last executing test programs: 6.494075034s ago: executing program 3 (id=9549): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x419}}}, 0x7) 5.15430278s ago: executing program 3 (id=9569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) 4.935533646s ago: executing program 3 (id=9571): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) 4.681557703s ago: executing program 3 (id=9574): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20}) 4.42966341s ago: executing program 3 (id=9577): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@largeio}, {@filestreams}, {@grpquota}, {@quota}]}, 0x5, 0xb919, &(0x7f0000000840)="$eJzs3QtsXXUdwPHTru1WUFlEoxEJZYMNhNG1net4KG0ZG2VQkAlUx2uwMiaFGbYoDCJFY0AJmUp8hRh5iRiID5zxAYapgYEENoIwEBVMZIAJr2E21EDNac/t2ruuof/t/6+jn0+ynnvO7e/s9n77P5eSte2ct7Aty6qyfj1ZuRtWHPdc/Y2tP/jmtPuOWHptxev9R1smFXfXFdv9i+2UrO9kLfntyv5DVd9Z84vKfKdy8Hn3qK2teE+Wva/YbSm2zf2byxtK79dbpjg8uXR/5cDDqPhq/58BtfmbL8+dsmTwefJ3zLJs5nYf6DjV2Tp/XvGcZIO6TSjurth2X9+2qv/P0X/MsqPXZTv8/BhT+eOcfObqLzw51g9kd9DZOr+9rH9L0bmiWI915WtwPCr/PD/vrIblxVNYMfh6tLvpbJ13QjbCOv7nX77R09t/3azOsqwmy7KJWZZNGuse7BqtbU1t+TW/tF9kL63/ycN9Xtz536t/lmXZu4vXicNLrwXA7qW1remYYdZ/zUjr/67jN9xk/cPur721rSlf62Xrf9JI63/a3ccuKr7obu6femtsPwgAAAAAYFgrLlt14eLu7q5L3HDDDTcGboz1lQmIbduiH+tHAqSW4j8nxvpjBAAAgPGuvaP1pQkVQw5NGLyz78NdfdtZWzsvWHX33BNL2+LuBcOccsj3+ff29vauOaP73GJ3Ytn3y04qH87Pv+y+xZcWu3Xl339Q3Xe0Ojvn/GXdXTPzv2pqdXZpvtOQn3dadfa1fKcx35lend2e7zT17dRma/Odw85b3r0kP3BQ4DP2ztLe0ZNNGFIsG/LZMLj/svt6flXajnDK0tn6fqhE3n9Lwy13ld1XsoP+A+ff///w5wu8o4yu/zXXlLYjnHK79b9h6eyG4e7bcf+B80/RP65hrv9DGpVf98uu/3XDnHJg/tenf/25vP+Mn66/tjhU9Xau/4POP7W8f9/JB67/+akOKF3/89eWA3fqyRiH2juuemmk9T9y/6oPFe9WOWh24GxNvbd9Ju9/z3UtjxeHqkfZ/4CR1n9F3XbXE0apveOm3rL1P4r+2fRhTjnQ5F1z29fk/V9785FHB903mv4HlvevX3nRZ+tXXLZqxrKLFi/tWtp1cVPj7ObG5oY5c2bXn7+ku2tmfd+FYeeelHFk59Z/tkfZTEWWHTgwP+eKYzfm/f9882m3FocmjbL/tBHX/zlDHyuDTKnMamqySxevXHlJQ//b0m5j/9v+dxum/yhe/6eWvoiqLbYVWfbBgfmDr3z90Lz/nRs331Icqhll/+kj9a/Z9vcSaCfX/5KymSH9H3qk6+a8/4pDPnxhcWi0r/8Hjbj+e6z/ndXeUfY/fHaxvP8pW47cFDh+sK//4krRv3ZT8+rA8Y/oH1eK/mtfbLo9cPwQ/eNK0f/e++vPDBw/VP+4UvT/3IOHrAocn6F/XCn6z3hq+t6B44fpH1eK/v94YuqswPF6/eNK0f/kZy+8OnB8pv5xpej/3VeW3xg43qB/XCn6/773vAcDxxv1jytF/z1fXfpy4HiT/nGl6L/ymcv3CRyfpX9cKfr/dsOVRwWOf1T/uFL037R2xamB47P1jytF//r1n78kcLxZ/7hS9H/xhR/+JnB8jv5xpehf9/wt3wscP1z/uFL0v3zrT/4VOH6E/nGl6H/XG3c8Fjh+pP5xpej/8MZfTgscP0r/uFL0r3ry56H/TvNj+seVov/ZD9x7QeD4x/WPK0X/b627+6TA8aN33L9qVz3EcS1F/95nT3o2cLzF+o8rRf/ZrywI/f2wrfrHlaL/Rb3zfxw43qZ/XCn63/rqMV8JHD9G/7hS9H/6mbOvCByfq39cKfq/d8OiRYHjx+ofV4r+7WtPbwwcn6d/XCn696xf+P7A8fn6x5Wi/7wXvvTXwPHj9I8rRf/Vz1/9n8Dxdv3jStH/T1uvvT5w/Hj940rRf983Vq8JHF+gf1wp+p+78frWwPET9I8rRf87nvz2+YHjJ+ofV4r+rz5ww16B4x36x5Wi/+Hrvh/6w9ZP0j+uFP2ve23jDYHjJ+sfV4r+c9967J7A8U/oH1eK/vu9/MzjgeOn6B9Xiv5P/P3pzYHjC/WPK0X/Hz2ybmLg+Cf1jytF/3N+94fhfk/I23Gq/nGl6H/ko+vbA8dP0z+uFP03/+2hiwPHT9c/rhT9Z/17n9sCxzv1jytF/ze37HdV4Pin9I8rRf/bNu39QuD4p/WPK0X/5S9+YH3g+CL940rRf/L9ex4ROH6G/nGl6P/Ug3vtGzh+pv5xpej/xacmrAwcP0v/uFL0X/DExIWB42frDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdCbymY+H/8WdWRgippGjslF1ZUjGylhZbiCxZR7aQvdAiSwtJkRY7aVOokKUiRWRNpVJKi5Ikqcj8X2PmWKbvaOrfr9F83+/Xa86z3fO4zvV5rvs8zn3OPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzIg2W3ujNQaDkZNvHfoPj5+097p3LnPyuDOOX/TKl+x09LD7Jt27+syTHx47YQqDR55s9YmPDZ+0ycgTzj9j+MQbwx//vLOMGTNs9sGwufOoDtrqnwx7jqErk5507GAwGHbUpD+PGjPxw2p33HHLP3muapuNW2ftiZM36c+j3UZMfnjy/Y9eHznpz6pbDwarbjmY6utj+tvwrtvun+KumabTUJ7SNhu3znpT9B9M7vxI9ynXd6spX+cX3rjrqtM13H/IZuPWXn9i66mt47M2Xf2MCY/s10eePBiMPGUwGHnqYDDytOndg/+McWussMbEff7Q7UnVDx16Q5D278MW2GjzWQaDwahJXydGnj70tQD43zJujRVeEdb/6KHH0/pf7Y7Z57X+4X/feuPWWGHwuPf5k+49dOj/7+P6v3PEBsdOvxEDAAAA/6qH777o0snH+oYPBvMPpjje+4jJ3xcYdu7l118/3Qb61BCOk/3jz0z8j5nYeeZzxg4Gu28yvYfCdDBseg+A6Ur/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9C82leP/cwxdjjtu45dP3nSRlebe9Pwp//7E+2b+r496uplRj/8Pxg+b1HJi8/GDweA14zbcePHBYHD+pnOvtODg0cdWnvjYqnONmHyCgMUf+bjIVJ547OMvZ3n0Oc595PnXm3DKiGFTDOJxXr3mxQfuvNkDL5rycrGpfx6Pnl/i/PXWnHXod1mGT7HR1F6rQ88/9LlM2Xny2BefOPZl9tltz2X2PuDApcbvtu1OO+y0w+4rLL/iSsuvtNzKK6+4zI7jd91h2UkfpzJnk2ZloWmZs9FTztnd4x4/Z1N+blObs7FPPmePPOOdx2564dCcjfwX52yhJ5+zseOHxjp21GCbR6Zm4n9y4VGD/SfeWG6mx+1b5pm47UvnGj4YHPPYJzps8skbJm0z7NDx/4Hzlky+XGDy5YLxvCUXTO28JYOh85YMnTBhlUkX+1wytN2Uv2c9+e5pPm/Jfms8tODgH34v6//Ev/X1/x96rTzs0YkaOmnI5G0m9XrsPBND07b6484zsVI6l8x/0j+Md+zwR1/XabyTfy9u2BTz/2S/FzfYaceDF5kcdaVJf+vhfztK3nes/8jHqa3nsVNcPtm+Y8RjVx+7d4dr55ty3/GqqQ/xCetiaI6mPMnK1PYd+2975fjH75umsu9Yf/zkXzR+bN8x8T+70NC+Y+LYFx01OGbijeUn3lhs1ODsiTdWeOTGmMHlE28svd0eu24/7JGvV//wOlh82BN+4DG8btee4nU7DefHWe3qwWC1q9LnNfXpzNLrdvSTjDf/PvfgSX+f+7JtFzhvMBjMNvnzWmVo7P+ONN6RTz7ecP6JwZOdf2JwyvX7nvYfHu+j6+yR19rk3fTiU/k7T1hnc/zDOjtsxONWxrS+r9k+bD/p+jyPPtupO1x3zdAcjZrief/Z1+ihzyX1H3rP93jDDh0Me7K5mdr7sCfMzexPPjfT+v5l8clvMMY8ydwsed8hSwzNzeh/cW4Wm8rcPP798OONHgzGPHFuRg7WmviOZvLcLDotczPrf+Z1M0vYftL1RR6969a1Dl55aG7CXMSv/0PPv+i/ODfDtnn0dbPwI48tOHwwevRg/2332Wev5SZ9HLq5/KSPT74GF56WuZz5PzOX807e6wz/x8l59K5dzpywwr+7Bhf+V+dy7GD40P9zj59ysfzn+P5PN/276d9N/276d9O/m/7d9C82leP/Y4e+L3jksNM3mvzNmFFXPDDnPtN7vNPZDH38f3LfJxz/32fOB64YPnj0sSc9Pjtx86fo8dmVJl0ctNzQdlMeH5x89zQfn73/6Ks2H/x3js/+W4bW6jR839D+v5v+3fTvpn83/bvp3+1f7b/a/9E4mD6s/276d9O/m/7d9O+mfzf9i03l+P+yQz8HcMPeD50++UDoqL03XvXB6T3e6WyGPv4/ue8Tjv8/uOrGew8fPPrYkx7/n7RNx/H/VW8/8fDBU/j4/9Badfyff0L/bvp307+b/t3076Z/N/276d9N/276d9O/m/7d9C82leP/qw/9HMCo3RdaaOjnAW6654gR03u809mMevzfv//fy/6/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvpX2zy8f/BFP/s4eu8LqJw/P9/21T6b6B/1NJ/Q/2jlv4b6R+19N9Y/6il/yb6Ry39X69/1NJ/U/2jlv6b6R+19N9c/6il/xv0j1r6b6F/1NJ/S/2jlv5v1D9q6b+V/lFL/631j1r6b6N/1NJ/W/2jlv5v0j9q6b+d/lFL/+31j1r676B/1NJ/R/2jlv476R+19N9Z/6il/3j9o5b+u+gftfR/s/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf9b9I9a+u+lf9TSf2/9o5b+++gftfR/q/5RS/999Y9a+u+nf9TSf3/9o5b+B+gftfQ/UP+opf9B+kct/Q/WP2rp/zb9o5b+b9c/aul/iP5RS/9D9Y9a+h+mf9TS/x36Ry3936l/1NL/XfpHLf3frX/U0v9w/aOW/u/RP2rpf4T+UUv/I/WPWvofpX/U0v9o/aOW/u/VP2rp/z79o5b+79c/aun/Af2jlv7HlPUfPY3btfQ/tqz/tGrp/0H9o5b+x+kftfT/kP5RS//j9Y9a+n9Y/6il/0f0j1r6n6B/1NL/RP2jlv4f1T9q6X+S/lFL/4/pH7X0/7j+UUv/T+gftfT/pP5RS/+T9Y9a+p+if9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/s/WPWvp/Sv+opf85+kct/T+tf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9c/aOW/l/QP2rp/0X9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39v6J/1NL/Qv2jlv4X6R+19L9Y/6il/1f1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/9f0j1r6f13/qKX/N/SPWvpfoX/U0v9K/aOW/t/UP2rpf5X+UUv/b+kftfT/tv5RS/+r9Y9a+l+jf9TS/zv6Ry39r9U/aul/nf5RS//v6h+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/3v6Ry39b9U/aun/ff2jlv4/0D9q6f9D/aOW/rfpH7X0/5H+UUv/H+sftfT/if5RS//b9Y9a+v9U/6il/8/0j1r636F/1NL/5/pHLf1/oX/U0v9O/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv536R+19P+t/lFL/9/pH7X0v1v/qKX/7/WPWvrfo3/U0v8P+kct/e/VP2rp/0f9o5b+9+kftfT/k/5RS//79Y9a+v9Z/6il/wP6Ry39/6J/1NL/r/pHLf3/pn9U0n/MQP+opP/gIf2jlv5/1z9q6f+w/lFL/wn6RyX9hw30j1r6D9M/auk/XP+opf8I/aOW/iP1j1r6j+ruP/PUHmjpP7q7/1S19J9J/6il/8z6Ry39x+gftfSfRf+opf/T9I9a+s+qf9TSfzb9o5b+s+sftfR/uv5RS/859I9a+s+pf9TSfy79o5b+z9A/auk/t/5RS/9n6h+19H+W/lFL/2frH7X0n0f/qKX/c/SPWvrPq3/U0v+5+kct/Z+nf9TSfz79o5b+8+sftfR/vv5RS/+x+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6f8C/aOW/i/UP2rpv6T+UUv/pfSPWvov3d7/wQmTTHF3S/9l2vtPRUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0f5H+UUv/F+sftfRfUf+opf9K+kct/VfWP2rpv4r+UUv/l+gftfRfVf+opf9L9Y9a+r9M/6il/8v1j1r6r6Z/1NJ/df2jlv7j9I9a+q+hf9TS/xX6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+6+kftfR/pf5RS/9X6R+19F9f/6il/6v1j1r6v0b/qKX/a/WPWvq/Tv+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvpvon/U0v/1+kct/TfVP2rpv5n+UUv/zfWPWvq/Qf+opf8W+kct/bfUP2rp/0b9o5b+W+kftfTfWv+opf82+kct/bfVP2rp/yb9o5b+2+kftfTfXv+opf8O+kct/XfUP2rpv5P+UUv/nfWPWvqP1z9q6b+L/lFL/zfrH7X031X/qKX/bvpHLf131z9q6b+H/lFL/z2n3n/Mf2VcT1Et/d9i/Uct/ffSP2rpv7f+UUv/ffSPWvq/Vf+opf+++kct/ffTP2rpv7/+UUv/A/SPWvofqH/U0v8g/aOW/gfrH7X0f5v+UUv/t+sftfQ/RP+opf+hbf2n8acaWvof1tZ/GrX0f4f+UUv/d+oftfR/l/5RS/936x+19D9c/6il/3v0j1r6H6F/1NL/SP2jlv5H6R+19D9a/6il/3v1j1r6v0//qKX/+/WPWvp/QP+opf8x+kct/Y/VP2rp/0H9o5b+x+kftfT/kP5RS//j9Y9a+n9Y/6il/0f0j1r6n6B/1NL/RP2jlv4f1T9q6X+S/lFL/4/pH7X0/7j+UUv/T+gftfT/pP5RS/+T9Y9a+p+if9TS/1T9o5b+p+kftfQ/Xf+opf8Z+kct/c/UP2rpf5b+UUv/s/WPWvp/Sv+opf85+kct/T+tf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9c/aOW/l/QP2rp/0X9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39v6J/1NL/Qv2jlv4X6R+19L9Y/6il/1f1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/9f0j1r6f13/qKX/N/SPWvpfoX/U0v9K/aOW/t/UP2rpf5X+UUv/b+kftfT/tv5RS/+r9Y9a+l+jf9TS/zv6Ry39r9U/aul/nf5RS//v6h+19L9e/6il/w36Ry39b9Q/aul/k/5RS/+b9Y9a+t+if9TS/3v6Ry39b9U/aun//cFgMHp6jekprKX/D6z/qKX/D/WPWvrfpn/U0v9H+kct/X+sf9TS/yf6Ry39b9c/aun/U/2jlv4/0z9q6X+H/lFL/5/rH7X0/4X+UUv/O/WPWvr/Uv+opf+v9I9a+v9a/6il/2/0j1r636V/1NL/t/pHLf1/p3/U0v9u/aOW/r/XP2rpf4/+UUv/P+gftfS/V/+opf8f9Y9a+t+nf9TS/0/6Ry3979c/aun/Z/2jlv4P6B+19P+L/lFL/7/qH7X0/5v+UUv/B/WPWvo/pH/U0v/v+kct/R/WP2rpP0H/qKT/I1f1/0ct/YfpH7X0H65/1NJ/hP5RS/+R+kct/UfpH7X0H61/1NJ/Jv2jlv4z6x+19B+jf9TSfxb9o5b+T9M/auk/q/5RS//Z9I9a+s+uf9TS/+n6Ry3959A/auk/p/5RS/+59I9a+j9D/6il/9z6Ry39n6l/1NL/WfpHLf2frX/U0n8e/aOW/s/RP2rpP6/+UUv/5+oftfR/nv5RS//59I9a+s+vf9TS//n6Ry39x+oftfRfQP+opf+C+kct/RfSP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0X0L/qKX/C/SPWvq/UP+opf+S+kct/ZfSP2rpv7T+UUv/ZfSPWvovq3/U0n85/aOW/svrH7X0X0H/qKX/i/SPWvq/WP+opf+K+kct/VfSP2rpv7L+UUv/VfSPWvq/RP+opf+q+kct/V+qf9TS/2X6Ry39X65/1NJ/Nf2jlv6rT6X/XMv8twb21NTSf5z1H7X0X0P/qKX/K/SPWvqvqX/U0n8t/aOW/mvrH7X0X0f/qKX/uvpHLf3X0z9q6f9K/aOW/q/SP2rpv77+UUv/V+sftfR/jf5RS//X6h+19H+d/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/+v1j1r6b6p/1NJ/M/2jlv6b6x+19H+D/lFL/y30j1r6b6l/1NL/jfpHLf230j9q6b+1/lFL/230j1r6b6t/1NL/TfpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19B+vf9TSfxf9o5b+b9Y/aum/q/5RS//d9I9a+u+uf9TSfw/9o5b+e+oftfR/i/5RS/+99I9a+u+tf9TSfx/9o5b+b9U/aum/r/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/B+kct/d+mf9TS/+36Ry39D9E/aul/qP5RS//D9I9a+r9D/6il/zv1j1r6v0v/qKX/u/WPWvofrn/U0v89+kct/Y/QP2rpf6T+UUv/o/SPWvofrX/U0v+9+kct/d+nf9TS//36Ry39P6B/1NL/GP2jlv7H6h+19P+g/lFL/+P0j1r6f0j/qKX/8fpHLf0/rH/U0v8jZf0PncbtWvqfUNZ/WrX0P1H/qKX/R/WPWvqfpH/U0v9j+kct/T+uf9TS/xP6Ry39P6l/1NL/ZP2jlv6n6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/2z9o5b+n9I/aul/jv5RS/9P6x+19P+M/lFL/8/qH7X0/5z+UUv/z+sftfQ/V/+opf8X9I9a+n9R/6il/3n6Ry39z9c/aul/gf5RS/8v6R+19P+y/lFL/6/oH7X0v1D/qKX/RfpHLf0v1j9q6f9V/aOW/pfoH7X0v1T/qKX/ZfpHLf0v1/8J5p982dL/a/pHLf2/rn/U0v8b+kct/a/QP2rpf6X+UUv/b+oftfS/Sv+opf+39I9a+n9b/6il/9X6Ry39r9E/aun/Hf2jlv7X6h+19L9O/6il/3f1j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Pf2jlv636h+19P++/lFL/x/oH7X0/6H+UUv/2/SPWvr/SP+opf+P9Y9a+v9E/6il/+36Ry39f6p/1NL/Z/pHLf3v0D9q6f9z/aOW/r/QP2rpf6f+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/7v0j1r6/1b/qKX/7/SPWvrfrX/U0v/3+kct/e/RP2rp/wf9o5b+9+oftfT/o/5RS//79I9a+v9J/6il//36Ry39/6x/1NL/Af2jlv5/0T9q6f9X/aOW/n/TP2rp/6D+UUv/h/SPWvr/Xf+opf/D+kct/SfoH5X0HzHQP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv4z6R+19J9Z/6il/xj9o5b+s+gftfR/mv5RS/9Z9Y9a+s+mf9TSf3b9o5b+T9c/auk/h/5RS/859Y9a+s+lf9TS/xn6Ry3959Y/aun/TP2jlv7P0j9q6f9s/aOW/vPoH7X0f47+UUv/efWPWvo/V/+opf/z9I9a+s+nf9TSf379o5b+z9c/auk/Vv+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf1foH/U0v+F+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/CvpHLf1fpH/U0v/F+kct/VfUP2rpv5L+UUv/lXv7z/RkD7b0X6W3/5Nq6f8S/aOW/qvqH7X0f6n+UUv/l+kftfR/uf5RS//V9I9a+q+uf9TSf5z+UUv/NfSPWvq/Qv+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0n89/aOW/q/UP2rp/yr9o5b+6+sftfR/tf5RS//X6B+19H+t/lFL/9fpH7X030D/qKX/hvpHLf030j9q6b+x/lFL/030j1r6v17/qKX/pvpHLf030z+a1H/mwYzef3P9o5b1/wb9o5b+W+gftfTfUv+opf8b9Y9a+m+lf9TSf2v9o5b+2+gftfTfVv+opf+b9I9a+m+nf9TSf3v9o5b+O+gftfTfUf+opf9O+kct/XfWP2rpP17/qKX/LvpHLf3frH/U0n9X/aOW/rvpH7X0313/qKX/HvpHLf331D9q6f8W/aOW/nvpH7X031v/qKX/PvpHLf3fqn/U0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6v03/qKX/2/WPWvofon/U0v9Q/aOW/ofpH7X0f4f+UUv/d+oftfR/l/5RS/936x+19D9c/yETJjzuRkv/9+gftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/9+oftfR/n/5RS//36x+19P+A/lFL/2P0j1r6H6t/1NL/g/pHLf2P0z9q6f8h/aOW/sfrH7X0/7D+UUv/j+gftfQ/Qf+opf+J+kct/T+qf9TS/yT9o5b+H9M/aun/cf2jlv6f0D9q6f9J/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19P+U/lFL/3P0j1r6f1r/qKX/Z/SPWvp/Vv+opf/n9I9a+n9e/6il/7n6Ry39v6B/1NL/i/pHLf3P0z9q6X++/lFL/wv0j1r6f0n/qKX/l/WPWvp/Rf+opf+F+kct/S/SP2rpf7H+0Yzcf/XH7h3xVf2jGbn/49f/JfpHLf0v1T9q6X+Z/lFL/8v1j1r6f03/qKX/1/WPWvp/Q/+opf8V+kct/a/UP2rp/039o5b+V+kftfT/lv5RS/9v6x+19L9a/6il/zX6Ry39v6N/1NL/Wv2jlv7X6R+19P+u/lFL/+v1j1r636B/1NL/Rv2jlv436R+19L9Z/6il/y36Ry39v6d/1NL/Vv2jlv7f1z9q6f8D/aOW/j/UP2rpf5v+UUv/H+kftfT/sf5RS/+f6B+19L9d/6il/0/1j1r6/0z/qKX/HfpHLf1/rn/U0v8X+kct/e/UP2rp/0v9o5b+v9I/aun/a/2jlv6/0T9q6X+X/lFL/9/qH7X0/53+UUv/u/WPWvr/Xv+opf89+kct/f+gf9TS/179o5b+f9Q/aul/n/5RS/8/6R+19L9f/6il/5/1j1r6P6B/1NL/L/pHLf3/qn/U0v9v+kct/R/UP2rp/5D+UUv/v+sftfR/WP+opf8E/aOS/iMH+kct/YfpH7X0H/5P+4/4vx3XU1RL/xHWf9TSf6T+UUv/UfpHLf1H6x+19J9J/6il/8z6Ry39x+gftfSfRf+opf/T9I9a+s+qf9TSfzb9o5b+s+sftfR/uv5RS/859I9a+s+pf9TSfy79o5b+z9A/auk/t/5RS/9n6h+19H+W/lFL/2frH7X0n0f/qKX/c/SPWvrPq3/U0v+5+kct/Z+nf9TSfz79o5b+8+sftfR/vv5RS/+x+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf2X0D9q6f8C/aOW/i/UP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0X07/qKX/8vpHLf1X0D+agfuPedy9I1+kfzQD93/C+n+x/lFL/xX1j1r6r6R/1NJ/Zf2jlv6r6B+19H9JTf+Z/6WtW/qvWtP/X9PS/6X6Ry39X6Z/1NL/5fpHLf1X0z9q6b+6/lFL/3H6Ry3919A/aun/Cv2jlv5r6h+19F9L/6il/9r6Ry3919E/aum/rv5RS//19I9a+r9S/6il/6v0j1r6r69/1NL/1fpHLf1fo3/U0v+1+kct/V+nf9TSfwP9o5b+G+oftfTfSP+opf/G+kct/TfRP2rp/3r9o5b+m+oftfTfTP+opf/m+kct/d+gf9TSfwv9o5b+W+oftfR/o/5RS/+t9I9a+m+tf9TSfxv9o5b+2+oftfR/k/5RS//t9I9a+m+vf9TSfwf9o5b+O+oftfTfSf+opf/O+kct/cfrH7X030X/qKX/m/WPWvrvqn/U0n83/aOW/rvrH7X030P/qKX/nvpHLf3fon/U0n8v/aOW/nvrH7X030f/qKX/W/WPWvrvq3/U0n8//aOW/vvrH7X0P0D/qKX/gfpHLf0P0j9q6X+w/lFL/7fpH7X0f7v+UUv/Q/SPWvofqn/U0v8w/aOW/u/QP2rp/079o5b+79I/aun/bv2jlv6H6x+19H+P/lFL/yP0j1r6H6l/1NL/KP2jlv5H6x+19H+v/lFL//fpH7X0f7/+UUv/D+gftfQ/Rv+opf+x+kct/T+of9TS/zj9o5b+H9I/aul/vP5RS/8P6x+19P+I/lFL/xP0j1r6n6h/NMP2H/vE/h/VP5ph+0+x/k/SP2rp/zH9o5b+H9c/aun/Cf2jlv6f1D9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aul/tv5RS/9P6R/NyP1nfuzekefoH83I/R+//j+tf9TS/zP6Ry39P6t/1NL/c/pHLf0/r3/U0v9c/aOW/l/QP2rp/0X9o5b+5+kftfQ/X/+opf8F+kct/b+kf9TS/8v6Ry39v6J/1NL/Qv2jlv4X6R+19L9Y/6il/1f1j1r6X6J/1NL/Uv2jlv6X6R+19L9c/6il/9f0j1r6f13/qKX/N/SPWvpfoX/U0v9K/aOW/t/UP2rpf5X+UUv/b+kftfT/tv5RS/+r9Y9a+l+jf9TS/zv6Ry39r9U/aul/nf5RS//v6h+19L9e/6il/w36Ry39b9Q/aul/U13/WyZMy1Yt/W+u6z9tWvrfon/U0v97+kct/W/VP2rp/339o5b+P9A/aun/Q/2jlv636R+19P+R/lFL/x/rH7X0/4n+UUv/2/WPWvr/VP+opf/P9I9a+t+hf9TS/+f6Ry39f6F/1NL/Tv2jlv6/1D9q6f8r/aOW/r/WP2rp/xv9o5b+d+kftfT/rf5RS//f6R+19L9b/6il/+/1j1r636N/1NL/D/pHLf3v1T9q6f9H/aOW/vfpH7X0/5P+UUv/+/WPWvr/Wf+opf8D+kct/f+if9TS/6/6Ry39/6Z/1NL/Qf2jlv4P6R+19P+7/lFL/4f1j1r6T9A/Kuk/aqB/1NJ/mP6PGf3Y1Zb+w/WPWvqP0D9q6T9S/6il/yj9o5b+o/WPWvrPpH/U0n9m/aOW/mP0j1r6z6J/1NL/afpHLf1n1T96tP8WwwaDGbj/bPpHLet/dv2jlv5P1z9q6T+H/lFL/zn1j1r6z6V/1NL/GfpHLf3n1j9q6f9M/aOW/s/SP2rp/2z9o5b+8+gftfR/jv5RS/959Y9a+j9X/6il//P0j1r6z6d/1NJ/fv2jlv7P1z9q6T9W/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8S+kct/V+gf9TS/4X6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv+opf8K+kct/V+kf9TS/8X6Ry39V9Q/aum/kv5RS/+V9Y9a+q+if9TS/yX6Ry39V9U/aun/Uv2jlv4v0z9q6f9y/aOW/qvpH7X0X13/qKX/OP2jlv5r6B+19H+F/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry39X6l/1NL/VfpHLf3X1z9q6f9q/aOW/q/RP2rp/1r9o5b+r9M/aum/gf7RxP43DwaDGb3/hvpHLet/I/2jlv4b6x+19N9E/6il/+v1j1r6b6p/1NJ/M/2jlv6b6x+19H+D/lFL/y30j1r6b6l/1NL/jfpHLf230j9q6b+1/lFL/230j1r6b6t/1NL/TfpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv476x+19B+vf9TSfxf9o5b+b9Y/aum/q/5RS//d9I9a+u+u/2NmeuxqS/899I9a+u+pf9TS/y36Ry3999I/aum/t/5RS/999I9a+r9V/6il/776Ry3999M/aum/v/5RS/8D9I9a+h+of9TS/yD9o5b+B+sftfR/m/5RS/+36x+19D9E/6il/6H6Ry39D9M/aun/Dv2jlv7v1D9q6f8u/aOW/u/WP2rpf7j+UUv/9+gftfQ/Qv+opf+R+kct/Y/SP2rpf7T+UUv/9+oftfR/n/5RS//36x+19P+A/lFL/2P0j1r6H6t/1NL/g/pHLf2P0z9q6f8h/aOW/sfrH7X0/7D+UUv/j+gftfQ/Qf+opf+J+kct/T+qf9TS/yT9o5b+H9M/aun/cf2jlv6f0D9q6f9J/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19P+U/lFL/3P0j1r6f7qq/7pHTuuWLf0/U9V/2rX0/6z+UUv/z+kftfT/vP5RS/9z9Y9a+n9B/6il/xf1j1r6n6d/1NL/fP2jlv4X6B+19P+S/lFL/y/rH7X0/4r+UUv/C/WPWvpfpH/U0v9i/aOW/l/VP2rpf4n+UUv/S/WPWvpfpn/U0v9y/aOW/l/TP2rp/3X9o5b+39A/aul/hf5RS/8r9Y9a+n9T/6il/1X6Ry39v6V/1NL/2/pHLf2v1j9q6X+N/lFL/+/oH7X0v1b/qKX/dfpHLf2/q3/U0v96/aOW/jfoH7X0v1H/qKX/TfpHLf1v1j9q6X+L/lFL/+/pH7X0v1X/qKX/9/WPWvr/QP+opf8P9Y9a+t+mf9TS/0f6Ry39f6x/1NL/J/pHLf1v1z9q6f9T/aOW/j/TP2rpf4f+UUv/n+sftfT/hf5RS/879Y9a+v9S/6il/6/0j1r6/1r/qKX/b/SPWvrfpX/U0v+3+kct/X+nf9TS/279o5b+v9c/aul/j/5RS/8/6B+19L9X/6il/x/1j1r636d/1NL/T/pHLf3v1z9q6f9n/aOW/g/oH7X0/4v+UUv/v+oftfT/m/5RS/8H9Y9a+j+kf9TS/+/6Ry39H9Y/auk/Qf+opP/ogf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n0n/qKX/zPpHLf3H6B+19J9F/6il/9P0j1r6z6p/1NJ/Nv2jlv6z6x+19H+6/lFL/zn0j1r6z6l/1NJ/Lv2jlv7P0D9q6T+3/lFL/2fqH7X0f5b+UUv/Z+sftfSfR/+opf9z9I9a+s+rf9TS/7n6Ry39n6d/1NJ/Pv2jlv7z6x+19H++/lFL/7H6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/ZfQP2rp/wL9o5b+L9Q/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/VfQP2rp/yL9o5b+L9Y/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+L9E/aum/qv5RS/+X6h+19H+Z/lFL/5frH7X0X03/qKX/6vpHLf3H6R+19F9D/6il/yv0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aun/Sv2jlv6v0j9q6b++/lFL/1frH7X0f43+UUv/1+oftfR/nf5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf/r9Y9a+m+qf9TSfzP9o5b+m+sftfR/g/5RS/8t9I9a+m+pf9TS/436Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/036Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfQfr3/U0n8X/aOW/m/WP2rpv6v+UUv/3fSPWvrvrn/U0n8P/aOW/nvqH7X0f4v+UUv/vfSPWvrvrX/U0n8f/aOW/m/VP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf3fpn/U0v/t+kct/Q/RP2rpf6j+UUv/w/SPWvq/Q/+opf879Y9a+r9L/6il/7v1j1r6H65/1NL/PfpