last executing test programs: 3.957723359s ago: executing program 1 (id=11064): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='ip\x00\x03cr\x80e\x83', &(0x7f0000000240)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0) 3.754677283s ago: executing program 1 (id=11069): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0xffffffffffffffff) 3.613949796s ago: executing program 1 (id=11073): syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x200, &(0x7f00000006c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80, 0x8) 2.959750415s ago: executing program 1 (id=11084): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009780)='./file0\x00', 0x41, &(0x7f0000000200)={[{@discard}]}, 0x1, 0x97f7, &(0x7f0000013c80)="$eJzs3QeYJHWhcP1Z2CUnARVRFBUVFSVKEFGCgEiQqKCAIFlykKQkEUmiIKAISEbJOeecc84555zD9yy7q7geuN73ve+H13PO8+zMdHV1TfX/11W1M9XTveQ8i805MDDGwLAmHxi5m++Yc6FNdp7z8n132fvkyceaYLLhk4ffYJLhFycZNPzzKAMDA6MMX87waWM/csKJowwMfmf63xt7zLEGjTswMN3wi7MP/zzTsE8TPTpivrdHauQVHfS3i4N2GPbvncYf+i2GfrH0TRecPTAwMMG7bj/0JtP80x2VtuQc887zd6u/uQ21GjL863f/G23Yv4nuHxiY6J4Bfny8e95BH8BdGvo9J9j5gTHW/QC+9/+6lpxj3vlG8h+6LY46fNpMQ7fxkbdBYyM/zm9aZdY9hw/hO4+3gYGhu7h/2Fb+V7TkHPMsMPDe+/mBh8Ya7/S339lvjv3MwMDYzw4MjP3cwMDYzw8MjP3CwMDYL37QLvV/1xxzTj/n0O19xOXh7CMeyxPQ42Lf1V/YZ2BgYPRh84z91rDjxTiTjzgmVFVV1b93c8w5/Vxw/B/j/Y7/W28zxy0d/6uqqv73Nt8cc04/9Dg+0vF/nPc7/n/3hhvWGPa7/9lnGnartz7YO1FVVVX/reaZD4//E7zf8X/8na47oON/VVXV/94WXfCd4/84Ix3/J36/4/8a899x6fD5Rvy/4c13LfKd548Nn/76u6aP+q7pr71r+pB3Lefd84/2rumvvGv6GAMDYz8yfPobf5889jNDb/PPyxn7pb8/H2eSwe+a/vK7po/2rumvDF+nodNHf9f0N981/xh/nz7O0A+TD/++r77PUFdVVf3btOj088w18K7n2Q+fPOKJ/fi80KOP3ubOD2p9q6qqqqqqquq/31tPnnbW3//m+5MD7/rb1b/9Devw3wsMOuaca675wFb036NB//z7kC0/6HX6v22o8xiHTT4wsNYSH/Sq1AfQ/5q/Va//J+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4/z/3/7+f+CeL+00fNZZJr3j3sX+fstJBlYb/tXNd8y50GofwLp/AP2nnv8fWG3QwMBw3wmGWi40x6KLTzkwMLDYvXdMOuPA366beeh1s0446jt/zDkwMOU7H4dM8h5LHv4uC++8ucPEf1vGMe8sf7639x910Egr8a5mO/u+g1dd8uUZRv78hfe+H397f4mlXtp/ihF/yzLKSDON8R43HrH8EfdlZOfh6z7l0HWfeoM115l6/U02/cpqay6/ykqrrLTWdNNNO8P0M84w3ddmmXrl1dZYaZphH99jzIa9dcWo/8qYjTPymD05x7vHbOT79qGTDsYx++d39fiHRbyzxHNne+iyEWM2+F8csxHfb9T3H7PJVxv+jSYZGDKw3DtDM2hgYJLBQwY2Hnph2tEHBiYZMnzeSYbO+40JRxkY2Pnvd3TQ8BcbHTbPoC2HzvNv9r4lswwfkc1GzDfy66yPvKL/1fuWHD/ObneM9L4l/6/6Pzr+/5PXzIP+NlAj3gBh+DzDvD7g95n4p/WdfPA7B7n3Wt/3eV2cd6LH15qrPrrE/9Tr4tD6jvM+6/s+r+P3nus75bRP7zVsUf9j6zvSvm6BYVf+K/u6gfff141Kt1/pyslG3tfN/96r+A/b8YgxGn2kmd5rX7fz/OduMXT5A++/r1tgteEvHvD3fd0oAwOTjDpiXzd0xzfakIGdh16YbuiF0YcMHDL0wvTvXBhz4JyhF766wtprrDjonZcZGL7caYYud/YJBw3bgG48eNXRd3v77cHD1+Wlsf9xXYc/PiZ/9/F8jgmHD+bw245Y7tBZRyz3lW2HXTfa8OW+/N9Y7ojb0vpOcuaw60YfvtxXRlrukPdZ7ojb/tP2MOWgf3iiKuxvPtD3NaLtd4z3Wd/3eR1ufLy94z7Fsg/9D7wO96D3Wt/B77++7/W+Ie+5vo9d9vh+/1OvG06Ps3v2HfZYGWP44+zN/8bjd8RtR96PDXshkGG7/TH+lf3Y5P+0H9tq1FFGGux39V7/z10R5h++RfxtaSse9PJqI8Z+yEjL/a/+n/uu+zII9mMTjPTz3KAt9hsYRGP+yBrPb/TWru8/5kMG/vFnixFjPuK27zfmo/8rY/6J9x/zkf+f/F5jPuVnh10/ZKT1f/eYL7LH7DeOGPPRRlrufzXmo7//seOfx3xgYAiN+c6TDhu399ufvteYj7jtiDEf+n1mnXDwwNwDAwNTDB/z0f6VMZ/kf+ZxPhbMP+zrlf426ZkZF55qxJiPPMb/1ZiP9t8c883v+dvjfIp3rvvMKAOjjTaw8fIbbLDetMM+jrg43bCPvC96ZsVh4/x+x9L3Mhpx2/fbLgb/K0YT/EtGg/4ro0kHv5fR3zetUQ9e9Nn/033R4P+u0Tm8Lzpl3mHj9n7/L3qvMR9xWzoOTvyu24/8c+j7vH4W3qd3xmf+7Ub8vPfv8PpZI37e/V/5+lkjfie52sg7+fpX6/f/7vJ3l7+7/N3lL+49zv9PPvzzF98e58CPDP+hc8iVM98y+we9vh9w/9Hn/4f7/sP5/9lvmfnKoT9aDb/ufc/PDpvn3/L87EzDPk306Ij5Rj4/OPKK/lfnZ/fdfYMr/386P/t/1Iht9V/4ubj9v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/ce5z/n2bE8wAeXHyh7w0/ETpks2mP3OyDXt8PuP/o8//Dff/h/P9mR0672SgDf7vufc//D5vnP//8/9D7et+CWyzz73z+/2/bauf/6/3L313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvcf5/9lHPA/g8Nnm/tzw5wOMev32++/1Qa/vB9x/6vn/3v/fW/t/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7jh5/8HRvpL4YV7XGBw/v9/d+/hv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/1/mj1n8t84fs/j/Kn/M4r9N/pjF/9f5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+b/DGL/075Yxb/3+aPWfx/lz9m8d85f8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/P+WPWfz3zB+z+O+VP2bx3zt/zOL/5/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/1/yxyz+f80fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzv/djT7iC4v/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxif+ggfwxi/+g/DGL/yj5Yxb/UfPHLP6D88cs/kPyxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvH/UP6YxX/C/DGL/0T5Yxb/ifPHLP4fzh+z+H8kf8zi/9H8MYv/JPljFv+P5Y9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+n80fs/hPkT9m8f9c/pjF//P5Yxb/L+SPWfynzB+z+H8xf8zi/6X8MYv/l/PHLP5T5Y9Z/L+SP2bx/2r+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/1r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/nj9m8Z81f8zi/438MYv/bPljFv9v5o9Z/L+VP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/b+ePWfznzh+z+M+TP2bxnzd/zOL/nfwxi/98+WMW/+/mj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/e/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/+/ljFv8f5I9Z/JfMH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+P84f8ziv1z+mMV/+fwxi/9P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/5/mj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QPybwf3jEVfn/cwL/oQ3aMH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/j/PH7P4/yJ/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+ZP2bx3zp/zOL/q/wxi/82+WMW/1/nj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi/9v8scs/jvlj1n8f5s/ZvH/Xf6YxX/n/DGL/y75Yxb/3+ePWfx3zR+z+O+WP2bx3z1/zOL/h/wxi/8f88cs/nvkj1n8/5Q/ZvHfM3/M4r9X/pjFf+/8MYv/n/PHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/n/JH7P4/zV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfG+4/6K233+k/1v+k/DHL9n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K3/M4v92/pjE/50v8//nLP6D8scs/qPkj1n8R80fs/gPzh+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/Q/ljFv8J88cs/hPlj1n8J84fs/h/OH/M4v+R/DGL/0fzxyz+k+SPWfw/lj9m8Z80f8zi//H8MYv/J/LHLP6T5Y9Z/D+ZP2bx/1T+mMV/8vwxi/+n88cs/p/JH7P4fzZ/zOI/Rf6Yxf9z+WMW/8/nj1n8v5A/ZvGfMn/M4v/F/DGL/5fyxyz+X84fs/hPlT9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/bNDNgwYM/ovlj1m2/8Xzxyz+S+SPWfy/nz9m8f9B/pjFf8n8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/4/zxyz+y+WPWfyXzx+z+P8kf8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/2n+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/1/mj1n8t84fs/j/Kn/M4r9N/pjF/9f5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+b/DGL/075Yxb/3+aPWfx/lz9m8d85f8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/P+WPWfz3zB+z+O+VP2bx3zt/zOL/5/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/1/yxyz+f80fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH5P4jzqQP2bxH5Q/ZvEfJX/M4j9q/pjFf3D+mMV/SP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/KH7P4T5g/ZvGfKH/M4j9x/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8zi/7H8MYv/pPljFv+P549Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6Yxf+z+WMW/ynyxyz+n8sfs/h/Pn/M4v+F/DGL/5T5Yxb/L+aPWfy/lD9m8f9y/pjFf6r8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8Z8tf8zi/838MYv/t/LHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v/t/DGL/9z5Yxb/efLHLP7z5o9Z/L+TP2bxny9/zOL/3fwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8vf8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H8/f8zi/4P8MYv/kvljFv+l8scs/j/MH7P4/yh/zOK/dP6YxX+Z/DGL/7L5Yxb/H+ePWfyXyx+z+C+fP2bx/0n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/0/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/LH/ZP93Ner6+WP/yf7v3v43yB+z+P8sf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/nj9m8f9F/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Mn/M4r91/pjF/1f5Yxb/bfLHLP6/zh+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx3yh+z+P82f8zi/7v8MYv/zvljFv9d8scs/r/PH7P475o/ZvHfLX/M4r97/pjF/w/5Yxb/P+aPWfz3yB+z+P8pf8ziv2f+mMV/r/wxi//e+WMW/z/nj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfz/kj9m8f9r/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH/wQP6YxX9Q/pjFf5T8MYv/qPljFv/B+WMW/yH5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/h/KH/M4j9h/pjFf6L8MYv/xPljFv8P549Z/D+SP2bx/2j+mMV/kvwxi//H8scs/pPmj1n8P54/ZvH/RP6YxX+y/DGL/yfzxyz+n8ofs/hPnj9m8f90/pjF/zP5Yxb/z+aPWfynyB+z+H8uf8zi//n8MYv/F/LHLP5T5o9Z/L+YP2bx/1L+mMX/y/ljFv+p8scs/l/JH7P4fzV/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fy1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP5fzx+z+M+aP2bx/0b+mMV/tvwxi/8388cs/t/KH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/t/PHLP5z549Z/OfJH7P4z5s/ZvH/Tv6YxX++/DGL/3fzxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL/vfwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL//fwxi/8P8scs/kvmj1n8l8ofs/j/MH/M4v+j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+cP2bxXy5/zOK/fP6Yxf8n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/0+t/oPf/2qL/+pW//8ii/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/8/zxyz+v8gfs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/1/mj1n8t84fs/j/Kn/M4r9N/pjF/9f5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvHfMX/M4v+b/DGL/075Yxb/3+aPWfx/lz9m8d85f8ziv0v+mMX/9/ljFv9d88cs/rvlj1n8d88fs/j/IX/M4v/H/DGL/x75Yxb/P+WPWfz3zB+z+O+VP2bx3zt/zOL/5/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/1/yxyz+f80fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/th/tP+of5s6+Pr8sf9o/79PHXxD/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz//kdrwnY8W/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dPybxHzKQP2bxH5Q/ZvEfJX/M4j9q/pjFf3D+mMV/SP6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/h/KH7P4T5g/ZvGfKH/M4j9x/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8zi/7H8MYv/pPljFv+P549Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6Yxf+z+WMW/ynyxyz+n8sfs/h/Pn/M4v+F/DGL/5T5Yxb/L+aPWfy/lD9m8f9y/pjFf6r8MYv/V/LHLP5fzR+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/9fzxyz+s+aPWfy/kT9m8Z8tf8zi/838MYv/twYGBkb/oNbp3ziL/+xt/5jFf478MYv/nPljFv+58scs/t/OH7P4z50/ZvGfJ3/M4j9v/pjF/zv5Yxb/+fLHLP7fzR+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL//fyxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fzxyz+P8gfs/gvmT9m8V8qf8zi/8P8MYv/j/LHLP5L549Z/JfJH7P4L5s/ZvH/cf6YxX+5/DGL//L5Yxb/n+SPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/ef6Yxf8X+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/y/wxi//W+WMW/1/lj1n8t8kfs/j/On/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f5M/ZvHfKX/M4v/b/DGL/+/yxyz+O+ePWfx3yR+z+P8+f8ziv2v+mMV/t/wxi//u+WMW/z/kj1n8/5g/ZvHfI3/M4v+n/DGL/575Yxb/vfLHLP57549Z/P+cP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvH/S/6Yxf+v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yflj/8H+Q97tf0r+2H+w/z9s/6fmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljEv/RBvLHLP6D8scs/qPkj1n8R80fs/gPzh+z+A/JH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/Q/ljFv8J88cs/hPlj1n8J84fs/h/OH/M4v+R/DGL/0fzxyz+k+SPWfw/lj9m8Z80f8zi//H8MYv/J/LHLP6T5Y9Z/D+ZP2bx/1T+mMV/8vwxi/+n88cs/p/JH7P4fzZ/zOI/Rf6Yxf9z+WMW/8/nj1n8v5A/ZvGfMn/M4v/F/DGL/5fyxyz+X84fs/hPlT9m8f9K/pjF/6v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjF/2v5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/zfyxyz+s+WPWfy/mT9m8f9W/pjFf/b8MYv/HPljFv8588cs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/d/LHLP7z5Y9Z/L+bP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/7+WPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+ePWfx/kD9m8V8yf8ziv1T+mMX/h/ljFv8f5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/j/DGL/3L5Yxb/5fPHLP4/yR+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/H+aP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/2f5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4v/z/DGL/y/yxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+X+WMW/63zxyz+v8ofs/hvkz9m8f91/pjFf9v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/Jn/M4r9T/pjF/7f5Yxb/3+WPWfx3zh+z+O+SP2bx/33+mMV/1/wxi/9u+WMW/93zxyz+f8gfs/j/MX/M4r9H/pjF/0/5Yxb/PfPHLP575Y9Z/PfOH7P4/zl/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4v+X/DGL/1/zxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf9Onf9o/9JcFv+7dP7/Whb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljFv+388ck/qMP5I9Z/Aflj1n8R8kfs/iPmj9m8R+cP2bxH5I/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+H8scs/hPmj1n8J8ofs/hPnD9m8f9w/pjF/yP5Yxb/j+aPWfwnyR+z+H8sf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvH/bP6YxX+K/DGL/+fyxyz+n88fs/h/IX/M4j9l/pjF/4v5Yxb/L+WPWfy/nD9m8Z8qf8zi/5X8MYv/V/PHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/1/LHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+H8zf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/v5I9Z/OfLH7P4fzd/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fyx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzx+z+P8gf8ziv2T+mMV/qfwxi/8P88cs/j/KH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/+f5Yxb/X+SPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/y/zxyz+W+ePWfx/lT9m8d8mf8zi/+v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9N/pjFf6f8MYv/b/PHLP6/yx+z+O+cP2bx3yV/zOL/+/wxi/+u+WMW/93yxyz+u+ePWfz/kD9m8f9j/pjFf4/8MYv/n/LHLP575o9Z/PfKH7P4750/ZvH/c/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/y/5Yxb/v+aPWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8xxjIH7P4D8ofs/iPkj9m8R81f8ziPzh/zOI/JH/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/w/lj1n8J8wfs/hPlD9m8Z84f8zi/+H8MYv/R/LHLP4fzR+z+E+SP2bx/1j+mMV/0vwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4v/Z/DGL/xT5Yxb/z+WPWfw/nz9m8f9C/pjFf8r8MYv/F/PHLP5fyh+z+H85f8ziP1X+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bx/2b+mMX/W/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f92/pjFf+78MYv/PPljFv9588cs/t/JH7P4z5c/ZvH/bv6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/L+XP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+fP2bx/0H+mMV/yfwxi/9S+WMW/x/mj1n8f5Q/ZvFfOn/M4r9M/pjFf9n8MYv/j/PHLP7L5Y9Z/JfPH7P4/yR/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/af6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/z/PHLP6/yB+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/X+aPWfy3zh+z+P8qf8ziv03+mMX/1/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/5v8MYv/TvljFv/f5o9Z/H+XP2bx3zl/zOK/S/6Yxf/3+WMW/13zxyz+u+WPWfx3zx+z+P8hf8zi/8f8MYv/HvljFv8/5Y9Z/PfMH7P475U/ZvHfO3/M4v/n/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/X/LHLP5/zR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/iPOZA/ZvEflD9m8R8lf8ziP2r+mMV/cP6YxX9I/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+H8ofs/hPmD9m8Z8of8ziP3H+mMX/w/ljFv+P5I9Z/D+aP2bxnyR/zOL/sfwxi/+k+WMW/4/nj1n8P5E/ZvGfLH/M4v/J/DGL/6fyxyz+k+ePWfw/nT9m8f9M/pjF/7P5Yxb/KfLHLP6fyx+z+H8+f8zi/4X8MYv/lPljFv8v5o9Z/L+UP2bx/3L+mMV/qvwxi/9X8scs/l/NH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/LH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/1/PHLP6z5o9Z/L+RP2bxny1/zOL/zfwxi/+38scs/rPnj1n858gfs/jPmT9m8Z8rf8zi/+38MYv/3PljFv958scs/vPmj1n8v5M/ZvGfL3/M4v/d/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fy9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4fz9/zOL/g/wxi/+S+WMW/6Xyxyz+P8wfs/j/KH/M4r90/pjFf5n8MYv/svljFv8f549Z/JfLH7P4L58/ZvH/Sf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v/T/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/LH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv+f549Z/H+RP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP6/zB+z+G+dP2bx/1X+mMV/m/wxi/+v88cs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/N/ljFv+d8scs/r/NH7P4/y5/zOK/c/6YxX+X/DGL/+/zxyz+u+aPWfx3yx+z+O+eP2bx/0P+mMX/j/ljFv898scs/n/KH7P475k/ZvHfK3/M4r93/pjF/8/5Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv+/5I9Z/P+aP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9rIH/M4j8of8ziP0r+mMV/1Pwxi//g/DGL/5D8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfw/lD9m8Z8wf8ziP1H+mMV/4vwxi/+H88cs/h/JH7P4fzR/zOI/Sf6Yxf9j+WMW/0nzxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/T+WPWfwnzx+z+H86f8zi/5n8MYv/Z/PHLP5T5I9Z/D+XP2bx/3z+mMX/C/ljFv8p88cs/l/MH7P4fyl/zOL/5fwxi/9U+WMW/6/kj1n8v5o/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5Y/ZvGfMX/M4j9T/pjFf+Z/wX/M/5fr9W+axX+Wtn/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+H8zf8zi/638MYv/7PljFv858scs/nPmj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/v5I9Z/OfLH7P4fzd/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP7fyx+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fzx+z+P8gf8ziv2T+mMV/qfwxi/8P88cs/j/KH7P4L50/ZvFfJn/M4r9s/pjF/8f5Yxb/5fLHLP7L549Z/H+SP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/zR/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/+f5Yxb/X+SPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/y/zxyz+W+ePWfx/lT9m8d8mf8zi/+v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f9N/pjFf6f8MYv/b/PHLP6/yx+z+O+cP2bx3yV/zOL/+/wxi/+u+WMW/93yxyz+u+ePWfz/kD9m8f9j/pjFf4/8MYv/n/LHLP575o9Z/PfKH7P4750/ZvH/c/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/y/5Yxb/v+aPWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8xx7IH7P4D8ofs/iPkj9m8R81f8ziPzh/zOI/JH/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/w/lj1n8J8wfs/hPlD9m8Z84f8zi/+H8MYv/R/LHLP4fzR+z+E+SP2bx/1j+mMV/0vwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4v/Z/DGL/xT5Yxb/z+WPWfw/nz9m8f9C/pjFf8r8MYv/F/PHLP5fyh+z+H85f8ziP1X+mMX/K/ljFv+v5o9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv+v5Y9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bx/2b+mMX/W/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f92/pjFf+78MYv/PPljFv9588cs/t/JH7P4z5c/ZvH/bv6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/L+XP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/L+fP2bx/0H+mMV/yfwxi/9S+WMW/x/mj1n8f5Q/ZvFfOn/M4r9M/pjFf9n8MYv/j/PHLP7L5Y9Z/JfPH7P4/yR/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/af6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/z/PHLP6/yB+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/X+aPWfy3zh+z+P8qf8ziv03+mMX/1/ljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi/5v8MYv/TvljFv/f5o9Z/H+XP2bx3zl/zOK/S/6Yxf/3+WMW/13zxyz+u+WPWfx3zx+z+P8hf8zi/8f8MYv/HvljFv8/5Y9Z/PfMH7P475U/ZvHfO3/M4v/n/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/X/LHLP5/zR+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fk/iPM5A/ZvEflD9m8R8lf8ziP2r+mMV/cP6YxX9I/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+H8ofs/hPmD9m8Z8of8ziP3H+mMX/w/ljFv+P5I9Z/D+aP2bxnyR/zOL/sfwxi/+k+WMW/4/nj1n8P5E/ZvGfLH/M4v/J/DGL/6fyxyz+k2v9dzx+9XXe+1qL/6e1/u+fxf8z+WMW/8/mj1n8p8gfs/h/Ln/M4v/5/DGL/xfyxyz+U+aPWfy/mD9m8f9S/pjF/8v5Yxb/qfLHLP5fyR+z+H81f8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8tf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+X88fs/jPmj9m8f9G/pjFf7b8MYv/N/PHLP7fyh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/7fzxyz+c+ePWfznyR+z+M+bP2bx/07+mMV/vvwxi/9388cs/vPnj1n8F8gfs/gvmD9m8V8of8zi/738MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi//38MYv/D/LHLP5L5o9Z/JfKH7P4/zB/zOL/o/wxi//S+WMW/2Xyxyz+y+aPWfx/nD9m8V8uf8ziv3z+mMX/J/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/9P88cs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8sf8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/nj9m8f9F/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Mn/M4r91/pjF/1f5Yxb/bfLHLP6/zh+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/3+SPWfx3yh+z+P