [ 488.060376][T17737] __ntfs_error: 2 callbacks suppressed [ 488.060391][T17737] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 488.114143][T17737] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 488.126061][T17737] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 488.149167][T17737] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 488.192658][T17736] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 488.209773][T17737] ntfs: volume version 3.1. [ 488.220589][T17736] ntfs3: loop3: Failed to load $Extend (-22). [ 488.240879][T17736] ntfs3: loop3: Failed to initialize $Extend. [ 488.253102][T17737] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 488.307057][T17737] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 488.342460][T17737] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 488.388340][T17737] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 488.439792][T17737] ntfs: (device loop0): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 488.489905][T17737] ntfs: (device loop0): load_and_init_quota(): Failed to load $Quota/$Q index. [ 489.368290][T17778] loop1: detected capacity change from 0 to 256 [ 489.389055][T17781] loop3: detected capacity change from 0 to 256 [ 489.483057][T17781] FAT-fs (loop3): Directory bread(block 64) failed [ 489.507074][T17781] FAT-fs (loop3): Directory bread(block 65) failed [ 489.513882][T17781] FAT-fs (loop3): Directory bread(block 66) failed [ 489.544784][T17781] FAT-fs (loop3): Directory bread(block 67) failed [ 489.564929][T17781] FAT-fs (loop3): Directory bread(block 68) failed [ 489.576186][T17781] FAT-fs (loop3): Directory bread(block 69) failed [ 489.582995][T17781] FAT-fs (loop3): Directory bread(block 70) failed [ 489.593966][T17781] FAT-fs (loop3): Directory bread(block 71) failed [ 489.603370][T17781] FAT-fs (loop3): Directory bread(block 72) failed [ 489.612701][T17781] FAT-fs (loop3): Directory bread(block 73) failed [ 489.644769][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 489.844699][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 489.866751][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.892380][T17769] loop2: detected capacity change from 0 to 32768 [ 489.905855][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 489.942070][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.961721][ T9] usb 1-1: Product: syz [ 489.974943][ T9] usb 1-1: Manufacturer: syz [ 489.979772][ T9] usb 1-1: SerialNumber: syz [ 490.003164][ T9] usb 1-1: config 0 descriptor?? [ 490.030130][T17789] netlink: 'syz.1.5504': attribute type 9 has an invalid length. [ 490.045302][ T9] usb 1-1: bad CDC descriptors [ 490.059969][ T9] usb 1-1: unsupported MDLM descriptors [ 490.258003][ T23] usb 1-1: USB disconnect, device number 15 [ 490.518281][T17801] tmpfs: Bad value for 'mpol' [ 490.876453][T17811] loop3: detected capacity change from 0 to 8 [ 490.906223][T17813] xt_CT: You must specify a L4 protocol and not use inversions on it [ 491.044709][ T788] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 491.245945][ T788] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 491.280222][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.309907][ T788] usb 3-1: Product: syz [ 491.314156][ T788] usb 3-1: Manufacturer: syz [ 491.340343][ T788] usb 3-1: SerialNumber: syz [ 491.452080][T17830] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5526'. [ 491.471063][T17830] 0·: renamed from hsr0 (while UP) [ 491.488449][T17830] 0·: entered allmulticast mode [ 491.497680][T17831] loop1: detected capacity change from 0 to 2048 [ 491.504221][T17830] net_ratelimit: 336 callbacks suppressed [ 491.504237][T17830] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 491.551269][T17831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.647625][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 491.730719][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 491.774298][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 491.805887][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 491.835992][ T788] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 491.886903][ T788] lan78xx: probe of 3-1:1.0 failed with error -71 [ 491.942909][ T788] usb 3-1: USB disconnect, device number 21 [ 492.835800][T17868] loop1: detected capacity change from 0 to 4096 [ 492.855185][T17868] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 492.962942][T17880] netlink: 'syz.2.5550': attribute type 10 has an invalid length. [ 494.044269][T17911] loop1: detected capacity change from 0 to 4096 [ 494.090751][T17911] ntfs: volume version 3.1. [ 494.241493][T17921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.355687][ T9681] __ntfs_error: 13 callbacks suppressed [ 494.355707][ T9681] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 494.436926][T17923] loop3: detected capacity change from 0 to 512 [ 494.497316][T17923] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 494.554013][T17923] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 494.595331][T17923] System zones: 0-2, 18-18, 34-34 [ 494.616334][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5573'. [ 494.652405][T17923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.684786][T17923] ext4 filesystem being mounted at /1380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.957205][T17942] netlink: 'syz.0.5579': attribute type 1 has an invalid length. [ 494.973722][T17942] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5579'. [ 494.986449][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.544133][T17965] xt_hashlimit: max too large, truncated to 1048576 [ 496.164003][T17989] dlm: no locking on control device [ 496.169815][T17991] netlink: 'syz.0.5602': attribute type 3 has an invalid length. [ 496.364928][T17995] loop3: detected capacity change from 0 to 512 [ 496.411756][T17995] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 496.425062][T17995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 496.450291][T17995] EXT4-fs (loop3): orphan cleanup on readonly fs [ 496.462186][T17995] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.5603: iget: bad i_size value: 12154761577498 [ 496.502295][T17995] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5603: couldn't read orphan inode 13 (err -117) [ 496.564035][T17995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 496.652002][T17995] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.5603: dx entry: limit 65535 != root limit 120 [ 496.667677][T17995] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5603: Corrupt directory, running e2fsck is recommended [ 496.714726][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 496.757488][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.901909][T18008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5610'. [ 496.941682][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.959809][T17983] loop2: detected capacity change from 0 to 32768 [ 496.970281][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.025203][ T9] usb 1-1: config 0 descriptor?? [ 497.052848][ T9] cp210x 1-1:0.0: cp210x converter detected [ 497.061208][T17983] [ 497.061208][T17983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.061208][T17983] [ 497.140618][T17983] JFS: metapage_get_blocks failed [ 497.153393][T17983] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 497.153393][T17983] [ 497.225705][T17983] ERROR: (device loop2): diWrite: ixpxd invalid [ 497.225705][T17983] [ 497.256446][T17983] ERROR: (device loop2): txCommit: [ 497.256446][T17983] [ 497.267671][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 497.415966][ T5788] [ 497.415966][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.415966][ T5788] [ 497.456049][ T5788] [ 497.456049][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 497.456049][ T5788] [ 497.509844][ T2193] usb 1-1: USB disconnect, device number 16 [ 497.527836][ T2193] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 497.553141][ T2193] cp210x 1-1:0.0: device disconnected [ 497.853677][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5620'. [ 498.760593][T18053] loop0: detected capacity change from 0 to 4096 [ 498.794402][T18053] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 499.544347][T18078] netlink: 'syz.1.5637': attribute type 1 has an invalid length. [ 499.583148][T18078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5637'. [ 499.761591][T18089] netlink: 'syz.3.5639': attribute type 41 has an invalid length. [ 500.114772][ T2193] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 500.315302][ T2193] usb 1-1: Using ep0 maxpacket: 8 [ 500.323368][ T2193] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 500.344710][ T2193] usb 1-1: config 179 has no interface number 0 [ 500.351099][ T2193] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 500.405803][ T2193] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 500.456042][ T2193] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 500.500152][ T2193] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 500.530023][ T2193] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 500.581818][ T2193] usb 1-1: config 179 interface 65 has no altsetting 0 [ 500.604773][ T2193] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 500.613932][ T2193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.714454][ T2193] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 500.840340][ T5142] input input23: unable to receive magic message: -110 [ 501.000018][ T5142] input input23: unable to receive magic message: -32 [ 501.035525][ T5142] input input23: unable to receive magic message: -32 [ 501.135591][ T5142] input input23: unable to receive magic message: -32 [ 501.177172][ T5142] input input23: unable to receive magic message: -32 [ 501.285728][T18138] syz_tun: left promiscuous mode [ 501.306648][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 501.316542][ T2193] usb 1-1: USB disconnect, device number 17 [ 501.331772][ T2193] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 501.366102][T18138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.733623][T18155] usb usb1: usbfs: process 18155 (syz.2.5663) did not claim interface 0 before use [ 501.868915][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.875934][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.131898][T18168] macvtap0: entered allmulticast mode [ 502.174994][T18168] veth0_macvtap: entered allmulticast mode [ 502.474183][T18181] loop2: detected capacity change from 0 to 512 [ 502.538446][T18187] loop3: detected capacity change from 0 to 8 [ 502.575591][T18181] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 502.594080][T18181] System zones: 0-2, 18-18, 34-34 [ 502.610690][T18181] EXT4-fs (loop2): orphan cleanup on readonly fs [ 502.691217][T18181] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.5674: bg 0: block 248: padding at end of block bitmap is not set [ 502.733508][T18181] Quota error (device loop2): write_blk: dquota write failed [ 502.745727][T18181] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 502.756036][T18181] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.5674: Failed to acquire dquot type 1 [ 502.782228][T18181] EXT4-fs (loop2): 1 orphan inode deleted [ 502.833750][ T3447] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 502.865054][ T3447] EXT4-fs error (device loop2): ext4_release_dquot:6976: comm kworker/u4:8: Failed to release dquot type 1 [ 502.948120][T18181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.095713][T18181] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.5674: deleted inode referenced: 12 [ 503.177960][T18208] loop1: detected capacity change from 0 to 16 [ 503.242076][T18208] erofs: (device loop1): mounted with root inode @ nid 36. [ 503.259105][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.518469][T18218] loop0: detected capacity change from 0 to 2048 [ 503.573915][T18218] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 503.684882][T18225] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 503.766568][T18227] loop2: detected capacity change from 0 to 16 [ 503.836139][T18227] erofs: (device loop2): mounted with root inode @ nid 36. [ 504.143564][T18232] loop1: detected capacity change from 0 to 4096 [ 504.167016][T18235] SET target dimension over the limit! [ 504.201806][T18237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.244805][T18232] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 504.520414][T18232] ntfs3: loop1: mft corrupted [ 504.569432][ T28] audit: type=1800 audit(2000000163.030:174): pid=18232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5691" name="file0" dev="loop1" ino=33 res=0 errno=0 [ 504.802055][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5698'. [ 504.845215][T18252] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5698'. [ 504.854346][T18252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5698'. [ 505.179114][T18267] QAT: Stopping all acceleration devices. [ 505.226187][T18270] netlink: 'syz.3.5706': attribute type 21 has an invalid length. [ 505.826867][T18294] loop1: detected capacity change from 0 to 512 [ 506.022408][T18294] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 506.065625][T18294] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 506.105346][T18294] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.5715: Failed to acquire dquot type 0 [ 506.204821][T18294] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.5715: bg 0: block 64: padding at end of block bitmap is not set [ 506.236531][T18294] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 506.267697][T18294] EXT4-fs (loop1): 1 truncate cleaned up [ 506.278746][T18294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.298519][T18315] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 506.308602][T18294] ext4 filesystem being mounted at /1422/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.320060][T18315] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 506.520499][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.323448][T18350] loop0: detected capacity change from 0 to 512 [ 507.391661][T18350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 507.417754][T18350] System zones: 0-2, 18-18, 34-34 [ 507.435138][T18350] EXT4-fs (loop0): orphan cleanup on readonly fs [ 507.508874][T18350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.5734: bg 0: block 248: padding at end of block bitmap is not set [ 507.543593][T18359] autofs4:pid:18359:autofs_fill_super: called with bogus options [ 507.596382][T18350] Quota error (device loop0): write_blk: dquota write failed [ 507.604093][T18350] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 507.668836][T18350] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.5734: Failed to acquire dquot type 1 [ 507.708540][T18350] EXT4-fs (loop0): 1 orphan inode deleted [ 507.723341][ T9681] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 507.764917][ T9681] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:14: Failed to release dquot type 1 [ 507.805158][T18350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.926168][T18350] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.5734: deleted inode referenced: 12 [ 508.086717][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.170658][ T28] audit: type=1326 audit(2000000166.630:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41678ebe9 code=0x7ffc0000 [ 508.204738][ T28] audit: type=1326 audit(2000000166.630:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41678ebe9 code=0x7ffc0000 [ 508.262537][T18346] loop3: detected capacity change from 0 to 32768 [ 508.291575][ T28] audit: type=1326 audit(2000000166.660:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe41678ebe9 code=0x7ffc0000 [ 508.329361][T18369] loop1: detected capacity change from 0 to 2048 [ 508.346700][ T28] audit: type=1326 audit(2000000166.660:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe41678ec23 code=0x7ffc0000 [ 508.378687][T18346] [ 508.378687][T18346] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 508.378687][T18346] [ 508.401952][ T28] audit: type=1326 audit(2000000166.730:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe41678d69f code=0x7ffc0000 [ 508.437905][T18346] JFS: metapage_get_blocks failed [ 508.443129][T18346] ERROR: (device loop3): release_metapage: metapage_write_one() failed [ 508.443129][T18346] [ 508.462321][T18369] Alternate GPT is invalid, using primary GPT. [ 508.473920][T18369] loop1: p2 p3 p7 [ 508.494424][ T28] audit: type=1326 audit(2000000166.790:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe41678ec77 code=0x7ffc0000 [ 508.525863][ T28] audit: type=1326 audit(2000000166.790:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe41678d550 code=0x7ffc0000 [ 508.549202][T18346] ERROR: (device loop3): diWrite: ixpxd invalid [ 508.549202][T18346] [ 508.578818][T18346] ERROR: (device loop3): txCommit: [ 508.578818][T18346] [ 508.604824][ T28] audit: type=1326 audit(2000000166.790:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe41678e7eb code=0x7ffc0000 [ 508.672518][ T28] audit: type=1326 audit(2000000166.810:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe41678d84a code=0x7ffc0000 [ 508.769929][ T28] audit: type=1326 audit(2000000166.810:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.5745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe41678e7eb code=0x7ffc0000 [ 508.808993][ T5786] [ 508.808993][ T5786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 508.808993][ T5786] [ 508.886321][ T5786] [ 508.886321][ T5786] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 508.886321][ T5786] [ 509.106057][ T2193] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 509.179590][ T5803] udevd[5803]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 509.202415][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 509.208066][ T5794] udevd[5794]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 509.328906][ T2193] usb 2-1: Using ep0 maxpacket: 8 [ 509.346736][ T2193] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 509.374476][ T2193] usb 2-1: config 179 has no interface number 0 [ 509.392006][T18394] netlink: 'syz.2.5755': attribute type 2 has an invalid length. [ 509.400553][ T2193] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 509.414767][T18394] netlink: 'syz.2.5755': attribute type 1 has an invalid length. [ 509.429665][ T2193] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 509.454759][ T2193] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 509.485954][ T2193] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 509.506986][ T2193] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 509.531437][ T2193] usb 2-1: config 179 interface 65 has no altsetting 0 [ 509.539955][ T2193] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 509.565535][ T2193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.590458][ T2193] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 509.655006][ T5142] input input24: unable to receive magic message: -110 [ 509.700439][ T5142] input input24: unable to receive magic message: -32 [ 509.764672][ T5142] input input24: unable to receive magic message: -32 [ 509.800275][ T5142] input input24: unable to receive magic message: -32 [ 509.874930][ T5142] input input24: unable to receive magic message: -32 [ 509.924638][ T5142] input input24: unable to receive magic message: -32 [ 509.965079][T18408] netlink: 'syz.3.5762': attribute type 29 has an invalid length. [ 509.988394][T18408] netlink: 'syz.3.5762': attribute type 29 has an invalid length. [ 510.189388][ T23] usb 2-1: USB disconnect, device number 23 [ 510.195491][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 510.206043][ T23] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 510.281370][T18419] loop3: detected capacity change from 0 to 64 [ 510.734023][T18415] loop2: detected capacity change from 0 to 32768 [ 510.854978][T18415] ea_get: invalid extended attribute [ 510.886821][T18415] ea_get: invalid extended attribute [ 510.999957][T18427] loop1: detected capacity change from 0 to 2048 [ 511.023615][T18427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.032957][T18431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5772'. [ 