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/vfpHLf3fp3/U0v/9+kct/T+gf9TS/xj9o5b+x+oftfT/oP5RS//j9I9a+n9I/6il//H6Ry39P6x/1NL/I/pHLf1P0D9q6X+i/lFL/4/qH7X0P0n/qKX/x/SPWvp/XP+opf8n9I9a+n9S/6il/8n6R8NO2nvCIYPBDN//FP2jlvV/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/T+lf9TS/xz9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rpf67+UUv/L+gftfT/ov5RS//z9I9a+p+vf9TS/wL9o5b+X9I/aun/Zf2jlv5f0T9q6X+h/lFL/4v0j1r6X6x/1NL/q/pHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/a/pHLf2/rn/U0v8b+kct/a/QP2rpf6X+UUv/b+oftfS/Sv+opf+39I9a+n9b/6il/9X6Ry39r9E/aun/Hf2jlv7X6h+19L9O/6il/3f1j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Pf2jlv636h+19P++/lFL/x/oH7X0/6H+UUv/2/SPWvr/SP+opf+P9Y9a+v9E/6il/+36Ry39f6p/NCP2nzBi0tXH9/+Z/tGM2D+t/zv0j1r6/1z/qKX/L/SPWvrfqX/U0v+X+kct/X+lf9TS/9f6Ry39f6N/1NL/Lv2jlv6/1T9q6f87/aOW/nfrH7X0/73+UUv/e/SPWvr/Qf+opf+9+kct/f+of9TS/z79o5b+f9I/aul/v/5RS/8/6x+19H9A/6il/1/0j1r6/1X/qKX/3/SPWvo/qH/U0v8h/aOW/n/XP2rp/7D+UUv/CfpHJf1nGugftfQfpn/U0n+4/lFL/xH6Ry39R+oftfQfpX/U0n+0/lFL/5n0j1r6z6x/1NJ/jP5RS/9Z9I9a+j9N/6il/6z6Ry39Z9M/auk/u/5RS/+n6x+19J9D/6il/5z6Ry3959I/aun/DP2jlv5z6x+19H+m/lFL/2fpH7X0f7b+UUv/efSPWvo/R/+opf+8+kct/Z+rf9TS/3n6Ry3959M/auk/v/5RS//n6x+19B+rf9TSfwH9o5b+C+oftfRfSP+opf/C+kct/RfRP2rpv6j+UUv/xfSPWvovrn/U0n8J/aOW/i/QP2rp/0L9o5b+S+oftfRfSv+opf/S+kct/ZfRP2rpv6z+UUv/5fSPWvovr3/U0n8F/aOW/i/SP2rp/2L9o5b+K+oftfRfaRr63zv7/+XAnppa+q9s/Uct/VfRP2rp/xL9o5b+q+oftfR/qf5RS/+X6R+19H+5/lFL/9X0j1r6r65/1NJ/nP5RS/819I9a+r9C/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TSfz39o5b+r9Q/aun/Kv2jlv7r6x+19H+1/lFL/9foH7X0f63+UUv/1+kftfTfQP+opf+G+kct/TfSP2rpv7H+UUv/TfSPWvq/Xv+opf+m+kct/TfTP2rpv7n+UUv/N+gftfTfQv+opf+W+kct/d+of9TSfyv9o5b+W+sftfTfRv+opf+2+kct/d+kf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpv7P+UUv/8fpHLf130T9q6f9m/aOW/rvqH7X0303/qKX/7vpHLf330D9q6b+n/lFL/7foH7X030v/qKX/3vpHLf330T9q6f9W/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6H6x/1NL/bfpHLf3frn/U0v8Q/aOW/ofqH7X0P0z/qKX/O/SPWvq/U/+opf+79I9a+r9b/6il/+H6Ry3936N/1NL/CP2jlv5H6h+19D9K/6il/9H6Ry3936t/1NL/ffpHLf3fr3/U0v8D+kct/Y/RP2rpf6z+UUv/D+oftfQ/Tv+opf+H9I9a+h+vf9TS/8P6Ry39P6J/1NL/BP2jlv4n6h+19P+o/lFL/5P0j1r6f0z/qKX/x/WPWvp/Qv+opf8n9Y9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v9T+kct/c/RP2rp/2n9o5b+n9E/aun/Wf2jlv6f0z9q6f95/aOW/ufqH7X0/4L+UUv/L+oftfQ/T/+opf/5+kct/S/QP2rp/yX9o5b+X9Y/aun/Ff2jlv4X6h+19L9I/6il/8X6Ry39v6p/1NL/Ev2jlv6X6h+19L9M/6il/+X6Ry39v6Z/1NL/6/pHLf2/oX/U0v8K/aOW/lfqH7X0/6b+UUv/q/SPWvp/S/+opf+39Y9a+l+tf9TS/xr9o5b+39E/aul/rf5RS//r9I9a+n9X/6il//X6Ry39b9A/aul/Y+4/4b82rqeolv43Wf9RS/+b9Y9a+t+if9TS/3v6Ry39b9U/aun/ff2jlv4/0D9q6f9D/aOW/rfpH7X0/5H+UUv/H+sftfT/if5RS//b9Y9a+v9U/6il/8/0j1r636F/1NL/5/pHLf1/oX/U0v9O/aOW/r/UP2rp/yv9o5b+v9Y/aun/G/2jlv536R+19P+t/lFL/9/pH7X0v1v/qKX/7/WPWvrfo3/U0v8P+kct/e/VP2rp/0f9o5b+9+kftfT/k/5RS//79Y9a+v9Z/6il/wP6Ry39/6J/1NL/r/pHLf3/pn/U0v9B/aOW/g/pH7X0/7v+UUv/h/WPWvpP0D8q6T/zQP+opf8w/aOW/sP1j1r6j9A/auk/Uv+opf8o/aOW/qP1j1r6z6R/1NJ/Zv2jlv5j9I9a+s+if9TS/2n6Ry39Z9U/auk/m/5RS//Z9Y9a+j9d/6il/xz6Ry3959Q/auk/l/5RS/9n6B+19J9b/6il/zP1j1r6P0v/qKX/s/WPWvrPo3/U0v85+kct/efVP2rp/1z9o5b+z9M/auk/n/5RS//59Y9a+j9f/6il/1j9o5b+C+gftfRfUP+opf9C+kct/RfWP2rpv4j+UUv/RfWPWvovpn/U0n9x/aOW/kvoH7X0f4H+UUv/F+oftfRfUv+opf9S+kct/ZfWP2rpv4z+UUv/ZfWPWvovp3/U0n95/aOW/ivoH7X0f1Hs/z//2f5/a+n/Yus/aum/ov5RS/+V9I9a+q+sf9TSfxX9o5b+L9E/aum/qv5RS/+X6h+19H+Z/lFL/5frH7X0X03/qKX/6vpHLf3H6R+19F9D/6il/yv0j1r6r6l/1NJ/Lf2jlv5r6x+19F9H/6il/7r6Ry3919M/aun/Sv2jlv6v0j9q6b++/lFL/1frH7X0f43+UUv/1+oftfR/nf5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf/r9Y9a+m+qf9TSfzP9o5b+m+sftfR/g/5RS/8t9I9a+m+pf9TS/436Ry39t9I/aum/tf5RS/9t9I9a+m+rf9TS/036Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfQfr3/U0n8X/aOW/m/WP2rpv6v+UUv/3fSPWvrvrn/U0n8P/aOW/nvqH7X0f4v+UUv/vfSPWvrvrX/U0n8f/aOW/m/VP2rpv6/+UUv//fSPWvrvr3/U0v8A/aOW/gfqH7X0P0j/qKX/wfpHLf3fpn/U0v/t+kct/Q/RP2rpf6j+UUv/w/SPWvq/Q/+opf879Y9a+r9L/6il/7v1j1r6H65/1NL/PfpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/vfpHLf3fp3/U0v/9+kct/T+gf9TS/xj9o5b+x+oftfT/oP5RS//j9I9a+n9I/6il//H6Ry39P6x/1NL/I/pHLf1P0D9q6X+i/lFL/4/qH7X0P0n/qKX/x/SPWvp/XP+opf8n9I9a+n9S/6il/8n6Ry39T9E/aul/qv5RS//T9I9a+p+uf9TS/wz9o5b+Z+oftfQ/S/+opf/Z+kct/T+lf9TS/xz9o5b+n9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rpf67+UUv/L+gftfT/ov5RS//z9I9a+p+vf9TS/wL9o5b+X9I/aun/Zf2jlv5f0T9q6X+h/lFL/4v0j1r6X6x/1NL/q/pHLf0v0T9q6X+p/lFL/8v0j1r6X65/1NL/a/pHLf2/rn/U0v8b+kct/a/QP2rpf6X+UUv/b+oftfS/Sv+opf+39I9a+n9b/6il/9X6Ry39r9E/aun/Hf2jlv7X6h+19L9O/6il/3f1j1r6X69/1NL/Bv2jlv436h+19L9J/6il/836Ry39b9E/aun/Pf2jlv636h+19P++/lFL/x/oH7X0/6H+UUv/2/SPWvr/SP+opf+P9Y9a+v9E/6il/+36Ry39f6p/1NL/Z/pHLf3v0D9q6f9z/aOW/r/QP2rpf6f+UUv/X+oftfT/lf5RS/9f6x+19P+N/lFL/7v0j1r6/1b/qKX/7/SPWvrfrX/U0v/3+kct/e/RP2rp/wf9o5b+9+oftfT/o/5RS//79I9a+v9J/6il//36Ry39/6x/1NL/Af2jlv5/0T9q6f9X/aOW/n/TP2rp/6D+UUv/h/SPWvr/Xf+opf/D+kct/SfoH5X0HzPQP2rpP0z/qKX/cP2jlv4j9I9a+o/UP2rpP0r/qKX/aP2jlv4z6R+19J9Z/6il/xj9o5b+s+gftfR/mv5RS/9Z9Y9a+s+mf9TSf3b9o5b+T9c/auk/h/5RS/859Y9a+s+lf9TS/xn6Ry3959Y/aun/TP2jlv7P0j9q6f9s/aOW/vPoH7X0f47+UUv/efWPWvo/V/+opf/z9I9a+s+nf9TSf379o5b+z9c/auk/Vv+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/EvpHLf1foH/U0v+F+kct/ZfUP2rpv5T+UUv/pfWPWvovo380w/UHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDkgAAAAABP1/3Y5AAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbAgAA//8U+f9v") statx(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0, 0xfffffffffffffffe) 1.746337333s ago: executing program 2 (id=9607): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x5c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 1.434157072s ago: executing program 0 (id=9609): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000380)=@get={0x1, 0x0, 0x3ff}) 1.412676472s ago: executing program 2 (id=9611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x3c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_FILTER={0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40002) 1.12329361s ago: executing program 1 (id=9612): r0 = syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x0, 0x4, 0x6}) 1.018065763s ago: executing program 3 (id=9613): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, 0x0) 1.001726033s ago: executing program 0 (id=9614): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208001e0000000401a80008000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 945.230175ms ago: executing program 1 (id=9615): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x716, 0x4e, 0x34325852, 0x4, 0x7, 0x89, 0x0, 0x7f7, 0x0, 0x7, 0x0, 0x2}}) 888.245696ms ago: executing program 2 (id=9616): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x37, 0x7ffffffe}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 738.15274ms ago: executing program 1 (id=9617): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x14, 0x1, 0x70bd24, 0x25dfdb79, {0xa, 0x84}}, 0x14}, 0x1, 0x0, 0x0, 0x4890}, 0x24050810) 738.014351ms ago: executing program 2 (id=9618): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f00000000c0), 0x4) 737.344581ms ago: executing program 0 (id=9619): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r0, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) 586.520005ms ago: executing program 2 (id=9620): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x31, 0x2, 0xb, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x300, @multicast1}}, @sadb_address={0x3, 0x12, 0x3c, 0x80, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @broadcast}}]}, 0x58}}, 0x0) 493.537957ms ago: executing program 0 (id=9621): mkdir(&(0x7f00000000c0)='./file0\x00', 0x40) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, '.'}}], [], 0x2c}) 492.920787ms ago: executing program 1 (id=9622): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 318.845962ms ago: executing program 2 (id=9623): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 307.877932ms ago: executing program 1 (id=9624): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xec8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x32314142, 0x2, 0x6, 0x6, 0x4, 0xa6e, 0x0, 0x2, 0x1, 0x5}}) 256.757004ms ago: executing program 0 (id=9625): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 153.965847ms ago: executing program 1 (id=9626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000002010400000000000000000200000104000180300003802c00018014000300fc02000000000000000000000020000014000400ff0100000000000000000000000000012400028014000180080001006401010208000200ffffffff0c00028005000100"], 0x6c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 0s ago: executing program 0 (id=9627): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x42, 0x201, 0x0, 0x25dfdbff, {0xc}}, 0x14}}, 0x40044c4) kernel console output (not intermixed with test programs): acity change from 0 to 16384 [ 1143.201797][T23793] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1143.232490][T23793] UDF-fs: Scanning with blocksize 512 failed [ 1143.269738][T23793] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1143.289864][T23793] UDF-fs: Scanning with blocksize 1024 failed [ 1143.299101][T23793] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1143.317529][T23793] UDF-fs: Scanning with blocksize 2048 failed [ 1143.357544][T23793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1143.654484][T23799] syz.0.7860: attempt to access beyond end of device [ 1143.654484][T23799] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1143.758355][T23799] SQUASHFS error: Failed to read block 0x0: -5 [ 1143.764735][T23799] unable to read squashfs_super_block [ 1143.930348][T23795] loop1: detected capacity change from 0 to 32768 [ 1144.011110][T23795] XFS (loop1): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1144.097247][T23806] loop0: detected capacity change from 0 to 2048 [ 1144.122800][T23795] XFS (loop1): Ending clean mount [ 1144.251612][ T5777] XFS (loop1): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 1144.763330][ T5764] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1145.001135][ T5764] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCE, skipping [ 1145.025849][ T5764] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 1145.040922][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.060062][ T5764] usb 2-1: Product: syz [ 1145.066830][ T5764] usb 2-1: Manufacturer: syz [ 1145.077528][ T5764] usb 2-1: SerialNumber: syz [ 1145.341456][ T5764] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1145.348736][ T5764] usb 2-1: MIDIStreaming interface descriptor not found [ 1145.387913][T23813] loop0: detected capacity change from 0 to 32768 [ 1145.454054][ T5764] usb 2-1: USB disconnect, device number 40 [ 1145.500819][T23813] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1145.636575][T23813] XFS (loop0): Ending clean mount [ 1145.753255][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1146.141498][T23826] loop1: detected capacity change from 0 to 512 [ 1146.178386][T23826] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1146.203928][T23826] UDF-fs: Scanning with blocksize 512 failed [ 1146.245006][T23826] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1146.269366][T23826] UDF-fs: Scanning with blocksize 1024 failed [ 1146.293317][T23826] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1146.293996][T23828] loop0: detected capacity change from 0 to 512 [ 1146.311053][T23826] UDF-fs: Scanning with blocksize 2048 failed [ 1146.325509][T23826] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1146.349904][T23828] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1146.367013][T23826] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1146.370842][T23828] UDF-fs: Scanning with blocksize 512 failed [ 1146.430633][T23828] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1146.452131][T23828] UDF-fs: Scanning with blocksize 1024 failed [ 1146.460675][T23828] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1146.495023][T23828] UDF-fs: Scanning with blocksize 2048 failed [ 1146.520920][T23828] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1146.571535][T23828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1146.795525][T23830] loop1: detected capacity change from 0 to 128 [ 1147.940141][T23834] loop1: detected capacity change from 0 to 32768 [ 1148.017929][T23834] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1148.217340][T23834] XFS (loop1): Ending clean mount [ 1148.353032][ T5777] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 1148.737606][T23832] loop0: detected capacity change from 0 to 65536 [ 1148.849596][T23832] XFS (loop0): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1148.961799][T23832] XFS (loop0): Ending clean mount [ 1149.042218][ T5776] XFS (loop0): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 1149.106144][T23836] loop3: detected capacity change from 0 to 65536 [ 1149.197361][T23836] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1156.435872][T23867] Process accounting paused [ 1159.059548][T23881] loop0: detected capacity change from 0 to 32768 [ 1159.539320][T23877] loop3: detected capacity change from 0 to 65536 [ 1159.642120][T23877] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1160.231884][T23912] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7895'. [ 1160.496892][T23918] gtp0: entered promiscuous mode [ 1160.559979][T23918] gtp0: entered allmulticast mode [ 1160.624317][T23922] loop0: detected capacity change from 0 to 128 [ 1160.916334][T23926] netlink: 'syz.3.7902': attribute type 3 has an invalid length. [ 1161.331858][T23939] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7909'. [ 1162.226911][T23974] tunl0: entered promiscuous mode [ 1162.255966][T23974] netlink: 'syz.0.7925': attribute type 4 has an invalid length. [ 1162.294637][T23974] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7925'. [ 1162.668923][T23990] loop0: detected capacity change from 0 to 256 [ 1162.690629][T23990] exfat: Deprecated parameter 'utf8' [ 1162.706764][T23990] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1162.775724][T23995] xt_connbytes: Forcing CT accounting to be enabled [ 1163.448385][T24013] openvswitch: netlink: Actions may not be safe on all matching packets [ 1163.827654][T24024] loop0: detected capacity change from 0 to 256 [ 1164.057720][ T28] audit: type=1326 audit(1780831082.285:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.7953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1164.172274][ T28] audit: type=1326 audit(1780831082.285:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.7953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1164.286096][ T28] audit: type=1326 audit(1780831082.341:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.7953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1164.373859][ T28] audit: type=1326 audit(1780831082.341:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.7953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1164.401320][T24040] sctp: [Deprecated]: syz.1.7959 (pid 24040) Use of int in maxseg socket option. [ 1164.401320][T24040] Use struct sctp_assoc_value instead [ 1164.465131][ T28] audit: type=1326 audit(1780831082.341:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24031 comm="syz.1.7953" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1164.888912][T24058] Cannot find set identified by id 0 to match [ 1165.056049][T24061] usb usb7: usbfs: process 24061 (syz.1.7968) did not claim interface 0 before use [ 1165.117144][T24066] MTD: Couldn't look up './file0': -15 [ 1165.918573][ T8] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1166.079126][T24098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.092334][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7987'. [ 1166.101345][T24098] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1166.133681][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1166.150741][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1166.173988][ T8] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1166.194444][ T8] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1166.215307][ T8] usb 3-1: Product: syz [ 1166.230722][ T8] usb 3-1: Manufacturer: syz [ 1166.235816][ T8] usb 3-1: SerialNumber: syz [ 1166.373143][T24104] loop1: detected capacity change from 0 to 4096 [ 1166.421056][T24109] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1166.424466][T24104] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1166.496645][T24104] Remounting filesystem read-only [ 1166.505698][ T8] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1166.543382][ T8] usb 3-1: Handspring Visor / Palm OS: port 143, is for Remote File System use [ 1166.581504][ T8] usb 3-1: Handspring Visor / Palm OS: port 223, is for unknown use [ 1166.600534][ T8] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1166.650533][T24104] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1166.677799][T24104] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1166.726171][ T8] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1166.757105][ T8] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1166.804858][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1166.832810][T24115] loop0: detected capacity change from 0 to 2048 [ 1166.842543][ T8] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1166.880776][ T8] usb 3-1: USB disconnect, device number 52 [ 1166.934563][ T8] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1166.966768][ T8] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1166.979954][ T8] visor 3-1:1.0: device disconnected [ 1166.988558][T24115] loop0: p2 p3 p7 [ 1167.349238][T24127] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 