82f8zi/7v8MYv/zvljFv9d8scs/r/PH7P475o/ZvHfLX/M4r97/pjF/w/5Yxb/P+aPWfz3yB+z+P8pf8ziv2f+mMV/r/wxi//e+WMW/z/nj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfz/kj9m8f9r/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv7YP/jP9p/rf0r+mGX7PzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+T+I87kD9m8R+UP2bxHyV/zOI/av6YxX9w/pjFf0j+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4fyh+z+E+YP2bxnyh/zOI/cf6Yxf/D+WMW/4/kj1n8P5o/ZvGfJH/M4v+x/DGL/6T5Yxb/j+ePWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMX/s/ljFv8p8scs/p/LH7P4fz5/zOL/hfwxi/+U+WMW/y/mj1n8v5Q/ZvH/cv6YxX+q/DGL/1fyxyz+X80fs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8sfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi//X88cs/rPmj1n8v5E/ZvGfLX/M4v/N/DGL/7fyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/7fwxi//c+WMW/3nyxyz+8+aPWfy/kz9m8Z8vf8zi/938MYv//PljFv8F8scs/gvmj1n8F8ofs/h/L3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/h/P3/M4v+D/DGL/5L5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/x/nj1n8l8sfs/gvnz9m8f9J/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/9P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P8sfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/5/nj1n8f5E/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/r/MH7P4b50/ZvH/Vf6YxX+b/DGL/6/zxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf83+WMW/53yxyz+v80fs/j/Ln/M4r9z/pjFf5f8MYv/7/PHLP675o9Z/HfLH7P4754/ZvH/Q/6Yxf+P+WMW/z3yxyz+f8ofs/jvmT9m8d8rf8ziv3f+mMX/z/ljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/7/kj1n8/5o/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5PTjUkf8ji/1TbP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f0ziP95A/pjFf1D+mMV/lPwxi/+o+WMW/8H5Yxb/IfljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+H8of8ziP2H+mMV/ovwxi//E+WMW/w/nj1n8P5I/ZvH/aP6YxX+S/DGL/8fyxyz+k+aPWfw/nj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv/P5o9Z/KfIH7P4fy5/zOL/+fwxi/8X8scs/lPmj1n8v5g/ZvH/Uv6Yxf/L+WMW/6nyxyz+X8kfs/h/NX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/LX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/l/PH7P4z5o/ZvH/Rv6YxX+2/DGL/zfzxyz+38ofs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/+388cs/nPnj1n858kfs/jPmz9m8f9O/pjFf778MYv/d/PHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v+9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/9/DGL/w/yxyz+S+aPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8f5w/ZvFfLn/M4r98/pjF/yf5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/T/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/LH/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8f54/ZvH/Rf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/zJ/zOK/df6Yxf9X+WMW/23yxyz+v84fs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/9/kj1n8d8ofs/j/Nn/M4v+7/DGL/875Yxb/XfLHLP6/zx+z+O+aP2bx3y1/zOK/e/6Yxf8P+WMW/z/mj1n898gfs/j/KX/M4r9n/pjFf6/8MYv/3vljFv8/549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8/5I/ZvH/a/6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMR//IH8MYv/oPwxi/8o+WMW/1Hzxyz+g/PHLP5D8scs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E/w/7FHzwqAIAgQRE9z1tq2bdu2bdu2bdu2bdu2bQa7wQT9BdPvRZWX/1HL/8H8j1r+D+5/1PJ/CP+jlv9D+h+1/B/K/6jl/9D+Ry3/h/E/avk/rP9Ry//h/I9a/g/vf9TyfwT/o5b/I/oftfwfyf+o5f/I/kct/0fxP2r5P6r/Ucv/0fyPWv6P7n/U8n8M/6OW/2P6H7X8H8v/qOX/2P5HLf/H8T9q+T+u/1HL//H8j1r+j+9/1PJ/Av+jlv8T+h+1/J/I/6jl/8T+Ry3/J/E/avk/qf9Ry//J/I9a/k/uf9Tyfwr/o5b/U/oftfyfyv+o5f/U/kct/6fxP2r5P63/Ucv/6fyPWv5P73/U8n8G/6OW/zP6H7X8n8n/qOX/zP5HLf9n8T9q+T+r/1HL/9n8j1r+z+5/1PJ/Dv+jlv9z+h+1/J/L/6jl/9z+Ry3/5/E/avk/r/9Ry//5/I9a/s/vf9TyfwH/o5b/C/oftfxfyP+o5f/C/kct/xfxP2r5v6j/Ucv/xfyPWv4v7n/U8n8J/6OW/0v6H7X8X8r/qOX/0v5HLf+X8T9q+b+s/1HL/+X8j1r+L+9/1PJ/Bf+jlv8r+h+1/F/J/6jl/8r+Ry3/V/E/avm/qv9Ry//V/I9a/q/uf9Tyfw3/o5b/a/oftfxfy/+o5f/a/kct/9fxP2r5v67/Ucv/9fyPWv6v73/U8n8D/6OW/xv6H7X838j/qOX/xv5HLf838T9q+b+p/1HL/838j1r+b+5/1PJ/C/+jlv9b+h+1/N/K/6jl/9b+Ry3/t/E/avm/rf9Ry//t/I9a/m/vf9Tyfwf/o5b/O/oftfzfyf+o5f/O/kct/3fxP2r5v6v/Ucv/3fyPWv7v7n/U8n8P/6OW/3v6H7X838v/qOX/3v5HLf/38T9q+b+v/1HL//38j1r+7+9/1PL/AP+jlv8H+h+1/D/I/6jl/8H+Ry3/D/E/avl/qP9Ry//D/I9a/h/uf9Ty/wj/o5b/R/oftfw/yv+o5f/R/kct/4/xP2r5f6z/Ucv/4/yPWv4f73/U8v8E/6OW/yf6H7X8P8n/qOX/yf5HLf9P8T9q+X+q/1HL/9P8j1r+n+5/1PL/DP+jlv9n+h+1/D/L/6jl/9n+Ry3/z/E/avl/rv9Ry//z/I9a/p/vf9Ty/wL/o5b/F/oftfy/yP+o5f/F/kct/y/xP2r5f6n/Ucv/y/yPWv5f7n/U8v8K/6OW/1f6H7X8v8r/qOX/1f5HLf+v8T9q+X+t/1HL/+v8j1r+X+9/1PL/Bv+jlv83+h+1/L/J/6jl/83+Ry3/b/E/avl/q/9Ry//b/I9a/t/uf9Ty/w7/o5b/d/oftfy/y/+o5f/d/kct/+/xP2r5f6//Ucv/+/yPWv7f73/U8v8B/6NB8v+A33Lg/w/6Hw2S/3/Pgf8/5H/U8v9h/6OW/4/4H7X8f9T/qOX/Y/5HLf8f9z9q+f+E/1HL/yf9j1r+P+V/1PL/af+jlv/P+B+1/H/W/6jl/3P+Ry3/n/c/avn/gv9Ry/8X/Y9a/r/kf9Ty/2X/o5b/r/gftfx/1f+o5f9r/kct/1/3P2r5/4b/Ucv/N/2PWv6/5X/U8v9t/6OW/+/4H7X8f9f/qOX/e/5HLf/f9z9q+f+B/1HL/w/9j1r+f+R/1PL/Y/+jlv+f+B+1/P/U/6jl/2f+Ry3/P/c/avn/hf9Ry/8v/Y9a/n/lf9Ty/2v/o5b/3/gftfz/1v+o5f93/kct/7/3P2r5/4P/Ucv/H/2PWv7/5H/U8v9n/6OW/7/4H5X8//8f/I9a/v/R/6jl/5/8j1r+/9n/qOX/X/yPWv4P8D9q+f9X/6OW/3/zP2r5/3f/o5b///A/avn/T/+jlv//8j9q+f9v/6OW///xP2r5/1//o5b///M/GuT+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/snf/MV7XBRzHP8f94EcSEGFvTBSFgowTOE4ShX5cP0/bVciatulgciKJEj9moNXVLNdsTRI3MyuggtStNfwD2zTl3CoXlbXIrLkwrVi2a5KJq8Wufe++3+Puy92Ne5/vN3/wePxx9/18z9fnC2xPPp+vcAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASGnT1ltuWLVuXftGDzzwwIO+B6f6dyYgtePRn+ofCQAAAAAAAAAAAAAAMJQc3050qn+OAAAAAABwumlte09Xbc2Ap2r7H8z4ZXvP5+ZXr7x+9/OPL6t8Ln/58kFOOab/QXd3d/dLLZ1Ty4dji6Iovdrk8vG46nHp/B2dl2/rPQrF759tadu6reXAjq998+GZEybPqO95tr5Yed3ade0LxhRFqK0vtpQOFtYURWioL7aVDppKB2Pri/tLB4t6DsYX+0sHF167ft3q0hMnvDScdlrbPl/UDii2GPC7Qf/+Ozo37qx8HuaUlbPVFeX+J7X8eE/V1yqG6L9y/lBT3f+If4LAkEbW/+1zK5+HOeUJ1/9H105aPtjXhu6/cv4wRv+QziD3/wMa7bnf371vyhD3/zMHOWXf/ud/W9ZZ6v+mX7/QWH6qrvz+onL/31A9rrxe71Gore5/zID7/9J9fF3l/n9sUYT6Uf5ywGmlte0LXcNd/6u7H9h/3VlVm5r+/R9Zvru21P+hux74YPmp+pN5/3/8/KFumOt/zef2D/yxAiPT2raru+r6P4L+izmDnLKv/9m7jl5V6v+MHYf39vvaSPqvr+5//uYbPzV/09ZbGtfeuGpN+5r2m5qaFjYvWtzcdNGS+T23BL0fR/mrAqeH0V3/iwlVm5qiaO/bz/vo4pdK/R8491//KD81boT9Nwx7/X/O9R8Gdf6YoqGh2LJq8+aNC3s/Vg6bej/2/meD9H/i+/8h+59V+f+AlffdpTfkffvfvfvrHyv1f+/Y5Q+Un2oYYf9jh+u/4/jrAhFGef1fXbUZ0P/aV7+3utT/X145drD81Ejf/48btv+drv8wGq1tVX/h5zVW6n/Ffw4N9ucEJyGM9+d/kE6O/rdM/NW349Zhgv4hnRz9L9rUHvmXbcPr9A/p5Oj/N9trDsetwxn6h3Ry9P+Nrgc3xK3DRP1DOjn63zf9kafi1uH1+od0cvR/bM3kq+LWYZL+IZ0c/V/2lT0r4tZhsv4hnRz917wy8Ym4dZiif0gnR/+NNWd/Jm4d3qB/SCdH/9d1PPxi3DpM1T+kk6P/L+74beT36YQ36h/SydH/U3/esj1uHabpH9LJ0f8L09Y2xq3DmfqHdHL0f/8NTzwStw5v0j+kk6P/p7/z4aNx6xD0D+nk6P9bzx5eGbcO0/UP6eTof+/co3+KW4ez9A/p5Oj/vx+/+kNx6/Bm/UM6OfoP+5Z8P24dztY/pJOj/yuevGth3DrM0D+kk6P/jqW33Rm3DufoH9LJ0X9zy9zpcetwrv4hnRz9T/nrP++OW4eZ+od0cvT/ifveX/3vfp+kcJ7+IZ0c/d+8fsWjcetwvv4hnRz9L5vSfUHcOszSP6STo/9DR+77Sdw6zNY/pJOj/7vvXHBF3Dq8Rf+QTo7+f3TreV1x6/BW/UM6Ofp/uf6OW+PWYY7+IZ0c/X/1F3WL49Zhrv4hnRz9//ShH+6MW4e36R/SydH/ix947Jy4dbhA/5BOjv53XTzty3Hr8Hb9Qzo5+n/vMxvWxK3DPP1DOjn6H7fnj0fi1qFR/5BOjv5nLz/wkbh1uFD/kE6O/tfPW/mHuHWYr39IJ0f/z+x/+mDcOizQP6STo//tj322JW4dFuof0snR/+OXrftf3Do06R/SydH/v5t/9sm4dVikf0gnR/9nHvzul+LWoVn/kE6O/q9+cNzUuHW4SP+QTo7+N1wz/Qdx67BY/5BOjv4vmfnQpXHr8A79Qzo5+n/f35feHLcOF+sf0snR/6R77nkubh2W6B/SydH/rGtvvyZuHS7RP6STo//rZzQ+GbcOl+of0snR/x3HWufErcNS/UM6OfrvvO35vXHrsEz/kE6O/rs+/fKkuHV4p/4hnRz97xl/5b1x6/Au/QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8FAAD///lj0LI=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) 2.410193287s ago: executing program 4 (id=11095): open_tree(0xffffffffffffffff, 0x0, 0x89901) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000640)='./bus\x00', 0x300000a, &(0x7f0000000700)={[{@skip_balance}, {@space_cache_v1}, {@compress_force}, {@enospc_debug}, {@noinode_cache}, {@space_cache_v1}, {@nodatasum}, {@nodatacow}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@noflushoncommit}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") 1.604652212s ago: executing program 3 (id=11109): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) 1.346588905s ago: executing program 3 (id=11111): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x2, @sliced={0x9, [0x1, 0x740, 0x8, 0x8, 0x401, 0x6, 0x6, 0x6, 0x7ff, 0x101, 0x0, 0x4, 0x0, 0xb, 0x3, 0x6, 0x3, 0xfff, 0x3, 0x2, 0xa, 0x8, 0x1, 0x6, 0x1000, 0x9, 0xc000, 0x3, 0x527, 0x3, 0x866, 0x2c, 0x7, 0x7, 0x5, 0x2, 0x9, 0x9, 0x5, 0x3, 0x8, 0xad, 0x364, 0x1, 0xe, 0x2, 0x400, 0xfffa], 0x7}}) 1.326582818s ago: executing program 2 (id=11112): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000040000000560000022500000019000a001000000007fd17e5ffff080004fe0000000000000a", 0x39}], 0x1) 1.284028485s ago: executing program 1 (id=11114): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) 1.152565107s ago: executing program 3 (id=11115): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 972.398437ms ago: executing program 3 (id=11118): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) 955.25283ms ago: executing program 4 (id=11119): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002540)={0x2, 0x8, 0xbb, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0x40) 941.552473ms ago: executing program 2 (id=11120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206010200000000000000000a00000405000400010000000c0007800800120000000000050001000700000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500050002"], 0x5c}}, 0x0) 866.959485ms ago: executing program 0 (id=11121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x3, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) 806.702585ms ago: executing program 3 (id=11122): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x1, 0x0, {0x2, 0x3, 0x0, 0x0, {0x0, 0x4e22, [0x10000, 0xffff, 0x0, 0x2000000], [], 0x0, [0x5, 0x3]}, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}}, 0x20004010) 740.758656ms ago: executing program 3 (id=11123): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) 732.123327ms ago: executing program 0 (id=11124): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@nodots}, {@fat=@usefree}, {@fat=@usefree}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@dots}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000640)) 705.470072ms ago: executing program 4 (id=11125): unshare(0xc000400) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 670.448498ms ago: executing program 2 (id=11126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8992, &(0x7f0000000040)={'veth1_macvtap\x00', @ifru_data=0x0}) 542.332849ms ago: executing program 2 (id=11127): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000d80ffff", 0x8) 541.670399ms ago: executing program 4 (id=11128): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a000000000000000000000000000020000000000a010800000000000000000a2000000900010073797a310000000048000000030a010100000000000000000a000000080007006e61740014000480080002400000000008000140000000010900010073797a310000000009000300"], 0xa4}}, 0x0) 424.516218ms ago: executing program 0 (id=11129): setreuid(0xee01, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 406.633852ms ago: executing program 2 (id=11130): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f353163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b233107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bde7095d6a345badc56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76ea0270e4c10d64cd5a62427264f2377fe763c434708337c8de98f371bb943a8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa7ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad046581927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fc83c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad83872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02b7fa64b6de3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba300004e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f08df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac3fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2102596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb90372927db6ff959c0837d2e7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d050000008926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023dd0000000400", 0x1000}}, 0x1006) 335.561584ms ago: executing program 4 (id=11131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4f0}}, 0x0, 0x9}, &(0x7f00000001c0)=0x90) 247.363828ms ago: executing program 0 (id=11132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000002000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b40000000003800048034000180090001007866726d0000000024000280080001400000000c0800044000000003080002400000000505000300010000000900010073797a30"], 0xd4}}, 0x0) 173.348401ms ago: executing program 4 (id=11133): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000180)=ANY=[], 0x85, 0x6b9, &(0x7f00000008c0)="$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") truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc) 132.870397ms ago: executing program 0 (id=11134): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x6, 0xb0, 0x8, 0x74, @loopback, @mcast2, 0x7, 0x700, 0x80000001, 0x6}}) 113.09447ms ago: executing program 1 (id=11135): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020ef0e01000000000300010902240001000080000904000001f2ff0100092100000001220500090581083f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 28.124595ms ago: executing program 2 (id=11136): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x4d, 0xff, 0x0}) 0s ago: executing program 0 (id=11137): r0 = io_uring_setup(0x6c42, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x0, 0x2f4}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000680)={0x1, 0x0, 0x0, &(0x7f0000000600)=[{0x0}], 0xfffffffffffffffe}, 0x20) kernel console output (not intermixed with test programs): p1): Directory bread(block 65) failed [ 884.561727][T24713] FAT-fs (loop1): Directory bread(block 66) failed [ 884.573427][T24713] FAT-fs (loop1): Directory bread(block 67) failed [ 884.607232][T24713] FAT-fs (loop1): Directory bread(block 68) failed [ 884.614588][T24713] FAT-fs (loop1): Directory bread(block 69) failed [ 884.691399][T24713] FAT-fs (loop1): Directory bread(block 70) failed [ 884.712818][T24713] FAT-fs (loop1): Directory bread(block 71) failed [ 884.766461][T24713] FAT-fs (loop1): Directory bread(block 72) failed [ 884.792769][T24728] netlink: 'syz.4.9081': attribute type 8 has an invalid length. [ 884.803502][T24713] FAT-fs (loop1): Directory bread(block 73) failed [ 884.818069][T24728] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.9081'. [ 885.069357][T24742] netlink: zone id is out of range [ 885.116353][T24742] netlink: zone id is out of range [ 885.131960][T24742] netlink: zone id is out of range [ 885.137246][T24742] netlink: zone id is out of range [ 885.184910][T24742] netlink: zone id is out of range [ 885.207621][T24742] netlink: zone id is out of range [ 885.224763][T24749] netlink: 'syz.1.9092': attribute type 1 has an invalid length. [ 885.233231][T24742] netlink: del zone limit has 4 unknown bytes [ 885.249782][T24749] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9092'. [ 885.953213][T24801] netlink: 'syz.1.9113': attribute type 4 has an invalid length. [ 885.970582][T24801] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9113'. [ 886.404101][T24824] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9123'. [ 886.660924][T24822] loop0: detected capacity change from 0 to 8192 [ 886.784942][T24822] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 886.817564][T24822] REISERFS (device loop0): using ordered data mode [ 886.832442][T24822] reiserfs: using flush barriers [ 886.876889][T24822] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 886.982813][T24822] REISERFS (device loop0): checking transaction log (loop0) [ 887.369395][T24822] REISERFS (device loop0): Using tea hash to sort names [ 887.401264][T24822] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 887.606375][T24817] loop1: detected capacity change from 0 to 32768 [ 887.775168][T24817] XFS (loop1): Mounting V5 Filesystem [ 887.814239][T24876] device batadv0 left promiscuous mode [ 887.859548][T24876] device ip6gretap1 left promiscuous mode [ 888.023040][T24817] XFS (loop1): Ending clean mount [ 888.033209][T24817] XFS (loop1): Quotacheck needed: Please wait. [ 888.222094][T24817] XFS (loop1): Quotacheck: Done. [ 888.384499][ T4202] XFS (loop1): Unmounting Filesystem [ 888.392597][T24888] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 888.693747][T24903] loop4: detected capacity change from 0 to 256 [ 888.811308][T24903] FAT-fs (loop4): Directory bread(block 64) failed [ 888.819775][T24903] FAT-fs (loop4): Directory bread(block 65) failed [ 888.835559][T24911] program syz.3.9155 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.844815][T24903] FAT-fs (loop4): Directory bread(block 66) failed [ 888.844908][T24903] FAT-fs (loop4): Directory bread(block 67) failed [ 888.845078][T24903] FAT-fs (loop4): Directory bread(block 68) failed [ 888.901437][T24903] FAT-fs (loop4): Directory bread(block 69) failed [ 888.952526][T24903] FAT-fs (loop4): Directory bread(block 70) failed [ 888.981199][T24903] FAT-fs (loop4): Directory bread(block 71) failed [ 888.993782][T24903] FAT-fs (loop4): Directory bread(block 72) failed [ 889.013820][T24903] FAT-fs (loop4): Directory bread(block 73) failed [ 889.568547][T24942] netlink: 'syz.2.9180': attribute type 12 has an invalid length. [ 889.599705][T24942] netlink: 'syz.2.9180': attribute type 12 has an invalid length. [ 889.624774][T24942] netlink: 'syz.2.9180': attribute type 12 has an invalid length. [ 889.791067][T24953] loop4: detected capacity change from 0 to 256 [ 889.841017][T24957] netlink: 'syz.2.9175': attribute type 3 has an invalid length. [ 889.852321][T24957] netlink: 'syz.2.9175': attribute type 1 has an invalid length. [ 889.910678][T24953] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 889.961156][T24953] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 890.003582][T24953] FAT-fs (loop4): Filesystem has been set read-only [ 890.106400][ T5446] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 890.384541][ T5446] usb 1-1: Using ep0 maxpacket: 16 [ 890.428253][T24981] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 890.512836][ T5446] usb 1-1: config 8 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 890.563719][ T5446] usb 1-1: config 8 interface 0 has no altsetting 0 [ 890.651875][ T5446] usb 1-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 890.675793][ T5446] usb 1-1: New USB device strings: Mfr=230, Product=0, SerialNumber=0 [ 890.711969][ T5446] usb 1-1: Manufacturer: syz [ 890.815330][T25000] netlink: 'syz.1.9197': attribute type 1 has an invalid length. [ 891.025875][ T4193] usb 1-1: USB disconnect, device number 33 [ 891.101794][T25012] loop3: detected capacity change from 0 to 4096 [ 891.212119][T25022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 891.219441][T25022] IPv6: NLM_F_CREATE should be set when creating new route [ 891.226886][T25022] IPv6: NLM_F_CREATE should be set when creating