511.259548][T18437] usb usb1: usbfs: process 18437 (syz.0.5775) did not claim interface 2 before use [ 511.353696][T18439] --map-set only usable from mangle table [ 511.626805][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5781'. [ 511.664970][T18447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5781'. [ 511.674031][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5781'. [ 511.714732][T18447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5781'. [ 512.871915][T18477] loop3: detected capacity change from 0 to 512 [ 512.984733][T18477] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 512.992874][T18477] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 513.019331][T18477] EXT4-fs (loop3): 1 truncate cleaned up [ 513.052455][T18477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.105866][T18465] loop1: detected capacity change from 0 to 32768 [ 513.131724][T18465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.5789 (18465) [ 513.152286][T18477] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.5795: Logical block already allocated [ 513.189179][T18465] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 513.244829][T18465] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 513.269695][T18465] BTRFS info (device loop1): using free space tree [ 513.318297][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.487365][T18465] BTRFS info (device loop1): enabling ssd optimizations [ 513.494416][T18465] BTRFS info (device loop1): auto enabling async discard [ 513.525514][T18461] loop0: detected capacity change from 0 to 40427 [ 513.569318][T18461] F2FS-fs (loop0): invalid crc value [ 513.598008][T18461] F2FS-fs (loop0): Found nat_bits in checkpoint [ 513.816214][ T2193] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 513.853303][T18461] F2FS-fs (loop0): Start checkpoint disabled! [ 513.922903][T18461] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 514.049767][ T2193] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 514.077526][ T2193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.089095][ T2193] usb 4-1: Product: syz [ 514.104011][ T2193] usb 4-1: Manufacturer: syz [ 514.136515][ T2193] usb 4-1: SerialNumber: syz [ 514.146136][T18511] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5802'. [ 514.155693][ T2193] usb 4-1: config 0 descriptor?? [ 514.173446][ T2193] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 514.259355][ T5785] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 514.637603][ T2193] gspca_stk1135: reg_w 0x0 err -71 [ 514.654059][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.693647][ T2193] gspca_stk1135: Sensor write failed [ 514.714111][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.734188][ T2193] gspca_stk1135: Sensor write failed [ 514.754459][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.761123][ T2193] gspca_stk1135: Sensor read failed [ 514.795163][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.801654][ T2193] gspca_stk1135: Sensor read failed [ 514.830338][ T2193] gspca_stk1135: Detected sensor type unknown (0x0) [ 514.858308][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.878564][ T2193] gspca_stk1135: Sensor read failed [ 514.897942][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.911032][T18520] autofs4:pid:18520:autofs_fill_super: called with bogus options [ 514.929760][ T2193] gspca_stk1135: Sensor read failed [ 514.944608][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 514.971555][ T2193] gspca_stk1135: Sensor write failed [ 514.994690][ T2193] gspca_stk1135: serial bus timeout: status=0x00 [ 515.001203][ T2193] gspca_stk1135: Sensor write failed [ 515.051516][ T2193] stk1135: probe of 4-1:0.0 failed with error -71 [ 515.085515][ T2193] usb 4-1: USB disconnect, device number 19 [ 515.479121][T18513] loop2: detected capacity change from 0 to 32768 [ 515.557429][T18513] [ 515.557429][T18513] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.557429][T18513] [ 515.666066][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 515.666083][ T28] audit: type=1800 audit(2000000174.120:200): pid=18513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5805" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 515.772152][ T5788] [ 515.772152][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.772152][ T5788] [ 515.807214][ T5788] [ 515.807214][ T5788] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 515.807214][ T5788] [ 516.073037][T18518] loop1: detected capacity change from 0 to 32768 [ 516.158937][T18518] [ 516.158937][T18518] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 516.158937][T18518] [ 516.260825][T18518] JFS: metapage_get_blocks failed [ 516.275545][T18518] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 516.275545][T18518] [ 516.334477][T18518] ERROR: (device loop1): diWrite: ixpxd invalid [ 516.334477][T18518] [ 516.395617][T18518] ERROR: (device loop1): txCommit: [ 516.395617][T18518] [ 516.463302][T18549] loop2: detected capacity change from 0 to 16 [ 516.513675][T18549] erofs: (device loop2): mounted with root inode @ nid 36. [ 516.535629][ T5785] [ 516.535629][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 516.535629][ T5785] [ 516.564989][T18549] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 516.604069][ T5785] [ 516.604069][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 516.604069][ T5785] [ 516.618552][T18549] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 516.737241][T18553] loop3: detected capacity change from 0 to 2048 [ 516.781549][T18553] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.863453][T18559] netlink: zone id is out of range [ 516.884642][T18559] netlink: get zone limit has 8 unknown bytes [ 516.935085][T18553] cifs: Unknown parameter 'h}#úä [ 516.935085][T18553] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 516.935085][T18553] SÃȘØÈžZ§6ŸÂ' [ 517.496820][T18571] loop1: detected capacity change from 0 to 8 [ 517.879979][T18555] loop0: detected capacity change from 0 to 32768 [ 517.908109][T18555] XFS: noikeep mount option is deprecated. [ 517.914000][T18555] XFS: ikeep mount option is deprecated. [ 517.991758][T18555] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.034232][T18588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5836'. [ 518.198326][T18555] XFS (loop0): Ending clean mount [ 518.345050][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 518.377427][T18555] XFS: noikeep mount option is deprecated. [ 518.515024][ T5791] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 518.555863][ T27] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 518.566323][T18603] loop1: detected capacity change from 0 to 512 [ 518.581262][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.589897][ T27] usb 3-1: Product: syz [ 518.616713][ T27] usb 3-1: Manufacturer: syz [ 518.621993][ T27] usb 3-1: SerialNumber: syz [ 518.646662][T18603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.655101][ T27] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 518.692393][ T2193] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 518.748838][T18603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.810411][T18603] ext4 filesystem being mounted at /1448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.199994][ T27] usb 3-1: USB disconnect, device number 22 [ 519.309630][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.597411][T18627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5853'. [ 519.679232][T18630] loop1: detected capacity change from 0 to 256 [ 519.740766][T18630] FAT-fs (loop1): Directory bread(block 64) failed [ 519.754732][T18630] FAT-fs (loop1): Directory bread(block 65) failed [ 519.780925][T18630] FAT-fs (loop1): Directory bread(block 66) failed [ 519.798551][ T2193] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 519.810501][T18630] FAT-fs (loop1): Directory bread(block 67) failed [ 519.827294][ T2193] ath9k_htc: Failed to initialize the device [ 519.839321][T18630] FAT-fs (loop1): Directory bread(block 68) failed [ 519.845639][ T27] usb 3-1: ath9k_htc: USB layer deinitialized [ 519.864991][T18630] FAT-fs (loop1): Directory bread(block 69) failed [ 519.894836][T18630] FAT-fs (loop1): Directory bread(block 70) failed [ 519.909101][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5856'. [ 519.914687][T18630] FAT-fs (loop1): Directory bread(block 71) failed [ 519.938950][T18634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5856'. [ 519.948675][T18630] FAT-fs (loop1): Directory bread(block 72) failed [ 519.956290][T18630] FAT-fs (loop1): Directory bread(block 73) failed [ 520.693459][T18652] loop3: detected capacity change from 0 to 64 [ 520.695807][T18632] loop0: detected capacity change from 0 to 32768 [ 520.775553][T18632] JFS: metapage_get_blocks failed [ 520.780692][T18632] ERROR: (device loop0): release_metapage: metapage_write_one() failed [ 520.780692][T18632] [ 520.825019][T18632] ERROR: (device loop0): remounting filesystem as read-only [ 520.996126][ T112] blkno = 8ed2c, nblocks = 1 [ 521.001839][ T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map [ 521.001839][ T112] [ 521.514884][T18668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5872'. [ 521.590872][T18649] loop2: detected capacity change from 0 to 32768 [ 521.686426][T18649] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 521.719093][T18649] (syz.2.5864,18649,0):ocfs2_remount:630 ERROR: Cannot change data mode on remount [ 521.802272][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 521.964328][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5878'. [ 522.558832][T18703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5887'. [ 523.082760][T18722] loop3: detected capacity change from 0 to 128 [ 523.127537][T18722] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 523.180429][T18722] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 523.449447][T18735] x_tables: duplicate underflow at hook 3 [ 523.632464][T18741] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5907'. [ 523.987859][T18755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5914'. [ 