1167.378306][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1167.390645][ T6515] udevd[6515]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1167.414318][ T6804] udevd[6804]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 1167.519318][ T6515] udevd[6515]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 1167.560529][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 1167.579073][T13043] udevd[13043]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 1167.977128][T24142] loop1: detected capacity change from 0 to 4096 [ 1168.005842][T24142] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1168.016506][T24145] loop3: detected capacity change from 0 to 128 [ 1168.055063][T24145] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1168.102236][T24145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1168.150308][T24142] ntfs: volume version 3.1. [ 1168.307270][T24149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8012'. [ 1168.564252][ T3445] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 1168.580076][ T28] audit: type=1326 audit(1780831086.513:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24152 comm="syz.0.8014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1168.669723][ T28] audit: type=1326 audit(1780831086.513:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24152 comm="syz.0.8014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1168.756925][ T28] audit: type=1326 audit(1780831086.560:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24152 comm="syz.0.8014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1168.781661][T24155] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8016'. [ 1169.081755][T24166] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1169.093453][ T8] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1169.291407][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1169.307761][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.315837][ T8] usb 1-1: Product: syz [ 1169.339261][ T8] usb 1-1: Manufacturer: syz [ 1169.350983][ T8] usb 1-1: SerialNumber: syz [ 1169.372130][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 1169.531800][ T23] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1169.574683][T24174] loop3: detected capacity change from 0 to 4096 [ 1169.681412][T24174] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1169.745998][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1169.754903][T24174] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1169.764310][ T23] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1169.788264][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.809735][ T23] usb 2-1: config 0 has no interface number 0 [ 1169.815924][ T23] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1169.849771][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1169.862634][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1169.874099][ T8] r8152-cfgselector 1-1: USB disconnect, device number 48 [ 1169.888377][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.916229][ T23] usb 2-1: Product: syz [ 1169.929523][T24174] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 1169.934973][ T23] usb 2-1: Manufacturer: syz [ 1169.941903][ T23] usb 2-1: SerialNumber: syz [ 1169.958801][ T23] usb 2-1: config 0 descriptor?? [ 1169.984840][ T23] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 1169.997427][ T23] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 1170.241163][ T23] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1170.455191][ T23] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 1170.494162][ T23] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 1170.512938][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8028'. [ 1170.537074][ T23] usb 2-1: USB disconnect, device number 41 [ 1170.557281][ T23] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 1170.778354][T24139] loop2: detected capacity change from 0 to 131072 [ 1170.845615][T24139] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 1171.584882][T24206] loop1: detected capacity change from 0 to 1024 [ 1171.654341][T24208] loop2: detected capacity change from 0 to 2048 [ 1171.665090][T24206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1171.733393][T24208] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1171.787455][T24206] ext4 filesystem being mounted at /2038/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.815578][T24206] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.8037: corrupted xattr block 128: bad e_name length [ 1171.995485][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1172.288072][T24227] netlink: 'syz.0.8045': attribute type 1 has an invalid length. [ 1172.585885][T24235] loop2: detected capacity change from 0 to 128 [ 1172.664262][T24235] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1172.688639][T24229] loop0: detected capacity change from 0 to 4096 [ 1172.714067][T24235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1172.763059][T24229] __ntfs_error: 1 callbacks suppressed [ 1172.763078][T24229] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1172.818357][T24229] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1172.852724][T24229] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1172.896926][T24229] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1172.929702][T24229] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1172.946576][T24229] ntfs: volume version 3.1. [ 1172.963422][T24229] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1172.981236][T24229] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1173.013642][T24229] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1173.027542][ T23] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1173.046787][T24229] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1173.097706][T24229] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1173.241236][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1173.262940][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1173.296014][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41692, setting to 1024 [ 1173.343526][ T23] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1173.357675][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.368387][ T23] usb 2-1: Product: syz [ 1173.389785][ T23] usb 2-1: Manufacturer: syz [ 1173.426960][ T23] usb 2-1: SerialNumber: syz [ 1173.446232][ T23] usb 2-1: config 0 descriptor?? [ 1173.477554][ T23] hub 2-1:0.0: bad descriptor, ignoring hub [ 1173.489127][ T23] hub: probe of 2-1:0.0 failed with error -5 [ 1173.533061][ T23] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input69 [ 1174.045322][ T23] usb 2-1: USB disconnect, device number 42 [ 1174.907808][T24286] loop0: detected capacity change from 0 to 4096 [ 1174.941495][ T5819] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1175.037599][T24286] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1175.144120][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 1175.153111][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.179719][ T5819] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1175.210609][ T5819] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1175.257855][ T5819] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1175.281207][ T5819] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1175.302420][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.326247][ T5819] usb 4-1: Product: syz [ 1175.344898][ T5819] usb 4-1: Manufacturer: syz [ 1175.356425][ T5819] usb 4-1: SerialNumber: syz [ 1175.390682][ T5819] usb 4-1: config 0 descriptor?? [ 1175.400140][T24305] xt_NFQUEUE: number of total queues is 0 [ 1175.432626][ T5819] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1175.670724][ T5819] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1175.689806][ T5819] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1175.708852][ T5819] snd_usb_toneport: probe of 4-1:0.0 failed with error -22 [ 1175.728555][T24311] loop0: detected capacity change from 0 to 4096 [ 1175.842465][T24311] ntfs: volume version 3.1. [ 1175.974574][ T5819] usb 4-1: USB disconnect, device number 64 [ 1176.083129][T24321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8092'. [ 1176.677558][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.684347][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.883782][T24346] loop0: detected capacity change from 0 to 2048 [ 1176.979502][T24351] binder: 24350:24351 ioctl c00c6211 ffffffffffffffff returned -14 [ 1176.989102][T24346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1177.110712][T24346] fscrypt (loop0, inode 12): Error -61 getting encryption context [ 1177.283011][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1177.353666][T24364] loop3: detected capacity change from 0 to 64 [ 1178.050609][T24383] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1178.601110][T24402] netlink: 'syz.2.8130': attribute type 1 has an invalid length. [ 1178.613992][T24402] netlink: 'syz.2.8130': attribute type 3 has an invalid length. [ 1178.637212][T24402] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8130'. [ 1178.821707][T24407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8132'. [ 1179.058603][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1179.058622][ T28] audit: type=1326 audit(1780831096.326:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.136177][ T28] audit: type=1326 audit(1780831096.326:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.238285][ T28] audit: type=1326 audit(1780831096.326:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.289288][ T28] audit: type=1326 audit(1780831096.335:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.348865][ T28] audit: type=1326 audit(1780831096.335:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.418829][ T28] audit: type=1326 audit(1780831096.335:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.474813][ T28] audit: type=1326 audit(1780831096.335:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.520779][ T28] audit: type=1326 audit(1780831096.335:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.555862][T24395] loop0: detected capacity change from 0 to 32768 [ 1179.629465][ T28] audit: type=1326 audit(1780831096.335:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24411 comm="syz.2.8134" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1179.689387][T24395] (syz.0.8127,24395,1):ocfs2_check_set_options:1215 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled. [ 1179.715611][T24431] loop1: detected capacity change from 0 to 128 [ 1179.734339][T24395] (syz.0.8127,24395,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 1179.759297][T24431] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1179.813979][T24395] syz.0.8127: attempt to access beyond end of device [ 1179.813979][T24395] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1179.855403][T24433] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1179.928456][T24431] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1179.999283][T24431] ext4 filesystem being mounted at /2064/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1180.049295][T24437] loop3: detected capacity change from 0 to 2048 [ 1180.131425][T24439] geneve0: entered promiscuous mode [ 1180.151352][T24439] geneve0: entered allmulticast mode [ 1180.172937][T24442] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1180.201240][T24439] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1180.259419][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1180.583079][T24450] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1180.587581][T24454] program syz.0.8153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1180.716687][T24456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8155'. [ 1180.783591][T24458] loop3: detected capacity change from 0 to 64 [ 1181.122000][T24467] netlink: 'syz.3.8158': attribute type 1 has an invalid length. [ 1181.351342][T24474] loop3: detected capacity change from 0 to 1764 [ 1181.862895][T24494] netlink: 'syz.2.8173': attribute type 21 has an invalid length. [ 1181.880075][T24494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8173'. [ 1181.957631][T24500] loop0: detected capacity change from 0 to 16 [ 1182.012086][T24500] erofs: (device loop0): mounted with root inode @ nid 36. [ 1182.091273][T24500] syz.0.8175: attempt to access beyond end of device [ 1182.091273][T24500] loop0: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 1182.141647][T24500] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 1182.428985][T24514] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1182.462024][ T28] audit: type=1326 audit(1780831099.507:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.2.8184" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f250ff9ce59 code=0x7ffc0000 [ 1182.694199][T24523] loop2: detected capacity change from 0 to 256 [ 1182.883908][T24530] netlink: 'syz.1.8191': attribute type 5 has an invalid length. [ 1183.149930][T24538] loop1: detected capacity change from 0 to 1764 [ 1183.314619][T24546] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1183.695482][T24557] loop3: detected capacity change from 0 to 2048 [ 1183.739242][T24557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1184.765598][ T8] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1184.904196][T24593] netlink: 'syz.2.8221': attribute type 12 has an invalid length. [ 1184.940876][T24593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8221'. [ 1184.967471][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1185.010863][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.047675][ T8] usb 1-1: Product: syz [ 1185.051924][ T8] usb 1-1: Manufacturer: syz [ 1185.072986][ T8] usb 1-1: SerialNumber: syz [ 1185.090527][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1185.122908][ T5819] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1185.168206][T24599] bridge1: entered promiscuous mode [ 1185.174097][T24599] bridge1: entered allmulticast mode [ 1185.541237][T24615] loop1: detected capacity change from 0 to 64 [ 1185.630763][ T5837] usb 1-1: USB disconnect, device number 49 [ 1185.748419][ T8] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1185.869443][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8238'. [ 1185.955102][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1185.975388][ T8] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1186.000010][ T8] usb 4-1: config 0 has no interface number 0 [ 1186.015696][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1186.037392][ T8] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1186.059991][ T8] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1186.071349][ T8] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1186.079592][ T8] usb 4-1: Product: syz [ 1186.084525][ T8] usb 4-1: SerialNumber: syz [ 1186.104528][ T8] usb 4-1: config 0 descriptor?? [ 1186.134997][ T8] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 1186.168137][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input70 [ 1186.508050][ T5819] usb 1-1: Service connection timeout for: 256 [ 1186.525355][ T5819] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1186.559343][ T5819] ath9k_htc: Failed to initialize the device [ 1186.567311][ T5837] usb 1-1: ath9k_htc: USB layer deinitialized [ 1186.625930][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1186.633223][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.642457][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.650786][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.658230][ T8] usb 4-1: USB disconnect, device number 65 [ 1186.664257][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1186.664286][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1186.692250][ T8] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1186.897303][T24653] loop2: detected capacity change from 0 to 256 [ 1187.001960][T24653] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012a20, chksum : 0xf9fb3df0, utbl_chksum : 0xe619d30d) [ 1187.130588][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1187.130609][ T28] audit: type=1800 audit(1780831103.875:77): pid=24653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8251" name="file2" dev="loop2" ino=1048622 res=0 errno=0 [ 1187.168775][T24659] loop0: detected capacity change from 0 to 1764 [ 1187.593486][T24671] loop0: detected capacity change from 0 to 1024 [ 1187.719333][T24671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1187.813141][T24678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8262'. [ 1187.955915][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1188.648928][T24704] loop0: detected capacity change from 0 to 512 [ 1188.855423][T24702] Process accounting resumed [ 1188.945371][T24704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1188.992888][T24704] EXT4-fs (loop0): Remounting filesystem read-only [ 1189.001800][T24704] EXT4-fs (loop0): 1 truncate cleaned up [ 1189.011813][T24704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.035435][T24714] netlink: 'syz.1.8279': attribute type 1 has an invalid length. [ 1189.045966][T24714] netlink: 'syz.1.8279': attribute type 2 has an invalid length. [ 1189.054339][T24714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8279'. [ 1189.333178][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.478793][T24726] netlink: 'syz.1.8286': attribute type 15 has an invalid length. [ 1189.493088][T24726] netlink: 'syz.1.8286': attribute type 7 has an invalid length. [ 