last executing test programs: 11m54.410148244s ago: executing program 2 (id=8648): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008000) 11m54.230939908s ago: executing program 2 (id=8650): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000300)=""/212, 0xd4, 0x37) 11m54.023508483s ago: executing program 2 (id=8653): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e22, @private=0xa010101}}) 11m53.826661937s ago: executing program 2 (id=8656): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x45, 0x6188, &(0x7f0000004940)="$eJzs3c1vHGcdB/Df7K7XL6Wp1UNVIoTcNryU0ryWECjQ9AAHLhxQriiR61YRKaAkoLSKiCtfOPBHgJA4IsSRE39AD1y58QcQKQGBeuqg8T6PM56uvXbd3Vl7Ph/JmfntM+N9Jt+dffHM7BMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPzwBz++UETE9V+lG1YjPhf9iF7EclWvRcTy2mpefhARz8d2czwXEQuLEdX62/88E/FaRHx4KuLR4/vr1c0XD9iP7//5H3/4yVM/+vufFs797y93+6/vtdy9e7/9718fHG2bAQAAoGvKsiyL9DH/dPp832u7UwDATOTX/zLJt6vnrt6cs/6o1Wq1+hjWdeV4D+pFRGzW16neMzgcDwDHzGZ81HYXaJH8O20QEU+13QlgrhVtd4CpePT4/nqR8i3qrwdro/Z8Lsiu/DeLnes79ppO0jzHZFaPr63ox7N79Gd5Rn2YJzn/XjP/66P2YVpu2vnPyl75D0eXPnVOzr/fzL/h5OTfG5t/V+X8B4fKvy9/AAAAAACYY/nv/6stH/9dPPqmHMh+x3/XZtQHAAAAAAAAAPisHXX8vx3G/wMAAIC5VX1Wr/zu1JPb9voutur2a0XE043lgY5JF8ustN0PAAAAAAAAAAAAAOiSwegc3mtFxEJEPL2yUpZl9VPXrA/rqOsfd13ffuiytp/kAQBg5MNTjWv5i4iliLiWvutvYWVlpSyXllfKlXJ5Mb+fHS4ulcu1z7V5Wt22ODzAG+LBsKx+2VJtvbpJn5cntTd/X3Vfw7J/gI7NRouBA0BEjF6NHnlFOmHK8plo+10Ox4P9/+Sx/3MQbT9OAQAAgOkry7Is0td5n07H/HttdwoAmIn8+t88LqBWq9Vqtfrk1XXleA/qRURs1tep3jMYjh8AjpnN+KjtLtAi+XfaICKeb7sTwFwr2u4AU/Ho8f31IuVb1F8P0vju+VyQXflvFtvr5fXHTSdpnmMyq8fXVvTj2T3689yM+jBPcv69Zv7XR+3DtNy085+VvfKvtnO1hf60Leffb+bfcHLy743Nv6ty/oND5d+XPwAAAAAAzLH89//VuTr+O/y0mzPRfsd/16Z2rwAAAAAAAAAwXY8e31/P173m4/9fGLOc6z9Pppx/If9Oyvn3Gvl/tbFcvzb/8M0n+f/78f31P9791+fz9KD5L+aZIj2yivSIKNI9FYM0PcrWfdLWQn9Y3dNC0esP0jk/5cLbcTNuxUac37VsL/1/PGm/sKu96unCdnvZH7Vf3NU+SO3Vz6j90q72hXSmU7mcf//ZWI+fx614a7u9alucsP1LE9rLCe05/378Z6fP9v/uyPkPaj9V/iupvWhMKw8/6H1iv69Px93P1Ztf/M356W/ORFvR39m2umr7XmyhP9v/J08N45d3Nm6fvXfj7t3bFyJNdt16MdLkM5bzz89TO8//L43a8/N+fX99+MHw0PnPi60Y7Jn/S7X5antfnnHf2pDzH6afnP9bqX38/n8s868e3vvu/6/Mvk8AAAAAAAAAAAAAAACwr7Isty8RvRoRl9P1P21dmwkAzNbV9JUbZZJvn1Xdn/H9qdXHvC7mrD8zrT8u56s/avVxrOvK8d6oFxHxt/o6lyPi1+N+GQAwzz6OiH+23QlaI/8Oy9/3V03PtN0ZYKbuvPf+T2/curVx+07bPQEAAAAAAAAAPq08/udabfzvM2VZPmgst2v81zdj7ajjfw7yzM4Ao3sMVN0//DbtZ6s37Pdqw42/EHuN/72wM7ff+N+DCfe3MKF9OKF9cUL70oT2sRd61OT8X6iNd34mIk43hl8/AeO/bttv/NfmmPddkPN/sfZ4rvL/SmO5ev7l749z/r1d+Z+7++4vzt157/1Xb757452NdzZ+dunChfOXLl++cuXKubdv3to4P/q3xR5PV84/j33tPNBuyfnnzOXfLTn/L6Va/t2S8/9yquXfLTn//H5P/t2S88+ffeTfLTn/l1Mt/27J+X8t1fLvlpz/K6mWf7fk/L+eavl3S87/1VTLv1ty/mdTLf9uyfmfS/UB81+edr+YjZx/PsJl/++WnH8+s0H+3ZLzv5hq+XdLzv9SquXfLTn/11It/27J+X8j1fLvlpz/5VTLv1ty/t9Mtfy7Jed/JdXy75ac/7dSLf9uyfl/O9WHyn91ev1iNnL+r6fa/t8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfyPV8u+WJ9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq6zvh/42VevnTcDIX8nfwNrxxjjbLLrl/iF1sWE14a3EgiFlmK73rVZ8BteuyQ0kh0FSiSMGlW0DRdtAUVtbiqsKhe0CigXqFWlSqS9oDeICpWLqAooIFWiVchWc+Z5np05Ozuz6x3bM+d8PlL8886cmXPmzJmz+13nOwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKNNb5/50kCWZbX/8j/WZ9mNtb+vHV+fX/aW672FAAAAwGr9Kv/zpVvSBQeXcaOGZf7p9d9/Zn5+fj772NCfjnx1fj5dMZ5lI2uyLL8uuvzjjw80LhM8lo0NDDZ8Pdhh9UMdrh/ucP1Ih+tHO1y/psP1Yx2uX7QDFllb/31Mfmdb8r+ur+/S7NZsJL9uS4tbPTawZnAw/i4nN5DfZn7kWDabnchmsqmm5evLDuTLP7uptq73ZHFdgw3r2lg7Qn7+yNG4DQNhH29pWtfCfUY/fVs2/oufP3L0r8+9eHur2XE3NN1ffTu3ba5t5xfCJfVtHcjWpH0St3OwYTs3tnhOhpq2cyC/Xe3vxe18aZnbObSwmddU8Tkfywbzvz+f76fhxl/rpf20MVz2yzuzLLu4sNnFZRatKxvM1jVdMrjw/IzVj8jafdQOpVdnwys6Tjct4zitzektzcdp8TURn/9N4XbDS2xD49P000dHG573l+ev5DiNao96qddK8Rjs9mulV47BeFw8nz/ox1seg1vC439k69LHYMtjp8UxmB53wzG4udMxODg6lG9zehIG8tssHIM7mpYfytc0kM8XtrY/BifPnTwzOffw5++ePXnk+MzxmVO7duyY2rVnz759+yaPzZ6Ymar/eYV7u/etywbTa2Bz2HfxNfCmwrKNh+r8N0YXnX+v9HU41uZ1uL6wbLdfh8PFBzdwbV6Qi4/p+mvjI7WdPnZpMFviNZY/P9tX/zpMj7vhdTjc8Dps+T2lxetweBmvw9oyZ7Yv72eW4Yb/Wm3D0t8LVncMrm84Bos/jxSPwW7/PNIrx+BYOC5+uH3p7wUbw/Y+PrHSn0eGFh2D6eGGc0/tkvTz/ti+fLQ6Lu+oXXHDaHZ+bubsPQ8dOXfu7I4sjGviNQ3HSvF4XdfwmLJFx+vgio/Xg7Ovf/yOFpevD/tq7O7aH2NLPle1ZXbf0/65yr+7td6fTZfuzMLosmu9P1t9N6/tz9Es+9r3Hn3gO4987e1L7s9a3vzC5Op/Fk+5tOH8O7LE+Tfm/lfq60t39djQyHD99TuU9s5I0/m4+akazs9dA/m6X5pc3vl4JPx3rc/Ht7Y5H28oLNvt8/FI8cHF8/FAp992rE7x+RwLx8mJqfbn49oyG3au9Jgcbns+vjPMgbD/3xySQspFDcfOUsdtWtfw8Eh4XMNxDc3H6a6m5UdCNqut6+mdV3acbruzfl9D6dEtuFbH6Xhh2W4fp+l3X0sdpwOdfvt2ZYrP51g4Lm7d1f44rS3z3O7VnzvXxr82nDtHOx2DI0OjtW0eSQdhfr7P5tfGY/Ce7Gh2OjuRTefXjubH00C+rol7l3cMjhae/6Krda7c0OYY3FZYttvHYPo+ttSxNzC8+MF3QfH5HAvHxZP3tj8Ga8u8Y293f3bdFi5JyzT87Fr8/dpSv/O6o7CbrtaxMhy283t72/9utrbMiX0rzZnt99Nd4ZIbWuyn4uu38TU12nA8T2fXZj9tCNv54r6l91Nte2rLfHX/Mo+ng1mWXfjsffnve8O/r/zd+R880/TvLq3+TefCZ+/72U3H/nEl2w9A/3ulPtbVv9c1/MvUcv79HwAAAOgLMfcPhpnI/wAAAFAaMffH/ys8kf8BAACgNGLuHw4zqUj+3/COF2dfuZClZv58EK9Pu+H++nKx4zoVvh6fX1C7/L6nZv77Hy4sb92DWZa9fP8ftlx+w/1xu+rGw3Zefmfz5Ys8c/ey1n34wQtpvY399a+H+4+PZ7mHQasK7lSWZc/e8pV8PeMfv5TP5+4/nM8HLj7+WG2Zl/bXv463f+E19eX/IpR/Dx470nT7F8J++EmYU+9tvT/i7b516c0b9350YX3xdgObb84f9pOfrN9vfJ+cJx6rLx/381Lb/50vP/2t2vIPvbH19l8YbL39T4f7fSrM/3ldffnG56D2dbzdF8P2x/XF293zze+23P7LX6ovf+Zd9eUOhxnXvy18veVdL8427q+HBo40Pa7s3fXl4vqnfvDH+fXx/uL9F7d/7NClpv1RPD6e+7f6/UwWlo+Xx/VEf19Yf+1+Go/PuP6n/+hw037utP7LD7zwutr9Ftd/V2G5M5/dnq9/4f6a37HpL7/4lZbri9tz8G/PND2egx8Kr+Ow/ic/GY7HcP3/Xq7fX/HdFQ5/qPn8E5f/+voLTY8nes8v6uu//Nbj+VwztnbdDTfedPPFN9T2XZY9v6Z+f53Wf/yvTjdt/zduq++PeH3s6BfXv5S4/rOfmzh1eu787HTaq4/ckr93zvvq2xO395Zwbi1+fej0uU/NnB2fGp/KsvHyvoXeFftmmD+rj4vtl55fdAbd/mB4Pu/482fXbf3XL8fL//0j9csvvbf+fetNYbknwuXrw/O3svUv9uSm2/LX98BzYQvnF79f8Gps3PJf+5a1YHj8xZ8L4vF+5rWfyvdD7br8+0Z8Xa9y+380Xb+fb4f9Oh/emXnzbQvra1w+vjfCpQ/XX++r3n/hNBef178Jz/f7f1K//7hd8fH+KPwc890Nzee7eHx8+8Jg8f7zd/G4GM4n2cX69XGpuL8vvXRby82L70OSXbw9//pP0v3cvqKHuZS5h+cmT8yeOv/Q5LmZuXOTcw9//tDJ0+dPnTuUv5fnoU93uv3C+Wldfn6antmzO8vPVqfr4yq73tt/5sGj03untk7PHDty/ti5B8/MnD1+dG7u6Mz03NYjx47NfK7T7WenD+zYuX/X3p0Tx2enD+zbv3/X/onZU6drm1HfqA72TH1m4tTZQ/lN5g7s3r/j3nt3T02cPD09c2Dv1NTE+U63z783TdRu/QcTZ2dOHDk3e3JmYm728zMHduzfs2dnx3cDPHnm2Nz45NnzpybPz82cnaw/lvFz+cW1732dbk85zf1H/efZooH6G/FlH7xrT3p/1pqnHl3yruqLFN5A9MXwXjT//Koz+5bzdcz9I2EmFcn/AAAAUAUx94+Gmcj/AAAAUBox968JM5H/AQAAoDRi7h8LM6lI/i9d/3/DhWWtX/9f/79xf+n/V6z//+Fe6//Xzxf6/92x2v69/n+g/6//r/+v/6//Txf0Wv8/5v61WVbJ/A8AAABVEHP/ujAT+R8AAABKI+b+G8JM5H8AAAAojZj7bwwzqUj+1//X/9f/1//X/2+9fv3//qT/357+fwf6/5NZtfr/F7u5/fr/+v8s1mv9/5j7bwozqUj+BwAAgCqIuf/mMBP5HwAAAEoj5v5bwkzkfwAAAOhPaxdfFHP/+jCTiuR//X/9f/1//X/9/9br1//vT/r/7en/d6D/7/P/9f/1/+mqXuv/x9z/qjCTiuR/AAAAqIKY+18dZvoFrPwPAAAAvWf4ym4Wc/9rwkwW5f8rXAEAAABw3cXcf2tWKIJX5N//9f/1//X/9f/1/1uvf/n9/6FM/7936P+3p//fgf6//r/+v/4/XdVr/f8892dj2WvDTCqS/wEAAKAKYu6/LcxE/gcAAIDeNrb8RWPu/3/FG8r/AAAAUBox928IM6lI/tf/1//X/9f/1/9vvX6f/9+f9P/b0//voNf6/4UjSP+/t7df/1//n8V6rf8fc//tYSYVyf8AAABQBTH33xFmIv8DAABAacTc///DTOR/AAAAKI2Y+zeGmVQk/+v/93j/P/b+9P/1//X/9f/1/5dF/789/f8Oeq3/X6D/39vbr/+v/89ivdb/j7n/dWEmFcn/AAAAUAUx978+zET+BwAAgNKIuf8NYSbyPwAAAJRGzP3jYSYVyf/6/z3e//f5//r/+v/6//r/K6L/357+fwf6//r/+v/6/3RVr/X/Y+7fFGZSkfwPAAAAVRBz/+YwE/kfAAAASiPm/jvDTOR/AAAAKI2Y+7eEmVQk/+v/6//r/+v/6/+3Xr/+f3/S/29vOf3//Jym/6//r/+v/6//Txf0Wv8/5v43hplUJP8DAABAFcTcvzXMRP4HAACA0oi5/01hJvI/AAAAlEbM/dvCTCqS//X/+6X/P6z/r/+v/194PPr/+v+t6P+35/P/O9D/1//X/9f/p6t6rf8fc/+bw0wqkv8BAACgCmLu3x5mIv8DAABAacTcf1eYifwPAAAApRFz/0SYSUXyv/5/v/T/ff5/pv/flf7/w7/U/9f/L7cq9P8/sdI7baD/34H+v/6//r/+P13Va/3/mPvvDjOpSP4HAACAKoi5/54wE/kfAAAASiPm/skwE/kfAAAASiPm/qkwk4rkf/1//X/9/2r1/1f9+f9vWLhf/f86/f/eUoX+/2ro/3eg/6//f937/yP6/5RKr/X/Y+7fEWZSkfwPAAAAVRBz/84wE/kfAAAASiPm/l1hJvI/AAAAlEbM/bvDTCqS//X/9f/1//X/ff5/6/Xr//cn/f/2ut//jw9R/1//X//f5//r/7NYr/X/Y+6/N8ykIvkfAAAAqiDm/j1hJvI/AAAAlEbM/XvDTOR/AAAAKI2Y+/eFmVQk/+v/6//r/+v/6/+3Xr/+f3/S/2/P5/93oP+v/6//r/9PV/Va/z/m/v1hJhXJ/wAAAFAFMfe/JcxE/gcAAIDSiLn/18JM5H8AAAAojZj7fz3MpCL5X/9f/1//X/9f/7/1+vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/QJhJRfI/AAAAVEHM/b8RZiL/AwAAQGnE3P/WMBP5HwAAAEoj5v6DYSYVyf/6//r/+v/6//r/rdev/9+f9P/b0//vQP9f/1//X/+fruq1/n/M/W8LM6lI/gcAAIAqiLn/vjAT+R8AAABKI+b+t4eZyP8AAABQGjH3vyPMpCL5X/9f/1//X/9f/7/1+vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmFcn/AAAAUAUx978rzET+BwAAgNKIuf/dYSbyPwAAAJRGzP3vCTOpSP7X/9f/1//X/9f/b71+/f/+pP/fnv5/B/r/Jev/j9+k/6//z9XSKgEtdmX9/xtfXnKFq+z/x9z/m2EmFcn/AAAAUAUx998fZiL/AwAAQGnE3P/eMBP5HwAAAEoj5v73hZlUJP/r/+v/6//r/+v/t16//n9/0v9vr8/6/7+6OVyu/1+n/9/b29+T/f8fL9X/n19TvL3+P1fDlfX/W+pK/z/m/veHmVQk/wMAAEAVxNz/gTAT+R8AAABKI+b+D4aZyP8AAABQGjH3/1aYSUXyv/5/bTsW2sv6//r/+QX6//r/+v99S/+/vT7r//v8/wL9/97e/p7s//v8f66zXuv/x9z/oTCTiuR/AAAAqIKY+x8IM5H/AQAAoDRi7v9wmIn8DwAAAKURc/9Hwkwqkv/1/33+v/6//r/+f+v16//3J/3/9vT/O9D/1//vtf7/f+r/0996rf8fc/+DYSYVyf8AAABQBTH3fzTMRP4HAACA0oi5/7fDTOR/AAAAKI2Y+z8WZlKR/K//3y/9/3H9f/1//f/C49H/1/9vRf+/Pf3/DvT/9f97rf/v8//pc73W/4+5/+NhJsvP/2PLXhIAAAC4LmLu/50wk4r8+z8AAABUQcz9vxtmIv8DAABAacTc/4kwk4rkf/3/fun/+/z/TP9f/7/wePT/9f9buXb9/3jm0f/X/9f/j/T/9f/1/ynqtf5/zP2/F2ZSkfwPAAAAVRBz/yfDTOR/AAAA6Aut/p/sopj7D4WZyP8AAABQGjH3Hw4zqUj+1//X/9f/79H+/59t/pcffv8Dh3fo/+v/6/+vyFXt/8eTTfz8/9qL3+f/6//r/yf6//r/+v8U9Vr/P+b+I2EmFcn/AAAAUAUx9/9+mIn8DwAAAKURc//RMBP5HwAAAEoj5v7pMJOK5H/9f/1//f8e7f/38ef/x/2h/9+sa/3/eNLV/2/p2n3+f/3rJ/T/r7D/P9ryUv1//f9+3n79f/1/Frsq/f/5NenClfb/Y+6fCTOpSP4HAACAKgi5f/BYfS5cIf8DAABAacTcfzzMRP4HAACA0oi5/1NhJhXJ//r/+v/6//r/Pv+/9fp7tv/v8//b0v9v72r1/9d3afv1//X/+3n79f/1/1ms1z7/P+b+2TCTiuR/AAAAqIKY+z8dZiL/AwAAQGnE3P+ZMBP5HwAAAEoj5v4TYSYVyf/6//r/+v/6//r/rdev/9+f9P/b653P/29N/1//v5+3X/9f/5/Feq3/H3P/yTCTiuR/AAAAqIKY+0+Fmcj/AP/H3n00W16VexzfB7vL7uIFOHBClUNfAgMd6wtw4MSBVlkORMWcaMwRcw6YMwZQbBMqigFMKGYxZ8WAGbXa0vM8T5+wz3+fbvc5Z/3X+nwmz73tbfa+Xkr40f29CwAAupG7/5K4xf4HAACAbuTuf0jcMsj+1//r/7vt/++h/9/r8/X/+v+e6f+nHW3/v3fUmfT/+v85f3/9v/6f3Vrr/3P3PzRuGWT/AwAAwAhy9z8sbrH/AQAAoBu5+y+NW+x/AAAA6Ebu/ofHLYPs/x39/8ZizP4/M179/0H2/xd4/1//r//X/x+8w+3/L//vf/Lp/73/r/8P+n/9v/6fnVrr/3P3PyJuGWT/AwAAwAhy9z8ybrH/AQAAoBu5+x8Vt9j/AAAA0I3c/Y+OWwbZ/97/9/5/t+//6//3/Hz9v/6/Z97/nzZS/3/pLRc++PZr73r6XD5f/z9C/3/DgX1//b/+n91a6/9z9z8mbhlk/wMAAMAIcvc/Nm6x/wEAAKAbufsfF7fY/wAAANCN3P2Pj1sG2f/6f/2//l//r/9f/vn6/3nS/08bqf8/n8/X/4/Q/x/c99f/6//ZrbX+P3f/E+KWQfY/AAAAjCB3/xPjFvsfAAAAupG7/7K4xf4HAACAbuTuPxW3DLL/9f8H3///W/+v/4+r/9f/6/8Pnv5/mv5/Bf2//l//r/9nrVrr/3P3Xx63DLL/AQAAYAS5+58Ut9j/AAAA0I3c/U+OW+x/AAAA6Ebu/qfELYPsf/2/9//1//p//f/yz9f/z5P+f9rh9//L/gq5N/3/7Pv/4/p//b/+n63Osf+/Y+I/ttfS/+fuf2rcMsj+BwAAgBHk7n9a3GL/AwAAQDdy9z89brH/AQAAoBu5+58Rtwyy//X/+v999f/xf+PL9P/6/y30/5v0/23R/09r5v3/jWNLf1j/P/v+3/v/+n/9P9u09v5/7v5nxi2D7H8AAAAYQe7+Z8Ut9j8AAAB0I3f/s+MW+x8AAAC6kbv/OXHLIPtf/6//9/6//l//v/zzp/r/01u+n/6/Lfr/ac30/3vQ/+v/5/z99f/6f3Zrrf/P3f/cuGWQ/Q8AAAAjyN1/Rdxi/wMAAEA3cvc/L26x/wEAAKAbufufH7cMsv+X9/9n/3X9//7o/7d/f/3/8j8/1tX/5x9R/z/Z/9/T+/9j0v9P0/+voP/X/+v/9+r/T676+fp/lmmt/8/d/4K4ZZD9DwAAACPI3f/CuMX+BwAAgG7k7n9R3GL/AwAAQDdy9784bhlk/3v/X/+v/59f/+/9/01H+f7/4tD7/2P6/33S/0/T/6+g/9f/6/+9/89atdb/5+5/SdwyyP4HAACAEeTuf2ncYv8DAADAPGz9vQM7f0NpyN3/srjF/gcAAIBu5O5/edwyyP7X/+v/9f/6/7H7/xMz6f+9/79f+v9p+v8Vjrb/3+i0/z/WWf9/5V4/v4X+/zL9P43Z1v9fd/bHj6r/z93/irhlkP0PAAAAI8jd/8q4xf4HAACAbuTuf1XcYv8DAABAN3L3vzpuGWT/H3j/f3Lvz9b/6//1//r/o+//5/L+v/5/v/T/0/T/K3j/3/v/3v/X/7NW2/r/LY6q/8/d/5q49Y8ABtn/AAAAMILc/a+NW+x/AAAA6Ebu/ivjFvsfAAAAupG7/3VxyyD73/v/+n/9v/5f/7/88/X/86T/n6b/X0H/r//X/+v/WavW+v/c/a+PWwbZ/wAAADCC3P1viFvsfwAAAOhG7v43xi32PwAAAHQjd/+b4pZB9r/+/2D7//zxGff/x5d9f/2//n+h/9f/N2rY/n9j2V+Jdtuj/7/pgafuvf1H9P/6f/2//l//zxo00f+fOft3l7n73xy3DLL/AQAAYAS5+98St9j/AAAA0I3c/W+NW+x/AAAA6Ebu/rfFLf/b/zsr1Pk5seJf1/83/f7/yfxjef9f/6//1//r//dn2P5/n7z/v4L+X/+v/9f/s1ZN9P9b/vvc/W+PW/z6PwAAAHQjd/874hb7HwAAALqRu/+dcYv9DwAAAN3I3f+uuGWQ/a//b7r/b+H9f/2//l//H/T/86D/n6b/X0H/r//X/+v/WavW+v/c/VfFLYPsfwAAABhB7v53xy32PwAAAHQjd/974hb7HwAAALqRu/+9ccsg+1//r//X/+v/9f/LP1//P0/6/2n6/8VicfXEF1jW/5+5s/5f/6//1/9znlrr/3P3vy9uGWT/AwAAwAhy918dt9j/AAAA0I3c/dfELfY/AAAAdCN3//vjlkH2v/5f/6//1/8P1P9v6P/7p/+fpv9fwfv/+n/9v/6ftWqt/8/d/4G4ZZD9DwAAACPI3X9t3GL/AwAAQDdy938wbrH/AQAAoBu5+0/HLXvu/wsO4VsdHv2//l//r/8fqP/v8P3/E6s/eDAH1/8v9P/6f/3/Cvp//b/+n51a6/9z938obvHr/wAAANCN3P0fjlvsfwAAAOhG7v6PxC32PwAAAHQjd/9H45ZB9r/+X/+v/9f/6/+Xf/48+v/Vnzsa7/9P0/+voP/X/+v/9f+sVWv9f+7+j8Utg+x/AAAAGEHu/uviFvsfAAAAupG7/+Nxi/0PAAAA3cjd/4m4ZZD9r//X/2/v/xcL/b/+X/+/6RD6/xML/f/a6f+n6f9X0P/32f9fsOio/z+558/X/9Oi1vr/3P2fjFsG2f8AAAAwgtz918ct9j8AAAB0I3f/p+IW+x8AAAC6kbv/03HLIPtf/6//n+37/8fjJ+j/9f/z7f/r31X9//ro/6fp/1fQ//fZ/3v/X//PkWmt/8/df0PcMsj+BwAAgBHk7v9M3GL/AwAAQDdy9382brH/AQAAoBu5+z8Xtwyy//X/+v/Z9v/e/9f/6//1/0vo/6fp/1fQ/+v/9f/6f9aqtf4/d//n45ZB9j8AAACMIHf/jXGL/Q8AAADdyN1/U9xi/wMAAEA3cvd/IW4ZZP/r//X/+v959v8n9P/6f/3/Uq30/xdffK+b9f/6f/2//l//r/8fXWv9f+7+L8Ytg+x/AAAAGEHu/i/FLfY/AAAAdCN3/5fjFvsfAAAAupG7/ytxyyD7f3f/f3yxWahuWtb/R6Om/99C/7/9++v/l//54f1//b/+/+C10v97///8vr/+X/8/5+9/Tv3/Rbt/vv6fHrXW/+fuvzluGWT/AwAAwAhy9381brH/AQAAoBu5+78Wt9j/AAAA0I3c/bfELYPsf+//6//1//p//f/yz9f/z5P+f5r+fwX9v/7f+/+X3P9O+n/Wp7X+P3f/1+OWQfY/AAAAjCB3/zfiFvsfAAAAupG7/5txi/0PAAAA3cjd/624ZZD9r//X/+v/9f/6/+Wfr/+fJ/3/NP3/Co32//l3qPr/tr9/N/2/9/9Zo9b6/9z9345bBtn/AAAAMILc/d+JW+x/AAAA6Ebu/u/GLfY/AAAAdCN3//filkH2//r7/4v0/0H/30r/fz/9/47P1//r/3um/8+/oi+n/1+h0f4/6f/b/v76f/0/u7XW/+fuvzVuGWT/AwAAwAhy938/brH/AQAAoBu5+38Qt9j/AAAA0I3c/T+MWwbZ/97/H6v/31iM2P97/1//r/8fif5/mv5/Bf2//l//r/9nPeL/GU1r/X/u/h/FLYPsfwAAAJir+9z9Qbfu9382d/+P4xb7HwAAALqRu/8ncYv9DwAAAN3I3f/TuGWQ/a//H6v/H/P9f/2//l//PxL9/zT9/wr6f/2//l//z1q11v/n7v9Z3LJl+B075/8tAQAAgJbk7v953DLIr/8DAADACHL3/yJu2bX/z+zzd7UDAAAArcnd/8u4ZR+//n+3A/tWh0f/33j/v+i//79tof/X/2/S/+v/10H/P+3/7P/PbOj/9f8T9P/6f/0/O7XW/+fu/1Xc4vf/AwAAwJxt+ycKuft/HbfY/wAAANCN3P2/iVvsfwAAAOhG7v7fxi2D7H/9f+P9/3m9/3+y/qs59P/e/z/A/v+KE0s/X/+v/++Z/n+a9/9X0P/r//X/+n/WqrX+P3f/bXHLIPsfAAAARpC7/3dxi/0PAAAA3cjd//u4xf4HAACAbuTu/0PcMsj+1//32P/P6/1//b/3/8+//7/LhaduvO8DrrlK/89Zh9n/558L+v9D6f+vX/bH0//r/1v6/vp//T+7tdb/5+7/Y9wyyP4HAACAEeTuvz1usf8BAACgG7n7/xS32P8AAADQjdz9f45bBtn/+n/9fyv9f/57fQT9/6n59f/ZFO+r/z+52PH5/fT/3v/X/+/m/f9pM+7/vf+v/2/+++v/9f/s1lr/n7v/L3HLIPsfAAAARpC7/69xi/0PAAAA3cjd/7e4xf4HAACAbuTu/3vcMsj+1//r/1vp/5P3/8/+PO//b9L/6//Phf5/mv5/Bf2//l//r/9nrVrr/3P3/yNuGWT/AwAAwAhy998Rt9j/AAAA0I3c/f+MW+x/AAAA6Ebu/n/FLYPsf/2//l//r//X/y//fP3/POn/p+n/V9D/6//1//p/1qq1/j93/38CAAD//6cxal0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11m52.786346812s