new route [ 891.292991][T25025] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 891.338343][T25012] NILFS error (device loop3): nilfs_dotdot: directory #12 missing '.' [ 891.376994][T25028] netlink: 'syz.4.9212': attribute type 28 has an invalid length. [ 891.407282][T25012] Remounting filesystem read-only [ 891.537147][T25034] loop4: detected capacity change from 0 to 256 [ 891.716680][T25034] FAT-fs (loop4): Directory bread(block 64) failed [ 891.746279][T25034] FAT-fs (loop4): Directory bread(block 65) failed [ 891.753077][T25034] FAT-fs (loop4): Directory bread(block 66) failed [ 891.828494][T25034] FAT-fs (loop4): Directory bread(block 67) failed [ 891.835178][T25034] FAT-fs (loop4): Directory bread(block 68) failed [ 891.862946][T25034] FAT-fs (loop4): Directory bread(block 69) failed [ 891.934932][T25034] FAT-fs (loop4): Directory bread(block 70) failed [ 891.976141][T25034] FAT-fs (loop4): Directory bread(block 71) failed [ 891.991843][T25017] loop2: detected capacity change from 0 to 32768 [ 892.031774][T25034] FAT-fs (loop4): Directory bread(block 72) failed [ 892.038407][T25034] FAT-fs (loop4): Directory bread(block 73) failed [ 892.063882][T25017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9207 (25017) [ 892.140661][T25017] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 892.178393][T25017] BTRFS info (device loop2): using free space tree [ 892.199290][T25017] BTRFS info (device loop2): has skinny extents [ 892.330885][T25061] overlayfs: missing 'lowerdir' [ 892.576160][T25082] netlink: 'syz.1.9229': attribute type 1 has an invalid length. [ 892.655830][T25017] BTRFS info (device loop2): enabling ssd optimizations [ 892.672456][T25089] kcapi: manufacturer command 4294967295 unknown. [ 892.719245][T25094] openvswitch: netlink: Actions may not be safe on all matching packets [ 893.856103][T25150] loop3: detected capacity change from 0 to 512 [ 894.002230][T25132] loop4: detected capacity change from 0 to 32768 [ 894.008961][T25150] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 894.093946][T25150] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 894.127563][T25132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9253 (25132) [ 894.168684][T25169] sctp: [Deprecated]: syz.2.9266 (pid 25169) Use of int in maxseg socket option. [ 894.168684][T25169] Use struct sctp_assoc_value instead [ 894.193005][T25150] ext4 filesystem being mounted at /1905/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.210555][T25132] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 894.222097][T25132] BTRFS info (device loop4): using free space tree [ 894.229850][T25132] BTRFS info (device loop4): has skinny extents [ 894.622210][T25132] BTRFS info (device loop4): enabling ssd optimizations [ 895.790178][T25261] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 896.324387][T25283] loop3: detected capacity change from 0 to 8192 [ 896.386279][T25283] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 896.450294][T25283] REISERFS (device loop3): using ordered data mode [ 896.456933][T25283] reiserfs: using flush barriers [ 896.472460][T25283] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 896.491426][T25283] REISERFS (device loop3): checking transaction log (loop3) [ 896.508240][T25290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9303'. [ 896.569217][T25290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9303'. [ 896.589037][T25290] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9303'. [ 896.695400][T25283] REISERFS (device loop3): Using tea hash to sort names [ 896.710674][T25283] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 897.021761][T25315] loop1: detected capacity change from 0 to 256 [ 897.188141][T18289] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 897.293534][T25323] netlink: 22 bytes leftover after parsing attributes in process `syz.4.9323'. [ 897.635491][T18289] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 897.653041][T18289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.692427][T18289] usb 3-1: config 0 descriptor?? [ 897.774823][T18289] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 897.929597][T25347] loop4: detected capacity change from 0 to 256 [ 897.939308][T25350] loop3: detected capacity change from 0 to 256 [ 897.992407][T25320] loop0: detected capacity change from 0 to 32768 [ 898.045075][T25320] [ 898.045075][T25320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.045075][T25320] [ 898.149247][T25320] [ 898.149247][T25320] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.149247][T25320] [ 898.249332][T18289] gp8psk: usb out operation failed. [ 898.255065][T18289] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 898.269090][T18289] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 898.291440][T25357] loop3: detected capacity change from 0 to 8 [ 898.341108][T18289] usb 3-1: USB disconnect, device number 50 [ 898.348814][ T4204] [ 898.348814][ T4204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.348814][ T4204] [ 898.380462][ T4204] [ 898.380462][ T4204] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 898.380462][ T4204] [ 898.397619][T25357] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 898.514710][ T7] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 898.527295][T25367] netlink: 'syz.4.9343': attribute type 3 has an invalid length. [ 898.536335][T25367] netlink: 'syz.4.9343': attribute type 1 has an invalid length. [ 898.915780][T25386] loop0: detected capacity change from 0 to 64 [ 898.942516][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 899.028273][ T7] usb 2-1: config 4 has an invalid interface number: 57 but max is 0 [ 899.037969][ T7] usb 2-1: config 4 has no interface number 0 [ 899.073607][ T7] usb 2-1: config 4 interface 57 has no altsetting 0 [ 899.263559][ T7] usb 2-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5a.ce [ 899.284730][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.334313][ T7] usb 2-1: Product: syz [ 899.345900][ T7] usb 2-1: Manufacturer: syz [ 899.366253][ T7] usb 2-1: SerialNumber: syz [ 899.735679][ T7] quatech2 2-1:4.57: Quatech 2nd gen USB to Serial Driver converter detected [ 899.781616][ T7] usb 2-1: qt2_attach - failed to power on unit: -71 [ 899.795491][ T7] quatech2: probe of 2-1:4.57 failed with error -71 [ 899.829142][ T7] usb 2-1: USB disconnect, device number 61 [ 899.850488][T25436] loop4: detected capacity change from 0 to 512 [ 899.874294][T25436] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 899.927818][T25436] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 899.974134][T25440] loop0: detected capacity change from 0 to 4096 [ 899.990565][T25436] EXT4-fs (loop4): orphan cleanup on readonly fs [ 900.000472][T25436] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 900.028168][T25436] EXT4-fs (loop4): Remounting filesystem read-only [ 900.043465][T25440] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 900.057938][T25436] __quota_error: 7 callbacks suppressed [ 900.057957][T25436] Quota error (device loop4): write_blk: dquota write failed [ 900.089976][T25440] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 900.098369][T25440] System zones: 0-5 [ 900.105778][T25436] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 900.162017][T25436] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.9375: Failed to acquire dquot type 0 [ 900.175183][T25440] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 900.258549][T25436] EXT4-fs (loop4): Remounting filesystem read-only [ 900.312919][T25436] EXT4-fs (loop4): 1 truncate cleaned up [ 900.330458][T25436] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mblk_io_submit,bsddf,barrier=0x0000000000000000,noblock_validity,errors=remount-ro,noinit_itable,sb=0x0000000000000008,journal_dev=0x00000000000000072. Quota mode: writeback. [ 900.679122][T25467] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 900.712983][T25467] FAT-fs (loop1): unable to read boot sector [ 900.751558][T25474] raw_sendmsg: syz.4.9393 forgot to set AF_INET. Fix it! [ 900.853426][T25477] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9395'. [ 900.906260][T25477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9395'. [ 900.939544][T25477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9395'. [ 900.985745][T25477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9395'. [ 901.000546][T25486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9399'. [ 901.435657][T25506] loop1: detected capacity change from 0 to 2048 [ 901.556527][T25514] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 901.570380][T25506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 901.606802][T25514] exFAT-fs (nullb0): invalid boot record signature [ 901.620343][T25506] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 901.663262][T25514] exFAT-fs (nullb0): failed to read boot sector [ 901.689219][T25514] exFAT-fs (nullb0): failed to recognize exfat type [ 901.718309][T25520] CIFS mount error: No usable UNC path provided in device string! [ 901.718309][T25520] [ 901.728680][T25520] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 901.766720][ T4193] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 902.044841][ T4193] usb 1-1: Using ep0 maxpacket: 8 [ 902.085291][T25492] loop4: detected capacity change from 0 to 32768 [ 902.117637][T25536] IPv6: Can't replace route, no match found [ 902.173428][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 902.215207][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.215262][T25540] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.235590][T25540] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.275858][T25540] device bridge0 entered promiscuous mode [ 902.291781][ T4193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.316695][T25540] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 902.327149][ T4193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 902.386954][ T4193] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 902.408374][ T4193] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 902.467407][ T4193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.525677][ T4193] usb 1-1: config 0 descriptor?? [ 902.558650][T25511] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 902.589514][T25549] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 902.755790][T25563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 903.074031][ T9921] usb 1-1: USB disconnect, device number 34 [ 903.266661][T25577] loop1: detected capacity change from 0 to 4096 [ 903.454139][T25583] loop3: detected capacity change from 0 to 4096 [ 903.551268][T25567] loop2: detected capacity change from 0 to 32768 [ 903.650346][T25589] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9449'. [ 903.826474][T25567] XFS (loop2): Mounting V5 Filesystem [ 903.920510][T25594] loop0: detected capacity change from 0 to 4096 [ 904.065901][T25567] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 904.088987][T25594] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 904.152372][T25615] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9458'. [ 904.262357][T25567] XFS (loop2): Starting recovery (logdev: internal) [ 904.330322][T25567] XFS (loop2): Ending recovery (logdev: internal) [ 904.503785][T25567] XFS (loop2): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 904.521186][T25622] ipt_CLUSTERIP: unknown mode 3918972798 [ 904.528036][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9464'. [ 904.543937][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9464'. [ 904.553354][T25567] XFS (loop2): Unmount and run xfs_repair [ 904.578061][T25567] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 904.588167][T25628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9464'. [ 904.597660][T25567] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 904.661375][T25567] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 904.713905][T25630] loop3: detected capacity change from 0 to 4096 [ 904.736514][T25567] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 904.779270][T25567] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 904.792974][T25630] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 904.832159][T25567] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 904.868000][T25567] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 904.879727][T25630] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 904.896512][T25567] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 904.915088][T25630] System zones: 0-5 [ 904.942482][T25630] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,journal_ioprio=0x0000000000000002,nouid32,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 904.967515][T25567] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 904.981166][T25567] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 905.011003][T25646] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9472'. [ 905.115135][ T4194] XFS (loop2): Unmounting Filesystem [ 905.487050][T25664] lo speed is unknown, defaulting to 1000 [ 905.529341][T25664] lo speed is unknown, defaulting to 1000 [ 905.567104][T25664] lo speed is unknown, defaulting to 1000 [ 905.719577][T25664] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 905.826431][T25664] lo speed is unknown, defaulting to 1000 [ 905.858547][T25664] lo speed is unknown, defaulting to 1000 [ 905.907482][T25664] lo speed is unknown, defaulting to 1000 [ 905.939016][T25685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9492'. [ 905.974299][T25664] lo speed is unknown, defaulting to 1000 [ 905.992411][T25664] lo speed is unknown, defaulting to 1000 [ 906.506960][T25710] loop1: detected capacity change from 0 to 4096 [ 906.528517][T25710] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 906.612460][T18278] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 906.658193][T25718] xt_connbytes: Forcing CT accounting to be enabled [ 906.857057][T25725] netlink: 'syz.1.9509': attribute type 10 has an invalid length. [ 906.873217][T25725] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9509'. [ 906.902000][T18278] usb 5-1: Using ep0 maxpacket: 32 [ 906.908423][T25725] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 907.051205][T18278] usb 5-1: config 0 has too many interfaces: 195, using maximum allowed: 32 [ 907.060030][T18278] usb 5-1: config 0 has an invalid interface number: 196 but max is 194 [ 907.106570][T18278] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 195 [ 907.132215][T18278] usb 5-1: config 0 has no interface number 0 [ 907.152831][T18278] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 907.185139][T18278] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 907.217124][T18278] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 907.249040][T18278] usb 5-1: config 0 interface 196 has no altsetting 0 [ 907.307016][T25739] loop0: detected capacity change from 0 to 4096 [ 907.355640][ T1201] block nbd3: Attempted send on invalid socket [ 907.362344][ T1201] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 907.459939][T18278] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 907.479797][T18278] usb 5-1: New USB device strings: Mfr=72, Product=223, SerialNumber=3 [ 907.499169][T18278] usb 5-1: Product: syz [ 907.504032][T18278] usb 5-1: Manufacturer: syz [ 907.508921][T18278] usb 5-1: SerialNumber: syz [ 907.522965][T18278] usb 5-1: config 0 descriptor?? [ 907.543402][T25707] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 907.555412][T25749] loop1: detected capacity change from 0 to 2048 [ 907.619329][T25749] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 907.677385][T25756] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 907.863911][T18278] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 907.884930][T25732] loop2: detected capacity change from 0 to 32768 [ 907.891771][T18278] ipheth: probe of 5-1:0.196 failed with error -71 [ 907.914946][T18278] usb 5-1: USB disconnect, device number 44 [ 907.938301][T25760] usb usb9: usbfs: interface 0 claimed by hub while 'syz.3.9527' sets config #-1 [ 907.963213][T25732] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9513 (25732) [ 908.009576][T25732] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 908.058485][T25732] BTRFS info (device loop2): force zlib compression, level 3 [ 908.099182][T25732] BTRFS info (device loop2): force clearing of disk cache [ 908.106458][T25732] BTRFS info (device loop2): setting nodatasum [ 908.125297][T25732] BTRFS info (device loop2): allowing degraded mounts [ 908.133436][T25732] BTRFS info (device loop2): enabling disk space caching [ 908.151677][T25732] BTRFS info (device loop2): disk space caching is enabled [ 908.170985][T25764] xt_ecn: cannot match TCP bits for non-tcp packets [ 908.178059][T25732] BTRFS info (device loop2): has skinny extents [ 908.434364][T25787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9533'. [ 908.460685][T25790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.502609][T25732] BTRFS info (device loop2): clearing free space tree [ 908.564242][T25732] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 908.575405][T25732] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 908.807923][T25732] BTRFS info (device loop2): balance: start -d -m -susage=0..0,drange=0..0 [ 908.840235][T25732] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 908.881045][T25810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9542'. [ 909.042359][T25732] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 909.068348][T25732] BTRFS info (device loop2): balance: canceled [ 909.367208][T25826] openvswitch: netlink: Missing key (keys=40, expected=80) [ 909.471012][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9554'. [ 910.101561][T25847] loop1: detected capacity change from 0 to 4096 [ 910.178360][T25836] loop4: detected capacity change from 0 to 32768 [ 910.281480][T25836] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.9556 (25836) [ 910.360904][T25836] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 910.388354][T25836] BTRFS info (device loop4): force zlib compression, level 3 [ 910.454366][T25836] BTRFS info (device loop4): force clearing of disk cache [ 910.483512][T25836] BTRFS info (device loop4): setting nodatasum [ 910.485947][ T7] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 910.502378][T25836] BTRFS info (device loop4): allowing degraded mounts [ 910.524008][T25836] BTRFS info (device loop4): enabling disk space caching [ 910.537803][T25865] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9569'. [ 910.547690][T25836] BTRFS info (device loop4): disk space caching is enabled [ 910.587190][T25836] BTRFS info (device loop4): has skinny extents [ 910.795068][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 910.834936][T25836] BTRFS info (device loop4): clearing free