524.005222][T18755] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5914'. [ 524.025339][T18755] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5914'. [ 524.045934][T18755] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 524.046644][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 524.104378][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5915'. [ 524.297457][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 524.310494][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 524.320637][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 524.364705][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 524.394230][ T9] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 524.416235][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.424302][ T9] usb 2-1: Product: syz [ 524.444591][ T9] usb 2-1: Manufacturer: syz [ 524.454703][ T9] usb 2-1: SerialNumber: syz [ 524.462335][T18768] loop2: detected capacity change from 0 to 1764 [ 524.476915][ T9] usb 2-1: config 0 descriptor?? [ 524.507915][ T9] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 524.522551][T18771] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 524.530122][T18768] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 524.626653][T18768] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 524.735720][ T9] scsi host1: usb-storage 2-1:0.0 [ 524.781491][ T9] usb 2-1: USB disconnect, device number 24 [ 525.272112][T18789] loop3: detected capacity change from 0 to 8192 [ 525.304394][T18789] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 525.338255][T18789] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 525.378476][T18789] REISERFS (device loop3): using ordered data mode [ 525.385464][T18789] reiserfs: using flush barriers [ 525.404080][T18789] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 525.422732][T18789] REISERFS (device loop3): checking transaction log (loop3) [ 525.465126][ T27] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 525.674754][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 525.697478][ T27] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 525.728849][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.754828][ T27] usb 1-1: Product: syz [ 525.759171][ T27] usb 1-1: Manufacturer: syz [ 525.764077][ T27] usb 1-1: SerialNumber: syz [ 525.773473][T18789] REISERFS (device loop3): Using tea hash to sort names [ 525.783707][ T27] r8152-cfgselector 1-1: config 0 descriptor?? [ 525.821650][T18789] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 525.849474][T18789] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 526.258471][ T27] r8152-cfgselector 1-1: Unknown version 0x0000 [ 526.278528][ T27] r8152-cfgselector 1-1: USB disconnect, device number 18 [ 526.308638][T18819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5945'. [ 526.332887][T18819] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.380896][T18819] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.404107][T18819] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.413590][T18819] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 526.736954][T18826] loop3: detected capacity change from 0 to 8 [ 526.770669][T18826] SQUASHFS error: Failed to read block 0x6e6: -5 [ 526.788779][T18826] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 526.834907][T18826] SQUASHFS error: Unable to read inode 0xa7 [ 527.016022][T18829] loop0: detected capacity change from 0 to 64 [ 527.224966][T18817] loop2: detected capacity change from 0 to 32768 [ 527.274476][T18817] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.5944 (18817) [ 527.351753][T18817] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 527.385586][T18817] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 527.394354][T18817] BTRFS info (device loop2): using free space tree [ 527.555157][T18817] BTRFS info (device loop2): enabling ssd optimizations [ 527.595191][T18817] BTRFS info (device loop2): auto enabling async discard [ 527.668399][T18859] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 528.115983][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.371954][ T5799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5799) [ 528.613750][T18877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5964'. [ 528.648005][T18878] loop0: detected capacity change from 0 to 1024 [ 528.686183][T18878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 528.736259][T18878] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 528.761449][T18878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 528.889867][T18878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.947947][T18889] loop3: detected capacity change from 0 to 1764 [ 529.286795][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.533395][T18903] Cannot find del_set index 4 as target [ 529.855192][T18916] bond0: (slave gretap0): Opening slave failed [ 530.102575][T18924] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 530.163951][T18928] loop2: detected capacity change from 0 to 1024 [ 530.256728][T18928] hfsplus: invalid xattr key length: 0 [ 530.332516][T18932] netlink: zone id is out of range [ 530.457080][T18932] netlink: set zone limit has 4 unknown bytes [ 530.510005][T18939] netlink: 'syz.2.5994': attribute type 4 has an invalid length. [ 531.154821][ T5853] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 531.377811][ T5853] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 531.404790][ T5853] usb 2-1: config 1 has an invalid interface number: 4 but max is 0 [ 531.413208][ T5853] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 531.459706][ T5853] usb 2-1: config 1 has no interface number 0 [ 531.469540][ T5853] usb 2-1: config 1 has no interface number 1 [ 531.500606][ T5853] usb 2-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 531.545961][ T5853] usb 2-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 531.564685][ T5853] usb 2-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 531.583325][ T5853] usb 2-1: config 1 interface 105 has no altsetting 0 [ 531.590354][ T5853] usb 2-1: config 1 interface 4 has no altsetting 0 [ 531.613553][ T5853] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 531.634640][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.642808][ T5853] usb 2-1: Product: syz [ 531.665460][ T5853] usb 2-1: Manufacturer: syz [ 531.680426][ T5853] usb 2-1: SerialNumber: syz [ 531.770267][T18983] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 531.799798][T18984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.935282][ T5853] aqc111: probe of 2-1:1.105 failed with error -22 [ 532.056392][T18992] sctp: [Deprecated]: syz.2.6021 (pid 18992) Use of int in maxseg socket option. [ 532.056392][T18992] Use struct sctp_assoc_value instead [ 532.233561][ T27] usb 2-1: USB disconnect, device number 25 [ 532.390276][T19002] loop0: detected capacity change from 0 to 512 [ 532.462227][T19002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.501919][T19002] ext4 filesystem being mounted at /1537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.607860][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.738132][T19012] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 532.747342][T19014] loop0: detected capacity change from 0 to 512 [ 532.778514][T19014] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 532.799643][T19014] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 532.858697][T19014] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 532.898997][T19014] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 532.952241][T19014] System zones: 0-2, 18-18, 34-35 [ 533.003260][T19014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.030824][T19023] loop1: detected capacity change from 0 to 2048 [ 533.124777][T19023] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 533.241735][T19023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.273543][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.296826][T19023] EXT4-fs error (device loop1): empty_inline_dir:1857: inode #12: block 9: comm syz.1.6036: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 533.359129][T19023] EXT4-fs (loop1): Remounting filesystem read-only [ 533.394836][T19023] EXT4-fs warning (device loop1): empty_inline_dir:1864: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 533.569298][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.872883][T19044] overlayfs: missing 'lowerdir' [ 534.053519][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 534.092057][T19028] loop3: detected capacity change from 0 to 32768 [ 534.108457][T19028] XFS: noikeep mount option is deprecated. [ 534.169568][T19028] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 534.417149][T19028] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 534.587567][T19028] XFS (loop3): Starting recovery (logdev: internal) [ 534.714999][T19028] XFS (loop3): Ending recovery (logdev: internal) [ 534.741081][T19028] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 534.755899][T19028] XFS (loop3): Failed to initialize disk quotas. [ 534.987274][T19028] XFS (loop3): AG 0: Corrupt btree 5 pointer at level 1 index 0. [ 535.116458][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 535.574649][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6071'. [ 535.686995][T19107] loop1: detected capacity change from 0 to 1024 [ 535.876003][T19111] loop2: detected capacity change from 0 to 2048 [ 535.885426][T19115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6076'. [ 535.905884][T19115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6076'. [ 535.932403][T19116] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 536.010729][T19111] NILFS (loop2): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 536.405106][T19126] loop2: detected capacity change from 0 to 2048 [ 536.463162][T19126] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 536.731640][T19137] veth7: entered allmulticast mode [ 537.032506][T19143] loop2: detected capacity change from 0 to 4096 [ 537.084012][T19151] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6093'. [ 537.196665][T19143] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 