ago: executing program 2 (id=8663): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a001600250000000c600e41b0000900ac00080325000000160015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 11m51.64067828s ago: executing program 2 (id=8674): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001740), 0x4) 11m51.181904991s ago: executing program 32 (id=8674): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001740), 0x4) 7m44.586630169s ago: executing program 5 (id=12345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x7f7, 0x8, 0x2, 0x4, 0xb, 0x1, 0x10, 0x10000, 0x3, 0x5, 0x9, 0x4, 0x6, 0x4, 0x8]}, &(0x7f0000000540)=0x100) 7m44.374820094s ago: executing program 5 (id=12348): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66737472616e736d7574653d64656661756c745f7065726d697373696f6e732c657569643cc7c48c815ed3c31b62", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0x2c8, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 7m44.14626135s ago: executing program 5 (id=12352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xfffc}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m43.821774257s ago: executing program 5 (id=12357): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 7m43.442394976s ago: executing program 5 (id=12362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x8992, &(0x7f0000000000)="58a34d3a") 7m42.725336403s ago: executing program 5 (id=12370): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x2, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000117000/0x2000)=nil, 0x3) 7m42.185124066s ago: executing program 33 (id=12370): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x2, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000117000/0x2000)=nil, 0x3) 2m32.000834345s ago: executing program 3 (id=17097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m31.722044112s ago: executing program 3 (id=17110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71e12}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xfeffffffffffffff, 0xfffffffffffffffe}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) 2m31.519582726s ago: executing program 3 (id=17104): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x8, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x300}, 0x700, 0x20, 0xb05, 0x800}}) 2m31.314775691s ago: executing program 3 (id=17108): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nls={'nls', 0x3d, 'iso8859-4'}}, {@barrier}, {@part={'part', 0x3d, 0x1fb38dde}}, {@force}, {@umask={'umask', 0x3d, 0x8}}, {@nodecompose}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2m30.914745031s ago: executing program 3 (id=17117): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) memfd_secret(0x0) 2m30.652633987s ago: executing program 3 (id=17121): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) 2m30.322057685s ago: executing program 34 (id=17121): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x2d, &(0x7f0000000280)=0xa) 3.736693871s ago: executing program 6 (id=19017): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x478, 0xe8, 0x308, 0xfeffffff, 0x0, 0x210, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x3, 0x4c}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@inet=@ecn={{0x28}, {0x11, 0x1, 0x1, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}, @common=@set={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @port=0x4e23, @gre_key=0x8001}}}}, {{@ip={@local, @rand_addr, 0x7f, 0x0, 'sit0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x5, [0x4e24, 0x4e23, 0x4e24, 0x4e21, 0x4a24, 0x4e23, 0x4e25, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x4e23], [0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x33}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, @port=0x4e24, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) 3.521927207s ago: executing program 6 (id=19031): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.300144332s ago: executing program 6 (id=19022): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2.195027848s ago: executing program 6 (id=19038): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) syz_clone(0x1069000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.962055394s ago: executing program 7 (id=19039): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}, {&(0x7f0000000b40)=""/96, 0x60}], 0x2) 1.7124926s ago: executing program 7 (id=19044): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x260, 0xffffff7a, 0xffffffff, 0x260, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a54f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000a1602a6800", 0x80, 0x3, {0x4}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1, 0x1, 0x3, 0x1, 0x2, 0x4], 0x6}, {0x4, [0x6, 0x4, 0x3, 0x3, 0x1], 0x4, 0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x6, 0x8, [0x31, 0xc, 0x2a, 0x39, 0xa, 0x24, 0x6, 0x4, 0x18, 0x2f, 0x2c, 0x2e, 0x2, 0x3a, 0x2a, 0xd], 0x2, 0x80000000, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) 1.570457233s ago: executing program 6 (id=19047): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x1ff, 0x20, 0x47524247, 0x5}}) 1.439066056s ago: executing program 4 (id=19048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000020101080000003930a58f10cbe7790a0c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4000191}, 0x48080) 1.438355426s ago: executing program 0 (id=19058): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2000000}}}, 0x88) 1.374219198s ago: executing program 7 (id=19049): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x12000d0, &(0x7f00000005c0)=ANY=[], 0x1, 0x73a, &(0x7f0000001a00)="$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") creat(&(0x7f0000001800)='./file1\x00', 0x120) 1.359687458s ago: executing program 1 (id=19050): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e1ef2fa1467e4acbc06f0bff9bff36b5122aac9416fcddb5fa5a9826bb08b47ba97a0c7b2b788e208d729dfe32e5815f23ba6fe6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.28980487s ago: executing program 6 (id=19051): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x444b, &(0x7f0000004480)="$eJzs3b9vI1kdAPDvTAJJltslOa44JCQscRIIUJRcBeQkstns5pLbsGiBE6LxOolvN+DEq8RBFFfsdSdRIVEgihNIdKlOKSg5/gQayqM+CQoaJMSJINvjxDO2FW8UJ2T1+RQZz/sdfz3Pb4rxSzONJ9v7pe39UmW3VN98Z//10s/rtYOdaqSX5Kr7J2di0Bs/ijiJ/dV5cOfeD95+PeLPW3/95Pj4+DiaxqOv+a7X//rnu5vdx460UKfZbv/WLspPIuKVnnE1jUXEj/8YkUTE7SxtKTtORcStaOe9/e4vH5UuaDQfflx9o/zp+vtHC6+tHX5wNPh/TyJ+W/viNx/v/P0rYwt/+/oFdQ8AAAAAAAAAAAAAAAAAwDW38vDBj74/Nx8fJTF+mPQ+r7uSHQc9H3t8Yb48+n8WAAAAAAAAAAAAAAAAAAAA/k+dPv9fSl7u8/z/cnZcHFD/+LujHyOjs/q9B8t35+az/d+TnvxvZUn/uD0WM4V939/rs//77UL9/vu/9/ZzXp3xdfqdvhnpbPd5pOnsbMTvs43fX01upLX6fuMb79QPdrcubBjXVj7+7d37c9HJNvTvF//oE/+lQvuj3///Cz2fpub5o7M+Yp8Z4ZCukXz8xwaW+8N7yVDxv1OodxnxP/Wf0Xb1AsrHf7yVNtVdYLE9ATTj/6vxs+O/XGh/VPG/FRGlpDnWUm4GaK5hmumD1ivk5ePfnhRzU2f2Rg66/v9diP/dQvtXNf8/K34R0Vc+/p9tpU3mSpxe/zPp2df/vUL7xfgP/oY5r974N8f/7OKWmC+0fPwn2onjuSKtd3LY+X+l0P5zXv/DfDw6PxjXHuetJPcJOEza4x/0e3Xk5eM/2ZN/ev+XDrX+e7NQ/7Lu/zr9TkfSuv/rTP9fS9r3f/SXj//UwHLDXv+rhXqj/v5fbK3/OK98/G+00vJr5+nW32Hjv1Zof1Txb61KJjvxb00CzVuC+O9EO/131n9Dycf/c+3EtLvEs9bf1vovOXv9/1ah/Stb/6ej7fVFkY//SwPLNeP/lyG+/+8X6o0+/hFz1vrnlo//zYHlWtf/5NnxXz99+ae4hPh/dZSNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwDS9lxOpJ0NneeprOzEXey81fjRrJR2Spv1OqbP9uPWM7SS/Fy8rhW36jUytu79a1quVKr1Tcj7mb5r8Rksl+rN8o7laf3TtqaSp5UK3uNjWqlERErWfqX4manrY3txk7laUS8eZL3+bS+9/RJZbe8tb33nbm5ublYPRnDTFL9RaO622j33s6NWDupO510Da6V/dbJWF5Kflo/2Nut1Frp97vq1OqblVpXnfUs79cxkzT2DnY3K41quVZ/3OnvKi1mx+XVhz98eH++J/9R0j4uXe6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhOHy18+zcRMd4+SyOilGQvmseJYvkPP66+Uf50/f2jhdfWDj84+iQrBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NI/SgNBFAfgN2OhpcewWnY72xVFtHBF8AR6DA+jR/ES3sEiRdoUIZDMQtg/EAJJ9X3Ng/kx8x7MAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAjPb517691E5Hian0Z8fv597+fP5f6fTd9/+IMM3I6Ty/d/UPdlH9Po/y2HC3avE1Xy6+PmKi9n8GeDPdpZ9xnaG7f5ubr+15HylVEtCW/STlX1WFvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIYdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//ycSKVs=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) 1.197520642s ago: executing program 4 (id=19052): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000002c0)='./file0\x00', 0x20cc16, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x3, 0x22e, &(0x7f0000000480)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) 1.126747304s ago: executing program 0 (id=19053): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 1.088839885s ago: executing program 7 (id=19054): r0 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') execveat$binfmt(0xffffffffffffffff, r0, &(0x7f0000000140)={[&(0x7f0000000100)='/dev/input/event#\x00']}, 0x0, 0x800) 985.949517ms ago: executing program 1 (id=19055): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 928.540689ms ago: executing program 0 (id=19056): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x2, 0x0) write$FUSE_BMAP(r0, &(0x7f0000003d80)={0x18, 0x8000000000000004}, 0x18) 839.39084ms ago: executing program 7 (id=19057): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003f8ff00000000000d000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="ee9afebff3ae3e2e3587bd0a2a8c", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 682.825255ms ago: executing program 4 (id=19059): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) 682.706015ms ago: executing program 1 (id=19060): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 674.635144ms ago: executing program 0 (id=19061): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000240)={[{@type={'type', 0x3d, "54a10fb2"}}, {}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@part={'part', 0x3d, 0x8}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@dir_umask}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@codepage={'codepage', 0x3d, 'cp874'}}, {}, {@umask={'umask', 0x3d, 0x2}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 574.145477ms ago: executing program 7 (id=19062): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@heartbeat_none}]}, 0x1, 0x4705, &(0x7f0000004800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000004780)='./dir123\x00', 0x1ff) 477.715699ms ago: executing program 1 (id=19063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040020) 477.631539ms ago: executing program 4 (id=19064): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x400]}, 0x8) 382.819642ms ago: executing program 0 (id=19065): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) ioctl$CEC_ADAP_G_CAPS(r0, 0xc04c6100, &(0x7f0000000040)) 292.406934ms ago: executing program 4 (id=19066): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x2, 0x80000002}) 252.141315ms ago: executing program 1 (id=19067): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='timerslack_ns\x00') write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) 167.298876ms ago: executing program 0 (id=19068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0x74}}, 0x0) 49.943019ms ago: executing program 4 (id=19069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001140)={r0, 0x0, 0x29, 0x11, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) 0s ago: executing program 1 (id=19070): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x80) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='`', 0x1}], 0x1, 0x9) kernel console output (not intermixed with test programs): RC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1274.895650][T10245] JBD2: Ignoring recovery information on journal [ 1275.083741][T10245] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1275.202730][T10245] (syz.1.17300,10245,1):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=nonecommit" or missing value [ 1275.370110][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 1275.900344][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 1275.900361][ T26] audit: type=1326 audit(1786456154.139:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.6.17327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375619e0d9 code=0x7ffc0000 [ 1275.979902][T10326] netlink: 'syz.7.17328': attribute type 21 has an invalid length. [ 1276.021431][ T26] audit: type=1326 audit(1786456154.179:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.6.17327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f375619e0d9 code=0x7ffc0000 [ 1276.132211][ T26] audit: type=1326 audit(1786456154.179:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.6.17327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375619e0d9 code=0x7ffc0000 [ 1276.165773][T10332] netlink: 76 bytes leftover after parsing attributes in process `syz.6.17332'. [ 1276.238543][T10332] netlink: 72 bytes leftover after parsing attributes in process `syz.6.17332'. [ 1276.265659][ T26] audit: type=1326 audit(1786456154.179:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.6.17327" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f375619e0d9 code=0x7ffc0000 [ 1276.315113][T10332] netlink: 'syz.6.17332': attribute type 3 has an invalid length. [ 1276.355368][T10332] netlink: 11 bytes leftover after parsing attributes in process `syz.6.17332'. [ 1276.390411][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17331'. [ 1276.418479][T10333] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 1276.562543][ T2939] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1276.764697][ T2939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.783552][ T2939] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1276.822867][ T4313] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1276.827667][ T2939] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1276.876608][ T2939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.896560][ T2939] usb 5-1: Product: syz [ 1276.907592][ T2939] usb 5-1: Manufacturer: syz [ 1276.912249][ T2939] usb 5-1: SerialNumber: syz [ 1276.993444][ T2939] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1277.035347][T10357] device netdevsim0 entered promiscuous mode [ 1277.052660][ T4313] usb 1-1: Using ep0 maxpacket: 16 [ 1277.059285][ T2939] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1277.070220][ T4313] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1277.100229][ T2939] scsi host1: usb-storage 5-1:1.0 [ 1277.138017][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.188462][T10338] loop7: detected capacity change from 0 to 32768 [ 1277.242670][ T4313] usb 1-1: Product: syz [ 1277.246908][ T4313] usb 1-1: Manufacturer: syz [ 1277.251540][ T4313] usb 1-1: SerialNumber: syz [ 1277.255061][T10338] (syz.7.17333,10338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1277.271072][ T2939] usb 5-1: USB disconnect, device number 91 [ 1277.300617][T10338] (syz.7.17333,10338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1277.319883][ T4313] r8152-cfgselector 1-1: config 0 descriptor?? [ 1277.406228][T10338] JBD2: Ignoring recovery information on journal [ 1277.561655][T10338] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1277.732833][T10338] (syz.7.17333,10338,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "heartbeat=nonecommit" or missing value [ 1277.795220][ T4313] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1277.831445][ T4313] r8152-cfgselector 1-1: USB disconnect, device number 88 [ 1277.931351][ T9698] ocfs2: Unmounting device (7,7) on (node local) [ 1278.212351][T10368] loop1: detected capacity change from 0 to 32768 [ 1278.279036][T10368] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1278.380753][T10375] loop6: detected capacity change from 0 to 32768 [ 1278.398182][T10368] JBD2: Ignoring recovery information on journal [ 1278.436159][T10368] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1278.473775][T10375] *** Log Is Dirty ! *** [ 1278.482950][T10375] lmLogInit: exit(-22) [ 1278.505368][T10375] lmLogOpen: exit(-22) [ 1278.637917][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 1279.382796][ T2939] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1279.594523][ T2939] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.626827][ T2939] usb 8-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1279.690629][ T2939] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1279.720359][ T2939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.751863][ T2939] usb 8-1: Product: syz [ 1279.766490][ T2939] usb 8-1: Manufacturer: syz [ 1279.771177][ T2939] usb 8-1: SerialNumber: syz [ 1279.815494][ T2939] usb-storage 8-1:1.0: USB Mass Storage device detected [ 1279.870320][ T2939] usb-storage 8-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1279.923936][ T2939] scsi host1: usb-storage 8-1:1.0 [ 1279.960248][ T26] audit: type=1326 audit(1786456158.199:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.17369" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7a59e0d9 code=0x7ffc0000 [ 1280.035536][ T26] audit: type=1326 audit(1786456158.239:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.17369" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7a59e0d9 code=0x7ffc0000 [ 1280.038967][ T2939] usb 8-1: USB disconnect, device number 4 [ 1280.170057][ T26] audit: type=1326 audit(1786456158.239:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.17369" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7a59e0d9 code=0x7ffc0000 [ 1280.293992][ T26] audit: type=1326 audit(1786456158.239:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.17369" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcb7a59e0d9 code=0x7ffc0000 [ 1280.440725][ T26] audit: type=1326 audit(1786456158.239:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.17369" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7a59e0d9 code=0x7ffc0000 [ 1280.481054][T10453] fuse: blksize only supported for fuseblk [ 1280.525674][ T26] audit: type=1326 audit(1786456158.239:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10442 comm="syz.1.17369" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7a59e0d9 code=0x7ffc0000 [ 1280.732054][T10468] netlink: 'syz.6.17377': attribute type 21 has an invalid length. [ 1280.745710][T10467] siw: device registration error -23 [ 1281.143021][ T2939] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1281.216950][T10492] netlink: 755 bytes leftover after parsing attributes in process `syz.7.17389'. [ 1281.333095][ T2939] usb 1-1: Using ep0 maxpacket: 16 [ 1281.339962][ T2939] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1281.382809][ T2939] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1281.412495][ T2939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.466138][ T2939] usb 1-1: Product: syz [ 1281.470376][ T2939] usb 1-1: Manufacturer: syz [ 1281.502989][ T2939] usb 1-1: SerialNumber: syz [ 1281.514509][ T2939] r8152-cfgselector 1-1: config 0 descriptor?? [ 1281.713138][ T9519] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1281.914514][ T9519] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.952510][ T9519] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1281.955714][ T2939] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1281.999908][ T9519] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1282.014212][ T2939] r8152-cfgselector 1-1: USB disconnect, device number 89 [ 1282.055917][ T9519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.083320][ T9519] usb 2-1: Product: syz [ 1282.090283][ T9519] usb 2-1: Manufacturer: syz [ 1282.120718][ T9519] usb 2-1: SerialNumber: syz [ 1282.131329][ T9519] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1282.185263][ T9519] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1282.211838][T10490] loop4: detected capacity change from 0 to 40427 [ 1282.214217][ T9519] scsi host1: usb-storage 2-1:1.0 [ 1282.255280][T10490] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1282.261694][T10490] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1282.283353][ T4313] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1282.351001][ T2939] usb 2-1: USB disconnect, device number 93 [ 1282.357146][T10490] F2FS-fs (loop4): invalid crc value [ 1282.390419][T10490] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1282.560529][ T4313] usb 7-1: Using ep0 maxpacket: 8 [ 1282.567514][ T4313] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1282.613310][ T4313] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1282.648576][T10490] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1282.658076][T10490] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1282.658721][ T4313] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1282.739360][ T4313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.757698][ T4313] usb 7-1: Product: syz [ 1282.761932][ T4313] usb 7-1: Manufacturer: syz [ 1282.788101][ T4313] usb 7-1: SerialNumber: syz [ 1282.822486][ T4313] usb 7-1: config 0 descriptor?? [ 1282.970242][T10544] loop7: detected capacity change from 0 to 64 [ 1283.038858][ T4313] usb 7-1: USB disconnect, device number 17 [ 1283.064408][T10544] syz.7.17404: attempt to access beyond end of device [ 1283.064408][T10544] loop7: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1283.103440][T10544] Buffer I/O error on dev loop7, logical block 22533, async page read [ 1283.153586][T10544] syz.7.17404: attempt to access beyond end of device [ 1283.153586][T10544] loop7: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1283.258470][T10544] Buffer I/O error on dev loop7, logical block 22533, async page read [ 1283.464863][T10557] device netdevsim0 entered promiscuous mode [ 1283.853473][ T3388] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1283.896129][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17415'. [ 1284.053418][ T3388] usb 5-1: Using ep0 maxpacket: 16 [ 1284.072235][ T3388] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1284.124770][ T3388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.159073][ T3388] usb 5-1: Product: syz [ 1284.169137][ T3388] usb 5-1: Manufacturer: syz [ 1284.179292][ T3388] usb 5-1: SerialNumber: syz [ 1284.210024][ T3388] r8152-cfgselector 5-1: config 0 descriptor?? [ 1284.641407][ T3388] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1284.669677][ T3388] r8152-cfgselector 5-1: USB disconnect, device number 92 [ 1284.723453][ T9519] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1284.917803][ T9519] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1284.937192][ T9519] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.953758][ T9519] usb 1-1: Product: syz [ 1284.963612][ T9519] usb 1-1: Manufacturer: syz [ 1284.969234][ T9519] usb 1-1: SerialNumber: syz [ 1285.008647][ T9519] usb 1-1: config 0 descriptor?? [ 1285.233536][ T9519] mos7840 1-1:0.0: required endpoints missing [ 1285.414519][T10606] loop1: detected capacity change from 0 to 32768 [ 1285.439332][T10606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.17429 (10606) [ 1285.459035][ T9519] usb 1-1: USB disconnect, device number 90 [ 1285.492866][T10606] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1285.563640][T10606] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1285.572338][T10606] BTRFS info (device loop1): using free space tree [ 1285.761616][T10606] BTRFS info (device loop1): enabling ssd optimizations [ 1285.813261][T10606] BTRFS error (device loop1): balance: invalid convert system profile single [ 1285.929526][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1286.814121][ T4678] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1286.843250][T10687] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17452'. [ 1286.861603][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17452'. [ 1287.020689][ T4678] usb 7-1: Using ep0 maxpacket: 32 [ 1287.042307][ T4678] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 1287.094371][ T4678] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 1287.160395][ T4678] usb 7-1: string descriptor 0 read error: -22 [ 1287.208400][ T4678] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1287.233780][ T4678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.287759][T10675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1287.307275][ T4678] usb 7-1: MIDIStreaming interface descriptor not found [ 1287.555301][ T4678] usb 7-1: USB disconnect, device number 18 [ 1287.786357][T10708] netlink: 'syz.0.17459': attribute type 21 has an invalid length. [ 1287.813793][T10708] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17459'. [ 1287.833415][T10708] netlink: 'syz.0.17459': attribute type 4 has an invalid length. [ 1287.854049][T10708] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17459'. [ 1287.984885][T10711] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1287.993140][T10690] loop4: detected capacity change from 0 to 32768 [ 1288.016712][T10690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.17453 (10690) [ 1288.163933][T10690] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1288.186678][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17465'. [ 1288.231266][T10690] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1288.252891][T10690] BTRFS info (device loop4): using free space tree [ 1288.518030][T10690] BTRFS info (device loop4): enabling ssd optimizations [ 1288.609434][T10690] BTRFS error (device loop4): balance: invalid convert system profile single [ 1288.775331][ T4280] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1288.880039][T10759] loop7: detected capacity change from 0 to 1024 [ 1288.975853][T10759] hfsplus: invalid length 32517 has been corrected to 255 [ 1289.094147][ T2933] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1289.294123][ T2933] usb 2-1: Using ep0 maxpacket: 8 [ 1289.301393][ T2933] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.342369][ T2933] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1289.359840][ T2933] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1289.387316][ T2933] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1289.412234][ T2933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.432937][ T2933] usb 2-1: Product: syz [ 1289.439067][ T2933] usb 2-1: Manufacturer: syz [ 1289.443816][ T2933] usb 2-1: SerialNumber: syz [ 1289.691849][ T2933] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 1289.713369][ T2933] usb 2-1: 0:2 : does not exist [ 1289.772573][ T2933] usb 2-1: USB disconnect, device number 94 [ 1290.433707][T10785] loop7: detected capacity change from 0 to 32768 [ 1290.484144][T10785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.17487 (10785) [ 1290.556937][T10785] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1290.596774][T10785] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1290.634108][T10785] BTRFS info (device loop7): using free space tree [ 1290.884304][T10785] BTRFS info (device loop7): enabling ssd optimizations [ 1290.899317][T10831] netlink: 755 bytes leftover after parsing attributes in process `syz.4.17499'. [ 1290.945805][T10785] BTRFS error (device loop7): balance: invalid convert system profile single [ 1290.968010][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17502'. [ 1291.003991][T10835] netlink: 944 bytes leftover after parsing attributes in process `syz.6.17502'. [ 1291.069331][T10835] netlink: 64 bytes leftover after parsing attributes in process `syz.6.17502'. [ 1291.079192][ T9698] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1291.692742][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17513'. [ 1292.010943][T10867] netlink: 'syz.4.17517': attribute type 21 has an invalid length. [ 1292.051007][T10867] __nla_validate_parse: 1 callbacks suppressed [ 1292.051022][T10867] netlink: 128 bytes leftover after parsing attributes in process `syz.4.17517'. [ 1292.075945][T10867] netlink: 'syz.4.17517': attribute type 4 has an invalid length. [ 1292.084124][T10867] netlink: 3 bytes leftover after parsing attributes in process `syz.4.17517'. [ 1292.118076][T10869] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1292.221297][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17523'. [ 1292.512384][T10894] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1292.624535][ T3388] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1292.836644][ T3388] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1292.851403][ T3388] usb 5-1: not running at top speed; connect to a high speed hub [ 1292.864438][ T4678] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1292.880591][ T3388] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.902053][ T3388] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1292.926771][ T3388] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1292.940272][T10914] netlink: 'syz.6.17537': attribute type 21 has an invalid length. [ 1292.949180][T10914] netlink: 128 bytes leftover after parsing attributes in process `syz.6.17537'. [ 1292.960486][T10914] netlink: 'syz.6.17537': attribute type 4 has an invalid length. [ 1292.963905][ T3388] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.968902][T10914] netlink: 3 bytes leftover after parsing attributes in process `syz.6.17537'. [ 1293.007730][ T3388] usb 5-1: Product: syz [ 1293.011943][ T3388] usb 5-1: Manufacturer: syz [ 1293.030127][ T3388] usb 5-1: SerialNumber: syz [ 1293.058544][ T4678] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1293.074401][ T4316] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1293.082419][ T4678] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.095059][ T4678] usb 8-1: Product: syz [ 1293.099263][ T4678] usb 8-1: Manufacturer: syz [ 1293.104565][ T4678] usb 8-1: SerialNumber: syz [ 1293.111127][ T4678] usb 8-1: config 0 descriptor?? [ 1293.155427][T10918] netlink: 'syz.1.17550': attribute type 21 has an invalid length. [ 1293.164228][T10918] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17550'. [ 1293.182984][T10918] netlink: 'syz.1.17550': attribute type 4 has an invalid length. [ 1293.191251][T10918] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17550'. [ 1293.275804][ T3388] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1293.284713][ T4316] usb 1-1: Using ep0 maxpacket: 8 [ 1293.292016][ T4316] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1293.294865][ T3388] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 1293.325006][ T4316] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1293.354822][ T4678] mos7840 8-1:0.0: required endpoints missing [ 1293.357570][ T3388] usb 5-1: USB disconnect, device number 93 [ 1293.388530][ T4316] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1293.418894][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.449156][T10923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17540'. [ 1293.459090][ T4316] usb 1-1: Product: syz [ 1293.463544][ T4316] usb 1-1: Manufacturer: syz [ 1293.474958][T11410] udevd[11410]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1293.480392][ T4316] usb 1-1: SerialNumber: syz [ 1293.493904][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17540'. [ 1293.522069][ T4316] usb 1-1: config 0 descriptor?? [ 1293.577698][ T3383] usb 8-1: USB disconnect, device number 5 [ 1293.741008][ T4316] usb 1-1: USB disconnect, device number 91 [ 1293.908261][T10933] overlayfs: conflicting options: userxattr,metacopy=on [ 1294.307452][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17553'. [ 1296.823191][T11055] overlayfs: conflicting options: userxattr,metacopy=on [ 1297.366109][T11082] __nla_validate_parse: 8 callbacks suppressed [ 1297.366138][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.429661][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.474083][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.505342][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.529092][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.548407][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.593642][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.611836][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.637622][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.663463][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17615'. [ 1297.696100][T11082] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1297.785265][ T3383] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1297.977277][ T3383] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1297.994741][ T3383] usb 7-1: not running at top speed; connect to a high speed hub [ 1298.019313][ T3383] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.075181][ T3383] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.084988][ T4316] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1298.106962][ T3383] usb 7-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1298.137124][ T3383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.168094][ T3383] usb 7-1: Product: syz [ 1298.172320][ T3383] usb 7-1: Manufacturer: syz [ 1298.195267][ T3383] usb 7-1: SerialNumber: syz [ 1298.285872][ T4316] usb 2-1: too many configurations: 126, using maximum allowed: 8 [ 1298.326394][ T4316] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1298.346437][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.360200][T11090] loop7: detected capacity change from 0 to 32768 [ 1298.378292][ T4316] usb 2-1: Product: syz [ 1298.382503][ T4316] usb 2-1: Manufacturer: syz [ 1298.408675][ T4316] usb 2-1: SerialNumber: syz [ 1298.428240][ T3383] usb 7-1: 3:0: cannot get min/max values for control 2 (id 3) [ 1298.479076][ T3383] usb 7-1: 3:0: failed to get current value for ch 0 (-71) [ 1298.503636][T11090] XFS (loop7): Mounting V5 Filesystem [ 1298.515362][ T3383] usb 7-1: USB disconnect, device number 19 [ 1298.632427][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1298.722710][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1298.755668][T11410] udevd[11410]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1298.843856][T11090] XFS (loop7): Ending clean mount [ 1298.851347][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1298.901671][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1298.964393][ T4316] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1299.022700][ T9698] XFS (loop7): Unmounting Filesystem [ 1299.078774][ T4316] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1299.135231][ T4316] usb 2-1: USB disconnect, device number 95 [ 1299.275355][ T2933] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1299.485368][ T2933] usb 5-1: Using ep0 maxpacket: 8 [ 1299.492823][ T2933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1299.545139][ T2933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1299.615384][ T2933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1299.664013][ T2933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 1299.694642][ T2933] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1299.725169][ T2933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.776697][ T2933] usb 5-1: config 0 descriptor?? [ 1299.801810][T11132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1299.986033][T11155] ubi2: attaching mtd0 [ 1299.997465][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.045722][T11155] ubi2: scanning is finished [ 1300.055325][T11155] ubi2 error: ubi_read_volume_table: LEB size too small for a volume record [ 1300.216791][T11155] ubi2 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1300.294212][ T9701] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1300.305077][ T9519] usb 5-1: USB disconnect, device number 94 [ 1301.108016][T11195] loop7: detected capacity change from 0 to 512 [ 1301.236962][T11195] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1301.269468][T11195] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.17655: Unimplemented hash flags: 0x0001 [ 1301.281756][T11195] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.17655: Corrupt directory, running e2fsck is recommended [ 1301.333025][ T9698] EXT4-fs (loop7): unmounting filesystem. [ 1301.424035][T11165] loop6: detected capacity change from 0 to 32768 [ 1301.667755][T11165] XFS (loop6): Mounting V5 Filesystem [ 1301.907636][T11165] XFS (loop6): Ending clean mount [ 1301.951183][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1301.951199][ T26] audit: type=1326 audit(1786456180.196:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.4.17665" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43f9e0d9 code=0x7ffc0000 [ 1302.075508][ T26] audit: type=1326 audit(1786456180.196:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.4.17665" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43f9e0d9 code=0x7ffc0000 [ 1302.105073][T11202] loop1: detected capacity change from 0 to 32768 [ 1302.155525][T11202] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.17657 (11202) [ 1302.184835][ T26] audit: type=1326 audit(1786456180.256:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.4.17665" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f6b43f9e0d9 code=0x7ffc0000 [ 1302.222967][T31377] XFS (loop6): Unmounting Filesystem [ 1302.284338][T11202] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1302.321235][ T26] audit: type=1326 audit(1786456180.256:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.4.17665" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43f9e0d9 code=0x7ffc0000 [ 1302.364561][T11202] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1302.404674][T11202] BTRFS info (device loop1): force clearing of disk cache [ 1302.445952][T11202] BTRFS info (device loop1): force zlib compression, level 3 [ 1302.453411][T11202] BTRFS info (device loop1): disabling free space tree [ 1302.471405][ T26] audit: type=1326 audit(1786456180.256:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11231 comm="syz.4.17665" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b43f9e0d9 code=0x7ffc0000 [ 1302.565658][T11202] BTRFS info (device loop1): max_inline at 0 [ 1302.571830][T11202] BTRFS info (device loop1): enabling free space tree [ 1302.616513][T11202] BTRFS info (device loop1): using free space tree [ 1302.924626][T11269] loop6: detected capacity change from 0 to 128 [ 1303.061631][T11202] BTRFS info (device loop1): enabling ssd optimizations [ 1303.216537][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1303.315762][ T3383] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1303.525905][ T3383] usb 1-1: Using ep0 maxpacket: 32 [ 1303.541444][ T3383] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1303.585746][ T3383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.630519][ T3383] usb 1-1: config 0 descriptor?? [ 1303.679326][ T3383] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1304.095685][ T3383] gspca_nw80x: reg_r err -71 [ 1304.100479][ T3383] nw80x: probe of 1-1:0.0 failed with error -71 [ 1304.148380][ T3383] usb 1-1: USB disconnect, device number 92 [ 1304.432658][T11320] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1304.465881][T11320] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1304.511836][T11320] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1304.556174][T11320] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1304.704942][T11295] loop6: detected capacity change from 0 to 32768 [ 1304.737708][T11326] loop4: detected capacity change from 0 to 512 [ 1304.756223][T11295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.17685 (11295) [ 1304.836465][T11295] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1304.852270][T11326] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1304.920234][T11326] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.17696: Unimplemented hash flags: 0x0001 [ 1304.963299][T11295] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1304.993699][T11295] BTRFS info (device loop6): using free space tree [ 1304.999112][T11326] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.17696: Corrupt directory, running e2fsck is recommended [ 1305.253548][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1305.329399][T11295] BTRFS info (device loop6): enabling ssd optimizations [ 1305.566530][T31377] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1306.135949][T11393] __nla_validate_parse: 121 callbacks suppressed [ 1306.135967][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.166012][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.213402][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.269253][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.323944][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.373257][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.396123][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.439628][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.502214][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.597291][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17713'. [ 1306.622290][T11409] netlink: 'syz.4.17719': attribute type 1 has an invalid length. [ 1306.632205][T11393] IPv6: ADDRCONF(NETDEV_CHANGE): geneve1: link becomes ready [ 1306.653037][T11409] netlink: 'syz.4.17719': attribute type 2 has an invalid length. [ 1306.666245][T11393] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 1307.907995][T11454] loop7: detected capacity change from 0 to 4096 [ 1307.955158][T11454] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 1308.066195][T11454] ntfs3: loop7: failed to convert "c46c" to cp775 [ 1308.206346][ T2932] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1308.246337][ T9519] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1308.396486][ T2932] usb 7-1: Using ep0 maxpacket: 8 [ 1308.403716][ T2932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1308.441835][ T2932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1308.457013][ T9519] usb 5-1: too many configurations: 126, using maximum allowed: 8 [ 1308.465035][ T2932] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1308.486657][ T9519] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1308.504437][ T2932] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 1308.515582][ T9519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.544307][ T9519] usb 5-1: Product: syz [ 1308.545522][ T2932] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1308.561695][ T9519] usb 5-1: Manufacturer: syz [ 1308.580007][ T9519] usb 5-1: SerialNumber: syz [ 1308.596322][ T2932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.635761][ T2932] usb 7-1: config 0 descriptor?? [ 1308.654344][T11467] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1308.823373][ T9519] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1308.859275][ T9519] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1308.902270][ T9519] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1308.934433][ T9519] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1308.978734][ T9519] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1309.011256][ T9519] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1309.069149][ T9519] usb 5-1: USB disconnect, device number 95 [ 1309.121362][ T2932] usb 7-1: USB disconnect, device number 20 [ 1309.130109][ T9701] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1309.210703][T11506] netlink: 'syz.0.17759': attribute type 1 has an invalid length. [ 1309.540046][T11522] netlink: 'syz.1.17764': attribute type 1 has an invalid length. [ 1309.963294][T11544] netlink: 'syz.0.17773': attribute type 21 has an invalid length. [ 1310.267772][T11557] netlink: 'syz.0.17779': attribute type 7 has an invalid length. [ 1310.596486][ T3382] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1310.634419][ T9518] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1310.722294][T11577] xt_l2tp: wrong L2TP version: 0 [ 1310.790455][ T3382] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1310.804373][ T3382] usb 5-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 1310.830051][ T3382] usb 5-1: Product: syz [ 1310.837751][ T9518] usb 8-1: Using ep0 maxpacket: 8 [ 1310.844629][ T3382] usb 5-1: Manufacturer: syz [ 1310.849365][ T3382] usb 5-1: SerialNumber: syz [ 1310.854716][ T9518] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1310.874171][ T3382] r8152-cfgselector 5-1: config 0 descriptor?? [ 1310.898163][ T9518] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1310.934203][ T9518] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1310.956351][ T9518] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 1310.977722][ T9518] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1311.013311][ T9518] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.040041][ T9518] usb 8-1: config 0 descriptor?? [ 1311.052575][T11563] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1311.101229][ T3382] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 1311.119511][ T4341] usb 5-1: config 0 descriptor?? [ 1311.314159][ T4341] usb 5-1: can't set config #0, error -71 [ 1311.320767][ T3382] usb 5-1: USB disconnect, device number 96 [ 1311.339818][T11584] loop6: detected capacity change from 0 to 128 [ 1311.346297][ T9519] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1311.408624][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.435268][T11584] FAT-fs (loop6): Filesystem has been set read-only [ 1311.446808][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.465793][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.485079][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.496914][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.523479][ T9701] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1311.534741][ T4316] usb 8-1: USB disconnect, device number 6 [ 1311.541048][ T9519] usb 2-1: Using ep0 maxpacket: 32 [ 1311.548735][ T9519] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1311.559222][ T9519] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.569293][ T9519] usb 2-1: config 0 descriptor?? [ 1311.586701][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.614775][ T9519] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1311.621766][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.631094][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.640495][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.649952][T11584] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1311.667322][ T26] audit: type=1800 audit(1786456189.915:1023): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.17788" name="file1" dev="loop6" ino=1048735 res=0 errno=0 [ 1311.674670][T11584] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1312.016077][ T9519] gspca_nw80x: reg_r err -71 [ 1312.025198][ T9519] nw80x: probe of 2-1:0.0 failed with error -71 [ 1312.078127][ T9519] usb 2-1: USB disconnect, device number 96 [ 1312.219995][T11610] netlink: 'syz.6.17797': attribute type 1 has an invalid length. [ 1312.456035][T11621] loop6: detected capacity change from 0 to 1024 [ 1312.710309][T11628] __nla_validate_parse: 101 callbacks suppressed [ 1312.710326][T11628] netlink: 36 bytes leftover after parsing attributes in process `syz.7.17802'. [ 1312.768134][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17802'. [ 1312.845244][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17806'. [ 1313.026095][T11641] netlink: 'syz.1.17811': attribute type 21 has an invalid length. [ 1313.047081][T11638] netlink: 'syz.0.17810': attribute type 1 has an invalid length. [ 1313.522551][T11661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17820'. [ 1313.771787][T11668] device ip6tnl0 entered promiscuous mode [ 1313.910145][T11673] xt_l2tp: wrong L2TP version: 0 [ 1313.975146][T11646] loop4: detected capacity change from 0 to 32768 [ 1314.068994][T11646] o2cb: This node has not been configured. [ 1314.115361][T11646] o2cb: Cluster check failed. Fix errors before retrying. [ 1314.192273][T11646] (syz.4.17813,11646,1):ocfs2_dlm_init:3373 ERROR: status = -22 [ 1314.235416][T11646] (syz.4.17813,11646,1):ocfs2_mount_volume:1792 ERROR: status = -22 [ 1314.358896][T11646] (syz.4.17813,11646,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1314.569310][T11699] loop4: detected capacity change from 0 to 8 [ 1314.604656][T11701] netlink: 'syz.0.17838': attribute type 1 has an invalid length. [ 1314.650668][T11699] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1314.687095][T11699] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1314.695286][T11699] SQUASHFS error: Unable to read directory block [631:26] [ 1315.320362][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17850'. [ 1315.700649][T11740] loop7: detected capacity change from 0 to 1024 [ 1316.086965][T11750] loop4: detected capacity change from 0 to 128 [ 1316.192942][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.241189][T11750] FAT-fs (loop4): Filesystem has been set read-only [ 1316.262075][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.305798][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.341522][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.396451][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.445677][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.498869][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.536039][T11759] loop6: detected capacity change from 0 to 256 [ 1316.548238][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.556969][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.567340][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17867'. [ 1316.587982][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17867'. [ 1316.646463][T11750] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 52) [ 1316.720741][ T26] audit: type=1800 audit(1786456194.964:1024): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.17862" name="file1" dev="loop4" ino=1048736 res=0 errno=0 [ 1316.727758][T11750] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1316.883734][T11766] loop1: detected capacity change from 0 to 512 [ 1316.941256][T11768] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1317.002458][T11766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1317.078199][T11766] ext4 filesystem being mounted at /3572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.237338][T11781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17872'. [ 1317.259462][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 1317.727575][ T2931] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1317.917524][ T2931] usb 7-1: Using ep0 maxpacket: 32 [ 1317.928526][ T2931] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 1317.957317][ T2931] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1317.969179][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17891'. [ 1317.978511][ T2931] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.997611][T11812] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17891'. [ 1318.006746][ T2931] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1318.037176][ T2931] usb 7-1: config 1 has no interface number 0 [ 1318.067370][ T2931] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1318.077314][ T2931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.114871][ T2931] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 1318.310907][T11826] netlink: 200 bytes leftover after parsing attributes in process `syz.1.17897'. [ 1318.323823][ T2931] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 1318.345018][ T2931] snd_usb_pod 7-1:1.1: invalid control EP [ 1318.355277][ T2931] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 1318.382880][ T2931] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 1318.390741][ T2931] snd_usb_pod: probe of 7-1:1.1 failed with error -22 [ 1318.432238][T11821] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1318.509111][T11830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17898'. [ 1318.531391][ T2931] usb 