space tree [ 910.848474][T25836] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 910.858406][T25836] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 910.923523][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 910.947075][T25836] BTRFS info (device loop4): balance: start -d -m -susage=0..0,drange=0..0 [ 910.976940][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.002163][T25836] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 911.032873][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.078964][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 911.131625][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 911.157187][T25836] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 911.184309][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 911.229138][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.253117][T25836] BTRFS info (device loop4): balance: canceled [ 911.275879][ T7] usb 3-1: config 0 descriptor?? [ 911.330029][T25855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 911.507234][T25920] loop3: detected capacity change from 0 to 256 [ 911.606471][T25926] siw: device registration error -23 [ 911.620763][T25920] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 911.700832][T25920] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 911.899457][ T23] usb 3-1: USB disconnect, device number 51 [ 912.659899][T25966] befs: (loop0): No write support. Marking filesystem read-only [ 912.685764][T25966] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 912.700352][T18282] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 912.708747][T25966] befs: (loop0): unable to read superblock [ 913.126872][T18282] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 913.153146][T18282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 913.172773][T25994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9623'. [ 913.180281][T18282] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 913.200218][T18282] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 913.258873][T25990] loop1: detected capacity change from 0 to 4096 [ 913.294459][T26000] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19971 - 0 [ 913.304046][T26000] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19971 - 0 [ 913.319269][T18282] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.329221][T18282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.334800][T26000] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19971 - 0 [ 913.348896][T25990] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 913.379766][T18282] usb 4-1: SerialNumber: syz [ 913.387254][T26000] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19971 - 0 [ 913.449939][T18282] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 913.743493][ T1107] usb 4-1: USB disconnect, device number 37 [ 913.957706][ T9921] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 913.991658][T26018] loop1: detected capacity change from 0 to 4096 [ 914.012357][T26018] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 914.079445][T26018] ntfs3: loop1: Failed to load $Bitmap. [ 914.356968][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9645'. [ 914.442389][ T9921] usb 1-1: config 7 descriptor has 1 excess byte, ignoring [ 914.460681][ T9921] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 914.662718][ T9921] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 914.676540][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.726621][ T9921] usb 1-1: Product: syz [ 914.740975][ T9921] usb 1-1: Manufacturer: syz [ 914.741014][ T9921] usb 1-1: SerialNumber: syz [ 914.831583][ T9921] rndis_wlan 1-1:7.0: skipping garbage [ 914.837147][ T9921] usb 1-1: bad CDC descriptors [ 914.899661][T26064] x_tables: unsorted underflow at hook 3 [ 914.935766][ T9921] rndis_host 1-1:7.0: skipping garbage [ 914.941352][ T9921] usb 1-1: bad CDC descriptors [ 914.969126][ T9921] option 1-1:7.0: GSM modem (1-port) converter detected [ 914.983213][T26066] loop4: detected capacity change from 0 to 2048 [ 915.030733][ T9921] usb 1-1: USB disconnect, device number 35 [ 915.046434][T26066] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 915.062294][ T9921] option 1-1:7.0: device disconnected [ 915.121950][T26067] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 915.132523][ T4637] udevd[4637]: incorrect nilfs2 checksum on /dev/loop4 [ 915.151566][T26066] NILFS error (device loop4): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 915.201719][T26066] Remounting filesystem read-only [ 915.250378][T26035] loop2: detected capacity change from 0 to 32768 [ 915.329675][T26035] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 915.360954][T26035] (syz.2.9644,26035,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 915.389090][T26055] loop1: detected capacity change from 0 to 32768 [ 915.402449][T26035] (syz.2.9644,26035,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 915.411982][T26035] (syz.2.9644,26035,0):ocfs2_mknod:298 ERROR: status = -2 [ 915.445809][T26035] (syz.2.9644,26035,0):ocfs2_mknod:502 ERROR: status = -2 [ 915.456853][T26035] (syz.2.9644,26035,0):ocfs2_mkdir:659 ERROR: status = -2 [ 915.513836][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 916.123776][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9671'. [ 916.391293][T26109] netlink: 'syz.1.9655': attribute type 5 has an invalid length. [ 916.428728][T26112] netlink: 'syz.3.9676': attribute type 1 has an invalid length. [ 916.464825][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9676'. [ 916.626694][T26120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9680'. [ 916.688548][T26120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9680'. [ 916.715879][T26114] loop0: detected capacity change from 0 to 4096 [ 916.801059][T26114] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 916.935995][T26093] loop4: detected capacity change from 0 to 32768 [ 917.032630][ T4204] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 917.076617][T26093] XFS (loop4): Mounting V5 Filesystem [ 917.114298][ T4204] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 917.208665][ T4204] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 917.242494][T26093] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 917.309875][T26149] loop3: detected capacity change from 0 to 4096 [ 917.391572][T26149] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 917.420649][T26093] XFS (loop4): Starting recovery (logdev: internal) [ 917.460025][T26149] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 917.496951][T26093] XFS (loop4): Ending recovery (logdev: internal) [ 917.516918][T26153] loop1: detected capacity change from 0 to 512 [ 917.542039][T26149] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 917.575754][T26149] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 917.597056][ T4950] XFS (loop4): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 917.627476][ T4950] XFS (loop4): Unmount and run xfs_repair [ 917.641114][T26149] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 917.652924][ T4950] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 917.660368][ T4950] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 917.671950][T26149] ntfs: volume version 3.1. [ 917.688545][T26153] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 917.688545][T26153] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 917.688545][T26153] [ 917.694773][ T4950] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 917.740275][T26149] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 917.768195][T26149] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 917.774625][T26153] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 917.790616][ T4950] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 917.790656][ T4950] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 917.790673][ T4950] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 917.790689][ T4950] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 917.790705][ T4950] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 917.790721][ T4950] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 917.812100][T26093] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 917.865098][T26149] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 917.893387][T26149] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 917.905978][T26149] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 917.951514][T26161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9696'. [ 917.980967][T26153] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80026019, mo2=0000] [ 917.991886][T26161] openvswitch: netlink: Missing key (keys=40, expected=80) [ 918.010084][ T4206] XFS (loop4): Unmounting Filesystem [ 918.042322][T26153] EXT4-fs (loop1): 1 truncate cleaned up [ 918.075243][ T9] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:0: Failed to release dquot type 1 [ 918.089580][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.091220][T26153] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,acl,barrier=0x000000000000000c,noacl,max_batch_time=0x0000000000000006,nodelalloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 918.130684][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.337352][T26170] dlm: no locking on control device [ 918.415428][ T3064] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 1 [ 918.738311][T26186] Sensor A: ================= START STATUS ================= [ 918.770780][T26186] Sensor A: Test Pattern: 75% Colorbar [ 918.785447][T26186] Sensor A: Show Information: All [ 918.815496][T26186] Sensor A: Vertical Flip: false [ 918.828259][T26186] Sensor A: Horizontal Flip: false [ 918.839412][T26186] Sensor A: Brightness: 128 [ 918.844288][T26186] Sensor A: Contrast: 128 [ 918.860433][T26186] Sensor A: Hue: 0 [ 918.864406][T26186] Sensor A: Saturation: 128 [ 918.869062][T26186] Sensor A: ================== END STATUS ================== [ 919.026481][T26192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9710'. [ 919.167392][T26196] loop0: detected capacity change from 0 to 4096 [ 919.203500][T26196] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 919.288941][T26196] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 919.505806][T26184] loop1: detected capacity change from 0 to 32768 [ 919.540948][T26210] loop3: detected capacity change from 0 to 512 [ 919.598001][T26184] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9708 (26184) [ 919.667615][T26184] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 919.712852][T26218] openvswitch: netlink: Missing valid actions attribute. [ 919.713222][T26184] BTRFS info (device loop1): force zlib compression, level 3 [ 919.734291][T26218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 919.744905][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9721'. [ 919.812029][T26184] BTRFS info (device loop1): force clearing of disk cache [ 919.841373][T26184] BTRFS info (device loop1): setting nodatasum [ 919.895460][T26184] BTRFS info (device loop1): allowing degraded mounts [ 919.917078][T26184] BTRFS info (device loop1): enabling disk space caching [ 919.943073][T26184] BTRFS info (device loop1): disk space caching is enabled [ 919.970165][T26184] BTRFS info (device loop1): has skinny extents [ 920.254786][T26254] netlink: 'syz.4.9731': attribute type 6 has an invalid length. [ 920.344443][T26184] BTRFS info (device loop1): clearing free space tree [ 920.348013][T26261] loop0: detected capacity change from 0 to 128 [ 920.364428][T26184] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 920.414251][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 920.420744][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 920.432374][T26184] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 920.597171][T26184] BTRFS info (device loop1): balance: start -d -m -susage=0..0,drange=0..0 [ 920.619121][T26184] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 920.752541][T26184] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 920.864164][T26276] loop0: detected capacity change from 0 to 512 [ 920.875323][T26184] BTRFS info (device loop1): balance: canceled [ 921.024627][T26276] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 921.135752][T26276] ext4 filesystem being mounted at /1944/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.219436][T26286] ubi31: attaching mtd0 [ 921.236835][T26276] fs-verity (loop0, inode 15): Unrecognized descriptor size: 0 bytes [ 921.242037][T26241] loop3: detected capacity change from 0 to 32768 [ 921.263319][T26286] ubi31: scanning is finished [ 921.272920][T26286] ubi31: empty MTD device detected [ 921.386131][T26241] JBD2: Ignoring recovery information on journal [ 921.456869][T26241] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 921.492838][T26241] (syz.3.9730,26241,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 921.510079][T26241] (syz.3.9730,26241,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 921.518918][T26241] (syz.3.9730,26241,1):ocfs2_symlink:1864 ERROR: status = -2 [ 921.526644][T26241] (syz.3.9730,26241,1):ocfs2_symlink:2065 ERROR: status = -2 [ 921.589410][ T4198] ocfs2: Unmounting device (7,3) on (node local) [ 921.652992][T26286] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 921.660754][T26286] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 921.726659][T26286] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 921.733781][T26286] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 921.826682][T26286] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 921.895011][T26286] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 921.935541][T26286] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3871406399 [ 922.000978][T26286] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 922.040132][T26296] loop1: detected capacity change from 0 to 256 [ 922.048403][T26289] ubi31: background thread "ubi_bgt31d" started, PID 26289 [ 922.101376][T26296] exfat: Deprecated parameter 'namecase' [ 922.123794][T26296] exfat: Deprecated parameter 'utf8' [ 922.213319][T26296] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 922.301310][T26305] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 922.539855][T26311] netlink: 'syz.3.9756': attribute type 2 has an invalid length. [ 922.560796][T26311] netlink: 'syz.3.9756': attribute type 1 has an invalid length. [ 922.877191][T26323] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9761'. [ 922.924320][ T23] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 923.119431][T26337] sock: sock_timestamping_bind_phc: sock not bind to device [ 923.166003][T26301] loop0: detected capacity change from 0 to 32768 [ 923.217846][T26343] netlink: 'syz.1.9770': attribute type 3 has an invalid length. [ 923.234718][T26343] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.9770'. [ 923.352968][T26301] XFS (loop0): Mounting V5 Filesystem [ 923.416501][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 923.416537][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.470509][ T23] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 923.511980][T26301] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 923.588110][T26301] XFS (loop0): Starting recovery (logdev: internal) [ 923.609164][ T23] gspca_sn9c20x: Write register 1000 failed -71 [ 923.616052][ T23] gspca_sn9c20x: Device initialization failed [ 923.662670][ T23] gspca_sn9c20x: probe of 3-1:252.0 failed with error -71 [ 923.713208][ T23] usb 3-1: USB disconnect, device number 52 [ 923.771950][T26301] XFS (loop0): Ending recovery (logdev: internal) [ 923.851866][T26370] netlink: 'syz.3.9779': attribute type 6 has an invalid length. [ 923.897924][T26370] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9779'. [ 923.926266][ T9918] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xc1/0x220, xfs_finobt block 0x8 [ 923.986399][ T9918] XFS (loop0): Unmount and run xfs_repair [ 923.992255][ T9918] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 924.047628][ T9918] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 924.056771][ T9918] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 924.132549][ T9918] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 924.152487][ T9918] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02 ......1....N.... [ 924.195357][ T9918] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 924.215429][ T9918] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 924.245757][ T9918] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 924.289086][ T9918] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 924.306892][T26384] loop4: detected capacity change from 0 to 4096 [ 924.316226][T26301] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 8 error 117 [ 924.370095][T26391] loop1: detected capacity change from 0 to 256 [ 924.445805][ T4204] XFS (loop0): Unmounting Filesystem [ 924.522942][T26384] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 924.619093][T26391] FAT-fs (loop1): Directory bread(block 64) failed [ 924.636764][T26391] FAT-fs (loop1): Directory bread(block 65) failed [ 924.643442][T26391] FAT-fs (loop1): Directory bread(block 66) failed [ 924.676642][T26391] FAT-fs (loop1): Directory bread(block 67) failed [ 924.700068][T26391] FAT-fs (loop1): Directory bread(block 68) failed [ 924.769703][T26391] FAT-fs (loop1): Directory bread(block 69) failed [ 924.852562][T26391] FAT-fs (loop1): Directory bread(block 70) failed [ 924.859162][T26391] FAT-fs (loop1): Directory bread(block 71) failed [ 924.913808][T26391] FAT-fs (loop1): Directory bread(block 72) failed [ 924.920425][T26391] FAT-fs (loop1): Directory bread(block 73) failed [ 925.448558][ T7] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 925.532672][T26427] cifs: Unknown parameter 'h}#úä [ 925.532672][T26427] Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 925.532672][T26427] SÃȘØÈžZ§6ŸÂ' [ 925.739699][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 925.865894][ T7] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 925.874349][ T7] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 925.918096][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 925.934349][ T7] usb 5-1: config 1 has no interface number 0 [ 925.943558][ T7] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 926.000401][ T7] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 926.014620][ T7] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 926.025538][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.104004][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 926.197621][ T4940] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 926.210930][T26461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9822'. [ 926.226803][T26461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 926.348375][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 