537.304342][T19143] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 537.436003][ T5788] ntfs3: loop2: ino=9, ntfs_sync_fs failed, -22. [ 538.066147][T19180] loop3: detected capacity change from 0 to 4096 [ 538.205515][T19185] loop0: detected capacity change from 0 to 64 [ 538.218109][T19180] ntfs3: loop3: try to read out of volume at offset 0x3fffffc7000 [ 538.241150][T19187] loop2: detected capacity change from 0 to 64 [ 538.912375][T19202] netlink: 'syz.1.6118': attribute type 3 has an invalid length. [ 538.949566][T19202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.986041][ T27] lo speed is unknown, defaulting to 1000 [ 539.013791][T19204] loop3: detected capacity change from 0 to 1024 [ 539.036288][T19204] EXT4-fs: inline encryption not supported [ 539.042175][T19204] EXT4-fs: Ignoring removed i_version option [ 539.094139][T19204] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 539.140320][T19204] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 2: comm syz.3.6119: lblock 2 mapped to illegal pblock 2 (length 1) [ 539.251637][T19204] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 539.285040][T19204] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 48: comm syz.3.6119: lblock 0 mapped to illegal pblock 48 (length 1) [ 539.358354][T19218] loop0: detected capacity change from 0 to 64 [ 539.365127][T19204] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 539.376650][T19204] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.6119: Failed to acquire dquot type 0 [ 539.406108][T19204] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 539.436594][T19220] loop1: detected capacity change from 0 to 1764 [ 539.436610][T19204] EXT4-fs error (device loop3): ext4_evict_inode:252: inode #11: comm syz.3.6119: mark_inode_dirty error [ 539.521756][T19204] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 539.547750][T19204] EXT4-fs (loop3): 1 orphan inode deleted [ 539.576236][T19204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.585549][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 539.594596][ T9681] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 539.668032][ T9681] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 539.709088][ T9681] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:14: Failed to release dquot type 0 [ 539.794649][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 539.802381][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 539.810737][T19226] (null): rxe_set_mtu: Set mtu to 1024 [ 539.823555][ T9] usb 3-1: config 8 has an invalid interface number: 61 but max is 2 [ 539.842304][ T9] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 539.856467][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.857028][ T9] usb 3-1: config 8 has no interface number 0 [ 539.873443][ T9] usb 3-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 539.884098][ T9] usb 3-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.894838][ T9] usb 3-1: config 8 interface 61 has no altsetting 0 [ 539.901933][ T9681] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 539.919912][ T9] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 539.934716][ T9681] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 539.944076][ T9681] EXT4-fs error (device loop3): ext4_release_dquot:6976: comm kworker/u4:14: Failed to release dquot type 0 [ 539.956114][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.964303][ T9] usb 3-1: Product: syz [ 539.979933][ T9] usb 3-1: Manufacturer: syz [ 539.984893][ T9] usb 3-1: SerialNumber: syz [ 539.986011][ T5786] EXT4-fs error (device loop3): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 540.034672][ T5786] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 540.056166][ T5786] EXT4-fs error (device loop3): ext4_quota_off:7224: inode #3: comm syz-executor: mark_inode_dirty error [ 540.218082][ T9] bfusb: probe of 3-1:8.61 failed with error -5 [ 540.236664][T19232] netlink: 'syz.3.6131': attribute type 3 has an invalid length. [ 540.250281][T19226] infiniband syz!: set active [ 540.260093][T19226] infiniband syz!: added team_slave_0 [ 540.263871][ T9] usb 3-1: USB disconnect, device number 23 [ 540.290173][T19232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.345362][T19226] RDS/IB: syz!: added [ 540.352726][T19226] smc: adding ib device syz! with port count 1 [ 540.359634][T19226] smc: ib device syz! port 1 has pnetid [ 540.625148][ T788] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 540.632854][T19241] netlink: 'syz.3.6136': attribute type 8 has an invalid length. [ 540.836799][ T788] usb 2-1: config 0 has no interfaces? [ 540.847808][ T788] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 540.862411][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.872788][ T788] usb 2-1: Product: syz [ 540.881662][ T788] usb 2-1: Manufacturer: syz [ 540.889863][ T788] usb 2-1: SerialNumber: syz [ 540.902852][ T788] r8152-cfgselector 2-1: config 0 descriptor?? [ 540.987033][T19245] loop3: detected capacity change from 0 to 4096 [ 541.015988][T19245] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 541.188376][ T788] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 541.428710][ T788] usb 2-1: USB disconnect, device number 26 [ 542.182989][T19269] loop1: detected capacity change from 0 to 2048 [ 542.284652][T19269] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.891160][T19289] loop2: detected capacity change from 0 to 4096 [ 543.154764][T19289] ntfs3: loop2: try to read out of volume at offset 0x3fffffc7000 [ 543.182811][T19305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6168'. [ 543.522938][T19314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6172'. [ 544.096514][T19335] ip6gre2: entered allmulticast mode [ 544.344405][T19337] loop3: detected capacity change from 0 to 4096 [ 544.367289][T19337] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 544.428005][T19337] ntfs: volume version 3.1. [ 544.902335][T19356] loop0: detected capacity change from 0 to 2048 [ 544.987979][T19356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.053172][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6198'. [ 545.373771][T19372] program syz.3.6202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 545.985521][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 546.043240][T19395] loop1: detected capacity change from 0 to 8 [ 546.141715][T19395] SQUASHFS error: zstd decompression error: 10 [ 546.144007][T19398] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 546.164848][T19395] SQUASHFS error: zstd decompression failed, data probably corrupt [ 546.173648][T19395] SQUASHFS error: Failed to read block 0x62b: -5 [ 546.182387][T19398] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.6212'. [ 546.224692][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 546.230345][T19395] SQUASHFS error: Unable to read metadata cache entry [629] [ 546.245281][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 546.261403][T19395] SQUASHFS error: Unable to read directory block [629:ff26] [ 546.278235][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.299711][ T9] usb 4-1: Product: syz [ 546.335106][ T9] usb 4-1: Manufacturer: syz [ 546.339791][ T9] usb 4-1: SerialNumber: syz [ 546.585296][ T2193] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 546.600841][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 546.633030][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 546.643213][T19409] loop1: detected capacity change from 0 to 4096 [ 546.662547][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 546.670442][T19409] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 546.786386][T19409] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 546.793742][ T2193] usb 3-1: too many configurations: 25, using maximum allowed: 8 [ 546.848767][T19409] ntfs3: loop1: mft corrupted [ 546.878718][ T2193] usb 3-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 546.894735][T19409] ntfs3: loop1: Failed to load $Extend (-22). [ 546.908807][ T2193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.922374][T19409] ntfs3: loop1: Failed to initialize $Extend. [ 546.936290][ T787] usb 4-1: USB disconnect, device number 20 [ 546.958766][ T2193] usb 3-1: config 0 descriptor?? [ 546.967149][ T787] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 546.992346][ T2193] pwc: Creative Labs Webcam Pro Ex detected. [ 547.034757][ T2193] pwc: Warning: more than 1 configuration available. [ 547.042204][ T787] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 547.078890][ T787] visor 4-1:1.0: device disconnected [ 547.206725][ T2193] pwc: Failed to set LED on/off time (-71) [ 547.233502][ T2193] pwc: send_video_command error -71 [ 547.252493][ T2193] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 547.279059][ T2193] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 547.303017][ T2193] usb 3-1: USB disconnect, device number 24 [ 547.639485][T19433] netlink: 'syz.3.6224': attribute type 21 has an invalid length. [ 547.714443][T19436] QAT: failed to copy from user cfg_data. [ 547.887934][ T28] audit: type=1326 audit(2000000206.350:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf298ebe9 code=0x7ffc0000 [ 547.964760][ T28] audit: type=1326 audit(2000000206.350:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf298ebe9 code=0x7ffc0000 [ 548.036823][ T28] audit: type=1326 audit(2000000206.380:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f6cf298ebe9 code=0x7ffc0000 [ 548.108139][ T28] audit: type=1326 audit(2000000206.380:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf298ebe9 code=0x7ffc0000 [ 548.181977][ T28] audit: type=1326 audit(2000000206.380:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19438 comm="syz.0.6227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cf298ebe9 code=0x7ffc0000 [ 548.374931][ T787] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 548.565007][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 548.581542][ T787] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 548.602034][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.620755][ T787] usb 1-1: Product: syz [ 548.633810][ T787] usb 1-1: Manufacturer: syz [ 548.643992][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6243'. [ 548.644959][ T787] usb 1-1: SerialNumber: syz [ 548.654377][T19470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6243'. [ 548.677558][ T787] usb 1-1: config 0 descriptor?? [ 548.696442][ T787] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 548.938004][T19476] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 548.948075][T19476] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 548.974227][T19474] loop3: detected capacity change from 0 to 4096 [ 549.038095][T19474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.081301][T19482] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6249'. [ 549.091919][T19482] netlink: 'syz.1.6249': attribute type 1 has an invalid length. [ 549.100923][T19482] netlink: 'syz.1.6249': attribute type 2 has an invalid length. [ 549.109422][ T787] ssu100: probe of 1-1:0.0 failed with error -71 [ 549.116259][T19482] netlink: 116 bytes leftover after parsing attributes in process `syz.1.6249'. [ 549.128883][ T787] usb 1-1: USB disconnect, device number 19 [ 549.298804][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.383554][T19488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6251'. [ 549.702411][T19492] loop1: detected capacity change from 0 to 4096 [ 549.766674][T19492] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 549.953145][T19504] 8021q: adding VLAN 0 to HW filter on device bond5 [ 550.395023][T19517] tmpfs: User quota block hardlimit too large. [ 550.636769][T19527] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6270'. [ 550.679506][T19532] loop1: detected capacity change from 0 to 256 [ 550.702442][T19533] netlink: 'syz.3.6272': attribute type 10 has an invalid length. [ 550.746421][T19533] team0: Device veth0_vlan failed to register rx_handler [ 550.869416][T19532] FAT-fs (loop1): Directory bread(block 64) failed [ 550.891456][T19532] FAT-fs (loop1): Directory bread(block 65) failed [ 550.911811][T19532] FAT-fs (loop1): Directory bread(block 66) failed [ 550.931307][T19537] gtp1: entered promiscuous mode [ 550.940135][T19532] FAT-fs (loop1): Directory bread(block 67) failed [ 550.952396][T19532] FAT-fs (loop1): Directory bread(block 68) failed [ 550.961714][T19532] FAT-fs (loop1): Directory bread(block 69) failed [ 550.972031][T19532] FAT-fs (loop1): Directory bread(block 70) failed [ 550.990199][T19532] FAT-fs (loop1): Directory bread(block 71) failed [ 551.005040][T19532] FAT-fs (loop1): Directory bread(block 72) failed [ 551.011744][T19532] FAT-fs (loop1): Directory bread(block 73) failed [ 551.302880][T19545] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6279'. [ 551.377682][T19549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6281'. [ 552.017959][T19571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6291'. [ 552.210421][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 552.404817][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 552.417303][ T9] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 552.435761][ T9] usb 1-1: config 6 has no interface number 0 [ 552.441954][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 552.454242][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 552.468455][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 552.478376][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.486670][ T9] usb 1-1: Product: syz [ 552.491256][ T9] usb 1-1: Manufacturer: syz [ 552.496140][ T9] usb 1-1: SerialNumber: syz [ 552.523195][ T9] hso 1-1:6.2: Failed to find INT IN ep [ 552.586546][T19572] loop2: detected capacity change from 0 to 32768 [ 552.614611][ T5853] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 552.635241][T19572] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 552.673980][T19572] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 552.694958][T19572] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 552.705813][T19572] OCFS2: File system is now read-only. [ 552.711605][T19572] (syz.2.6292,19572,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 552.743040][ T2193] usb 1-1: USB disconnect, device number 20 [ 552.802250][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 552.819334][ T5853] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 552.844217][ T5853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.864611][ T5853] usb 2-1: config 0 has no interface number 0 [ 552.883327][ T5853] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 552.923658][ T5853] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.967786][ T5853] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 552.987790][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.016913][ T5853] usb 2-1: Product: syz [ 553.026851][ T5853] usb 2-1: Manufacturer: syz [ 553.036980][ T5853] usb 2-1: SerialNumber: syz [ 553.049783][ T5853] usb 2-1: config 0 descriptor?? [ 553.272892][T19594] 8021q: adding VLAN 0 to HW filter on device bond4 [ 553.463772][T19599] IPv6: sit1: Disabled Multicast RS [ 553.550876][ T27] usb 2-1: USB disconnect, device number 27 [ 553.692046][T19608] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 553.706492][T19605] loop3: detected capacity change from 0 to 4096 [ 553.774189][T19610] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.150720][ T5853] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 554.291238][T19625] netlink: 'syz.1.6316': attribute type 10 has an invalid length. [ 554.344717][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 554.357013][ T5853] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 554.378472][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32695, setting to 1024 [ 554.430822][ T5853] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 554.468573][ T5853] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 554.493529][T19625] team0: Device veth0_vlan failed to register rx_handler [ 554.526056][ T5853] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 554.536155][ T5853] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 554.567865][ T5853] usb 3-1: Manufacturer: syz [ 554.584196][ T5853] usb 3-1: config 0 descriptor?? [ 554.591555][T19614] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 554.900406][ T5853] usb 3-1: USB disconnect, device number 25 [ 555.498946][T19661] netlink: 'syz.0.6334': attribute type 10 has an invalid length. [ 555.619719][T19665] netlink: 456 bytes leftover after parsing attributes in process `syz.2.6336'. [ 555.642899][T19661] team0: Device veth0_vlan failed to register rx_handler [ 555.665219][T19665] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6336'. [ 555.821340][T19653] loop3: detected capacity change from 0 to 32768 [ 555.893660][T19653] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 556.075241][T19653] XFS (loop3): Ending clean mount [ 556.095716][T19653] XFS (loop3): Quotacheck needed: Please wait. [ 556.257297][T19653] XFS (loop3): Quotacheck: Done. [ 556.463644][ T5786] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 557.042922][T19707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6354'. [ 557.299605][T19717] openvswitch: netlink: EtherType 0 is less than min 600 [ 557.803923][T19735] loop0: detected capacity change from 0 to 64 [ 557.836587][T19737] loop3: detected capacity change from 0 to 8 [ 557.921000][T19741] loop2: detected capacity change from 0 to 128 [ 557.996105][ T5803] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 558.013150][T19741] autofs4:pid:19741:autofs_fill_super: called with bogus options [ 558.069139][T19737] SQUASHFS error: Failed to read block 0x33c: -5 [ 558.109306][T19737] SQUASHFS error: Unable to read metadata cache entry [33a] [ 558.155486][T19737] SQUASHFS error: Unable to read inode 0xa7 [ 558.299998][T19749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6374'. [ 558.334954][T19749] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6374'. [ 558.655074][T19763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6381'. [ 558.675003][T19762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 558.682310][T19762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 558.731511][T19762] vhci_hcd vhci_hcd.0: Device attached [ 558.741584][T19767] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 558.748168][T19767] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 558.790733][T19767] vhci_hcd vhci_hcd.0: Device attached [ 558.800752][T19768] vhci_hcd: connection closed [ 558.806942][T19764] vhci_hcd: connection closed [ 558.824912][ T9673] vhci_hcd: stop threads [ 558.868915][ T9673] vhci_hcd: release socket [ 558.881340][ T9673] vhci_hcd: disconnect device [ 558.891485][ T9673] vhci_hcd: stop threads [ 558.901028][ T9673] vhci_hcd: release socket [ 558.914752][ T27] vhci_hcd: vhci_device speed not set [ 558.920921][ T9673] vhci_hcd: disconnect device [ 559.015189][ T27] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 559.023186][ T27] usb 39-1: enqueue for inactive port 0 [ 559.126298][ T27] vhci_hcd: vhci_device speed not set [ 559.709635][T19803] loop0: detected capacity change from 0 to 2048 [ 559.773199][T19810] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 560.181427][T19822] IPVS: length: 67 != 24 [ 560.232693][T19826] xt_l2tp: invalid flags combination: c [ 560.990568][T19854] loop0: detected capacity change from 0 to 256 [ 560.997794][ T787] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 561.123399][T19854] FAT-fs (loop0): Directory bread(block 64) failed [ 561.143622][T19854] FAT-fs (loop0): Directory bread(block 65) failed [ 561.183755][T19854] FAT-fs (loop0): Directory bread(block 66) failed [ 561.203960][T19854] FAT-fs (loop0): Directory bread(block 67) failed [ 561.211200][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 561.223850][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.240484][T19854] FAT-fs (loop0): Directory bread(block 68) failed [ 561.254906][ T787] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 561.282431][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.298121][ T787] usb 2-1: config 0 descriptor?? [ 561.314861][T19854] FAT-fs (loop0): Directory bread(block 69) failed [ 561.321693][T19854] FAT-fs (loop0): Directory bread(block 70) failed [ 561.335296][T19854] FAT-fs (loop0): Directory bread(block 71) failed [ 561.342028][T19854] FAT-fs (loop0): Directory bread(block 72) failed [ 561.349546][T19854] FAT-fs (loop0): Directory bread(block 73) failed [ 561.356517][ T28] audit: type=1326 audit(2000000219.820:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.2.