1189.575481][ T23] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1189.789208][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1189.801550][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1189.819664][ T23] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1189.838331][ T23] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1189.853867][ T23] usb 3-1: Product: syz [ 1189.863606][ T23] usb 3-1: Manufacturer: syz [ 1189.875442][ T23] usb 3-1: SerialNumber: syz [ 1190.036311][T24744] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1190.045532][T24744] bridge1: entered promiscuous mode [ 1190.052064][T24744] bridge1: entered allmulticast mode [ 1190.146236][ T23] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1190.176556][ T23] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1190.206549][ T23] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1190.214471][ T23] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1190.361317][ T23] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1190.378077][ T23] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1190.402415][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1190.436455][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1190.450320][ T23] usb 3-1: USB disconnect, device number 53 [ 1190.463924][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1190.503765][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1190.572913][ T23] visor 3-1:1.0: device disconnected [ 1190.632030][T24762] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 1191.226527][T24776] Driver unsupported XDP return value 0 on prog (id 489) dev N/A, expect packet loss! [ 1191.537820][T24780] loop1: detected capacity change from 0 to 8192 [ 1192.133857][T24774] loop0: detected capacity change from 0 to 32768 [ 1192.251955][T24799] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8320'. [ 1192.761011][ T23] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1192.965236][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1192.982726][ T23] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1193.008123][ T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1193.028402][ T23] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1193.086601][ T23] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1193.118700][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1193.142662][ T23] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1193.174367][ T23] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1193.198916][ T23] usb 4-1: Product: syz [ 1193.219159][ T23] usb 4-1: Manufacturer: syz [ 1193.232863][ T23] usb 4-1: SerialNumber: syz [ 1193.250042][ T23] usb 4-1: config 0 descriptor?? [ 1193.270691][ T23] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1193.304428][ T23] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1193.445228][ T5843] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1193.499505][T24827] loop2: detected capacity change from 0 to 512 [ 1193.535460][T21314] usb 4-1: USB disconnect, device number 66 [ 1193.549319][T21314] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1193.591840][T24827] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1193.659708][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 1193.671833][ T5843] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1193.691047][ T5843] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1193.700122][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1193.703232][T24827] EXT4-fs (loop2): Remounting filesystem read-only [ 1193.721740][ T5843] usb 2-1: config 1 has no interface number 0 [ 1193.743315][ T5843] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1193.778251][T24827] EXT4-fs (loop2): 1 truncate cleaned up [ 1193.785476][T24827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1193.791660][ T5843] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 17412, setting to 1024 [ 1193.836361][ T5843] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1193.872869][ T5843] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1193.903770][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.939833][T24823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1193.986399][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1194.009076][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.204385][T24823] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1194.256366][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1194.520234][ T5843] usb 2-1: USB disconnect, device number 43 [ 1194.536371][ T5843] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1195.096521][T24865] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5774] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[24865] [ 1195.419986][T24873] netlink: 'syz.3.8355': attribute type 10 has an invalid length. [ 1195.481309][T24873] team0: Device nlmon0 is of different type [ 1196.371107][T24878] loop1: detected capacity change from 0 to 32768 [ 1196.414704][T24878] [ 1196.414704][T24878] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1196.414704][T24878] [ 1196.523451][T24878] ERROR: (device loop1): ea_get: invalid ea.flag [ 1196.523451][T24878] [ 1196.562427][T24878] ERROR: (device loop1): remounting filesystem as read-only [ 1196.855743][T24916] --map-set only usable from mangle table [ 1196.897949][T24908] loop0: detected capacity change from 0 to 8192 [ 1196.955830][T24908] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1196.973894][T24908] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 1197.037350][T24908] REISERFS (device loop0): using ordered data mode [ 1197.043964][T24908] reiserfs: using flush barriers [ 1197.120049][T24908] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1197.146813][T24908] REISERFS (device loop0): checking transaction log (loop0) [ 1197.166853][T24908] REISERFS (device loop0): Using rupasov hash to sort names [ 1197.198384][T24908] REISERFS (device loop0): using 3.5.x disk format [ 1197.230469][T24908] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1197.266341][T24908] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1197.267952][T24925] loop2: detected capacity change from 0 to 128 [ 1197.282804][ T23] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1197.300216][T24908] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1197.337788][T24925] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1197.353086][T24908] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1197.405054][T24925] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1197.508233][T24925] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 1197.523420][ T23] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1197.562238][ T23] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1197.570418][ T23] usb 4-1: Product: syz [ 1197.585704][ T23] usb 4-1: SerialNumber: syz [ 1197.606296][ T23] usb 4-1: config 0 descriptor?? [ 1197.671064][ T5775] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1198.066460][T24938] loop2: detected capacity change from 0 to 1764 [ 1198.104926][ T8] usb 4-1: USB disconnect, device number 67 [ 1198.517566][T24932] loop1: detected capacity change from 0 to 32768 [ 1198.574065][T24934] loop0: detected capacity change from 0 to 32768 [ 1198.578675][T24932] JBD2: Ignoring recovery information on journal [ 1198.604916][T24934] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1198.689107][T24932] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1198.918846][T24934] XFS (loop0): Ending clean mount [ 1198.957992][T24934] XFS (loop0): Quotacheck needed: Please wait. [ 1199.019298][T24956] loop2: detected capacity change from 0 to 8192 [ 1199.085240][T24934] XFS (loop0): Quotacheck: Done. [ 1199.107345][T24956] syz.2.8389: attempt to access beyond end of device [ 1199.107345][T24956] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1199.170362][T24956] Buffer I/O error on dev loop2, logical block 57847, async page read [ 1199.187424][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8392'. [ 1199.232363][T24956] syz.2.8389: attempt to access beyond end of device [ 1199.232363][T24956] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1199.247177][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1199.304249][T24956] Buffer I/O error on dev loop2, logical block 57847, async page read [ 1199.356235][ T28] audit: type=1800 audit(1780831115.306:78): pid=24956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8389" name="file2" dev="loop2" ino=1048626 res=0 errno=0 [ 1199.442030][ T5776] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1200.051975][T24975] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.8394'. [ 1200.061755][T24975] bridge_slave_1: default FDB implementation only supports local addresses [ 1200.241053][T24976] loop1: detected capacity change from 0 to 4096 [ 1200.417947][T24987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8404'. [ 1200.737074][T24988] loop0: detected capacity change from 0 to 4096 [ 1200.764438][T24988] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1201.320476][T25010] loop1: detected capacity change from 0 to 8 [ 1201.353983][T25010] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1201.422370][ T6515] udevd[6515]: incorrect cramfs checksum on /dev/loop1 [ 1201.437269][T25010] cramfs: Error -5 while decompressing! [ 1201.459154][T25010] cramfs: ffffffff97405328(26)->ffff8880565f3000(4096) [ 1201.470520][T25010] cramfs: Error -3 while decompressing! [ 1201.485647][T25010] cramfs: ffffffff97405342(26)->ffff8880583bb000(4096) [ 1201.493409][T25010] cramfs: Error -3 while decompressing! [ 1201.503950][T25010] cramfs: ffffffff9740535c(16)->ffff888056cd4000(4096) [ 1201.511548][T25010] cramfs: Error -5 while decompressing! [ 1201.528890][T25010] cramfs: ffffffff97405328(26)->ffff8880565f3000(4096) [ 1201.533588][ T6515] udevd[6515]: incorrect cramfs checksum on /dev/loop1 [ 1201.545609][ T28] audit: type=1800 audit(1780831117.355:79): pid=25010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8416" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1201.565901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.727545][T25018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.024852][T25029] loop3: detected capacity change from 0 to 4096 [ 1202.055505][T25029] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1202.828516][T25027] loop1: detected capacity change from 0 to 32768 [ 1202.860895][T25027] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.8421 (25027) [ 1202.890100][T25027] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1202.909428][T25027] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1202.955714][T25027] BTRFS info (device loop1): force zlib compression, level 3 [ 1202.966651][T25027] BTRFS info (device loop1): enabling ssd optimizations [ 1202.995196][T25027] BTRFS info (device loop1): allowing degraded mounts [ 1203.015807][T25027] BTRFS info (device loop1): force clearing of disk cache [ 1203.023980][T25027] BTRFS info (device loop1): using free space tree [ 1203.119958][T25027] BTRFS info (device loop1): rebuilding free space tree [ 1203.198197][T25027] BTRFS info (device loop1): checking UUID tree [ 1203.249493][T25072] loop3: detected capacity change from 0 to 8 [ 1203.518502][T25036] loop2: detected capacity change from 0 to 32768 [ 1203.650327][ T5777] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1204.037269][T25084] loop3: detected capacity change from 0 to 512 [ 1204.114016][T25084] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1204.273423][T25084] EXT4-fs (loop3): 1 truncate cleaned up [ 1204.283617][T25084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.446394][T25084] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.8443: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1204.541696][T25084] EXT4-fs (loop3): Remounting filesystem read-only [ 1204.551429][T25084] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.8443: Deleting old file: nlink 4, error=-117 [ 1204.695614][ T28] audit: type=1326 audit(1780831120.311:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25100 comm="syz.0.8450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1204.719735][ C0] vkms_vblank_simulate: vblank timer overrun [ 1204.767418][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.776848][ T28] audit: type=1326 audit(1780831120.311:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25100 comm="syz.0.8450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1204.802079][ T28] audit: type=1326 audit(1780831120.367:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25100 comm="syz.0.8450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1204.841581][ T28] audit: type=1326 audit(1780831120.367:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25100 comm="syz.0.8450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1204.897565][ T28] audit: type=1326 audit(1780831120.367:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25100 comm="syz.0.8450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1204.921730][ T8] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1204.970729][T25108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8452'. [ 1205.151001][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1205.158844][ T8] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1205.173009][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.187306][ T8] usb 2-1: config 0 has no interface number 0 [ 1205.199540][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1205.219951][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.241538][ T8] usb 2-1: Product: syz [ 1205.245789][ T8] usb 2-1: Manufacturer: syz [ 1205.266467][ T8] usb 2-1: SerialNumber: syz [ 1205.283540][ T8] usb 2-1: config 0 descriptor?? [ 1205.375546][ T5843] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1205.525826][ T8] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1205.549898][ T8] usb 2-1: No valid video chain found. [ 1205.589210][T25126] loop3: detected capacity change from 0 to 16 [ 1205.593458][ T5843] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1205.608485][T25126] erofs: (device loop3): mounted with root inode @ nid 36. [ 1205.616125][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.616156][ T5843] usb 3-1: Product: syz [ 1205.616172][ T5843] usb 3-1: Manufacturer: syz [ 1205.616188][ T5843] usb 3-1: SerialNumber: syz [ 1205.619144][ T5843] usb 3-1: config 0 descriptor?? [ 1205.681471][ T5843] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1205.711106][T25126] erofs: (device loop3): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1205.729412][T25126] erofs: (device loop3): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1205.745136][T25126] erofs: (device loop3): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1205.756369][T25126] erofs: (device loop3): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1205.762356][ T23] usb 2-1: USB disconnect, device number 44 [ 1205.773188][T25126] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1205.802532][ T28] audit: type=1800 audit(1780831121.340:85): pid=25126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8461" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 1205.899742][ T5843] gspca_stk1135: reg_w 0x2 err -71 [ 1205.907397][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1205.940023][ T5843] gspca_stk1135: Sensor write failed [ 1205.956889][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1205.970597][ T5843] gspca_stk1135: Sensor write failed [ 1205.971681][T25122] loop0: detected capacity change from 0 to 32768 [ 1205.980736][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.013708][ T5843] gspca_stk1135: Sensor read failed [ 1206.020605][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.027576][ T5843] gspca_stk1135: Sensor read failed [ 1206.038414][ T5843] gspca_stk1135: Detected sensor type unknown (0x0) [ 1206.046198][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.054811][ T5843] gspca_stk1135: Sensor read failed [ 1206.060924][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.068509][ T5843] gspca_stk1135: Sensor read failed [ 1206.075840][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.083297][T25122] JBD2: Ignoring recovery information on journal [ 1206.083554][ T5843] gspca_stk1135: Sensor write failed [ 1206.096496][ T5843] gspca_stk1135: serial bus timeout: status=0x00 [ 1206.103347][ T5843] gspca_stk1135: Sensor write failed [ 1206.108898][ T5843] stk1135: probe of 3-1:0.0 failed with error -71 [ 1206.125006][ T5843] usb 3-1: USB disconnect, device number 54 [ 1206.136604][T25122] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 1206.153047][T25122] JBD2: bad block at offset 32 [ 1206.185584][T25122] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1206.487547][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 1206.818497][T25148] netlink: 'syz.1.8469': attribute type 10 has an invalid length. [ 1206.870914][T25148] veth1_macvtap: left promiscuous mode [ 1208.460921][T25196] loop1: detected capacity change from 0 to 8 [ 1208.747675][T25204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8495'. [ 1208.816735][T25204] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1209.236471][T25218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8502'. [ 1209.997360][T25245] loop1: detected capacity change from 0 to 16 [ 1210.072911][T25245] erofs: (device loop1): mounted with root inode @ nid 36. [ 1210.295581][T25253] tmpfs: Bad value for 'mpol' [ 1210.797041][T25265] loop2: detected capacity change from 0 to 8 [ 1210.838999][T25266] syz_tun: entered promiscuous mode [ 1211.015421][T25250] loop3: detected capacity change from 0 to 32768 [ 1211.222429][T25272] loop2: detected capacity change from 0 to 512 [ 1211.287388][T25272] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1211.346197][T25272] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1211.383246][T25272] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1211.434264][T25272] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 1211.522853][T25272] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 1211.543378][T25272] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.8527: Failed to acquire dquot type 1 [ 1211.587748][T25272] EXT4-fs (loop2): Remounting filesystem read-only [ 1211.594722][T25272] EXT4-fs (loop2): 1 truncate cleaned up [ 1211.630397][T25272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1211.661022][ T2180] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1211.767046][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.773119][T25284] loop3: detected capacity change from 0 to 2048 [ 1211.848468][T25284] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1211.891432][T25284] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.912141][ T2180] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1211.943058][ T2180] usb 2-1: string descriptor 0 read error: -22 [ 1211.960617][ T2180] usb 2-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 1211.967416][T25290] loop2: detected capacity change from 0 to 2048 [ 1211.969757][ T2180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.030901][T25290] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1212.063035][ T2180] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1212.166272][ T2180] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1212.209008][T19343] udevd[19343]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.298038][ T2180] snd-usb-hiface: probe of 2-1:1.0 failed with error -22 [ 1212.432553][T21314] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1212.530149][ T2180] usb 2-1: can't set first interface for hiFace device. [ 1212.548201][ T2180] snd-usb-hiface: probe of 2-1:1.1 failed with error -5 [ 1212.559201][ T2180] usb 2-1: can't set first interface for hiFace device. [ 1212.572440][ T2180] snd-usb-hiface: probe of 2-1:1.2 failed with error -5 [ 1212.587460][ T2180] usb 2-1: USB disconnect, device number 45 [ 1212.666057][T21314] usb 3-1: Using ep0 maxpacket: 8 [ 1212.676152][T21314] usb 3-1: config 7 has an invalid interface number: 143 but max is 1 [ 1212.694596][T21314] usb 3-1: config 7 has an invalid interface number: 217 but max is 1 [ 1212.709071][T21314] usb 3-1: config 7 has an invalid descriptor of length 229, skipping remainder of the config [ 1212.730153][T21314] usb 3-1: config 7 has no interface number 0 [ 1212.736593][T21314] usb 3-1: config 7 has no interface number 1 [ 1212.748181][T21314] usb 3-1: too many endpoints for config 7 interface 217 altsetting 0: 255, using maximum allowed: 30 [ 1212.779734][T21314] usb 3-1: config 7 interface 217 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1212.793783][T21314] usb 3-1: config 7 interface 143 has no altsetting 0 [ 1212.805109][T21314] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=ba.35 [ 1212.814753][T21314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.823572][T21314] usb 3-1: Product: syz [ 1212.827823][T21314] usb 3-1: Manufacturer: syz [ 1212.832444][T21314] usb 3-1: SerialNumber: syz [ 1212.837123][T25304] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1213.101326][T21314] qmi_wwan: probe of 3-1:7.143 failed with error -22 [ 1213.121534][T21314] usb 3-1: USB disconnect, device number 55 [ 1213.365023][T25314] netlink: 136 bytes leftover after parsing attributes in process `syz.3.8548'. [ 1213.505816][T25320] ip6erspan0: entered promiscuous mode [ 1213.600752][T25322] loop3: detected capacity change from 0 to 512 [ 1213.666420][T25327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1213.680573][T25327] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8553'. [ 1213.694045][T25322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.707170][T25322] ext4 filesystem being mounted at /2199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1213.927222][ T2180] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1214.035723][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.161899][ T2180] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1214.184818][ T2180] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.200126][ T2180] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1214.230302][ T2180] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1214.266015][ T2180] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1214.276659][ T2180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.310179][ T2180] usb 2-1: Product: syz [ 1214.315867][ T2180] usb 2-1: Manufacturer: syz [ 1214.320777][ T2180] usb 2-1: SerialNumber: syz [ 1214.400498][T25346] loop2: detected capacity change from 0 to 2048 [ 1214.423306][T25346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1214.472506][T20734] Bluetooth: hci3: command 0x0406 tx timeout [ 1214.599350][ T2180] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 1214.613110][ T2180] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 1214.631345][ T2180] usb 2-1: 1:1 : unsupported format bits 0x33820006 [ 1214.666775][ T2180] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1214.708623][ T2180] usb 2-1: unit 2 not found! [ 1214.713395][ T2180] usb 2-1: unit 0 not found! [ 1214.808386][ T2180] usb 2-1: USB disconnect, device number 46 [ 1214.981014][T13043] udevd[13043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1215.139820][ T28] audit: type=1400 audit(1780831130.068:86): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=25363 comm="syz.2.8571" [ 1215.236381][T25368] syz_tun: entered promiscuous mode [ 1215.341034][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1215.396783][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1215.475952][T25371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1215.718300][ T28] audit: type=1326 audit(1780831130.620:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.8580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5eb9ce59 code=0x7ffc0000 [ 1215.823558][ T28] audit: type=1326 audit(1780831130.620:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.8580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5eb9ce59 code=0x7ffc0000 [ 1215.884225][ T28] audit: type=1326 audit(1780831130.620:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.8580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7efe5eb9ce59 code=0x7ffc0000 [ 1215.908349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1215.925987][ T28] audit: type=1326 audit(1780831130.620:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.8580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5eb9ce59 code=0x7ffc0000 [ 1216.011395][T25395] veth0_to_batadv: entered allmulticast mode [ 1216.014944][ T28] audit: type=1326 audit(1780831130.620:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25383 comm="syz.3.8580" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe5eb9ce59 code=0x7ffc0000 [ 1216.075086][T25395] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1216.346229][T25406] ip6erspan0: entered promiscuous mode [ 1216.456901][T25412] loop0: detected capacity change from 0 to 256 [ 1216.658121][T25412] FAT-fs (loop0): Directory bread(block 64) failed [ 1216.679155][T25412] FAT-fs (loop0): Directory bread(block 65) failed [ 1216.707913][T25412] FAT-fs (loop0): Directory bread(block 66) failed [ 1216.736625][T25412] FAT-fs (loop0): Directory bread(block 67) failed [ 1216.749563][T25412] FAT-fs (loop0): Directory bread(block 68) failed [ 1216.778485][T25412] FAT-fs (loop0): Directory bread(block 69) failed [ 1216.796617][T25412] FAT-fs (loop0): Directory bread(block 70) failed [ 1216.818102][T25412] FAT-fs (loop0): Directory bread(block 71) failed [ 1216.845680][T25412] FAT-fs (loop0): Directory bread(block 72) failed [ 1216.853407][T25412] FAT-fs (loop0): Directory bread(block 73) failed [ 1217.253450][T25411] loop2: detected capacity change from 0 to 32768 [ 1217.353683][T25411] JBD2: Ignoring recovery information on journal [ 1217.415687][T25411] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 1217.471224][T25433] loop1: detected capacity change from 0 to 8 [ 1217.481136][T25411] JBD2: bad block at offset 32 [ 1217.518664][T25411] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1217.619269][T25433] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1217.682903][T25433] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1217.708071][T25433] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1217.746290][T25433] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1217.762737][T25433] SQUASHFS error: Failed to read block 0x4de: -5 [ 1217.787160][T25433] SQUASHFS error: Failed to read block 0x4de: -5 [ 1217.812802][T25433] SQUASHFS error: Failed to read block 0x4de: -5 [ 1217.816761][T25440] loop0: detected capacity change from 0 to 256 [ 1217.820807][T25433] SQUASHFS error: Failed to read block 0x4de: -5 [ 1217.835348][T25440] exfat: Deprecated parameter 'utf8' [ 1217.855069][T25440] exfat: Deprecated parameter 'utf8' [ 1217.860981][T25440] exfat: Deprecated parameter 'namecase' [ 1217.875933][T25433] SQUASHFS error: Failed to read block 0x4de: -5 [ 1217.888457][T25433] SQUASHFS error: Failed to read block 0x4de: -5 [ 1217.892822][T25440] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1217.915313][ T5775] ocfs2: Unmounting device (7,2) on (node local) [ 1217.922082][T25433] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1217.954462][ T28] audit: type=1800 audit(1780831132.697:92): pid=25433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8603" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1218.565223][T25458] loop0: detected capacity change from 0 to 64 [ 1218.772281][T25464] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1218.995964][T25468] ax25_connect(): syz.0.8621 uses autobind, please contact jreuter@yaina.de [ 1219.321634][T25478] loop0: detected capacity change from 0 to 16 [ 1219.349411][T25478] erofs: (device loop0): mounted with root inode @ nid 36. [ 1219.401063][T25478] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1219.434708][T25478] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1219.479921][T25478] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1219.498994][T25478] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1219.513763][T25478] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1219.537185][T25478] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1219.548857][T25482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1219.559365][T25482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8629'. [ 1219.570227][T25478] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1219.583996][T25478] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD1 format 8 for nid 89, please upgrade kernel [ 1219.614316][T25478] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 0 of nid 89 [ 1219.630794][ T28] audit: type=1800 audit(1780831134.277:93): pid=25478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8627" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 1219.865128][T25467] loop1: detected capacity change from 0 to 32768 [ 1219.930979][T25467] JBD2: Ignoring recovery information on journal [ 1220.055548][T25467] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1220.131429][T25480] loop3: detected capacity change from 0 to 32768 [ 1220.212991][T25480] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1220.311541][T25502] loop2: detected capacity change from 0 to 256 [ 1220.390036][T25504] loop0: detected capacity change from 0 to 256 [ 1220.479064][T25480] XFS (loop3): Ending clean mount [ 1220.508912][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 1220.557372][T25504] FAT-fs (loop0): Directory bread(block 64) failed [ 1220.564243][T25504] FAT-fs (loop0): Directory bread(block 65) failed [ 1220.616986][T25504] FAT-fs (loop0): Directory bread(block 66) failed [ 1220.650536][T25504] FAT-fs (loop0): Directory bread(block 67) failed [ 1220.672599][T25504] FAT-fs (loop0): Directory bread(block 68) failed [ 1220.703102][T25504] FAT-fs (loop0): Directory bread(block 69) failed [ 1220.723261][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1220.738095][T25504] FAT-fs (loop0): Directory bread(block 70) failed [ 1220.744792][T25504] FAT-fs (loop0): Directory bread(block 71) failed [ 1220.822570][T25504] FAT-fs (loop0): Directory bread(block 72) failed [ 1220.829368][T25504] FAT-fs (loop0): Directory bread(block 73) failed [ 1221.116454][T25510] Process accounting paused [ 1221.526873][T25524] loop3: detected capacity change from 0 to 8 [ 1221.551687][T25522] vlan0: entered promiscuous mode [ 1221.603117][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8646'. [ 1221.614822][T25524] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1221.630811][T25524] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1221.646318][T25524] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1221.652858][T25526] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8646'. [ 1221.667135][T25528] overlayfs: conflicting options: userxattr,metacopy=on [ 1221.684960][T25524] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1221.693621][T25524] SQUASHFS error: Failed to read block 0x4de: -5 [ 1221.705821][T25524] SQUASHFS error: Failed to read block 0x4de: -5 [ 1221.731243][T25524] SQUASHFS error: Failed to read block 0x4de: -5 [ 1221.741691][T25524] SQUASHFS error: Failed to read block 0x4de: -5 [ 1221.763061][T25524] SQUASHFS error: Failed to read block 0x4de: -5 [ 1221.804461][T25524] SQUASHFS error: Failed to read block 0x4de: -5 [ 1221.826482][T25524] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1221.848115][ T28] audit: type=1800 audit(1780831136.345:94): pid=25524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8645" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1222.479338][ T8999] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1222.694407][ T8999] usb 4-1: Using ep0 maxpacket: 8 [ 1222.716726][ T8999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1222.741852][ T8999] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1222.764281][ T8999] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1222.775995][ T8999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.784704][ T8999] usb 4-1: Product: syz [ 1222.787866][T25564] loop2: detected capacity change from 0 to 1024 [ 1222.789731][ T8999] usb 4-1: Manufacturer: syz [ 1222.827867][ T8999] usb 4-1: SerialNumber: syz [ 1222.866726][ T8999] usb 4-1: config 0 descriptor?? [ 1222.998461][T25564] hfsplus: cannot replace xattr [ 1223.437885][ T5837] usb 4-1: USB disconnect, device number 68 [ 1224.151503][T25589] loop2: detected capacity change from 0 to 2048 [ 1224.244222][T25589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1224.256743][T25592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8679'. [ 1224.301055][T25592] netlink: 'syz.0.8679': attribute type 1 has an invalid length. [ 1224.356155][T25601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1224.421042][T25589] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1224.582169][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.233366][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8697'. [ 1225.260227][T25631] netlink: 59 bytes leftover after parsing attributes in process `syz.1.8697'. [ 1226.219939][T25664] loop1: detected capacity change from 0 to 2048 [ 1226.284145][T25666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1226.348447][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.400253][T25664] Remounting filesystem read-only [ 1226.426010][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.455397][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.476828][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.509438][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.530448][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.540722][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.569983][T25664] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 1226.580775][ T28] audit: type=1800 audit(1780831140.779:95): pid=25664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8708" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1226.744513][ T788] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1226.972186][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.983825][ T788] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1226.999227][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.032149][ T788] usb 3-1: config 0 descriptor?? [ 1227.229066][T25669] loop0: detected capacity change from 0 to 32768 [ 1227.283264][T25669] JBD2: Ignoring recovery information on journal [ 1227.341112][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 1227.350642][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 1227.378861][T25669] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1227.411049][ T788] usb 3-1: USB disconnect, device number 56 [ 1227.588644][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 1227.791531][T25697] netlink: 'syz.3.8725': attribute type 3 has an invalid length. [ 1227.809575][T25697] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8725'. [ 