926.475459][ T4940] usb 2-1: Using ep0 maxpacket: 32 [ 926.491862][T26475] x_tables: duplicate underflow at hook 1 [ 926.596442][ T7] usb 5-1: USB disconnect, device number 45 [ 926.614643][ T4940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.637613][ T7] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 926.661396][ T4940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.697374][ T4940] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 926.724952][ T4940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.770681][ T4940] usb 2-1: config 0 descriptor?? [ 926.840467][ T4940] hub 2-1:0.0: USB hub found [ 926.965686][T26499] loop3: detected capacity change from 0 to 256 [ 927.014368][T26499] exfat: Deprecated parameter 'namecase' [ 927.064029][T26499] exfat: Deprecated parameter 'utf8' [ 927.074705][ T4940] hub 2-1:0.0: 5 ports detected [ 927.095824][ T4940] hub 2-1:0.0: insufficient power available to use all downstream ports [ 927.127099][T26499] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 927.241497][T26507] loop2: detected capacity change from 0 to 256 [ 927.309721][ T4940] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 927.316142][ T4940] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 927.438176][ T4940] usbhid 2-1:0.0: can't add hid device: -71 [ 927.470935][ T4940] usbhid: probe of 2-1:0.0 failed with error -71 [ 927.544602][ T4940] usb 2-1: USB disconnect, device number 62 [ 927.655444][T26523] loop3: detected capacity change from 0 to 256 [ 928.008928][T26529] loop2: detected capacity change from 0 to 512 [ 928.051937][T26521] loop4: detected capacity change from 0 to 32768 [ 928.195889][T26538] loop0: detected capacity change from 0 to 256 [ 928.204929][T26534] loop1: detected capacity change from 0 to 64 [ 928.230422][T26538] exfat: Deprecated parameter 'namecase' [ 928.247250][T26538] exfat: Deprecated parameter 'utf8' [ 928.264279][T26538] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 928.278911][T26529] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 928.287322][T26523] FAT-fs (loop3): Directory bread(block 64) failed [ 928.297403][T26523] FAT-fs (loop3): Directory bread(block 65) failed [ 928.304091][T26523] FAT-fs (loop3): Directory bread(block 66) failed [ 928.305368][T26529] System zones: 0-2, 18-18, 34-35 [ 928.327344][T26521] XFS (loop4): Mounting V5 Filesystem [ 928.351757][T26529] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 928.378763][T26523] FAT-fs (loop3): Directory bread(block 67) failed [ 928.385129][T26529] ext4 filesystem being mounted at /1853/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 928.447661][T26523] FAT-fs (loop3): Directory bread(block 68) failed [ 928.465051][T26523] FAT-fs (loop3): Directory bread(block 69) failed [ 928.471724][T26523] FAT-fs (loop3): Directory bread(block 70) failed [ 928.486094][ C1] vkms_vblank_simulate: vblank timer overrun [ 928.495262][T26521] XFS (loop4): Ending clean mount [ 928.495859][T26523] FAT-fs (loop3): Directory bread(block 71) failed [ 928.553197][T26551] tmpfs: Bad value for 'mpol' [ 928.579336][T26523] FAT-fs (loop3): Directory bread(block 72) failed [ 928.622031][T26523] FAT-fs (loop3): Directory bread(block 73) failed [ 928.646705][T26521] XFS (loop4): Quotacheck needed: Please wait. [ 928.755034][T26521] XFS (loop4): Quotacheck: Done. [ 928.842036][ T4206] XFS (loop4): Unmounting Filesystem [ 928.918169][ T23] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 928.973271][ T9921] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 929.299187][ T9921] usb 1-1: Using ep0 maxpacket: 16 [ 929.382260][T26567] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.454034][ T9921] usb 1-1: config 3 has an invalid interface number: 25 but max is 0 [ 929.477476][ T9921] usb 1-1: config 3 has no interface number 0 [ 929.510338][ T9921] usb 1-1: config 3 interface 25 has no altsetting 0 [ 929.577501][ T23] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 929.597595][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.619260][ T23] usb 2-1: Product: syz [ 929.640920][ T23] usb 2-1: Manufacturer: syz [ 929.660010][ T23] usb 2-1: SerialNumber: syz [ 929.674761][ T23] usb 2-1: config 0 descriptor?? [ 929.716733][ T9921] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=e6.a2 [ 929.731960][T26579] loop4: detected capacity change from 0 to 512 [ 929.753381][ T9921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.770012][ T9921] usb 1-1: Product: syz [ 929.774563][ T9921] usb 1-1: Manufacturer: syz [ 929.779503][ T9921] usb 1-1: SerialNumber: syz [ 929.784506][ T23] rndis_wlan 2-1:0.0: More than one union descriptor, skipping ... [ 929.801722][ T23] usb 2-1: bad CDC descriptors [ 929.810524][ T23] rndis_host 2-1:0.0: More than one union descriptor, skipping ... [ 929.855335][ T23] usb 2-1: bad CDC descriptors [ 929.874306][ T23] cdc_acm 2-1:0.0: More than one union descriptor, skipping ... [ 930.010334][T18289] usb 2-1: USB disconnect, device number 63 [ 930.037156][T26561] loop2: detected capacity change from 0 to 32768 [ 930.129593][T26561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9867 (26561) [ 930.164952][T26561] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 930.181156][T26561] BTRFS info (device loop2): using free space tree [ 930.220733][ T9921] esd_usb2 1-1:3.25: sending version message failed [ 930.227871][ T9921] esd_usb2: probe of 1-1:3.25 failed with error -22 [ 930.238415][T26561] BTRFS info (device loop2): has skinny extents [ 930.279393][ T9921] usb 1-1: USB disconnect, device number 36 [ 930.397542][T26605] loop4: detected capacity change from 0 to 512 [ 930.498550][T26605] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.9882: invalid indirect mapped block 256 (level 2) [ 930.520021][T26561] BTRFS info (device loop2): enabling ssd optimizations [ 930.527529][T26605] EXT4-fs (loop4): 2 truncates cleaned up [ 930.534015][T26605] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 931.560692][T26663] netlink: 'syz.4.9891': attribute type 1 has an invalid length. [ 931.609457][T26663] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9891'. [ 931.773078][T26677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9912'. [ 932.131470][T26693] erofs: (device loop0): mounted with root inode @ nid 36. [ 932.160642][T26693] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 932.212521][T26693] attempt to access beyond end of device [ 932.212521][T26693] loop0: rw=0, want=64, limit=16 [ 932.232210][T26708] netlink: 'syz.2.9927': attribute type 3 has an invalid length. [ 932.247262][T26693] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 932.527504][T26724] set_capacity_and_notify: 1 callbacks suppressed [ 932.527521][T26724] loop4: detected capacity change from 0 to 512 [ 932.607004][T26724] EXT4-fs (loop4): Ignoring removed bh option [ 932.767081][T26724] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 932.786284][T26724] ext4 filesystem being mounted at /2052/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 932.911141][T26742] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 932.930363][T26741] loop3: detected capacity change from 0 to 512 [ 933.095518][T26741] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 933.112019][T26741] System zones: 0-2, 18-18, 34-35 [ 933.141435][T26741] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 933.172566][T26754] xt_TCPMSS: Only works on TCP SYN packets [ 933.200993][T26741] ext4 filesystem being mounted at /2088/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.470552][ T7] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 933.876960][ T7] usb 1-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config [ 933.896092][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.995934][T26802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9972'. [ 934.019238][T26801] loop1: detected capacity change from 0 to 1024 [ 934.091833][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 934.109931][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.121236][ T7] usb 1-1: Product: syz [ 934.125914][ T7] usb 1-1: Manufacturer: syz [ 934.131575][T26801] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 934.139472][ T7] usb 1-1: SerialNumber: syz [ 934.144814][T26801] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 934.167729][T26810] netlink: 'syz.2.9976': attribute type 10 has an invalid length. [ 934.175618][T26810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9976'. [ 934.185477][T26810] device virt_wifi0 entered promiscuous mode [ 934.193190][T26801] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.9971: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 934.201420][T26810] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 934.263703][T26801] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9971: couldn't read orphan inode 11 (err -117) [ 934.308061][T26801] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,bsdgroups,mblk_io_submit,jqfmt=vfsv0,discard,usrjquota=,grpquota,quota,,errors=continue. Quota mode: writeback. [ 934.327337][ T4939] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 934.368995][ T1107] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 934.478572][ T7] usb 1-1: 0:1 : does not exist [ 934.483761][ T7] usb 1-1: unit 6 not found! [ 934.496647][ T7] usb 1-1: unit 2 not found! [ 934.549739][ T7] usb 1-1: USB disconnect, device number 37 [ 934.565328][T26822] netlink: 'syz.2.9982': attribute type 21 has an invalid length. [ 934.580609][T26822] IPv6: NLM_F_CREATE should be specified when creating new route [ 934.598784][T26822] IPv6: Can't replace route, no match found [ 934.607544][T26823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9980'. [ 934.636566][ T1107] usb 4-1: Using ep0 maxpacket: 32 [ 934.718474][T26827] xt_TCPMSS: Only works on TCP SYN packets [ 934.743391][ T4939] usb 5-1: config 15 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 934.756506][T26829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9985'. [ 934.765951][ T1107] usb 4-1: config 15 has an invalid interface number: 78 but max is 1 [ 934.774893][ T1107] usb 4-1: config 15 has an invalid interface number: 2 but max is 1 [ 934.794068][ T1107] usb 4-1: config 15 has no interface number 0 [ 934.805396][ T1107] usb 4-1: config 15 has no interface number 1 [ 934.837152][T26831] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9986'. [ 934.848016][ T4644] udevd[4644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.851102][ T4939] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 934.874198][ T1107] usb 4-1: config 15 interface 78 has no altsetting 0 [ 934.881043][ T1107] usb 4-1: config 15 interface 2 has no altsetting 0 [ 934.924914][ T4939] usb 5-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 934.935911][T26835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 934.948682][ T4939] usb 5-1: Product: syz [ 934.989530][T26806] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 935.012432][T26837] netlink: 'syz.2.9989': attribute type 1 has an invalid length. [ 935.014055][ T4939] usbhid 5-1:15.0: fixing wrong optional hid class descriptors count [ 935.072750][ T4939] usbhid 5-1:15.0: can't add hid device: -22 [ 935.085594][ T1107] usb 4-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=d4.09 [ 935.110603][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.128364][ T4939] usbhid: probe of 5-1:15.0 failed with error -22 [ 935.156230][ T1107] usb 4-1: Product: syz [ 935.168127][ T1107] usb 4-1: Manufacturer: syz [ 935.182443][ T1107] usb 4-1: SerialNumber: syz [ 935.269323][T26847] loop1: detected capacity change from 0 to 16 [ 935.270979][ T5308] usb 5-1: USB disconnect, device number 46 [ 935.315007][T26847] erofs: (device loop1): mounted with root inode @ nid 36. [ 935.368517][T26853] loop2: detected capacity change from 0 to 128 [ 935.533345][T26853] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 935.600462][T26853] ext4 filesystem being mounted at /1888/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 935.613487][ T1107] usb 4-1: selecting invalid altsetting 0 [ 935.651921][ T1107] usb 4-1: Could not set interface, error -22 [ 935.721905][ T1107] usb 4-1: USB disconnect, device number 38 [ 936.181282][T26886] loop3: detected capacity change from 0 to 512 [ 936.232051][T26886] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 936.344578][T26886] EXT4-fs (loop3): 1 truncate cleaned up [ 936.366626][T26886] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,minixdf,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 936.674406][T26917] xt_nfacct: accounting object `syz1' does not exist [ 936.681372][T26918] netlink: 'syz.1.10026': attribute type 1 has an invalid length. [ 936.878505][T26931] loop2: detected capacity change from 0 to 512 [ 936.947733][T26931] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 937.026618][T26931] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 937.031776][T26937] netlink: 'syz.0.10037': attribute type 1 has an invalid length. [ 937.085455][ T4193] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 937.344970][T26951] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 937.524111][ T4193] usb 4-1: unable to get BOS descriptor or descriptor too short [ 937.577565][ T4193] usb 4-1: not running at top speed; connect to a high speed hub [ 937.663326][ T4193] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 937.671718][ T4193] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 937.716387][ T4193] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 937.725364][ T4193] usb 4-1: config 2 has no interface number 0 [ 937.780693][ T4193] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 937.834030][ T4193] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 937.867983][ T4193] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 937.904391][T26980] xt_nfacct: accounting object `syz1' does not exist [ 938.034465][T26988] netlink: 124 bytes leftover after parsing attributes in process `syz.1.10061'. [ 938.058727][T26988] netlink: 'syz.1.10061': attribute type 3 has an invalid length. [ 938.070219][ T4193] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 938.091119][ T4193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.099181][ T4193] usb 4-1: Product: syz [ 938.137552][ T4193] usb 4-1: Manufacturer: syz [ 938.142617][ T4193] usb 4-1: SerialNumber: syz [ 938.256114][T26984] loop0: detected capacity change from 0 to 4096 [ 938.337478][T26984] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 938.466435][T26984] ntfs3: loop0: failed to convert "c46c" to cp1250 [ 938.515848][ T4193] usb 4-1: USB disconnect, device number 39 [ 938.925785][T27030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10083'. [ 938.954977][T27031] kAFS: No cell specified [ 938.974191][T27030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10083'. [ 939.021362][T27030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10083'. [ 939.029216][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10085'. [ 939.462005][T27066] netlink: 'syz.4.10101': attribute type 8 has an invalid length. [ 939.625065][T27072] loop0: detected capacity change from 0 to 1764 [ 939.883601][T27086] loop4: detected capacity change from 0 to 4096 [ 939.967397][T27086] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 940.110035][T27114] loop2: detected capacity change from 0 to 128 [ 940.320621][T27114] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 940.364315][T27114] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 940.498427][T27129] Cannot find add_set index 3 as target [ 940.682473][T27138] loop4: detected capacity change from 0 to 16 [ 940.802243][T27138] erofs: (device loop4): mounted with root inode @ nid 36. [ 940.865320][T27138] attempt to access beyond end of device [ 940.865320][T27138] loop4: rw=524288, want=34359738368, limit=16 [ 940.954023][T27138] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 24575 of nid 89 [ 941.034211][T27138] erofs: (device loop4): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 941.055301][T27138] erofs: (device loop4): z_erofs_map_blocks_iter: unknown type 3 @ offset 20479 of nid 89 [ 941.070853][T27138] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 941.092023][T27138] attempt to access beyond end of device [ 941.092023][T27138] loop4: rw=524288, want=56, limit=16 [ 941.151786][T27138] attempt to access beyond end of device [ 941.151786][T27138] loop4: rw=0, want=34359738368, limit=16 [ 941.198052][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 941.198068][ T26] audit: type=1800 audit(2000524898.728:41): pid=27138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10138" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 941.273379][T27138] syz.4.10138 (27138) used greatest stack depth: 20080 bytes left [ 941.333870][T27166] loop0: detected capacity change from 0 to 2048 [ 941.425023][T27166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 942.366235][T27211] netlink: 'syz.0.10170': attribute type 1 has an invalid length. [ 942.411637][T27211] netlink: 200 bytes leftover after parsing attributes in process `syz.0.10170'. [ 942.447953][T27213] syz.4.10171 (27213): drop_caches: 0 [ 942.680401][T27224] netlink: 'syz.2.10176': attribute type 21 has an invalid length. [ 942.688691][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10176'. [ 942.862825][T27175] loop1: detected capacity change from 0 to 32768 [ 942.965419][T27175] (syz.1.10153,27175,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 942.997185][T27175] (syz.1.10153,27175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 943.097038][T27175] JBD2: Ignoring recovery information on journal [ 943.127423][T27244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 943.154480][T27244] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 943.164935][T27244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 943.174601][T27244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 943.283423][T27175] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 943.331695][T27242] loop4: detected capacity change from 0 to 4096 [ 943.362908][T27249] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 943.385659][T27242] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 943.487501][T27242] ntfs: volume version 3.1. [ 943.571637][ T4202] ocfs2: Unmounting device (7,1) on (node local) [ 943.722256][T27253] loop1: detected capacity change from 0 to 1024 [ 943.869496][T27233] loop2: detected capacity change from 0 to 32768 [ 943.876304][T27253] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 943.912191][T27253] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #32: comm syz.1.10189: iget: special inode unallocated [ 943.933331][T27263] netlink: 4568 bytes leftover after parsing attributes in process `syz.0.10194'. [ 943.963211][T27253] EXT4-fs (loop1): no journal found [ 943.984080][T27253] EXT4-fs (loop1): can't get journal size [ 944.028082][T27253] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,jqfmt=vfsv0,nobarrier,. Quota mode: none. [ 944.107586][T27233] XFS (loop2): Mounting V5 Filesystem [ 944.174897][T27259] loop3: detected capacity change from 0 to 4096 [ 944.259466][T27259] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 944.274478][T27233] XFS (loop2): Ending clean mount [ 944.282873][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10199'. [ 944.312235][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10199'. [ 944.426989][T27289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10202'. [ 944.475196][T27282] device bond3 entered promiscuous mode [ 944.485405][ T4194] XFS (loop2): Unmounting Filesystem [ 944.547727][T27282] 8021q: adding VLAN 0 to HW filter on device bond3 [ 944.551729][T27259] ntfs3: loop3: failed to convert "c46c" to cp1250 [ 944.779812][T27293] loop4: detected capacity change from 0 to 2048 [ 944.854822][T27293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.258725][T27313] loop4: detected capacity change from 0 to 64 [ 945.804625][T27346] loop3: detected capacity change from 0 to 1024 [ 945.876448][T27351] loop0: detected capacity change from 0 to 1024 [ 945.977989][ T4233] hfsplus: b-tree write err: -5, ino 25 [ 945.986786][ T4233] hfsplus: b-tree write err: -5, ino 4 [ 945.992400][ T4233] hfsplus: b-tree write err: -5, ino 2 [ 946.252751][T27370] kernel profiling enabled (shift: 63) [ 946.259261][T27370] profiling shift: 63 too large [ 946.308497][T27376] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10245'. [ 946.401218][T27382] loop4: detected capacity change from 0 to 64 [ 946.743162][ T5308] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 946.755759][T27405] netlink: 180 bytes leftover after parsing attributes in process `syz.2.10259'. [ 946.822032][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10259'. [ 947.073425][T27424] openvswitch: netlink: Actions may not be safe on all matching packets [ 947.149941][ T5308] usb 1-1: config 8 has an invalid interface number: 223 but max is 0 [ 947.180113][ T5308] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 947.195941][T27432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10272'. [ 947.205531][ T5308] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 947.227152][ T5308] usb 1-1: config 8 has no interface number 0 [ 947.233322][ T5308] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 947.253669][T27432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10272'. [ 947.267322][ T4939] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 947.321324][ T5308] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 947.598951][ T5308] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 947.647530][ T5308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.660944][T27444] loop3: detected capacity change from 0 to 1024 [ 947.666775][ T5308] usb 1-1: Product: syz [ 947.671545][ T5308] usb 1-1: Manufacturer: syz [ 947.674085][ T4939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 947.697339][ T4939] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 947.705851][ T5308] usb 1-1: SerialNumber: syz [ 947.715367][ T4939] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 947.760309][T27444] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 947.776135][T27444] EXT4-fs (loop3): orphan cleanup on readonly fs [ 947.797386][T27444] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.10279: Invalid inode table block 0 in block_group 0 [ 947.815765][T27444] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 947.855850][T27444] EXT4-fs error (device loop3): ext4_quota_write:6646: inode #3: comm syz.3.10279: mark_inode_dirty error [ 947.898448][ T4939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 947.918467][ T4939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.929276][ T4939] usb 5-1: Product: syz [ 947.931039][T27444] Quota error (device loop3): write_blk: dquota write failed [ 947.941464][ T4939] usb 5-1: Manufacturer: syz [ 947.946113][ T4939] usb 5-1: SerialNumber: syz [ 947.960708][T27444] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 947.972697][T27444] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.10279: Failed to acquire dquot type 0 [ 948.001420][T27444] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.10279: Invalid inode table block 0 in block_group 0 [ 948.049655][T27444] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 948.078569][ T5308] usb 1-1: USB disconnect, device number 38 [ 948.088645][T27444] EXT4-fs error (device loop3): ext4_ext_truncate:4462: inode #15: comm syz.3.10279: mark_inode_dirty error [ 948.128520][T27444] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.10279: Invalid inode table block 0 in block_group 0 [ 948.176974][T27444] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 948.215591][T27444] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 948.228758][T27444] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.10279: Invalid inode table block 0 in block_group 0 [ 948.252330][T27444] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 948.263572][T27444] EXT4-fs error (device loop3): ext4_truncate:4279: inode #15: comm syz.3.10279: mark_inode_dirty error [ 948.286478][T27444] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 948.316590][T27444] EXT4-fs (loop3): 1 truncate cleaned up [ 948.326217][ T4939] usb 5-1: 0:2 : does not exist [ 948.344349][T27444] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 948.386197][T27465] loop1: detected capacity change from 0 to 4096 [ 948.423578][ T4939] usb 5-1: USB disconnect, device number 47 [ 948.606863][T27465] ntfs: volume version 3.1. [ 948.646610][T27473] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 948.670464][ T4644] udevd[4644]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 948.984997][T27490] bond0: Error: Cannot enslave bond to itself. [ 948.993384][T27491] overlayfs: unrecognized mount option "\" or missing value [ 949.160693][T27499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10300'. [ 949.281310][T27505] set_capacity_and_notify: 1 callbacks suppressed [ 949.281327][T27505] loop0: detected capacity change from 0 to 2048 [ 949.296158][T27509] netlink: 'syz.1.10309': attribute type 10 has an invalid length. [ 949.363927][T27509] team0: Device xfrm0 is of different type [ 949.383831][T27515] netlink: zone id is out of range [ 949.412862][T27515] netlink: set zone limit has 8 unknown bytes [ 949.435271][T27505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 949.975058][T27547] loop1: detected capacity change from 0 to 512 [ 950.030807][T27547] EXT4-fs (loop1): Test dummy encryption mode enabled [ 950.072360][T27547] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 950.146740][T27550] loop3: detected capacity change from 0 to 4096 [ 950.164287][T27550] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 950.226196][T27547] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 950.260177][T27550] ntfs3: loop3: Failed to load $Extend. [ 950.266623][T27547] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,min_batch_time=0x000000000000001a,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 950.539899][ T5308] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 950.696682][T27564] overlayfs: unrecognized mount option "\" or missing value [ 950.796569][ T4939] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 950.960911][T27533] loop4: detected capacity change from 0 to 32768 [ 951.053221][ T4939] usb 1-1: Using ep0 maxpacket: 8 [ 951.128845][ T5308] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 951.144880][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.160607][ T5308] usb 3-1: Product: syz [ 951.171379][ T5308] usb 3-1: Manufacturer: syz [ 951.176071][ T5308] usb 3-1: SerialNumber: syz [ 951.181734][ T4939] usb 1-1: config 156 has an invalid interface number: 91 but max is 0 [ 951.192526][T27577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10341'. [ 951.193989][ T4939] usb 1-1: config 156 has no interface number 0 [ 951.210232][ T5308] usb 3-1: config 0 descriptor?? [ 951.224164][ T4939] usb 1-1: config 156 interface 91 has no altsetting 0 [ 951.297864][ T5308] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 951.481198][ T4939] usb 1-1: string descriptor 0 read error: -22 [ 951.488475][ T4939] usb 1-1: New USB device found, idVendor=249c, idProduct=9008, bcdDevice=90.15 [ 951.537561][ T4939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.566616][ T1107] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 951.623037][ T4939] usb 1-1: can't set first interface for hiFace device. [ 951.639741][ T4939] snd-usb-hiface: probe of 1-1:156.91 failed with error -5 [ 951.766432][ T5308] gspca_sunplus: reg_w_riv err -71 [ 951.771791][ T5308] sunplus: probe of 3-1:0.0 failed with error -71 [ 951.789292][ T5308] usb 3-1: USB disconnect, device number 53 [ 951.840525][ T4939] usb 1-1: USB disconnect, device number 39 [ 951.876249][T27587] loop4: detected capacity change from 0 to 32768 [ 951.954596][T27587] jfs_strtoUCS: char2uni returned -22. [ 951.961272][T27587] charset = cp932, char = 0xfc [ 952.146835][ T1107] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 952.175128][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.192870][ T1107] usb 4-1: Product: syz [ 952.199258][ T1107] usb 4-1: Manufacturer: syz [ 952.203923][ T1107] usb 4-1: SerialNumber: syz [ 952.217648][ T1107] usb 4-1: config 0 descriptor?? [ 952.269962][ T1107] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 952.365056][T27615] overlayfs: missing 'lowerdir' [ 952.481927][T27622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10362'. [ 952.748037][ T1107] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 952.766170][ T1107] sq905c 4-1:0.0: Reading version command failed [ 952.795434][ T1107] sq905c: probe of 4-1:0.0 failed with error -71 [ 952.817615][ T1107] usb 4-1: USB disconnect, device number 40 [ 953.063376][T27651] loop1: detected capacity change from 0 to 1764 [ 953.075382][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10378'. [ 953.101565][T27653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10378'. [ 953.110920][T27653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10378'. [ 953.289416][T27617] orangefs_mount: mount request failed with -4 [ 953.431607][T27672] loop1: detected capacity change from 0 to 64 [ 953.724806][T27678] loop0: detected capacity change from 0 to 4096 [ 953.808416][T27678] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 953.873788][T27692] loop2: detected capacity change from 0 to 4096 [ 953.909917][T27692] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 953.959325][T27692] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 953.996774][T27692] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 954.032551][T27678] ntfs3: loop0: failed to convert "c46c" to koi8-u [ 954.127918][T27692] ntfs: volume version 3.1. [ 954.239890][T27710] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10407'. [ 954.336604][ T1107] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 954.521203][T27722] netlink: 'syz.4.10412': attribute type 1 has an invalid length. [ 954.601517][T27723] ALSA: mixer_oss: invalid OSS volume 'w' [ 954.721803][ T1107] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 954.730995][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.755904][ T1107] usb 2-1: config 0 descriptor?? [ 954.813466][ T1107] cp210x 2-1:0.0: cp210x converter detected [ 955.161642][T27752] netlink: 80 bytes leftover after parsing attributes in process `syz.4.10427'. [ 955.251443][T27758] tmpfs: Bad value for 'mpol' [ 955.277866][ T1107] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 955.285544][ T1107] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 955.332365][ T1107] usb 2-1: cp210x converter now attached to ttyUSB0 [ 955.368988][ T1107] usb 2-1: USB disconnect, device number 64 [ 955.378808][T27764] loop0: detected capacity change from 0 to 164 [ 955.400243][ T1107] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 955.424877][ T1107] cp210x 2-1:0.0: device disconnected [ 955.452006][T27768] netlink: 'syz.2.10435': attribute type 13 has an invalid length. [ 955.498218][T27764] overlayfs: upper fs is r/o, try multi-lower layers mount [ 955.539542][T27768] gretap0: refused to change device tx_queue_len [ 955.595439][T27768] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 955.890239][T27778] loop4: detected capacity change from 0 to 4096 [ 955.999065][T27788] program syz.3.10445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 956.025165][T27778] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 956.059400][T27778] ntfs3: loop4: Failed to load $Extend. [ 956.523331][T27805] loop3: detected capacity change from 0 to 4096 [ 956.573909][T27805] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 956.667972][ T4193] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 956.793211][T27805] ntfs3: loop3: failed to convert "c46c" to cp861 [ 956.842711][T27784] loop0: detected capacity change from 0 to 32768 [ 956.902970][T27784] JBD2: Ignoring recovery information on journal [ 956.924841][ T4193] usb 2-1: Using ep0 maxpacket: 32 [ 956.998093][T27784] (syz.0.10442,27784,0):ocfs2_clear_journal_error:1085 ERROR: File system error 33023 recorded in journal 0. [ 957.053301][ T4193] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 26, changing to 7 [ 957.064767][T27784] (syz.0.10442,27784,0):ocfs2_clear_journal_error:1087 ERROR: File system on device loop0 needs checking. [ 957.129511][T27784] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 957.178753][ T3064] (kworker/u4:4,3064,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4104: rec_len is smaller than minimal - offset=0, inode=4104, rec_len=8, name_len=0 [ 957.258218][T27784] (syz.0.10442,27784,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len is smaller than minimal - offset=0, inode=397313, rec_len=0, name_len=1 [ 957.277832][ T4193] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 957.286960][ T4193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.304985][ T4193] usb 2-1: Product: syz [ 957.305812][T27830] loop3: detected capacity change from 0 to 764 [ 957.316395][ T4193] usb 2-1: Manufacturer: syz [ 957.325968][ T4193] usb 2-1: SerialNumber: syz [ 957.357287][T27784] (syz.0.10442,27784,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 957.372495][T27784] (syz.0.10442,27784,0):ocfs2_mknod:298 ERROR: status = -2 [ 957.451813][T27784] (syz.0.10442,27784,0):ocfs2_mknod:502 ERROR: status = -2 [ 957.520357][ T4204] ocfs2: Unmounting device (7,0) on (node local) [ 957.557364][T27818] loop4: detected capacity change from 0 to 32768 [ 957.635916][T27818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.10459 (27818) [ 957.695067][ T4193] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 957.799366][ T4193] usb 2-1: USB disconnect, device number 65 [ 957.913700][T27818] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 957.930882][T27818] BTRFS info (device loop4): using free space tree [ 957.937636][T27818] BTRFS info (device loop4): has skinny extents [ 958.211662][T27818] BTRFS info (device loop4): enabling ssd optimizations [ 958.357934][T18288] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 958.462020][ T4644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (4644) [ 958.685328][T18288] usb 4-1: Using ep0 maxpacket: 8 [ 958.846546][T27868] loop0: detected capacity change from 0 to 40427 [ 958.881846][T18288] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 958.890965][T18288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.914750][T27868] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 958.921151][T27868] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 958.956266][T18288] usb 4-1: config 0 descriptor?? [ 958.993660][T27868] F2FS-fs (loop0): invalid crc value [ 959.047002][T27868] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 959.146556][T27893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10485'. [ 959.192168][T27893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.243115][T27897] netlink: 268 bytes leftover after parsing attributes in process `syz.2.10487'. [ 959.328265][T18288] usb 4-1: string descriptor 0 read error: -71 [ 959.341821][T18288] usb 4-1: Found UVC 0.00 device (2833:0201) [ 959.348934][T18288] usb 4-1: No valid video chain found. [ 959.363579][T27868] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 959.370701][T27868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 959.420346][T18288] usb 4-1: USB disconnect, device number 41 [ 959.584006][ T4204] attempt to access beyond end of device [ 959.584006][ T4204] loop0: rw=2049, want=40968, limit=40427 [ 960.165168][T27937] loop4: detected capacity change from 0 to 2048 [ 960.252662][T27937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 960.381090][T27949] loop2: detected capacity change from 0 to 512 [ 960.482365][T27949] EXT4-fs (loop2): Ignoring removed nobh option [ 960.496655][T27949] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 960.589068][T27949] EXT4-fs (loop2): orphan cleanup on readonly fs [ 960.654560][T27949] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.10512: bad orphan inode 15 [ 960.691173][T27965] dlm: no locking on control device [ 960.735563][T27949] ext4_test_bit(bit=14, block=18) = 1 [ 960.749252][T27949] is_bad_inode(inode)=0 [ 960.774757][T27949] NEXT_ORPHAN(inode)=1023 [ 960.779156][T27949] max_ino=32 [ 960.793936][T27949] i_nlink=0 [ 960.826592][T27949] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.10512: bg 0: block 161: padding at end of block bitmap is not set [ 960.859751][T27949] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 960.880387][T27949] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nobh,,errors=continue. Quota mode: none. [ 960.935128][T18288] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 961.194927][T27935] loop3: detected capacity change from 0 to 32768 [ 961.210541][ T26] audit: type=1400 audit(2000524917.438:42): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=27981 comm="syz.2.10526" [ 961.235017][T18288] usb 2-1: Using ep0 maxpacket: 32 [ 961.335027][T27935] XFS (loop3): Mounting V5 Filesystem [ 961.377592][T27935] XFS (loop3): Ending clean mount [ 961.384617][T18288] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 961.396823][T27935] XFS (loop3): Quotacheck needed: Please wait. [ 961.397165][T18288] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.417764][T18288] usb 2-1: config 0 has no interface number 0 [ 961.423944][T18288] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 