7-1: USB disconnect, device number 21 [ 1318.609232][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17902'. [ 1318.640844][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17902'. [ 1319.382026][T11856] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1320.137772][ T2931] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1320.337644][ T2931] usb 7-1: Using ep0 maxpacket: 8 [ 1320.344319][ T2931] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1320.359124][T11906] loop7: detected capacity change from 0 to 256 [ 1320.365577][ T2931] usb 7-1: config 0 has no interface number 0 [ 1320.384427][ T2931] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1320.417164][ T2931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.457684][ T2931] usb 7-1: Product: syz [ 1320.461908][ T2931] usb 7-1: Manufacturer: syz [ 1320.466611][ T2931] usb 7-1: SerialNumber: syz [ 1320.511145][ T2931] usb 7-1: config 0 descriptor?? [ 1320.550691][T11909] loop4: detected capacity change from 0 to 512 [ 1320.687484][T11909] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1320.723232][ T2931] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1320.747938][ T2931] usb 7-1: Failed to initialize entity for entity 6 [ 1320.747987][T11909] ext4 filesystem being mounted at /3534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1320.755377][T11891] loop1: detected capacity change from 0 to 32768 [ 1320.818786][T11891] o2cb: This node has not been configured. [ 1320.827883][T11891] o2cb: Cluster check failed. Fix errors before retrying. [ 1320.840785][T11891] (syz.1.17929,11891,1):ocfs2_dlm_init:3373 ERROR: status = -22 [ 1320.842495][T11918] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1320.864727][T11891] (syz.1.17929,11891,0):ocfs2_mount_volume:1792 ERROR: status = -22 [ 1320.869783][ T2931] usb 7-1: Failed to register entities (-22). [ 1320.893614][T11891] (syz.1.17929,11891,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 1320.957375][ T3382] usb 7-1: USB disconnect, device number 22 [ 1320.965669][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1321.234600][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17942'. [ 1321.253529][T11929] netlink: 'syz.7.17942': attribute type 8 has an invalid length. [ 1321.456866][T11937] kAFS: unable to lookup cell '@mTsyz0' [ 1321.542843][T11941] netlink: 200 bytes leftover after parsing attributes in process `syz.0.17949'. [ 1321.748196][ T3382] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1321.835722][T11953] netlink: 'syz.0.17964': attribute type 29 has an invalid length. [ 1321.868064][T11953] netlink: 'syz.0.17964': attribute type 29 has an invalid length. [ 1321.896069][T11955] loop6: detected capacity change from 0 to 256 [ 1321.947831][ T3382] usb 2-1: Using ep0 maxpacket: 16 [ 1321.954843][ T3382] usb 2-1: config 254 has an invalid interface number: 235 but max is 0 [ 1321.991716][ T3382] usb 2-1: config 254 has no interface number 0 [ 1322.009592][ T3382] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7 [ 1322.022286][T11955] FAT-fs (loop6): Directory bread(block 64) failed [ 1322.032531][T11955] FAT-fs (loop6): Directory bread(block 65) failed [ 1322.055186][ T3382] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024 [ 1322.066995][T11955] FAT-fs (loop6): Directory bread(block 66) failed [ 1322.085069][T11955] FAT-fs (loop6): Directory bread(block 67) failed [ 1322.105383][T11955] FAT-fs (loop6): Directory bread(block 68) failed [ 1322.106082][ T3382] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1322.125653][T11955] FAT-fs (loop6): Directory bread(block 69) failed [ 1322.142873][ T3382] usb 2-1: config 254 interface 235 has no altsetting 0 [ 1322.168005][T11955] FAT-fs (loop6): Directory bread(block 70) failed [ 1322.174613][T11955] FAT-fs (loop6): Directory bread(block 71) failed [ 1322.177500][ T3382] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1322.231416][ T3382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.233122][T11955] FAT-fs (loop6): Directory bread(block 72) failed [ 1322.263691][ T3382] usb 2-1: Product: syz [ 1322.266883][T11955] FAT-fs (loop6): Directory bread(block 73) failed [ 1322.275708][ T3382] usb 2-1: Manufacturer: syz [ 1322.288356][ T3382] usb 2-1: SerialNumber: syz [ 1322.307259][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17960'. [ 1322.345204][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17960'. [ 1322.356751][T11955] syz.6.17956: attempt to access beyond end of device [ 1322.356751][T11955] loop6: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1322.555100][ T3382] usbtest 2-1:254.235: couldn't get endpoints, -71 [ 1322.567282][ T3382] usbtest: probe of 2-1:254.235 failed with error -71 [ 1322.619181][ T3382] usb 2-1: USB disconnect, device number 97 [ 1323.222423][T11997] tmpfs: Bad value for 'mpol' [ 1323.979032][T12020] loop4: detected capacity change from 0 to 4096 [ 1324.068422][T12020] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1324.107620][T12020] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 1324.324935][T20780] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1324.341413][T12034] loop6: detected capacity change from 0 to 64 [ 1324.352074][ T4280] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1324.366191][ T4280] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1324.398306][ T4280] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1324.411043][T20779] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1324.418996][ T4280] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 1324.429431][T12034] syz.6.17995: attempt to access beyond end of device [ 1324.429431][T12034] loop6: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1324.478196][T12034] Buffer I/O error on dev loop6, logical block 22533, async page read [ 1324.486799][T12034] syz.6.17995: attempt to access beyond end of device [ 1324.486799][T12034] loop6: rw=0, sector=45066, nr_sectors = 2 limit=64 [ 1324.558100][T12034] Buffer I/O error on dev loop6, logical block 22533, async page read [ 1324.813172][T12045] sctp: [Deprecated]: syz.7.17999 (pid 12045) Use of int in max_burst socket option. [ 1324.813172][T12045] Use struct sctp_assoc_value instead [ 1325.286493][T12056] loop6: detected capacity change from 0 to 4096 [ 1325.428455][ T2931] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1325.594552][T12071] netlink: 'syz.7.18013': attribute type 29 has an invalid length. [ 1325.608482][T12071] netlink: 'syz.7.18013': attribute type 29 has an invalid length. [ 1325.628357][ T2931] usb 5-1: Using ep0 maxpacket: 8 [ 1325.635380][ T2931] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1325.658305][ T2931] usb 5-1: config 0 has no interface number 0 [ 1325.671022][ T2931] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1325.697654][ T2931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.746150][ T2931] usb 5-1: Product: syz [ 1325.752517][ T2931] usb 5-1: Manufacturer: syz [ 1325.757155][ T2931] usb 5-1: SerialNumber: syz [ 1325.783129][ T2931] usb 5-1: config 0 descriptor?? [ 1325.818352][ T3383] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1326.011073][ T2931] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1326.017508][ T2931] usb 5-1: Failed to initialize entity for entity 6 [ 1326.024569][ T3383] usb 2-1: Using ep0 maxpacket: 32 [ 1326.031592][ T3383] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1326.067900][ T2931] usb 5-1: Failed to register entities (-22). [ 1326.078286][ T3383] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1326.089076][T12079] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1326.096523][T12079] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1326.107846][ T3383] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.135031][ T3383] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1326.164729][ T3383] usb 2-1: config 1 has no interface number 0 [ 1326.184973][ T3383] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1326.204646][T12083] __nla_validate_parse: 1 callbacks suppressed [ 1326.204660][T12083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18018'. [ 1326.238090][ T3383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.268601][ T2931] usb 5-1: USB disconnect, device number 97 [ 1326.282031][ T3383] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1326.485476][ T3383] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 1326.500128][ T3383] snd_usb_pod 2-1:1.1: invalid control EP [ 1326.513866][ T3383] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 1326.527540][ T3383] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1326.539649][ T3383] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 1326.647920][T12095] tmpfs: Bad value for 'mpol' [ 1326.712600][ T3383] usb 2-1: USB disconnect, device number 98 [ 1326.762998][T12099] loop7: detected capacity change from 0 to 256 [ 1326.856023][T12099] FAT-fs (loop7): Directory bread(block 64) failed [ 1326.901841][T12099] FAT-fs (loop7): Directory bread(block 65) failed [ 1326.924238][T12099] FAT-fs (loop7): Directory bread(block 66) failed [ 1326.941281][T12099] FAT-fs (loop7): Directory bread(block 67) failed [ 1326.947958][T12099] FAT-fs (loop7): Directory bread(block 68) failed [ 1327.004366][T12099] FAT-fs (loop7): Directory bread(block 69) failed [ 1327.020590][T12099] FAT-fs (loop7): Directory bread(block 70) failed [ 1327.047467][T12099] FAT-fs (loop7): Directory bread(block 71) failed [ 1327.067834][T12099] FAT-fs (loop7): Directory bread(block 72) failed [ 1327.090667][T12099] FAT-fs (loop7): Directory bread(block 73) failed [ 1327.245037][T12099] syz.7.18025: attempt to access beyond end of device [ 1327.245037][T12099] loop7: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1327.413254][T12111] netlink: 'syz.1.18031': attribute type 21 has an invalid length. [ 1327.428564][T12111] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18031'. [ 1327.446425][T12111] netlink: 'syz.1.18031': attribute type 4 has an invalid length. [ 1327.485193][T12111] netlink: 'syz.1.18031': attribute type 5 has an invalid length. [ 1327.529880][T12111] netlink: 3 bytes leftover after parsing attributes in process `syz.1.18031'. [ 1327.711998][T12119] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18034'. [ 1327.721349][T12119] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18034'. [ 1328.127543][T12133] loop7: detected capacity change from 0 to 4096 [ 1328.175075][T12133] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 1328.203692][T12133] ntfs3: loop7: ino=1e, "file1" attr_set_size [ 1328.299363][T20777] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 1328.306001][ T9698] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 1328.342600][ T9698] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1328.407270][ T9698] ntfs3: loop7: ntfs_set_state r=3 failed, -22. [ 1328.458595][T20777] ntfs3: loop7: ntfs3_write_inode r=3 failed, -22. [ 1328.474605][ T9698] ntfs3: loop7: ntfs_evict_inode r=3 failed, -22. [ 1328.588655][T12143] sctp: [Deprecated]: syz.6.18048 (pid 12143) Use of int in max_burst socket option. [ 1328.588655][T12143] Use struct sctp_assoc_value instead [ 1328.931286][T12157] loop6: detected capacity change from 0 to 1024 [ 1329.079458][T12157] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1329.203376][T12164] netlink: 'syz.1.18058': attribute type 21 has an invalid length. [ 1329.345136][T31377] EXT4-fs (loop6): unmounting filesystem. [ 1329.662698][T12178] netlink: 'syz.0.18064': attribute type 1 has an invalid length. [ 1329.680160][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18064'. [ 1330.182927][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18073'. [ 1330.226953][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18073'. [ 1330.606735][T12214] ip6t_srh: unknown srh match flags 4000 [ 1330.762323][T12220] netlink: 'syz.6.18085': attribute type 21 has an invalid length. [ 1330.778891][T12220] netlink: 128 bytes leftover after parsing attributes in process `syz.6.18085'. [ 1330.819193][T12220] netlink: 'syz.6.18085': attribute type 4 has an invalid length. [ 1330.869442][T12220] netlink: 'syz.6.18085': attribute type 5 has an invalid length. [ 1330.900348][T12220] netlink: 3 bytes leftover after parsing attributes in process `syz.6.18085'. [ 1331.432704][T12246] netlink: 'syz.6.18098': attribute type 4 has an invalid length. [ 1331.509662][T12246] device veth1_macvtap left promiscuous mode [ 1331.744101][T12257] netlink: 'syz.4.18103': attribute type 21 has an invalid length. [ 1331.823385][T12257] netlink: 128 bytes leftover after parsing attributes in process `syz.4.18103'. [ 1331.851882][T12257] netlink: 3 bytes leftover after parsing attributes in process `syz.4.18103'. [ 1331.863248][T12262] loop1: detected capacity change from 0 to 256 [ 1331.987534][T12262] FAT-fs (loop1): Directory bread(block 64) failed [ 1332.009109][T12262] FAT-fs (loop1): Directory bread(block 65) failed [ 1332.015779][T12262] FAT-fs (loop1): Directory bread(block 66) failed [ 1332.047224][T12262] FAT-fs (loop1): Directory bread(block 