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 561.392851][ T28] audit: type=1326 audit(2000000219.820:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.2.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 561.417094][ T28] audit: type=1326 audit(2000000219.830:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.2.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 561.449281][ T28] audit: type=1326 audit(2000000219.850:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19859 comm="syz.2.6425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947f58ebe9 code=0x7ffc0000 [ 561.597972][ T9] usb 2-1: USB disconnect, device number 28 [ 561.629042][T19862] netlink: 'syz.2.6426': attribute type 8 has an invalid length. [ 561.699363][T19864] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 561.701668][T19850] loop3: detected capacity change from 0 to 32768 [ 561.705942][T19864] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 561.719405][T19864] vhci_hcd vhci_hcd.0: Device attached [ 561.775398][T19850] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 561.786448][T19864] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 561.793028][T19864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 561.808702][T19864] vhci_hcd vhci_hcd.0: Device attached [ 561.830917][T19865] vhci_hcd: connection closed [ 561.832811][ T9686] vhci_hcd: stop threads [ 561.833619][T19872] vhci_hcd: connection closed [ 561.848684][T19850] XFS (loop3): Ending clean mount [ 561.859730][ T9686] vhci_hcd: release socket [ 561.866066][ T9686] vhci_hcd: disconnect device [ 561.877197][ T9686] vhci_hcd: stop threads [ 561.881574][ T9686] vhci_hcd: release socket [ 561.888943][ T9686] vhci_hcd: disconnect device [ 561.905611][T19850] XFS (loop3): Quotacheck needed: Please wait. [ 561.924905][ T788] vhci_hcd: vhci_device speed not set [ 561.947922][T19880] dlm: non-version read from control device 59 [ 562.017592][T19850] XFS (loop3): Quotacheck: Done. [ 562.030995][T19850] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 562.519058][T19897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 562.540145][T19897] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6436'. [ 562.551052][T19897] netlink: 'syz.1.6436': attribute type 1 has an invalid length. [ 562.805050][T19907] wg1 speed is unknown, defaulting to 1000 [ 562.812364][T19907] wg1 speed is unknown, defaulting to 1000 [ 562.845098][T19907] wg1 speed is unknown, defaulting to 1000 [ 562.897542][T19907] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 562.939758][T19907] wg1 speed is unknown, defaulting to 1000 [ 562.948880][T19907] wg1 speed is unknown, defaulting to 1000 [ 562.968024][T19907] wg1 speed is unknown, defaulting to 1000 [ 562.983340][T19907] wg1 speed is unknown, defaulting to 1000 [ 563.101585][T19915] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 563.108273][T19915] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 563.127017][T19915] vhci_hcd vhci_hcd.0: Device attached [ 563.170528][T19915] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 563.177133][T19915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 563.250555][T19915] vhci_hcd vhci_hcd.0: Device attached [ 563.297843][T19916] vhci_hcd: connection closed [ 563.298388][T19920] vhci_hcd: connection closed [ 563.308747][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.320157][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.329980][ T3447] vhci_hcd: stop threads [ 563.335207][ T27] vhci_hcd: vhci_device speed not set [ 563.376508][ T3447] vhci_hcd: release socket [ 563.381073][ T3447] vhci_hcd: disconnect device [ 563.404926][ T27] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 563.405171][ T3447] vhci_hcd: stop threads [ 563.422930][ T27] usb 37-1: enqueue for inactive port 0 [ 563.457611][ T3447] vhci_hcd: release socket [ 563.477787][ T3447] vhci_hcd: disconnect device [ 563.518372][T19925] bridge_slave_0: left allmulticast mode [ 563.531710][T19925] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.540812][ T27] vhci_hcd: vhci_device speed not set [ 563.813558][T19933] loop0: detected capacity change from 0 to 512 [ 563.869718][T19933] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.964228][T19933] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 563.989613][T19933] EXT4-fs (loop0): orphan cleanup on readonly fs [ 564.033724][T19933] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 564.096177][T19933] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 564.193448][T19933] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 564.205572][T19933] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.6452: bg 0: block 40: padding at end of block bitmap is not set [ 564.244762][T19950] netlink: 'syz.1.6461': attribute type 4 has an invalid length. [ 564.251892][T19933] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 564.272280][T19933] EXT4-fs (loop0): 1 truncate cleaned up [ 564.280452][T19933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.287924][T19950] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6461'. [ 564.423678][T19933] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 564.546484][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.661378][T19959] loop3: detected capacity change from 0 to 8 [ 564.757435][T19959] SQUASHFS error: xz decompression failed, data probably corrupt [ 564.785021][T19959] SQUASHFS error: Failed to read block 0x108: -5 [ 564.797868][T19959] SQUASHFS error: Unable to read metadata cache entry [106] [ 564.831106][T19959] SQUASHFS error: Unable to read inode 0x11f [ 565.354679][ T788] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 565.360904][T19977] loop1: detected capacity change from 0 to 8192 [ 565.407696][T19977] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 565.487107][T19977] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 565.515491][T19977] FAT-fs (loop1): Filesystem has been set read-only [ 565.531684][T19986] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.553343][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 565.583273][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 565.641830][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33119, setting to 1024 [ 565.694793][ T788] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 565.727865][ T5785] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 565.753070][ T788] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 565.784619][ T788] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 565.793211][ T788] usb 4-1: Manufacturer: syz [ 565.825355][ T788] usb 4-1: config 0 descriptor?? [ 565.835503][T19959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 565.854000][ T788] smsusb:smsusb_probe: board id=9, interface number 0 [ 565.874958][ T788] smsusb:siano_media_device_register: media controller created [ 565.898887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.906304][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.913744][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.921080][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.928407][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.947777][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.970845][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.978212][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.985535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 565.992850][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.000244][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.025168][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.032842][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.040210][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.047560][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.054990][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.068694][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.076050][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.083731][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.091151][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.098664][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.106067][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.113485][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.120806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.132148][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.139494][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.146804][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.154116][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.161814][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.169405][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.176883][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.184286][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.191602][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.201995][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.209431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.216763][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.224072][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.231833][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.239204][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.246781][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.254267][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.261760][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.271470][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.278767][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.286376][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.293627][