961.435375][T18288] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.446852][T18288] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 961.457237][T18288] usb 2-1: config 0 interface 85 altsetting 7 has 6 endpoint descriptors, different from the interface descriptor's value: 7 [ 961.470839][T18288] usb 2-1: config 0 interface 85 has no altsetting 0 [ 961.539743][T27935] XFS (loop3): Quotacheck: Done. [ 961.597496][ T4198] XFS (loop3): Unmounting Filesystem [ 961.632653][T27996] netlink: 'syz.0.10537': attribute type 5 has an invalid length. [ 961.662649][T18288] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 961.671866][T18288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.725327][T18288] usb 2-1: Product: syz [ 961.734599][T28000] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10530'. [ 961.744217][T18288] usb 2-1: Manufacturer: syz [ 961.749337][T18288] usb 2-1: SerialNumber: syz [ 961.760005][T18288] usb 2-1: config 0 descriptor?? [ 962.047512][T18288] appletouch 2-1:0.85: Failed to read mode from device. [ 962.054903][T18288] appletouch: probe of 2-1:0.85 failed with error -5 [ 962.116525][T18288] usb 2-1: USB disconnect, device number 66 [ 962.849888][T28040] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.946205][T28018] loop0: detected capacity change from 0 to 32768 [ 962.960748][T28040] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 963.039322][T28046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10553'. [ 963.225723][T28022] loop4: detected capacity change from 0 to 32768 [ 963.282360][T28056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10560'. [ 963.424361][ T150] block nbd2: Attempted send on invalid socket [ 963.431030][ T150] blk_update_request: I/O error, dev nbd2, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 963.442780][ T150] gfs2: error 10 reading superblock [ 963.460659][T28022] XFS (loop4): Mounting V5 Filesystem [ 963.531602][T28022] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 963.548983][T28022] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30 [ 963.664150][T28022] XFS (loop4): Ending clean mount [ 963.770012][T28083] netlink: 'syz.2.10568': attribute type 1 has an invalid length. [ 963.778418][T28083] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10568'. [ 963.851196][T28086] loop1: detected capacity change from 0 to 4096 [ 963.885205][ T4206] XFS (loop4): Unmounting Filesystem [ 963.919740][T28086] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 964.613277][T28110] loop1: detected capacity change from 0 to 4096 [ 964.646529][T28116] netlink: 'syz.0.10585': attribute type 1 has an invalid length. [ 964.660688][T28116] netlink: 'syz.0.10585': attribute type 2 has an invalid length. [ 964.671102][T28110] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 964.784050][T28118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10586'. [ 964.831678][T28110] ntfs3: loop1: failed to convert "c46c" to cp857 [ 964.867606][T28118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10586'. [ 965.117831][T28134] device wlan0 entered promiscuous mode [ 965.344244][T28151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10601'. [ 965.464284][T28158] loop4: detected capacity change from 0 to 256 [ 965.896192][T28189] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 965.958700][T28192] xt_socket: unknown flags 0xc [ 965.979141][T18292] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 966.173243][T28208] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2880) [ 966.195750][T28211] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 966.207205][T28208] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 966.219404][T28212] xt_ipcomp: unknown flags 12 [ 966.616064][T18292] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 966.640215][T18292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.688718][T18292] usb 2-1: Product: syz [ 966.710286][T18289] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 966.728750][T18292] usb 2-1: Manufacturer: syz [ 966.743144][T18292] usb 2-1: SerialNumber: syz [ 966.850792][T18292] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 967.159488][T18289] usb 5-1: config index 0 descriptor too short (expected 65230, got 72) [ 967.209824][T28247] netlink: 748 bytes leftover after parsing attributes in process `syz.2.10646'. [ 967.314678][T28245] loop0: detected capacity change from 0 to 4096 [ 967.352245][T18289] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 967.361442][T18289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.371993][T18289] usb 5-1: Product: syz [ 967.383832][T18289] usb 5-1: Manufacturer: syz [ 967.388504][T18289] usb 5-1: SerialNumber: syz [ 967.405915][T28253] netlink: 'syz.3.10650': attribute type 2 has an invalid length. [ 967.413797][T28253] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.10650'. [ 967.449146][T18289] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 967.594257][T28257] netlink: 'syz.3.10652': attribute type 1 has an invalid length. [ 967.602491][T18288] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 967.776700][ T4204] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 967.794731][ T4204] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 967.959975][T28267] loop0: detected capacity change from 0 to 256 [ 968.145963][ T5963] usb 2-1: USB disconnect, device number 67 [ 968.169257][T18289] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 968.223628][T28275] device veth1 entered promiscuous mode [ 968.282304][T28277] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 968.442612][ C1] usb 5-1: ath: unknown panic pattern! [ 968.577052][T28294] netlink: 'syz.0.10670': attribute type 21 has an invalid length. [ 968.608165][T28294] netlink: 120 bytes leftover after parsing attributes in process `syz.0.10670'. [ 968.618873][T28294] netlink: 'syz.0.10670': attribute type 1 has an invalid length. [ 968.627667][T28294] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10670'. [ 968.641547][ T5308] usb 5-1: USB disconnect, device number 48 [ 968.653576][T18292] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 968.752789][T18288] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 968.759887][T18288] ath9k_htc: Failed to initialize the device [ 968.799010][ T5963] usb 2-1: ath9k_htc: USB layer deinitialized [ 968.945398][T18292] usb 4-1: Using ep0 maxpacket: 16 [ 969.097164][T18292] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 969.128972][T18292] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 969.161902][T18292] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8E has invalid maxpacket 51078, setting to 1024 [ 969.227605][T18292] usb 4-1: config 0 interface 0 has no altsetting 0 [ 969.266297][T18289] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 969.278777][T18289] ath9k_htc: Failed to initialize the device [ 969.334391][ T5308] usb 5-1: ath9k_htc: USB layer deinitialized [ 969.435045][T28328] netlink: 'syz.0.10687': attribute type 1 has an invalid length. [ 969.448106][T18292] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 969.478991][T18292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.511375][T18292] usb 4-1: Product: syz [ 969.532971][T18292] usb 4-1: Manufacturer: syz [ 969.547478][T18292] usb 4-1: SerialNumber: syz [ 969.567335][T18292] usb 4-1: config 0 descriptor?? [ 969.691730][T28331] loop4: detected capacity change from 0 to 4096 [ 969.831135][T28331] ntfs3: loop4: Failed to load $Extend. [ 969.880946][T28311] loop1: detected capacity change from 0 to 32768 [ 969.904528][T28338] loop2: detected capacity change from 0 to 4096 [ 969.977805][T28331] ntfs3: loop4: ino=5, "/" directory corrupted [ 970.072787][T18289] usb 4-1: USB disconnect, device number 42 [ 970.127249][T28343] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 970.236918][T28345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10696'. [ 970.377094][T28349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10698'. [ 971.208900][T28382] loop0: detected capacity change from 0 to 4096 [ 971.331130][T28397] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 971.530490][T28396] loop4: detected capacity change from 0 to 4096 [ 971.591129][T28396] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 971.668771][T28407] netlink: 292 bytes leftover after parsing attributes in process `syz.1.10724'. [ 971.708182][T28396] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 971.708182][T28396] [ 971.874945][T28414] netlink: 1076 bytes leftover after parsing attributes in process `syz.2.10728'. [ 971.937066][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10731'. [ 972.420426][T28441] netlink: 'syz.4.10741': attribute type 1 has an invalid length. [ 972.454611][T28441] netlink: 'syz.4.10741': attribute type 2 has an invalid length. [ 972.667421][T28447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10743'. [ 973.096236][T28428] loop1: detected capacity change from 0 to 32768 [ 973.226311][T28428] ERROR: (device loop1): diNewExt: no free extents [ 973.226311][T28428] [ 973.275753][T28428] ERROR: (device loop1): remounting filesystem as read-only [ 973.312592][T28428] ialloc: diAlloc returned -5! [ 974.277955][T28529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10783'. [ 974.329252][T28529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10783'. [ 974.406296][T28533] sctp: [Deprecated]: syz.1.10786 (pid 28533) Use of int in max_burst socket option deprecated. [ 974.406296][T28533] Use struct sctp_assoc_value instead [ 974.460490][T28535] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10785'. [ 974.514013][T28535] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10785'. [ 974.745925][T28553] kAFS: No cell specified [ 974.751819][T28552] openvswitch: netlink: Key type 541 is out of range max 29 [ 974.909143][T28563] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 975.183534][T28582] netlink: 'syz.0.10809': attribute type 1 has an invalid length. [ 975.216052][T28582] netlink: 'syz.0.10809': attribute type 3 has an invalid length. [ 975.232898][T28582] NCSI netlink: No device for ifindex 2986344450 [ 975.393916][T18292] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 975.693827][T18292] usb 2-1: Using ep0 maxpacket: 16 [ 975.843546][T18292] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.909351][T28623] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 976.085524][T18292] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 976.099900][T18292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.136507][T18292] usb 2-1: Product: syz [ 976.140736][T18292] usb 2-1: Manufacturer: syz [ 976.155656][T18292] usb 2-1: SerialNumber: syz [ 976.179422][T18292] usb 2-1: config 0 descriptor?? [ 976.192627][T28641] loop2: detected capacity change from 0 to 764 [ 976.291504][T28641] Symlink component flag not implemented [ 976.315264][T28641] Symlink component flag not implemented (15) [ 976.455625][T18289] usb 2-1: USB disconnect, device number 68 [ 976.745479][T28652] loop2: detected capacity change from 0 to 4096 [ 976.844850][T28652] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Missing length entry in mapping pairs array. [ 976.878276][T28652] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Invalid length in mapping pairs array. [ 976.924545][T28652] ntfs: (device loop2): ntfs_read_locked_inode(): Mapping pairs decompression failed. [ 976.955211][T28652] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 977.010291][T28652] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 977.054650][T28652] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 977.137911][T28652] ntfs: volume version 3.1. [ 977.142710][T28652] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 977.164003][T28652] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 977.190756][T28652] ntfs: (device loop2): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 977.223695][T28652] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 977.258212][T28647] loop3: detected capacity change from 0 to 32768 [ 977.265611][ T5963] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 977.399185][T28647] XFS (loop3): Mounting V5 Filesystem [ 977.522021][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 977.555427][T28647] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 977.585455][T28694] __nla_validate_parse: 3 callbacks suppressed [ 977.585474][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10860'. [ 977.631661][T28647] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 977.649264][T28697] loop1: detected capacity change from 0 to 1024 [ 977.656432][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.669285][ T5963] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.683102][ T5963] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 977.699915][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.722466][ T5963] usb 5-1: config 0 descriptor?? [ 977.749417][T28647] XFS (loop3): Ending clean mount [ 977.771170][ T5963] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input60 [ 977.782055][T28697] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,abort,. Quota mode: none. [ 977.811475][T28697] EXT4-fs error (device loop1): __ext4_new_inode:1076: comm syz.1.10862: reserved inode found cleared - inode=2 [ 977.893333][T28697] EXT4-fs (loop1): Remounting filesystem read-only [ 978.004173][ T3545] bcm5974 5-1:0.0: could not read from device [ 978.031828][ T4198] XFS (loop3): Unmounting Filesystem [ 978.045148][ T5963] usb 5-1: USB disconnect, device number 49 [ 978.057728][ T3545] bcm5974 5-1:0.0: could not read from device [ 978.152179][T28714] netlink: 11 bytes leftover after parsing attributes in process `syz.2.10870'. [ 979.025399][T28750] netlink: 'syz.4.10886': attribute type 21 has an invalid length. [ 979.025460][T28750] netlink: 'syz.4.10886': attribute type 6 has an invalid length. [ 979.025498][T28750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10886'. [ 979.030164][T28747] netlink: 'syz.2.10885': attribute type 1 has an invalid length. [ 979.155498][T28754] loop4: detected capacity change from 0 to 256 [ 979.156301][T28754] exfat: Deprecated parameter 'namecase' [ 979.156350][T28754] exfat: Deprecated parameter 'namecase' [ 979.216257][T28754] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 979.505211][T28730] loop0: detected capacity change from 0 to 32768 [ 979.674867][T28771] ieee802154 phy0 wpan0: encryption failed: -22 [ 980.303928][T28807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 980.601117][T28831] netlink: 'syz.1.10926': attribute type 10 has an invalid length. [ 980.620199][T28831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10926'. [ 980.645104][T28831] netlink: 'syz.1.10926': attribute type 10 has an invalid length. [ 980.677335][T28831] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10926'. [ 980.788869][T18292] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 980.905893][T28842] device bridge_slave_1 left promiscuous mode [ 980.914240][T28842] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.943910][T28842] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 981.234998][T28852] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10936'. [ 981.263987][T28852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10936'. [ 981.276419][T28852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10936'. [ 981.285923][T28852] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10936'. [ 981.350005][T28828] loop2: detected capacity change from 0 to 32768 [ 981.457717][T18292] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 981.470885][T18292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.485053][T18292] usb 4-1: Product: syz [ 981.489848][T18292] usb 4-1: Manufacturer: syz [ 981.495245][T18292] usb 4-1: SerialNumber: syz [ 981.504768][T28828] XFS (loop2): Mounting V5 Filesystem [ 981.593363][T28828] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 981.616419][T28828] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30 [ 981.658547][T28828] XFS (loop2): Ending clean mount [ 981.823500][ T4194] XFS (loop2): Unmounting Filesystem [ 981.920704][T28884] netlink: 'syz.0.10949': attribute type 2 has an invalid length. [ 981.980661][T18292] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 982.019365][T28890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10952'. [ 982.035058][T18292] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 982.045246][T28888] loop4: detected capacity change from 0 to 64 [ 982.104015][T18292] usb 4-1: USB disconnect, device number 43 [ 982.207005][ T4637] udevd[4637]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.327552][T28897] xt_TCPMSS: Only works on TCP SYN packets [ 982.970097][T28926] netlink: 'syz.0.10968': attribute type 10 has an invalid length. [ 983.029461][T28926] __nla_validate_parse: 3 callbacks suppressed [ 983.029505][T28926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10968'. [ 983.142704][T28926] netlink: 'syz.0.10968': attribute type 10 has an invalid length. [ 983.210741][T28926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10968'. [ 983.546543][T28903] loop3: detected capacity change from 0 to 32768 [ 983.651217][T28903] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 983.651217][T28903] [ 983.677766][T28903] ERROR: (device loop3): remounting filesystem as read-only [ 983.694766][T28903] ialloc: diAlloc returned -5! [ 983.701523][T28964] netlink: 'syz.2.10988': attribute type 3 has an invalid length. [ 983.774441][T28966] loop4: detected capacity change from 0 to 256 [ 983.880086][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10994'. [ 983.931238][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10994'. [ 983.944266][T28966] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 983.986200][T28966] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 984.065094][T28980] loop1: detected capacity change from 0 to 128 [ 984.067140][T28966] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 984.094414][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 984.094433][ T26] audit: type=1800 audit(2000524938.833:43): pid=28966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10989" name="file1" dev="loop4" ino=1048630 res=0 errno=0 [ 984.137640][T28966] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 984.148532][T28982] netlink: 'syz.2.10998': attribute type 1 has an invalid length. [ 984.206092][T28984] netlink: 'syz.0.10999': attribute type 4 has an invalid length. [ 984.400289][T28994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11004'. [ 984.439891][T28993] loop1: detected capacity change from 0 to 512 [ 984.653168][T29002] loop3: detected capacity change from 0 to 512 [ 984.694635][T29008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 984.701954][T29008] IPv6: NLM_F_CREATE should be set when creating new route [ 