1228.452121][T25716] loop1: detected capacity change from 0 to 2048 [ 1228.526960][T25719] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1228.648093][T25716] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 1228.706293][T25716] Remounting filesystem read-only [ 1229.195702][T25741] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 1229.386473][T25747] overlayfs: missing 'lowerdir' [ 1232.422156][T25857] loop3: detected capacity change from 0 to 2048 [ 1232.511030][T25862] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1232.609696][T25857] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 1232.648719][T25857] Remounting filesystem read-only [ 1232.816008][T25872] loop1: detected capacity change from 0 to 512 [ 1232.878426][T25872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1232.939477][T25876] loop3: detected capacity change from 0 to 1764 [ 1232.981269][T25872] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.8802: corrupted xattr entries [ 1233.017368][T25872] EXT4-fs (loop1): Remounting filesystem read-only [ 1233.025704][T25872] EXT4-fs (loop1): 1 truncate cleaned up [ 1233.033631][T25872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1233.060656][T25872] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1233.123412][T25876] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1233.387982][ T28] audit: type=1326 audit(1780831147.149:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.447496][T25888] loop3: detected capacity change from 0 to 164 [ 1233.466486][ T28] audit: type=1326 audit(1780831147.168:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.563304][ T28] audit: type=1326 audit(1780831147.177:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.575371][T25888] Symlink component flag not implemented [ 1233.625403][T25888] Symlink component flag not implemented (7) [ 1233.648051][ T28] audit: type=1326 audit(1780831147.177:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.746364][ T28] audit: type=1326 audit(1780831147.177:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.771281][T25898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8816'. [ 1233.787145][ T28] audit: type=1326 audit(1780831147.177:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.814548][ T28] audit: type=1326 audit(1780831147.177:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.871004][ T28] audit: type=1326 audit(1780831147.177:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1233.910340][ T28] audit: type=1326 audit(1780831147.177:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25885 comm="syz.1.8811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1234.206033][ T2180] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1234.312479][T25915] SET target dimension over the limit! [ 1234.401067][ T2180] usb 2-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 1234.420891][ T2180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.456319][ T2180] pegasus 2-1:254.0: Missing or invalid endpoints [ 1234.463159][T25920] futex_wake_op: syz.0.8826 tries to shift op by -1; fix this program [ 1234.618851][T25924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1234.620102][T25925] loop2: detected capacity change from 0 to 64 [ 1234.767090][T21314] usb 2-1: USB disconnect, device number 47 [ 1235.263768][T25945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8839'. [ 1235.991483][T25974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8852'. [ 1236.112338][T25976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1236.127802][T25976] netlink: 440 bytes leftover after parsing attributes in process `syz.2.8855'. [ 1236.910593][ T8999] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1237.126725][ T8999] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1237.136113][ T8999] usb 4-1: not running at top speed; connect to a high speed hub [ 1237.162343][ T8999] usb 4-1: config 5 has an invalid interface number: 206 but max is 0 [ 1237.177888][ T8999] usb 4-1: config 5 has no interface number 0 [ 1237.195073][ T8999] usb 4-1: config 5 interface 206 has no altsetting 0 [ 1237.211213][ T8999] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4 [ 1237.233953][ T8999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.252580][ T8999] usb 4-1: Product: syz [ 1237.256946][ T8999] usb 4-1: Manufacturer: syz [ 1237.261579][ T8999] usb 4-1: SerialNumber: syz [ 1237.533052][ T8999] rtsx_usb: probe of 4-1:5.206 failed with error -22 [ 1237.548334][T26002] loop0: detected capacity change from 0 to 32768 [ 1237.565800][ T8999] usb 4-1: USB disconnect, device number 69 [ 1237.625243][T26002] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1237.721578][T26023] loop1: detected capacity change from 0 to 2048 [ 1237.779412][T26002] XFS (loop0): Ending clean mount [ 1237.801005][T26010] loop2: detected capacity change from 0 to 32768 [ 1237.803059][T26023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1237.898453][T26010] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 1237.898453][T26010] [ 1237.937285][T26010] jfs_rename: dtInsert returned -EIO [ 1238.050672][ T5776] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1238.882460][T26046] loop0: detected capacity change from 0 to 256 [ 1239.016839][T26046] FAT-fs (loop0): Directory bread(block 64) failed [ 1239.028223][T26046] FAT-fs (loop0): Directory bread(block 65) failed [ 1239.048692][T26046] FAT-fs (loop0): Directory bread(block 66) failed [ 1239.055393][T26046] FAT-fs (loop0): Directory bread(block 67) failed [ 1239.110052][T26046] FAT-fs (loop0): Directory bread(block 68) failed [ 1239.134172][T26046] FAT-fs (loop0): Directory bread(block 69) failed [ 1239.140951][T26046] FAT-fs (loop0): Directory bread(block 70) failed [ 1239.166146][T26046] FAT-fs (loop0): Directory bread(block 71) failed [ 1239.179177][T26046] FAT-fs (loop0): Directory bread(block 72) failed [ 1239.192723][T26046] FAT-fs (loop0): Directory bread(block 73) failed [ 1239.497332][T26065] netlink: 'syz.3.8894': attribute type 1 has an invalid length. [ 1239.525443][T26065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8894'. [ 1239.758895][T26076] binfmt_misc: register: failed to install interpreter file ./file0 [ 1240.438348][T26098] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1240.582661][ T28] audit: type=1326 audit(1780831153.875:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.1.8914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1240.650902][ T28] audit: type=1326 audit(1780831153.875:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.1.8914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1240.672383][T26107] loop0: detected capacity change from 0 to 256 [ 1240.716217][ T28] audit: type=1326 audit(1780831153.885:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.1.8914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1240.788392][T26107] exfat: Deprecated parameter 'utf8' [ 1240.816358][T26107] exfat: Deprecated parameter 'namecase' [ 1240.822884][T26107] exfat: Deprecated parameter 'namecase' [ 1240.839752][ T28] audit: type=1326 audit(1780831153.885:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.1.8914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1240.913512][T26107] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc3758327, utbl_chksum : 0xe619d30d) [ 1240.940033][ T28] audit: type=1326 audit(1780831153.885:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26104 comm="syz.1.8914" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e8a79ce59 code=0x7ffc0000 [ 1240.964479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1241.026474][T26117] netlink: 'syz.2.8920': attribute type 28 has an invalid length. [ 1241.026501][T26117] netlink: 'syz.2.8920': attribute type 3 has an invalid length. [ 1241.026515][T26117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8920'. [ 1241.049598][T26119] qrtr: Invalid version 73 [ 1241.162327][T26121] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1241.523268][T26133] netlink: 'syz.2.8927': attribute type 1 has an invalid length. [ 1241.541736][T26133] netlink: 236 bytes leftover after parsing attributes in process `syz.2.8927'. [ 1241.657836][T26137] netlink: 'syz.1.8930': attribute type 5 has an invalid length. [ 1241.790697][T26146] loop3: detected capacity change from 0 to 512 [ 1241.797870][T26144] netlink: 'syz.2.8933': attribute type 1 has an invalid length. [ 1241.805700][T26144] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1241.892264][T26140] bond1: entered allmulticast mode [ 1241.897711][T26146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.899893][T26140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1241.936310][T26146] ext4 filesystem being mounted at /2300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1241.950228][T26151] warning: `syz.1.8935' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1242.133297][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.358124][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.375352][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.985779][T26185] netlink: 'syz.2.8952': attribute type 2 has an invalid length. [ 1243.054219][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8953'. [ 1243.376126][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1243.405607][T26195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1243.597497][T26201] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1243.764462][T26179] loop3: detected capacity change from 0 to 32768 [ 1243.834049][T26179] ERROR: (device loop3): dbAllocAG: unable to allocate blocks [ 1243.834049][T26179] [ 1243.868340][T26179] jfs_rename: dtInsert returned -EIO [ 1243.917972][T26209] nfs: Deprecated parameter 'nointr' [ 1244.184604][T26217] : renamed from bond_slave_0 (while UP) [ 1245.125461][T26250] bond1: entered allmulticast mode [ 1245.131484][T26250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1246.093703][ T788] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 1246.249224][T26296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1246.320563][ T788] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1246.329273][ T788] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1246.337408][ T788] usb 3-1: config 0 has no interface number 0 [ 1246.381986][ T788] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1246.446603][ T788] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1246.486361][ T788] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1246.515581][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.558675][ T788] usb 3-1: config 0 descriptor?? [ 1246.669396][T26313] loop3: detected capacity change from 0 to 256 [ 1247.062738][ T788] usb 3-1: USB disconnect, device number 57 [ 1247.717986][T26345] netlink: 'syz.1.9018': attribute type 32 has an invalid length. [ 1247.935908][T26354] loop1: detected capacity change from 0 to 1024 [ 1248.007266][T26354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1248.270206][T26354] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.9022: Attempting to read directory block (623) that is past i_size (638464) [ 1248.544139][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.723261][ T5837] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1248.947480][ T5837] usb 4-1: Using ep0 maxpacket: 8 [ 1248.957960][ T5837] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1248.965003][T26389] loop1: detected capacity change from 0 to 256 [ 1248.976707][ T5837] usb 4-1: config 0 has no interface number 0 [ 1248.980310][ T5837] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1248.980345][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.980368][ T5837] usb 4-1: Product: syz [ 1248.980384][ T5837] usb 4-1: Manufacturer: syz [ 1248.980401][ T5837] usb 4-1: SerialNumber: syz [ 1248.983023][ T5837] usb 4-1: config 0 descriptor?? [ 1249.057610][T26389] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 1249.057985][T26389] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1249.232615][ T5837] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 1249.257514][ T5837] usb 4-1: No valid video chain found. [ 1249.291099][ T5837] usb 4-1: USB disconnect, device number 70 [ 1249.562417][T26403] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1250.369035][T26434] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9060'. [ 1250.650251][T20734] Bluetooth: hci1: command 0x0406 tx timeout [ 1250.886518][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1250.928813][T26457] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9072'. [ 1250.946822][T26452] netlink: 540 bytes leftover after parsing attributes in process `syz.0.9070'. [ 1251.135440][T26462] loop3: detected capacity change from 0 to 2048 [ 1251.188658][T26462] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1251.241583][T26466] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1251.262270][ T6515] udevd[6515]: incorrect nilfs2 checksum on /dev/loop3 [ 1251.331561][T26468] netlink: 'syz.2.9077': attribute type 21 has an invalid length. [ 1251.359639][T26468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9077'. [ 1251.551142][T26476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1251.576741][T26476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9081'. [ 1251.825800][T26485] xt_l2tp: v2 sid > 0xffff: 65536 [ 1253.090847][T26524] loop3: detected capacity change from 0 to 1024 [ 1253.155282][T26530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9108'. [ 1253.210694][T26524] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1253.217200][T26530] Process accounting resumed [ 1253.251742][T26524] hfsplus: xattr search failed [ 1253.315572][ T3445] hfsplus: b-tree write err: -5, ino 25 [ 1253.329558][ T3445] hfsplus: b-tree write err: -5, ino 4 [ 1253.341628][ T3445] hfsplus: b-tree write err: -5, ino 2 [ 1253.985373][T26557] loop1: detected capacity change from 0 to 128 [ 1254.012585][T26557] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 1254.143020][ T5777] sysv_free_block: flc_count > flc_size [ 1254.170975][ T5777] sysv_free_block: flc_count > flc_size [ 1254.196190][ T5777] sysv_free_block: flc_count > flc_size [ 1254.201826][ T5777] sysv_free_block: flc_count > flc_size [ 1254.228769][ T5777] sysv_free_block: flc_count > flc_size [ 1254.234658][ T5777] sysv_free_block: flc_count > flc_size [ 1254.257743][ T5777] sysv_free_block: flc_count > flc_size [ 1254.284011][ T5777] sysv_free_block: flc_count > flc_size [ 1254.311467][ T5777] sysv_free_block: flc_count > flc_size [ 1254.322289][ T5777] sysv_free_block: flc_count > flc_size [ 1254.346698][ T5777] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1254.799482][T26585] loop3: detected capacity change from 0 to 164 [ 1254.891436][T26585] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1255.023336][T26590] loop2: detected capacity change from 0 to 1024 [ 1255.128928][T26594] SET target dimension over the limit! [ 1255.167718][ T3445] hfsplus: b-tree write err: -5, ino 25 [ 1255.212119][ T3445] hfsplus: b-tree write err: -5, ino 4 [ 1255.233306][ T3445] hfsplus: b-tree write err: -5, ino 2 [ 1255.242225][ T3445] hfsplus: b-tree write err: -5, ino 26 [ 1255.620547][T26611] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1255.857128][T26617] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9152'. [ 1256.446516][T26606] loop2: detected capacity change from 0 to 32768 [ 1256.612345][ T788] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1256.794120][ T5843] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1256.885953][ T788] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1256.909806][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.930531][ T788] usb 4-1: Product: syz [ 1256.944859][ T788] usb 4-1: Manufacturer: syz [ 1256.953003][ T788] usb 4-1: SerialNumber: syz [ 1256.958356][T26651] kAFS: unable to lookup cell '(/' [ 1256.971690][ T788] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1257.014489][ T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1257.029052][ T5843] usb 2-1: Using ep0 maxpacket: 8 [ 1257.041255][ T5843] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1257.053023][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.104196][ T5843] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7 [ 1257.141732][ T5843] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1257.169451][ T5843] usb 2-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 1257.180655][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.188782][ T5843] usb 2-1: Product: syz [ 1257.193765][ T5843] usb 2-1: Manufacturer: syz [ 1257.198404][ T5843] usb 2-1: SerialNumber: syz [ 1257.395076][T26658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9172'. [ 1257.480624][ T5843] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1257.526160][ T5843] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1257.554378][T21314] usb 4-1: USB disconnect, device number 71 [ 1257.616799][T26663] netlink: 'syz.2.9175': attribute type 1 has an invalid length. [ 1257.697585][ T5843] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1257.740605][ T5843] usb 2-1: USB disconnect, device number 48 [ 1257.769830][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.916648][T20734] Bluetooth: hci0: command tx timeout [ 1258.178202][ T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1258.196785][ T23] ath9k_htc: Failed to initialize the device [ 1258.216430][T21314] usb 4-1: ath9k_htc: USB layer deinitialized [ 1258.675459][ T5843] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1258.816907][T26702] loop3: detected capacity change from 0 to 256 [ 1258.867755][ T5843] usb 1-1: Using ep0 maxpacket: 8 [ 1258.882105][ T5843] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1258.906060][ T5843] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1258.930098][T26702] FAT-fs (loop3): Directory bread(block 64) failed [ 1258.950921][T26702] FAT-fs (loop3): Directory bread(block 65) failed [ 1258.954040][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.967159][T26702] FAT-fs (loop3): Directory bread(block 66) failed [ 1258.995059][T26702] FAT-fs (loop3): Directory bread(block 67) failed [ 1258.996052][ T5843] usb 1-1: Product: syz [ 1259.023804][T26702] FAT-fs (loop3): Directory bread(block 68) failed [ 1259.028237][ T5843] usb 1-1: Manufacturer: syz [ 1259.035022][ T5843] usb 1-1: SerialNumber: syz [ 1259.050509][T26702] FAT-fs (loop3): Directory bread(block 69) failed [ 1259.072736][T26702] FAT-fs (loop3): Directory bread(block 70) failed [ 1259.082849][ T5843] usb 1-1: config 0 descriptor?? [ 1259.090350][T26702] FAT-fs (loop3): Directory bread(block 71) failed [ 1259.110551][T26702] FAT-fs (loop3): Directory bread(block 72) failed [ 1259.116624][ T5843] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 1259.132674][T26702] FAT-fs (loop3): Directory bread(block 73) failed [ 1259.328367][ T5843] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 1259.363546][ T5843] snd_usb_toneport: probe of 1-1:0.0 failed with error -22 [ 1259.552973][ T2180] usb 1-1: USB disconnect, device number 50 [ 1259.757899][T26716] loop3: detected capacity change from 0 to 16 [ 1259.786662][T26716] erofs: (device loop3): mounted with root inode @ nid 36. [ 1259.823280][T26716] erofs: (device loop3): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 1260.698077][T26746] loop0: detected capacity change from 0 to 128 [ 1260.770648][ T2180] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1260.784104][T26746] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1260.810572][T26746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1260.996170][ T2180] usb 4-1: Using ep0 maxpacket: 32 [ 1261.017052][ T2180] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.052236][ T2180] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1261.074463][ T2180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.091262][ T2180] usb 4-1: Product: syz [ 1261.095499][ T2180] usb 4-1: Manufacturer: syz [ 1261.116456][ T2180] usb 4-1: SerialNumber: syz [ 1261.135550][ T2180] usb 4-1: config 0 descriptor?? [ 1261.156746][T26756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9220'. [ 1261.167091][ T2180] usb 4-1: bad CDC descriptors [ 1261.172653][ T2180] usb 4-1: unsupported MDLM descriptors [ 1261.453466][ T2180] usb 4-1: USB disconnect, device number 72 [ 1261.549988][T26744] loop1: detected capacity change from 0 to 32768 [ 1261.637819][T26744] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1261.779720][T26744] XFS (loop1): Ending clean mount [ 1261.826609][T26744] XFS (loop1): Quotacheck needed: Please wait. [ 1261.986568][T26744] XFS (loop1): Quotacheck: Done. [ 1262.086920][T26762] loop2: detected capacity change from 0 to 32768 [ 1262.114679][ T5777] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1262.182143][T26762] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1262.342908][T26762] XFS (loop2): Ending clean mount [ 1262.403385][T26762] XFS (loop2): Quotacheck needed: Please wait. [ 1262.487061][T26762] XFS (loop2): Quotacheck: Done. [ 1262.698401][ T5775] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1262.746731][T26800] loop0: detected capacity change from 0 to 16 [ 1262.809779][T26800] erofs: (device loop0): mounted with root inode @ nid 36. [ 1262.856088][T26800] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 1263.847580][T26821] loop3: detected capacity change from 0 to 4096 [ 1263.909386][T26821] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1263.944523][T26825] loop1: detected capacity change from 0 to 256 [ 1263.961454][T26825] exfat: Deprecated parameter 'utf8' [ 1263.995601][T26825] exfat: Deprecated parameter 'namecase' [ 1264.014630][T26821] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1264.019803][T26825] exfat: Deprecated parameter 'namecase' [ 1264.072566][T26821] ntfs3: loop3: ino=21, The size of extended attributes must not exceed 64KiB [ 1264.090340][T26827] loop0: detected capacity change from 0 to 1024 [ 1264.108885][T26825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 1264.490887][ T3054] hfsplus: b-tree write err: -5, ino 25 [ 1264.496735][ T3054] hfsplus: b-tree write err: -5, ino 4 [ 1264.522753][ T3054] hfsplus: b-tree write err: -5, ino 2 [ 1264.961804][T26853] binder: 26851:26853 ioctl c00c620f 0 returned -14 [ 1265.474377][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9265'. [ 1265.483536][T26863] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9265'. [ 1265.517043][T26863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9265'. [ 1265.654902][T26867] netlink: 'syz.3.9266': attribute type 1 has an invalid length. [ 1266.425574][ T8999] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1266.646220][ T8999] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 1266.654799][ T8999] usb 2-1: config 0 has no interface number 0 [ 1266.675580][ T8999] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1266.687804][ T8999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.709409][ T8999] usb 2-1: Product: syz [ 1266.718059][ T8999] usb 2-1: Manufacturer: syz [ 1266.722853][ T8999] usb 2-1: SerialNumber: syz [ 1266.743636][ T8999] usb 2-1: config 0 descriptor?? [ 1266.796815][T26877] loop3: detected capacity change from 0 to 32768 [ 1266.866796][T26877] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1267.077620][ C1] hrtimer: interrupt took 76742 ns [ 1267.087783][T26877] XFS (loop3): Ending clean mount [ 1267.117303][T26877] XFS (loop3): Quotacheck needed: Please wait. [ 1267.208325][ T8999] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1267.239018][ T8999] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1267.249906][ T8999] asix: probe of 2-1:0.251 failed with error -5 [ 1267.268695][ T8999] usb 2-1: USB disconnect, device number 49 [ 1267.278848][T26877] XFS (loop3): Quotacheck: Done. [ 1267.339577][T26891] loop2: detected capacity change from 0 to 32768 [ 1267.391957][T26891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.9279 (26891) [ 1267.463985][T26907] ±ÿ: renamed from lo [ 1267.484620][T26891] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1267.509755][T26891] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1267.534853][T26891] BTRFS info (device loop2): force clearing of disk cache [ 1267.541378][ T5774] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1267.556354][T26891] BTRFS info (device loop2): allowing degraded mounts [ 1267.588342][T26891] BTRFS info (device loop2): enabling auto defrag [ 1267.653125][T26891] BTRFS info (device loop2): enabling ssd optimizations [ 1267.676276][T26891] BTRFS info (device loop2): using spread ssd allocation scheme [ 1267.684008][T26891] BTRFS info (device loop2): using free space tree [ 1267.995819][T26891] BTRFS info (device loop2): auto enabling async discard [ 1268.015075][T26891] BTRFS info (device loop2): rebuilding free space tree [ 1268.095701][T26927] netlink: 'syz.1.9286': attribute type 21 has an invalid length. [ 1268.104191][T26927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9286'. [ 1268.449109][ T5775] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1268.619557][ T6515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (6515) [ 1268.683663][T26935] loop1: detected capacity change from 0 to 4096 [ 1268.812888][T26935] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1268.906444][T26935] ntfs3: loop1: Failed to load $Extend (-22). [ 1268.950158][T26935] ntfs3: loop1: Failed to initialize $Extend. [ 1270.072841][T26909] loop0: detected capacity change from 0 to 32768 [ 1270.112845][T26964] loop3: detected capacity change from 0 to 4096 [ 1270.131736][T26964] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 1270.216662][T26909] [ 1270.216662][T26909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.216662][T26909] [ 1270.335465][T26964] ntfs3: loop3: failed to convert "c46c" to cp866 [ 1270.393188][T26964] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1270.472696][T26909] [ 1270.472696][T26909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.472696][T26909] [ 1270.508045][T26909] [ 1270.508045][T26909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.508045][T26909] [ 1270.546127][T26909] [ 1270.546127][T26909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.546127][T26909] [ 1270.605891][ T113] [ 1270.605891][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.605891][ T113] [ 1270.638585][ T8999] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1270.673762][ T5776] [ 1270.673762][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.673762][ T5776] [ 1270.725343][ T5776] [ 1270.725343][ T5776] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1270.725343][ T5776] [ 1270.814389][T26977] loop3: detected capacity change from 0 to 512 [ 1270.879432][ T8999] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1270.895757][ T8999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.920060][ T8999] usb 3-1: Product: syz [ 1270.924333][ T8999] usb 3-1: Manufacturer: syz [ 1270.941873][ T8999] usb 3-1: SerialNumber: syz [ 1270.991698][T26977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1271.021922][ T8999] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1271.055178][ T788] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1271.065156][T26977] ext4 filesystem being mounted at /2384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1271.310606][T26977] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 1271.357076][T26977] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1271.391799][T26977] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.9309: Failed to acquire dquot type 0 [ 1271.418536][ C1] usb 3-1: ath9k_htc: invalid pkt_len (fd7e) [ 1271.621243][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1271.658698][ T8999] usb 3-1: USB disconnect, device number 58 [ 1272.110393][T27011] [U] ªeÍ[è¯Â¦Ooj°4Ò¥¶1=³Ú™ªß7yoÕü|.Â2àõ-s^Š™²{ [ 1272.198579][ T788] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1272.198811][ T788] ath9k_htc: Failed to initialize the device [ 1272.202413][ T8999] usb 3-1: ath9k_htc: USB layer deinitialized [ 1272.482253][T27017] loop0: detected capacity change from 0 to 4096 [ 1272.497745][ T5843] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1272.579764][T27017] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1272.626172][T27017] ntfs3: loop0: Failed to load $Extend (-22). [ 1272.626205][T27017] ntfs3: loop0: Failed to initialize $Extend. [ 1272.691008][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 1272.695652][ T5843] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1272.695688][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.695711][ T5843] usb 4-1: Product: syz [ 1272.695729][ T5843] usb 4-1: Manufacturer: syz [ 1272.695746][ T5843] usb 4-1: SerialNumber: syz [ 1272.756097][ T5843] usb 4-1: config 0 descriptor?? [ 1272.761093][ T5843] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1273.221657][ T5843] gspca_m5602: Failed to find a sensor [ 1273.242018][ T5843] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 1273.277534][ T5843] usb 4-1: USB disconnect, device number 73 [ 1273.695205][T27049] netlink: 'syz.1.9340': attribute type 28 has an invalid length. [ 1273.872816][ T28] audit: type=1326 audit(1780831185.017:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1273.955003][ T28] audit: type=1326 audit(1780831185.017:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.031111][T27059] xt_recent: Unsupported userspace flags (000000de) [ 1274.060304][ T28] audit: type=1326 audit(1780831185.017:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.084601][ C1] vkms_vblank_simulate: vblank timer overrun [ 1274.186516][ T28] audit: type=1326 audit(1780831185.045:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.283126][ T28] audit: type=1326 audit(1780831185.045:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.344321][ T28] audit: type=1326 audit(1780831185.045:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.423310][ T28] audit: type=1326 audit(1780831185.045:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.502064][T27076] cgroup: none used incorrectly [ 1274.513581][ T28] audit: type=1326 audit(1780831185.045:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27054 comm="syz.0.9346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd53839ce59 code=0x7ffc0000 [ 1274.938334][T27090] ALSA: mixer_oss: invalid OSS volume '' [ 1274.988050][T27089] loop0: detected capacity change from 0 to 1024 [ 1275.061805][T27089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1275.327023][T27100] loop3: detected capacity change from 0 to 4096 [ 1275.374698][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.483838][T27100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1275.554972][T27112] netlink: 'syz.0.9370': attribute type 46 has an invalid length. [ 1275.573774][T27112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9370'. [ 1275.619540][T27114] loop1: detected capacity change from 0 to 64 [ 1275.709790][T27116] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1275.741417][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1276.092526][T27126] tunl0: left promiscuous mode [ 1276.241423][T27132] netlink: 'syz.1.9380': attribute type 1 has an invalid length. [ 1276.242012][T27126] syz_tun: left promiscuous mode [ 1276.267206][T27126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1276.292770][T27132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1276.540275][T27138] loop2: detected capacity change from 0 to 512 [ 1276.601926][T27138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1276.661927][T27138] ext4 filesystem being mounted at /2333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1276.761454][T27138] EXT4-fs error (device loop2): ext4_get_inode_usage:888: inode #12: comm syz.2.9382: corrupted xattr block 6: invalid header [ 1276.919457][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1277.457973][T27162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1277.510486][T27144] loop0: detected capacity change from 0 to 32768 [ 1277.611237][T27144] ERROR: (device loop0): diAllocAG: numfree > numinos [ 1277.611237][T27144] [ 1277.650509][T27144] ERROR: (device loop0): remounting filesystem as read-only [ 1277.664011][T27167] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 1277.693205][T27144] ialloc: diAlloc returned -5! [ 1277.708656][T27167] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 1278.096493][T27150] loop1: detected capacity change from 0 to 32768 [ 1278.216727][T27150] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 1278.254386][T27150] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1278.655031][T27200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9407'. [ 1278.743174][T27150] XFS (loop1): Ending clean mount [ 1278.887904][ T5777] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1279.933795][T27242] program syz.3.9428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1280.386667][ T5837] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1280.513486][T27265] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9440'. [ 1280.617855][ T5837] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1280.638515][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1280.660630][ T5837] usb 3-1: Product: syz [ 1280.671270][ T5837] usb 3-1: Manufacturer: syz [ 1280.676798][ T5837] usb 3-1: SerialNumber: syz [ 1280.688919][ T5837] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1280.996913][ T23] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1281.140857][ T5837] vp7045: USB control message 'in' went wrong. [ 1281.162811][ T5837] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1281.195771][ T5837] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1281.210380][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1281.223879][ T5837] usb 3-1: USB disconnect, device number 59 [ 1281.227681][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1281.250624][ T23] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.275635][ T23] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1281.301015][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.316758][ T23] usb 2-1: Product: syz [ 1281.341870][ T23] usb 2-1: Manufacturer: syz [ 1281.353176][ T23] usb 2-1: SerialNumber: syz [ 1281.376432][T27290] netlink: 'syz.0.9452': attribute type 7 has an invalid length. [ 1281.384898][T27290] netlink: 'syz.0.9452': attribute type 8 has an invalid length. [ 1281.400843][T27290] netlink: 'syz.0.9452': attribute type 15 has an invalid length. [ 1281.591694][ T23] usb 2-1: Invalid number of CPorts: 0 [ 1281.602239][ T23] es2_ap_driver: probe of 2-1:7.0 failed with error -22 [ 1281.843963][ T5843] usb 2-1: USB disconnect, device number 50 [ 1281.940686][T27288] loop3: detected capacity change from 0 to 32768 [ 1281.952879][T27288] [ 1281.952879][T27288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1281.952879][T27288] [ 1282.002699][T27288] [ 