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.300910][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.308149][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.315806][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.323419][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.330732][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.338531][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.345852][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.353368][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.360679][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.368070][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.375394][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.382706][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.390030][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.397903][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.405328][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.412823][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.420331][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.427649][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.434979][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.442778][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.450101][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.457409][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.465496][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.472852][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.480150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.487457][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.494944][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.502546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.510433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.517838][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.525109][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.532771][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.540088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.547813][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.555317][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.562815][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.570137][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.578135][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.585545][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.593085][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.600414][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.607700][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.614961][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.622243][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.629887][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.637223][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.644626][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.652023][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.653195][T20011] loop0: detected capacity change from 0 to 2048 [ 566.659333][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.659395][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.680513][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.688261][ T788] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 566.696818][ T788] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 566.704158][ T788] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 566.711952][ T788] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 566.719930][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.727345][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.735173][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.742603][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.749939][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.757448][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.764925][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.772250][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.779719][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.787596][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.795085][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.802490][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.809899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.817222][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.824638][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.832044][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.839352][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.858431][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.865772][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.873087][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.880392][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.887714][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.895320][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.902942][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.910277][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.917994][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.925320][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.932737][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.940162][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.947727][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.955047][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.962898][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.970475][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.977977][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.985632][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 566.992899][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.000147][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.007397][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.014654][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.022400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.029969][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.037534][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.044945][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.052535][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.059888][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.067565][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.076307][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.083647][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.090958][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.098351][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.105671][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.105900][T20011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.113309][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.133091][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.140433][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.147762][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 567.155685][ T8] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 567.167630][ T8] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 567.176241][ T8] CPU: 0 PID: 8 Comm: kworker/0:0 Not tainted syzkaller #0 [ 567.183564][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.193669][ T8] Workqueue: do_submit_urb (events) [ 567.198985][ T8] RIP: 0010:process_scheduled_works+0x5aa/0x15b0 [ 567.205312][ T8] Code: 89 ac 24 10 01 00 00 44 89 e8 c1 e8 05 83 e0 0f 89 03 48 8b 44 24 38 48 8d 58 08 48 89 d8 48 c1 e8 03 48 89 84 24 80 00 00 00 <42> 80 3c 20 00 74 08 48 89 df e8 e7 13 85 00 48 89 5c 24 48 4c 8b [ 567.225430][ T8] RSP: 0018:ffffc900000d7bc0 EFLAGS: 00010002 [ 567.231765][ T8] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000001fffffffc0 [ 567.240005][ T8] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 567.248052][ T8] RBP: ffffc900000d7da8 R08: ffffffff9711f9ab R09: 1ffffffff2e23f35 [ 567.256435][ T8] R10: dffffc0000000000 R11: fffffbfff2e23f36 R12: dffffc0000000000 [ 567.264426][ T8] R13: 0000001fffffffc0 R14: ffff888058d88210 R15: ffff888019672818 [ 567.272606][ T8] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 567.281905][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.288766][ T8] CR2: 0000200000000000 CR3: 0000000018eef000 CR4: 00000000003506f0 [ 567.296760][ T8] Call Trace: [ 567.300212][ T8] [ 567.303490][ T8] ? do_raw_spin_lock+0x121/0x2c0 [ 567.308705][ T8] ? assign_work+0x400/0x400 [ 567.313378][ T8] ? assign_work+0x39e/0x400 [ 567.317972][ T8] worker_thread+0xa55/0xfc0 [ 567.322832][ T8] kthread+0x2fa/0x390 [ 567.326896][ T8] ? pr_cont_work+0x560/0x560 [ 567.331660][ T8] ? kthread_blkcg+0xd0/0xd0 [ 567.336255][ T8] ret_from_fork+0x48/0x80 [ 567.340670][ T8] ? kthread_blkcg+0xd0/0xd0 [ 567.345253][ T8] ret_from_fork_asm+0x11/0x20 [ 567.350023][ T8] [ 567.353042][ T8] Modules linked in: [ 567.357024][ T8] ---[ end trace 0000000000000000 ]--- [ 567.362558][ T8] RIP: 0010:process_scheduled_works+0x5aa/0x15b0 [ 567.368887][ T8] Code: 89 ac 24 10 01 00 00 44 89 e8 c1 e8 05 83 e0 0f 89 03 48 8b 44 24 38 48 8d 58 08 48 89 d8 48 c1 e8 03 48 89 84 24 80 00 00 00 <42> 80 3c 20 00 74 08 48 89 df e8 e7 13 85 00 48 89 5c 24 48 4c 8b [ 567.388665][ T8] RSP: 0018:ffffc900000d7bc0 EFLAGS: 00010002 [ 567.394722][ T8] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000001fffffffc0 [ 567.402702][ T8] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 567.410662][ T8] RBP: ffffc900000d7da8 R08: ffffffff9711f9ab R09: 1ffffffff2e23f35 [ 567.418622][ T8] R10: dffffc0000000000 R11: fffffbfff2e23f36 R12: dffffc0000000000 [ 567.426758][ T8] R13: 0000001fffffffc0 R14: ffff888058d88210 R15: ffff888019672818 [ 567.434997][ T8] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 567.444006][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.450672][ T8] CR2: 0000200000000000 CR3: 0000000018eef000 CR4: 00000000003506f0 [ 567.458655][ T8] Kernel panic - not syncing: Fatal exception [ 568.593565][ T8] Shutting down cpus with NMI [ 568.598630][ T8] Kernel Offset: disabled [ 568.602984][ T8] Rebooting in 86400 seconds..