984.835707][T29016] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.11013'. [ 984.857278][T29002] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,sysvgroups,,errors=continue. Quota mode: writeback. [ 984.871663][T29002] ext4 filesystem being mounted at /2264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 984.929751][T29020] netlink: 'syz.0.11014': attribute type 2 has an invalid length. [ 984.967599][T29002] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 984.995680][T29020] netlink: 'syz.0.11014': attribute type 4 has an invalid length. [ 985.018940][T29002] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 985.028390][T29002] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.11007: Failed to acquire dquot type 1 [ 985.041403][T29020] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11014'. [ 985.230727][T29037] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 985.296763][T18292] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 985.359579][T29043] misc userio: The device must be registered before sending interrupts [ 985.639410][ T5447] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 985.726229][T29060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11034'. [ 985.746103][T18292] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 985.765880][T18292] usb 2-1: config 0 has no interface number 0 [ 985.773102][T18292] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 985.809993][T18292] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.883787][T29064] loop0: detected capacity change from 0 to 512 [ 985.922463][ T5447] usb 3-1: Using ep0 maxpacket: 8 [ 986.045562][T18292] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 986.056321][ T5447] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 986.067728][ T5447] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 986.070318][T29064] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.11036: corrupted inode contents [ 986.078939][ T5447] usb 3-1: config 135 has no interface number 0 [ 986.099074][ T5447] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 986.110690][ T5447] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 986.110720][T18292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.110728][ T5447] usb 3-1: config 135 interface 230 has no altsetting 0 [ 986.110745][T18292] usb 2-1: Product: syz [ 986.110761][T18292] usb 2-1: Manufacturer: syz [ 986.110778][T18292] usb 2-1: SerialNumber: syz [ 986.123605][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.123660][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 986.131034][T18292] usb 2-1: config 0 descriptor?? [ 986.163186][T29025] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 986.182744][T29064] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #3: comm syz.0.11036: mark_inode_dirty error [ 986.193922][T18292] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 986.196642][T29064] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #3: comm syz.0.11036: corrupted inode contents [ 986.197166][T18292] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 986.207288][T29064] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #3: comm syz.0.11036: mark_inode_dirty error [ 986.220400][T29064] Quota error (device loop0): write_blk: dquota write failed [ 986.220505][T29064] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 986.220550][T29064] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.11036: Failed to acquire dquot type 0 [ 986.223295][T29064] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11036: corrupted inode contents [ 986.229955][T29064] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #16: comm syz.0.11036: mark_inode_dirty error [ 986.230355][T29064] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11036: corrupted inode contents [ 986.230702][T29064] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.11036: mark_inode_dirty error [ 986.231061][T29064] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11036: corrupted inode contents [ 986.238316][T29064] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 986.238782][T29064] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #16: comm syz.0.11036: corrupted inode contents [ 986.239127][T29064] EXT4-fs error (device loop0): ext4_truncate:4279: inode #16: comm syz.0.11036: mark_inode_dirty error [ 986.239465][T29064] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 986.240379][T29064] EXT4-fs (loop0): 1 truncate cleaned up [ 986.240404][T29064] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 986.240520][T29064] ext4 filesystem being mounted at /2212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 986.281948][ T5447] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 986.543179][ T5447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.551686][ T5447] usb 3-1: Product: syz [ 986.555895][ T5447] usb 3-1: Manufacturer: syz [ 986.575632][ T5447] usb 3-1: SerialNumber: syz [ 986.625091][ T5447] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 986.638622][ T5447] usb 3-1: No valid video chain found. [ 986.855715][T29087] loop3: detected capacity change from 0 to 1024 [ 986.914528][T29087] hfsplus: invalid length 32517 has been corrected to 255 [ 986.956853][T29087] hfsplus: invalid length 32517 has been corrected to 255 [ 986.968877][ T4950] usb 2-1: USB disconnect, device number 69 [ 986.978672][ T4950] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 986.989612][T29087] hfsplus: invalid length 32517 has been corrected to 255 [ 986.997779][ T4950] cyberjack 2-1:0.69: device disconnected [ 987.017985][T18292] usb 3-1: USB disconnect, device number 54 [ 987.122204][ T144] hfsplus: invalid length 32517 has been corrected to 255 [ 987.130429][ T144] hfsplus: b-tree write err: -5, ino 22 [ 987.136657][ T5963] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 987.521175][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 987.554034][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59382, setting to 1024 [ 987.577399][ T5963] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 987.577435][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.596405][ T5963] usb 5-1: config 0 descriptor?? [ 987.617799][T29077] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 987.642364][ T5963] gspca_main: spca561-2.14.0 probing abcd:cdee [ 987.939266][ T5963] spca561: probe of 5-1:0.0 failed with error -22 [ 987.947394][ T5963] usb 5-1: MIDIStreaming interface descriptor not found [ 988.014240][T29126] CIFS: bad ip= option (%‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð) [ 988.059020][ T5963] usb 5-1: USB disconnect, device number 50 [ 988.260570][T29141] validate_nla: 1 callbacks suppressed [ 988.260591][T29141] netlink: 'syz.3.11071': attribute type 1 has an invalid length. [ 988.294675][T29143] netlink: 'syz.0.11072': attribute type 1 has an invalid length. [ 988.312356][T29141] netlink: 224 bytes leftover after parsing attributes in process `syz.3.11071'. [ 988.337403][T29146] loop1: detected capacity change from 0 to 8 [ 988.364407][ T5279] udevd[5279]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.546590][T29146] SQUASHFS error: xz decompression failed, data probably corrupt [ 988.571580][T29146] SQUASHFS error: Failed to read block 0xfc: -5 [ 988.597551][T29146] SQUASHFS error: Unable to read data cache entry [fc] [ 988.619793][T29146] SQUASHFS error: Unable to read page, block fc, size a [ 988.644875][T29146] SQUASHFS error: Unable to read data cache entry [fc] [ 988.673534][T29146] SQUASHFS error: Unable to read page, block fc, size a [ 988.691140][T29146] SQUASHFS error: Unable to read data cache entry [fc] [ 988.700353][T18288] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 988.720079][T29146] SQUASHFS error: Unable to read page, block fc, size a [ 988.740119][T29146] SQUASHFS error: xz decompression failed, data probably corrupt [ 988.754673][T29146] SQUASHFS error: Failed to read block 0xfc: -5 [ 988.770878][T29146] SQUASHFS error: xz decompression failed, data probably corrupt [ 988.785357][T29146] SQUASHFS error: Failed to read block 0xfc: -5 [ 988.791993][ T26] audit: type=1800 audit(2000524943.228:44): pid=29146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11073" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 989.029012][T18288] usb 1-1: Using ep0 maxpacket: 32 [ 989.221626][T18288] usb 1-1: unable to get BOS descriptor or descriptor too short [ 989.287672][T29188] loop3: detected capacity change from 0 to 512 [ 989.311601][T18288] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 7 [ 989.409585][T29192] netlink: 'syz.2.11094': attribute type 1 has an invalid length. [ 989.524866][T18288] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 989.559564][T18288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.579719][T18288] usb 1-1: Product: syz [ 989.600650][T18288] usb 1-1: Manufacturer: syz [ 989.605319][T18288] usb 1-1: SerialNumber: syz [ 989.939368][T29179] loop1: detected capacity change from 0 to 32768 [ 989.993354][T18288] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 990.078823][T18288] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 990.109359][T18288] usb 1-1: USB disconnect, device number 40 [ 990.161979][T29179] XFS (loop1): Mounting V5 Filesystem [ 990.170001][T29196] loop4: detected capacity change from 0 to 32768 [ 990.256276][T29179] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 990.278449][T29196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.11095 (29196) [ 990.367938][T29179] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 990.399684][ T4637] udevd[4637]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.426951][T29196] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 990.457526][T29196] BTRFS info (device loop4): enabling disk space caching [ 990.469758][T29179] XFS (loop1): Ending clean mount [ 990.493820][T29196] BTRFS info (device loop4): force zlib compression, level 3 [ 990.548897][T29196] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 990.578709][T29196] BTRFS info (device loop4): setting nodatasum [ 990.610962][T29196] BTRFS info (device loop4): setting nodatacow [ 990.641643][ T4202] XFS (loop1): Unmounting Filesystem [ 990.678728][T29196] BTRFS info (device loop4): enabling ssd optimizations [ 990.679925][T29236] netlink: 'syz.2.11112': attribute type 10 has an invalid length. [ 990.755070][T29196] BTRFS info (device loop4): using spread ssd allocation scheme [ 990.773609][T29236] device veth1_macvtap left promiscuous mode [ 990.780710][T29196] BTRFS error (device loop4): cannot disable free space tree [ 990.813186][T29196] BTRFS error (device loop4): open_ctree failed: -22 [ 990.822472][T29242] MTD: Couldn't look up './bus': -15 [ 991.244972][T29260] loop0: detected capacity change from 0 to 128 [ 991.858709][T29280] loop4: detected capacity change from 0 to 1024 [ 991.931064][T29280] hfsplus: invalid length 32517 has been corrected to 255 [ 991.975453][T29280] ------------[ cut here ]------------ [ 991.984364][T29280] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 991.984473][T29280] WARNING: CPU: 1 PID: 29280 at kernel/locking/mutex.c:575 __mutex_lock_common+0x195d/0x2400 [ 992.001647][T29280] Modules linked in: [ 992.005592][T29280] CPU: 1 PID: 29280 Comm: syz.4.11133 Not tainted syzkaller #0 [ 992.014027][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 992.024775][T29280] RIP: 0010:__mutex_lock_common+0x195d/0x2400 [ 992.031116][T29280] Code: 00 48 8d bc 24 e0 00 00 00 0f 85 e3 e7 ff ff 48 c7 c7 80 16 2b 8a 48 c7 c6 c0 16 2b 8a e8 6b 83 ec ff 48 8d bc 24 e0 00 00 00 <0f> 0b e9 c1 e7 ff ff e8 17 87 3b f7 e9 00 fc ff ff 0f 0b e9 40 f0 [ 992.051744][T29280] RSP: 0018:ffffc900030af660 EFLAGS: 00010246 [ 992.064462][T29280] RAX: bbc5fdb498fbe100 RBX: dffffc0000000000 RCX: 0000000000080000 [ 992.074640][T29280] RDX: ffffc90006041000 RSI: 0000000000002b09 RDI: ffffc900030af740 [ 992.083788][T29280] RBP: ffffc900030af7f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 992.098752][T29280] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 992.109104][ T4950] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 992.119422][T29280] R13: 1ffff92000615ee4 R14: ffffffff8202cff5 R15: 0000000000000000 [ 992.127705][T29280] FS: 00007f7e922ad6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 992.137536][T29280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 992.144941][T29280] CR2: 00007fb5dde2bff8 CR3: 000000004846f000 CR4: 00000000003506e0 [ 992.154414][T29280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 992.163746][T29280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 992.177698][T29280] Call Trace: [ 992.181258][T29280] [ 992.189530][T29280] ? do_sys_truncate+0xb6/0x1c0 [ 992.195344][T29280] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.201693][T29280] ? mutex_lock_io_nested+0x60/0x60 [ 992.210437][T29280] ? mark_lock+0x94/0x320 [ 992.215063][T29280] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 992.221828][T29280] mutex_lock_nested+0x17/0x20 [ 992.229095][T29280] reiserfs_write_lock+0x75/0xd0 [ 992.234293][T29280] reiserfs_lookup+0x18a/0x480 [ 992.239786][T29280] ? reiserfs_find_entry+0x18e0/0x18e0 [ 992.245423][T29280] ? __init_waitqueue_head+0xa5/0x150 [ 992.251276][T29280] __lookup_slow+0x29d/0x410 [ 992.256017][T29280] ? lookup_one_len+0x2d0/0x2d0 [ 992.261928][T29280] ? down_read+0x1aa/0x2e0 [ 992.266465][T29280] lookup_slow+0x53/0x70 [ 992.271118][T29280] walk_component+0x319/0x460 [ 992.275935][T29280] path_lookupat+0x169/0x440 [ 992.281837][T29280] filename_lookup+0x214/0x540 [ 992.286697][T29280] ? hashlen_string+0x110/0x110 [ 992.293311][T29280] ? strncpy_from_user+0x1fb/0x360 [ 992.298486][T29280] ? getname_flags+0x1fe/0x500 [ 992.303767][T29280] user_path_at_empty+0x40/0x190 [ 992.308935][T29280] do_sys_truncate+0xb6/0x1c0 [ 992.315320][T29280] ? lock_chain_count+0x20/0x20 [ 992.320205][T29280] ? break_lease+0xd0/0xd0 [ 992.325710][T29280] ? lockdep_hardirqs_on+0x94/0x140 [ 992.331061][T29280] do_syscall_64+0x4c/0xa0 [ 992.337242][T29280] ? clear_bhb_loop+0x30/0x80 [ 992.341957][T29280] ? clear_bhb_loop+0x30/0x80 [ 992.347241][T29280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.353176][T29280] RIP: 0033:0x7f7e94053819 [ 992.359645][T29280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.381371][T29280] RSP: 002b:00007f7e922ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 992.390324][ T4950] usb 2-1: Using ep0 maxpacket: 32 [ 992.396310][T29280] RAX: ffffffffffffffda RBX: 00007f7e942ccfa0 RCX: 00007f7e94053819 [ 992.404745][T29280] RDX: 0000000000000000 RSI: 000000000004fffc RDI: 0000200000000080 [ 992.413011][T29280] RBP: 00007f7e940e9c91 R08: 0000000000000000 R09: 0000000000000000 [ 992.421253][T29280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.430269][T29280] R13: 00007f7e942cd038 R14: 00007f7e942ccfa0 R15: 00007fff500bcbe8 [ 992.438415][T29280] [ 992.441733][T29280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 992.449308][T29280] CPU: 0 PID: 29280 Comm: syz.4.11133 Not tainted syzkaller #0 [ 992.457074][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 992.467427][T29280] Call Trace: [ 992.470960][T29280] [ 992.474005][T29280] dump_stack_lvl+0x188/0x250 [ 992.479034][T29280] ? show_regs_print_info+0x20/0x20 [ 992.484270][T29280] ? load_image+0x400/0x400 [ 992.488815][T29280] panic+0x2e5/0x810 [ 992.492743][T29280] ? bpf_jit_dump+0xd0/0xd0 [ 992.497273][T29280] ? __mutex_lock_common+0x195d/0x2400 [ 992.502957][T29280] __warn+0x248/0x2b0 [ 992.506962][T29280] ? __mutex_lock_common+0x195d/0x2400 [ 992.512652][T29280] report_bug+0x1b7/0x2e0 [ 992.517024][T29280] handle_bug+0x3a/0x70 [ 992.521278][T29280] exc_invalid_op+0x16/0x40 [ 992.525793][T29280] asm_exc_invalid_op+0x16/0x20 [ 992.530653][T29280] RIP: 0010:__mutex_lock_common+0x195d/0x2400 [ 992.536730][T29280] Code: 00 48 8d bc 24 e0 00 00 00 0f 85 e3 e7 ff ff 48 c7 c7 80 16 2b 8a 48 c7 c6 c0 16 2b 8a e8 6b 83 ec ff 48 8d bc 24 e0 00 00 00 <0f> 0b e9 c1 e7 ff ff e8 17 87 3b f7 e9 00 fc ff ff 0f 0b e9 40 f0 [ 992.556542][T29280] RSP: 0018:ffffc900030af660 EFLAGS: 00010246 [ 992.562629][T29280] RAX: bbc5fdb498fbe100 RBX: dffffc0000000000 RCX: 0000000000080000 [ 992.570940][T29280] RDX: ffffc90006041000 RSI: 0000000000002b09 RDI: ffffc900030af740 [ 992.578931][T29280] RBP: ffffc900030af7f0 R08: ffff8880b912795b R09: 1ffff11017224f2b [ 992.587108][T29280] R10: dffffc0000000000 R11: ffffed1017224f2c R12: 0000000000000000 [ 992.595130][T29280] R13: 1ffff92000615ee4 R14: ffffffff8202cff5 R15: 0000000000000000 [ 992.603245][T29280] ? reiserfs_write_lock+0x75/0xd0 [ 992.608379][T29280] ? do_sys_truncate+0xb6/0x1c0 [ 992.613267][T29280] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.619478][T29280] ? mutex_lock_io_nested+0x60/0x60 [ 992.624706][T29280] ? mark_lock+0x94/0x320 [ 992.629050][T29280] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 992.635045][T29280] mutex_lock_nested+0x17/0x20 [ 992.639930][T29280] reiserfs_write_lock+0x75/0xd0 [ 992.644991][T29280] reiserfs_lookup+0x18a/0x480 [ 992.649809][T29280] ? reiserfs_find_entry+0x18e0/0x18e0 [ 992.655425][T29280] ? __init_waitqueue_head+0xa5/0x150 [ 992.660821][T29280] __lookup_slow+0x29d/0x410 [ 992.665864][T29280] ? lookup_one_len+0x2d0/0x2d0 [ 992.670864][T29280] ? down_read+0x1aa/0x2e0 [ 992.675581][T29280] lookup_slow+0x53/0x70 [ 992.679859][T29280] walk_component+0x319/0x460 [ 992.684585][T29280] path_lookupat+0x169/0x440 [ 992.689602][T29280] filename_lookup+0x214/0x540 [ 992.694952][T29280] ? hashlen_string+0x110/0x110 [ 992.699904][T29280] ? strncpy_from_user+0x1fb/0x360 [ 992.705151][T29280] ? getname_flags+0x1fe/0x500 [ 992.709967][T29280] user_path_at_empty+0x40/0x190 [ 992.714960][T29280] do_sys_truncate+0xb6/0x1c0 [ 992.719690][T29280] ? lock_chain_count+0x20/0x20 [ 992.724632][T29280] ? break_lease+0xd0/0xd0 [ 992.729131][T29280] ? lockdep_hardirqs_on+0x94/0x140 [ 992.734697][T29280] do_syscall_64+0x4c/0xa0 [ 992.739179][T29280] ? clear_bhb_loop+0x30/0x80 [ 992.743894][T29280] ? clear_bhb_loop+0x30/0x80 [ 992.748635][T29280] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 992.754578][T29280] RIP: 0033:0x7f7e94053819 [ 992.759043][T29280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.778693][T29280] RSP: 002b:00007f7e922ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 992.787163][T29280] RAX: ffffffffffffffda RBX: 00007f7e942ccfa0 RCX: 00007f7e94053819 [ 992.795252][T29280] RDX: 0000000000000000 RSI: 000000000004fffc RDI: 0000200000000080 [ 992.803235][T29280] RBP: 00007f7e940e9c91 R08: 0000000000000000 R09: 0000000000000000 [ 992.811349][T29280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 992.819333][T29280] R13: 00007f7e942cd038 R14: 00007f7e942ccfa0 R15: 00007fff500bcbe8 [ 992.827333][T29280] [ 992.830695][T29280] Kernel Offset: disabled [ 992.835066][T29280] Rebooting in 86400 seconds..