1282.002699][T27288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1282.002699][T27288] [ 1282.035602][T27288] [ 1282.035602][T27288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1282.035602][T27288] [ 1282.058483][T27288] [ 1282.058483][T27288] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1282.058483][T27288] [ 1282.074652][ T114] [ 1282.074652][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1282.074652][ T114] [ 1282.179999][T27306] loop2: detected capacity change from 0 to 8 [ 1282.186431][ T5774] [ 1282.186431][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1282.186431][ T5774] [ 1282.207309][ T5774] [ 1282.207309][ T5774] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1282.207309][ T5774] [ 1282.676708][T27318] loop2: detected capacity change from 0 to 1024 [ 1282.799753][T27318] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1282.845427][T27318] hfsplus: xattr searching failed [ 1282.852331][T27318] syz.2.9465: attempt to access beyond end of device [ 1282.852331][T27318] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1282.891301][T27318] Buffer I/O error on dev loop2, logical block 458752, async page read [ 1282.933985][T27318] hfsplus: unable to mark blocks free: error -5 [ 1282.963104][T27318] hfsplus: can't free extent [ 1283.444451][T27342] Sensor A: ================= START STATUS ================= [ 1283.484091][T27342] Sensor A: Test Pattern: 75% Colorbar [ 1283.484644][T27344] usb usb8: usbfs: process 27344 (syz.0.9479) did not claim interface 0 before use [ 1283.497456][T27342] Sensor A: Show Information: All [ 1283.506536][T27342] Sensor A: Vertical Flip: true [ 1283.549891][T27342] Sensor A: Horizontal Flip: true [ 1283.564565][T27342] Sensor A: Brightness: 128 [ 1283.580295][T27342] Sensor A: Contrast: 128 [ 1283.585896][T27346] loop3: detected capacity change from 0 to 256 [ 1283.592328][T27342] Sensor A: Hue: 0 [ 1283.603112][T27342] Sensor A: Saturation: 128 [ 1283.614291][T27342] Sensor A: ================== END STATUS ================== [ 1283.665573][T27346] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1283.749293][T27346] exFAT-fs (loop3): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 1283.807566][T27346] exFAT-fs (loop3): Filesystem has been set read-only [ 1284.182398][T27365] xt_TCPMSS: Only works on TCP SYN packets [ 1284.236529][T27368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9491'. [ 1284.261889][T27369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9490'. [ 1284.448329][T27376] loop1: detected capacity change from 0 to 512 [ 1284.536952][T27376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.577719][T27376] ext4 filesystem being mounted at /2380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1284.789788][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1285.121820][T27394] loop2: detected capacity change from 0 to 4096 [ 1285.161753][T27394] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 1285.248783][T27394] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 1285.305682][T27404] Process accounting paused [ 1285.441753][T27409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9510'. [ 1285.452616][T27409] netlink: 'syz.0.9510': attribute type 7 has an invalid length. [ 1285.470214][T27409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9510'. [ 1285.612945][T27415] loop3: detected capacity change from 0 to 256 [ 1285.850889][ T5837] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1285.962945][T27425] Cannot find del_set index 2 as target [ 1286.068016][ T5837] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1286.090629][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.109056][ T5837] usb 3-1: Product: syz [ 1286.124222][ T5837] usb 3-1: Manufacturer: syz [ 1286.135018][ T5837] usb 3-1: SerialNumber: syz [ 1286.167860][ T5837] r8152-cfgselector 3-1: config 0 descriptor?? [ 1286.197623][T27427] loop0: detected capacity change from 0 to 4096 [ 1286.270033][T27427] __ntfs_error: 1 callbacks suppressed [ 1286.270054][T27427] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1286.366801][T27427] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1286.401742][T27427] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1286.458592][T27427] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1286.496211][T27427] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1286.532305][T27427] ntfs: volume version 3.1. [ 1286.562749][T27427] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1286.591902][T27427] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1286.611586][T27427] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1286.624230][T27427] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1286.647587][T27427] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1286.743967][ T5837] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1286.757108][ T5837] r8152-cfgselector 3-1: USB disconnect, device number 60 [ 1287.101035][T27451] netlink: 'syz.0.9530': attribute type 1 has an invalid length. [ 1287.110043][T27451] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.9530'. [ 1287.164247][ T8] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1287.321344][T27458] loop3: detected capacity change from 0 to 1024 [ 1287.374724][T27458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1287.389024][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1287.430883][ T8] usb 2-1: not running at top speed; connect to a high speed hub [ 1287.472763][T27465] loop0: detected capacity change from 0 to 1024 [ 1287.477904][ T8] usb 2-1: config 1 has an invalid interface number: 93 but max is 0 [ 1287.526730][T27465] hfsplus: request for non-existent node 33423360 in B*Tree [ 1287.542350][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.581271][ T8] usb 2-1: config 1 has no interface number 0 [ 1287.587824][T27465] hfsplus: request for non-existent node 33423360 in B*Tree [ 1287.599966][T27458] EXT4-fs warning (device loop3): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 1287.625005][ T8] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1287.636405][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.644568][ T8] usb 2-1: Product: syz [ 1287.655894][ T8] usb 2-1: Manufacturer: syz [ 1287.664774][ T8] usb 2-1: SerialNumber: syz [ 1287.800187][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.991457][ T8] peak_usb 2-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1288.010479][ T8] peak_usb 2-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1288.096590][ T8] peak_usb: probe of 2-1:1.93 failed with error -22 [ 1288.138839][ T8] usb 2-1: USB disconnect, device number 51 [ 1289.052769][T27509] loop0: detected capacity change from 0 to 512 [ 1289.108798][T27509] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1289.180043][T27509] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 1289.227793][T27509] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.9558: inode #15: comm syz.0.9558: iget: illegal inode # [ 1289.286298][T27509] EXT4-fs (loop0): Remounting filesystem read-only [ 1289.307565][T27509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1289.426342][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.519239][T27524] tmpfs: Bad value for 'mpol' [ 1289.769388][T27527] ipvlan0: entered promiscuous mode [ 1289.775392][T27527] ipvlan0: entered allmulticast mode [ 1289.804784][T27527] veth0_vlan: entered allmulticast mode [ 1289.926372][T27530] loop0: detected capacity change from 0 to 4096 [ 1289.985737][T27530] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1290.051005][T27530] ntfs3: loop0: Failed to load $Extend (-22). [ 1290.057270][T27530] ntfs3: loop0: Failed to initialize $Extend. [ 1290.482958][T27550] loop1: detected capacity change from 0 to 256 [ 1291.182372][T27571] loop0: detected capacity change from 0 to 128 [ 1291.237292][T27571] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 1291.432806][T27577] netlink: 'syz.2.9586': attribute type 1 has an invalid length. [ 1291.746735][T27583] loop1: detected capacity change from 0 to 4096 [ 1291.858602][T27583] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1291.937688][T27583] ntfs3: loop1: Failed to load $Extend (-22). [ 1291.974774][T27583] ntfs3: loop1: Failed to initialize $Extend. [ 1292.843041][T27553] loop3: detected capacity change from 0 to 65536 [ 1292.919069][T27553] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1293.046834][T27553] XFS (loop3): Ending clean mount [ 1293.061612][T27553] XFS (loop3): Quotacheck needed: Please wait. [ 1293.199780][ T3463] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x2e5/0x11d0, inode 0x25 dinode [ 1293.252049][ T3463] XFS (loop3): Unmount and run xfs_repair [ 1293.262287][ T3463] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 1293.270865][ T3463] 00000000: 49 4e a1 ff 03 01 00 00 00 00 00 00 00 00 00 00 IN.............. [ 1293.300151][ T3463] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1293.304052][T27636] ip6gre1: entered promiscuous mode [ 1293.315952][T27636] ip6gre1: entered allmulticast mode [ 1293.319991][ T3463] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d 4.Xhz.DM4.Xhz.DM [ 1293.364603][ T3463] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 27 4.Xhz.DM.......' [ 1293.396150][ T3463] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1293.418239][ T3463] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 0c 44 49 b4 .............DI. [ 1293.428444][ T3463] 00000060: ff ff ff ff f1 fd ce d1 00 00 00 00 00 00 00 02 ................ [ 1293.471950][ T3463] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 1293.547326][T27553] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1293.586470][T27641] ieee802154 phy0 wpan0: encryption failed: -90 [ 1293.897977][ T5774] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1294.018396][T27651] netlink: 'syz.0.9614': attribute type 21 has an invalid length. [ 1294.473250][T27662] overlayfs: workdir and upperdir must be separate subtrees [ 1294.758417][T27669] loop2: detected capacity change from 0 to 1024 [ 1294.853255][T27669] ------------[ cut here ]------------ [ 1294.858981][T27669] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1294.885804][T27669] WARNING: CPU: 1 PID: 27669 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 1294.901806][T27669] Modules linked in: [ 1294.906700][T27669] CPU: 1 PID: 27669 Comm: syz.2.9623 Not tainted syzkaller #0 [ 1294.914498][T27669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1294.924697][T27669] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 1294.930079][T27669] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 84 be fa 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b6 ca 8a 48 c7 c6 20 b7 ca 8a e8 1b 17 c0 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 1294.950059][T27669] RSP: 0018:ffffc900054cf9a0 EFLAGS: 00010246 [ 1294.956176][T27669] RAX: f87a89a93b399100 RBX: ffff88807bebe828 RCX: 0000000000080000 [ 1294.964245][T27669] RDX: ffffc9000d31b000 RSI: 0000000000006e3a RDI: 0000000000006e3b [ 1294.972716][T27669] RBP: ffffc900054cfb00 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1294.980872][T27669] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 1294.988910][T27669] R13: 1ffff92000a99f44 R14: dffffc0000000000 R15: 0000000000000000 [ 1294.996945][T27669] FS: 00007f2510eee6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1295.005932][T27669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.013121][T27669] CR2: 00007fd5385e8158 CR3: 0000000019a6e000 CR4: 00000000003506e0 [ 1295.021248][T27669] Call Trace: [ 1295.024599][T27669] [ 1295.027572][T27669] ? kasan_set_track+0x4e/0x70 [ 1295.032594][T27669] ? __d_alloc+0xb7/0x730 [ 1295.036980][T27669] ? reiserfs_write_lock+0x79/0xd0 [ 1295.042148][T27669] ? filename_create+0x23e/0x480 [ 1295.047176][T27669] ? do_symlinkat+0xc5/0x400 [ 1295.051807][T27669] ? mutex_lock_nested+0x20/0x20 [ 1295.056823][T27669] ? verify_lock_unused+0x140/0x140 [ 1295.062073][T27669] reiserfs_write_lock+0x79/0xd0 [ 1295.067111][T27669] reiserfs_lookup+0x183/0x580 [ 1295.071915][T27669] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1295.077959][T27669] ? d_alloc+0x1eb/0x250 [ 1295.082259][T27669] ? do_raw_spin_unlock+0x121/0x230 [ 1295.087840][T27669] ? _raw_spin_unlock+0x28/0x40 [ 1295.092730][T27669] ? d_alloc+0x1eb/0x250 [ 1295.097233][T27669] lookup_one_qstr_excl+0x112/0x250 [ 1295.103003][T27669] filename_create+0x23e/0x480 [ 1295.108295][T27669] ? kern_path_create+0x50/0x50 [ 1295.113300][T27669] ? __virt_addr_valid+0x469/0x540 [ 1295.119240][T27669] do_symlinkat+0xc5/0x400 [ 1295.123697][T27669] ? vfs_symlink+0x2b0/0x2b0 [ 1295.128501][T27669] ? getname_flags+0x20a/0x500 [ 1295.133301][T27669] __x64_sys_symlink+0x7e/0x90 [ 1295.138081][T27669] do_syscall_64+0x55/0xb0 [ 1295.142547][T27669] ? clear_bhb_loop+0x40/0x90 [ 1295.147343][T27669] ? clear_bhb_loop+0x40/0x90 [ 1295.152165][T27669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.158108][T27669] RIP: 0033:0x7f250ff9ce59 [ 1295.162584][T27669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.182930][T27669] RSP: 002b:00007f2510eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1295.191511][T27669] RAX: ffffffffffffffda RBX: 00007f2510215fa0 RCX: 00007f250ff9ce59 [ 1295.199574][T27669] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000001640 [ 1295.207602][T27669] RBP: 00007f2510032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1295.215651][T27669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.223761][T27669] R13: 00007f2510216038 R14: 00007f2510215fa0 R15: 00007ffd4668adc8 [ 1295.232205][T27669] [ 1295.235372][T27669] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1295.242685][T27669] CPU: 1 PID: 27669 Comm: syz.2.9623 Not tainted syzkaller #0 [ 1295.250152][T27669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1295.260216][T27669] Call Trace: [ 1295.263514][T27669] [ 1295.266454][T27669] dump_stack_lvl+0x18c/0x250 [ 1295.271150][T27669] ? show_regs_print_info+0x20/0x20 [ 1295.276382][T27669] ? load_image+0x420/0x420 [ 1295.280926][T27669] panic+0x2dc/0x730 [ 1295.284865][T27669] ? bpf_jit_dump+0xd0/0xd0 [ 1295.289402][T27669] __warn+0x2e0/0x470 [ 1295.293496][T27669] ? __mutex_lock+0xb85/0xcc0 [ 1295.298271][T27669] ? __mutex_lock+0xb85/0xcc0 [ 1295.302964][T27669] report_bug+0x2be/0x4f0 [ 1295.307306][T27669] ? __mutex_lock+0xb85/0xcc0 [ 1295.312079][T27669] ? __mutex_lock+0xb85/0xcc0 [ 1295.316768][T27669] ? __mutex_lock+0xb87/0xcc0 [ 1295.321467][T27669] handle_bug+0xcf/0x120 [ 1295.325720][T27669] exc_invalid_op+0x1a/0x50 [ 1295.330325][T27669] asm_exc_invalid_op+0x1a/0x20 [ 1295.335303][T27669] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 1295.340623][T27669] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 84 be fa 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b6 ca 8a 48 c7 c6 20 b7 ca 8a e8 1b 17 c0 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 1295.360262][T27669] RSP: 0018:ffffc900054cf9a0 EFLAGS: 00010246 [ 1295.366364][T27669] RAX: f87a89a93b399100 RBX: ffff88807bebe828 RCX: 0000000000080000 [ 1295.374533][T27669] RDX: ffffc9000d31b000 RSI: 0000000000006e3a RDI: 0000000000006e3b [ 1295.382525][T27669] RBP: ffffc900054cfb00 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 1295.390599][T27669] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 1295.398581][T27669] R13: 1ffff92000a99f44 R14: dffffc0000000000 R15: 0000000000000000 [ 1295.406801][T27669] ? kasan_set_track+0x4e/0x70 [ 1295.411591][T27669] ? __d_alloc+0xb7/0x730 [ 1295.415940][T27669] ? reiserfs_write_lock+0x79/0xd0 [ 1295.421068][T27669] ? filename_create+0x23e/0x480 [ 1295.426012][T27669] ? do_symlinkat+0xc5/0x400 [ 1295.430704][T27669] ? mutex_lock_nested+0x20/0x20 [ 1295.435664][T27669] ? verify_lock_unused+0x140/0x140 [ 1295.440879][T27669] reiserfs_write_lock+0x79/0xd0 [ 1295.445831][T27669] reiserfs_lookup+0x183/0x580 [ 1295.450605][T27669] ? reiserfs_init_priv_inode+0x1a0/0x1a0 [ 1295.456413][T27669] ? d_alloc+0x1eb/0x250 [ 1295.460680][T27669] ? do_raw_spin_unlock+0x121/0x230 [ 1295.465898][T27669] ? _raw_spin_unlock+0x28/0x40 [ 1295.470939][T27669] ? d_alloc+0x1eb/0x250 [ 1295.475506][T27669] lookup_one_qstr_excl+0x112/0x250 [ 1295.480727][T27669] filename_create+0x23e/0x480 [ 1295.485525][T27669] ? kern_path_create+0x50/0x50 [ 1295.490383][T27669] ? __virt_addr_valid+0x469/0x540 [ 1295.495509][T27669] do_symlinkat+0xc5/0x400 [ 1295.499946][T27669] ? vfs_symlink+0x2b0/0x2b0 [ 1295.504640][T27669] ? getname_flags+0x20a/0x500 [ 1295.509426][T27669] __x64_sys_symlink+0x7e/0x90 [ 1295.514198][T27669] do_syscall_64+0x55/0xb0 [ 1295.518713][T27669] ? clear_bhb_loop+0x40/0x90 [ 1295.523408][T27669] ? clear_bhb_loop+0x40/0x90 [ 1295.528103][T27669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1295.534012][T27669] RIP: 0033:0x7f250ff9ce59 [ 1295.538437][T27669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.558054][T27669] RSP: 002b:00007f2510eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1295.566481][T27669] RAX: ffffffffffffffda RBX: 00007f2510215fa0 RCX: 00007f250ff9ce59 [ 1295.574463][T27669] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000001640 [ 1295.582537][T27669] RBP: 00007f2510032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1295.590526][T27669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1295.598506][T27669] R13: 00007f2510216038 R14: 00007f2510215fa0 R15: 00007ffd4668adc8 [ 1295.606588][T27669] [ 1295.609847][T27669] Kernel Offset: disabled [ 1295.614172][T27669] Rebooting in 86400 seconds..