67) failed [ 1332.067046][T12262] FAT-fs (loop1): Directory bread(block 68) failed [ 1332.081985][T12262] FAT-fs (loop1): Directory bread(block 69) failed [ 1332.088745][T12262] FAT-fs (loop1): Directory bread(block 70) failed [ 1332.099611][T12268] cgroup: none used incorrectly [ 1332.153163][T12262] FAT-fs (loop1): Directory bread(block 71) failed [ 1332.169713][T12262] FAT-fs (loop1): Directory bread(block 72) failed [ 1332.198327][T12262] FAT-fs (loop1): Directory bread(block 73) failed [ 1332.350176][T12262] syz.1.18105: attempt to access beyond end of device [ 1332.350176][T12262] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1332.890452][T12293] xt_HMARK: proto mask must be zero with L3 mode [ 1333.045594][T12298] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1333.166837][T12304] device wg2 entered promiscuous mode [ 1333.199278][T12306] ip6t_srh: unknown srh match flags 4000 [ 1333.221594][T12304] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1333.344188][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18131'. [ 1333.353458][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18131'. [ 1334.232497][T12348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1334.569381][T12358] device wg2 entered promiscuous mode [ 1334.590079][T12358] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1335.999859][T12419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1336.241921][T12430] loop7: detected capacity change from 0 to 64 [ 1336.539680][T12443] netlink: 132 bytes leftover after parsing attributes in process `syz.6.18194'. [ 1336.793262][T12455] loop6: detected capacity change from 0 to 128 [ 1336.812550][T12455] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1336.865854][T12455] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1337.077028][T20773] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1337.181043][T12462] loop7: detected capacity change from 0 to 4096 [ 1337.208114][T12462] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 1337.326010][T12462] ntfs3: loop7: ino=5, "/" directory corrupted [ 1338.014964][T12501] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551613) [ 1338.039685][T12501] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1338.318482][T12512] loop6: detected capacity change from 0 to 256 [ 1338.436530][T12514] loop7: detected capacity change from 0 to 1764 [ 1338.896233][T12536] CIFS: VFS: Unable to allocate memory for devname [ 1339.172513][T12545] loop4: detected capacity change from 0 to 128 [ 1339.200200][T12545] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1339.261175][T12545] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1339.429661][ T32] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1339.559333][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18263'. [ 1339.597762][T12560] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18263'. [ 1339.630349][T12564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18254'. [ 1339.832539][T12570] validate_nla: 2 callbacks suppressed [ 1339.832555][T12570] netlink: 'syz.7.18257': attribute type 10 has an invalid length. [ 1339.915422][T12570] netlink: 55 bytes leftover after parsing attributes in process `syz.7.18257'. [ 1340.542545][T12594] netlink: 'syz.1.18270': attribute type 11 has an invalid length. [ 1341.005459][T12607] loop6: detected capacity change from 0 to 4096 [ 1341.058198][T12607] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 1341.163118][T12607] ntfs3: loop6: ino=5, "/" directory corrupted [ 1341.473630][T12629] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551613) [ 1341.550412][T12629] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1341.648292][T12633] loop7: detected capacity change from 0 to 256 [ 1341.840392][ T2932] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1342.050364][ T2932] usb 1-1: Using ep0 maxpacket: 8 [ 1342.057207][ T2932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1342.093882][ T2932] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1342.116348][ T2932] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1342.145557][ T2932] usb 1-1: Product: syz [ 1342.149825][ T2932] usb 1-1: Manufacturer: syz [ 1342.160529][ T2932] usb 1-1: SerialNumber: syz [ 1342.398848][ T2932] usb 1-1: Invalid connection information received from device [ 1342.414516][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18302'. [ 1342.433669][T12660] netlink: 'syz.7.18302': attribute type 1 has an invalid length. [ 1342.442052][T12660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18302'. [ 1342.609832][ T2932] usb 1-1: USB disconnect, device number 93 [ 1342.884408][T12675] netlink: 'syz.7.18310': attribute type 10 has an invalid length. [ 1343.819605][T12713] loop1: detected capacity change from 0 to 4096 [ 1343.852240][T12713] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1343.879545][T12713] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1343.937678][T12713] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1343.962353][T12713] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1344.060220][T12725] loop6: detected capacity change from 0 to 1024 [ 1344.149458][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 1344.221436][T12725] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 1344.951447][T12755] netlink: 'syz.6.18347': attribute type 11 has an invalid length. [ 1345.031625][T12758] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1345.063627][T12758] overlayfs: missing 'lowerdir' [ 1345.125304][T12762] netlink: 'syz.0.18350': attribute type 10 has an invalid length. [ 1345.243117][T12766] loop7: detected capacity change from 0 to 8 [ 1345.319479][T12766] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1345.369303][T12766] SQUASHFS error: Failed to read block 0x13e: -5 [ 1345.395795][T12766] SQUASHFS error: Unable to read metadata cache entry [13c] [ 1345.410216][T12766] SQUASHFS error: Unable to read directory block [13c:26] [ 1345.983075][T12789] netlink: 'syz.4.18364': attribute type 10 has an invalid length. [ 1346.140884][T12795] netlink: 'syz.0.18365': attribute type 11 has an invalid length. [ 1346.170827][ T3383] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1346.362716][ T3383] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.392988][ T3383] usb 8-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1346.438922][ T3383] usb 8-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 1346.473031][ T3383] usb 8-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1346.496559][ T3383] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1346.510691][ T3383] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1346.522962][ T3383] usb 8-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1346.542479][ T3383] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.550556][ T3383] usb 8-1: Product: syz [ 1346.585047][ T3383] usb 8-1: Manufacturer: syz [ 1346.589675][ T3383] usb 8-1: SerialNumber: syz [ 1346.610668][T12807] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18373'. [ 1346.771912][T12811] netlink: 'syz.4.18376': attribute type 10 has an invalid length. [ 1346.779882][T12811] netlink: 55 bytes leftover after parsing attributes in process `syz.4.18376'. [ 1346.841244][ T3383] usb 8-1: selecting invalid altsetting 0 [ 1346.857346][ T3383] usb 8-1: selecting invalid altsetting 0 [ 1346.873304][ T3383] usbtest: probe of 8-1:220.1 failed with error -22 [ 1346.897122][ T3383] usb 8-1: USB disconnect, device number 7 [ 1346.962850][T12801] loop1: detected capacity change from 0 to 32768 [ 1347.067808][T12801] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 1347.067808][T12801] [ 1347.092745][T12811] device virt_wifi0 left promiscuous mode [ 1347.106705][T12819] xt_hashlimit: size too large, truncated to 1048576 [ 1347.123699][T12811] team0: Port device virt_wifi0 removed [ 1347.140249][T12801] ERROR: (device loop1): remounting filesystem as read-only [ 1347.140567][T12819] xt_hashlimit: max too large, truncated to 1048576 [ 1347.154086][T12801] xtLookup: xtSearch returned -5 [ 1347.187581][T12801] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1347.187581][T12801] [ 1347.225525][T12819] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1347.533327][ T2932] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1347.732490][T12835] loop1: detected capacity change from 0 to 1024 [ 1347.763162][T12835] hfsplus: catalog record size mismatch (type 2, got 88, expected 248) [ 1348.081013][ T2932] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1348.128965][T12844] loop7: detected capacity change from 0 to 4096 [ 1348.190698][T12844] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1348.244325][T12844] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1348.293808][T12844] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1348.359234][T12844] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 1348.433480][T12862] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1348.443807][T12862] overlayfs: missing 'lowerdir' [ 1348.471583][ T3383] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1348.555473][ T9698] EXT4-fs (loop7): unmounting filesystem. [ 1348.659325][T12866] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1348.691039][ T4316] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1348.900767][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1348.928333][ T3383] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1348.933952][ T4316] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1348.998277][ T4316] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 1349.032465][ T4316] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1349.061865][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.069935][ T4316] usb 1-1: Product: syz [ 1349.080838][ T4316] usb 1-1: Manufacturer: syz [ 1349.085805][ T4316] usb 1-1: SerialNumber: syz [ 1349.145419][ T3383] usb 2-1: Using ep0 maxpacket: 8 [ 1349.156879][ T3383] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1349.190298][ T3383] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1349.211033][ T3383] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1349.228221][ T3383] usb 2-1: Product: syz [ 1349.237168][ T3383] usb 2-1: Manufacturer: syz [ 1349.247450][ T3383] usb 2-1: SerialNumber: syz [ 1349.319736][ T4316] usb 1-1: Can't get UAC3 power state for id 10 [ 1349.343077][ T4316] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 1349.360346][ T4316] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1349.429445][ T4316] usb 1-1: USB disconnect, device number 94 [ 1349.475305][ T3383] usb 2-1: Invalid connection information received from device [ 1349.511491][ T3383] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1349.520620][ T3383] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1349.536427][T12889] xt_hashlimit: size too large, truncated to 1048576 [ 1349.546516][T12889] xt_hashlimit: max too large, truncated to 1048576 [ 1349.559280][T12889] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 1349.691977][ T9519] usb 2-1: USB disconnect, device number 99 [ 1349.892116][T12899] netlink: 'syz.6.18415': attribute type 10 has an invalid length. [ 1349.900245][T12899] netlink: 55 bytes leftover after parsing attributes in process `syz.6.18415'. [ 1350.161410][ T9519] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1350.231278][ T3383] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1350.381252][ T9519] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1350.393146][ T9519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.409153][ T9519] usb 5-1: Product: syz [ 1350.416824][ T9519] usb 5-1: Manufacturer: syz [ 1350.434691][ T9519] usb 5-1: SerialNumber: syz [ 1350.538682][T12918] dlm: no local IP address has been set [ 1350.557743][T12918] dlm: cannot start dlm midcomms -107 [ 1350.655174][ T9519] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1350.680845][ T9519] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1350.719461][ T9519] kalmia: probe of 5-1:1.0 failed with error -71 [ 1350.739988][ T9519] usb 5-1: USB disconnect, device number 98 [ 1350.911879][ T9518] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1351.053986][T12939] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1351.281600][ T9519] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1351.310423][ T9519] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1351.798916][T12971] loop1: detected capacity change from 0 to 512 [ 1351.916761][T12971] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1351.994699][T12971] ext4 filesystem being mounted at /3681/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.094872][T12971] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1352.255126][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 1352.332420][ T9519] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1352.773473][T13005] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1353.282078][ T9518] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1353.282095][ T9518] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1353.418985][T13029] loop4: detected capacity change from 0 to 256 [ 1353.431702][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1353.537499][T13031] netlink: 'syz.1.18478': attribute type 10 has an invalid length. [ 1353.581532][T13031] netlink: 55 bytes leftover after parsing attributes in process `syz.1.18478'. [ 1353.905363][T13031] team0: Port device virt_wifi0 removed [ 1354.072010][T13043] netlink: 'syz.6.18485': attribute type 2 has an invalid length. [ 1354.109412][T13043] netlink: 'syz.6.18485': attribute type 1 has an invalid length. [ 1354.541822][ T4316] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1354.604819][T13059] netlink: 'syz.6.18493': attribute type 3 has an invalid length. [ 1354.614146][T13059] netlink: 132 bytes leftover after parsing attributes in process `syz.6.18493'. [ 1354.734072][T13062] loop6: detected capacity change from 0 to 512 [ 1354.743970][ T4316] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.763612][ T4316] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1354.784070][ T4316] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x89 has invalid maxpacket 1024, setting to 64 [ 1354.806003][ T4316] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1354.821174][ T9518] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1354.829179][T13062] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1354.848516][T13062] ext4 filesystem being mounted at /1228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1354.859636][ T4316] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1354.866760][ T4316] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1354.877524][ T4316] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1354.886982][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.895358][ T4316] usb 5-1: Product: syz [ 1354.899743][ T4316] usb 5-1: Manufacturer: syz [ 1354.904733][ T4316] usb 5-1: SerialNumber: syz [ 1354.943923][T13062] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1355.033855][ T9518] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.045810][T31377] EXT4-fs (loop6): unmounting filesystem. [ 1355.051845][ T9518] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1355.073544][ T9518] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1355.090244][ T9518] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.098917][ T9518] usb 8-1: Product: syz [ 1355.103419][ T9518] usb 8-1: Manufacturer: syz [ 1355.108165][ T9518] usb 8-1: SerialNumber: syz [ 1355.127487][ T4316] usb 5-1: selecting invalid altsetting 0 [ 1355.175652][ T4316] usb 5-1: selecting invalid altsetting 0 [ 1355.190439][ T4316] usbtest: probe of 5-1:220.1 failed with error -22 [ 1355.211477][ T4316] usb 5-1: USB disconnect, device number 99 [ 1355.368768][ T9518] usb 8-1: 0:2 : does not exist [ 1355.378395][ T9518] usb 8-1: unit 9 not found! [ 1355.385524][T13067] dlm: no local IP address has been set [ 1355.391565][T13067] dlm: cannot start dlm midcomms -107 [ 1355.400659][ T9518] usb 8-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1355.416333][ T9518] usb 8-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1355.448925][ T9518] usb 8-1: USB disconnect, device number 8 [ 1355.679437][T11410] udevd[11410]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1356.125419][T13090] netlink: 'syz.1.18507': attribute type 27 has an invalid length. [ 1356.136144][T13089] netlink: 'syz.7.18506': attribute type 29 has an invalid length. [ 1356.151949][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1356.171410][T13092] loop4: detected capacity change from 0 to 256 [ 1356.172163][T13090] netlink: 'syz.1.18507': attribute type 3 has an invalid length. [ 1356.192258][T13089] netlink: 'syz.7.18506': attribute type 29 has an invalid length. [ 1356.275830][T13092] FAT-fs (loop4): Directory bread(block 64) failed [ 1356.292939][T13092] FAT-fs (loop4): Directory bread(block 65) failed [ 1356.299627][T13092] FAT-fs (loop4): Directory bread(block 66) failed [ 1356.352167][T13092] FAT-fs (loop4): Directory bread(block 67) failed [ 1356.409499][T13092] FAT-fs (loop4): Directory bread(block 68) failed [ 1356.437230][T13092] FAT-fs (loop4): Directory bread(block 69) failed [ 1356.444056][T13092] FAT-fs (loop4): Directory bread(block 70) failed [ 1356.459006][T13092] FAT-fs (loop4): Directory bread(block 71) failed [ 1356.475962][T13092] FAT-fs (loop4): Directory bread(block 72) failed [ 1356.491567][T13092] FAT-fs (loop4): Directory bread(block 73) failed [ 1356.949280][T13118] netlink: 'syz.6.18521': attribute type 29 has an invalid length. [ 1356.978443][T13118] netlink: 'syz.6.18521': attribute type 29 has an invalid length. [ 1357.002285][ T4316] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1357.130785][T13125] loop4: detected capacity change from 0 to 64 [ 1357.184809][T13127] xt_hashlimit: size too large, truncated to 1048576 [ 1357.196804][ T4316] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1357.222907][T13127] xt_hashlimit: invalid interval [ 1357.226758][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.262291][ T4316] usb 2-1: Product: syz [ 1357.278883][ T4316] usb 2-1: Manufacturer: syz [ 1357.292053][ T4316] usb 2-1: SerialNumber: syz [ 1357.533738][ T4316] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1357.566182][ T4316] kalmia 2-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1357.593892][ T4316] kalmia: probe of 2-1:1.0 failed with error -71 [ 1357.632102][ T4316] usb 2-1: USB disconnect, device number 100 [ 1358.156921][T13157] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18539'. [ 1358.763326][T13146] loop6: detected capacity change from 0 to 32768 [ 1358.896350][T13186] validate_nla: 2 callbacks suppressed [ 1358.896367][T13186] netlink: 'syz.7.18551': attribute type 10 has an invalid length. [ 1358.923433][T13146] XFS (loop6): Mounting V5 Filesystem [ 1358.989833][T13146] XFS (loop6): Ending clean mount [ 1359.203170][T31377] XFS (loop6): Unmounting Filesystem [ 1359.307535][T13197] ALSA: mixer_oss: invalid OSS volume '' [ 1359.342260][ T4316] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1359.526456][T13204] netlink: 'syz.4.18557': attribute type 27 has an invalid length. [ 1359.556501][ T4316] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 1359.566502][T13204] netlink: 'syz.4.18557': attribute type 3 has an invalid length. [ 1359.582452][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.606193][ T4316] usb 1-1: Product: syz [ 1359.610429][ T4316] usb 1-1: Manufacturer: syz [ 1359.626913][ T4316] usb 1-1: SerialNumber: syz [ 1359.755938][T13208] loop4: detected capacity change from 0 to 256 [ 1359.773552][T13208] exfat: Deprecated parameter 'utf8' [ 1359.778989][T13208] exfat: Deprecated parameter 'namecase' [ 1359.795448][T13208] exfat: Deprecated parameter 'namecase' [ 1359.826838][T13208] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1359.867225][ T4316] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 1359.896932][ T4316] kalmia 1-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71 [ 1359.927959][ T4316] kalmia: probe of 1-1:1.0 failed with error -71 [ 1360.003243][ T4316] usb 1-1: USB disconnect, device number 95 [ 1360.173915][T13214] loop7: detected capacity change from 0 to 64 [ 1360.189520][T13216] xt_hashlimit: size too large, truncated to 1048576 [ 1360.222350][T13216] xt_hashlimit: invalid interval [ 1360.792600][ T4316] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1360.835241][T13238] netlink: 'syz.4.18574': attribute type 10 has an invalid length. [ 1360.882622][ T9518] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1360.976532][T13242] binder: BC_ATTEMPT_ACQUIRE not supported [ 1360.991459][T13242] binder: 13241:13242 ioctl c0306201 200000000480 returned -22 [ 1361.002451][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 1361.009599][ T4316] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1361.028069][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1361.040281][ T4316] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1361.087809][ T9518] usb 1-1: Using ep0 maxpacket: 32 [ 1361.095676][ T9518] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.095843][T13246] loop7: detected capacity change from 0 to 256 [ 1361.110400][ T4316] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1361.138992][ T9518] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1361.154400][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.165917][T13246] FAT-fs (loop7): Directory bread(block 64) failed [ 1361.172731][ T4316] usb 2-1: Product: syz [ 1361.172752][ T4316] usb 2-1: Manufacturer: syz [ 1361.192609][ T4316] usb 2-1: SerialNumber: syz [ 1361.197117][T13246] FAT-fs (loop7): Directory bread(block 65) failed [ 1361.199799][ T9518] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1361.214721][T13246] FAT-fs (loop7): Directory bread(block 66) failed [ 1361.224147][ T4316] usb 2-1: config 0 descriptor?? [ 1361.229372][ T9518] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1361.238121][T13246] FAT-fs (loop7): Directory bread(block 67) failed [ 1361.238653][T13225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1361.254594][T13246] FAT-fs (loop7): Directory bread(block 68) failed [ 1361.262209][ T9518] usb 1-1: Product: syz [ 1361.270156][T13246] FAT-fs (loop7): Directory bread(block 69) failed [ 1361.277298][ T4316] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed! [ 1361.285201][ T9518] usb 1-1: Manufacturer: syz [ 1361.287587][T13246] FAT-fs (loop7): Directory bread(block 70) failed [ 1361.298684][ T4316] mceusb: probe of 2-1:0.0 failed with error -12 [ 1361.314975][T13246] FAT-fs (loop7): Directory bread(block 71) failed [ 1361.321845][T13246] FAT-fs (loop7): Directory bread(block 72) failed [ 1361.329861][ T9518] hub 1-1:4.0: USB hub found [ 1361.351146][T13246] FAT-fs (loop7): Directory bread(block 73) failed [ 1361.420485][T13244] netlink: 'syz.6.18576': attribute type 24 has an invalid length. [ 1361.432509][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1361.441431][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.525577][ T9518] hub 1-1:4.0: 2 ports detected [ 1361.537125][ T4316] usb 2-1: USB disconnect, device number 101 [ 1361.697977][T13251] netlink: 'syz.6.18580': attribute type 21 has an invalid length. [ 1361.712783][T13251] IPv6: NLM_F_CREATE should be specified when creating new route [ 1361.730573][ T9518] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1361.749690][ T9518] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1361.833102][ T9518] usb 1-1: USB disconnect, device number 96 [ 1361.876357][T13254] ip6t_srh: unknown srh invflags 4000 [ 1362.178891][ T4316] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1362.412739][ T4316] usb 7-1: Using ep0 maxpacket: 32 [ 1362.422114][ T4316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.435572][ T4316] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.492920][ T4316] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1362.512619][ T4316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.542035][ T4316] usb 7-1: config 0 descriptor?? [ 1362.570195][ T4316] hub 7-1:0.0: USB hub found [ 1362.617832][T13270] netlink: 'syz.7.18590': attribute type 24 has an invalid length. [ 1362.735871][ T9518] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1362.783914][ T4316] hub 7-1:0.0: 1 port detected [ 1362.944538][ T9518] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1362.990260][ T4316] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 1362.997558][ T9518] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1363.007011][ T4316] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 1363.041087][ T9518] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1363.056283][ T4316] usbhid 7-1:0.0: can't add hid device: -71 [ 1363.072684][ T4316] usbhid: probe of 7-1:0.0 failed with error -71 [ 1363.080348][ T9518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.113762][ T9518] usb 1-1: Product: syz [ 1363.118012][ T9518] usb 1-1: Manufacturer: syz [ 1363.143404][ T4316] usb 7-1: USB disconnect, device number 23 [ 1363.152885][ T9518] usb 1-1: SerialNumber: syz [ 1363.414729][ T9518] usb 1-1: 0:2 : does not exist [ 1363.420283][ T9518] usb 1-1: unit 9 not found! [ 1363.463646][ T9518] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1363.485803][ T9518] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1363.546846][ T9518] usb 1-1: USB disconnect, device number 97 [ 1363.691157][T13296] loop4: detected capacity change from 0 to 4096 [ 1363.821164][T13296] ntfs3: loop4: ino=9, attr_set_size [ 1363.992780][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1364.280469][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18608'. [ 1364.325812][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18608'. [ 1364.355572][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.7.18608'. [ 1364.600880][T13320] loop7: detected capacity change from 0 to 512 [ 1364.809928][T13324] netlink: 'syz.4.18616': attribute type 10 has an invalid length. [ 1365.291409][T13338] Unknown vers= option specified: 3.0/ [ 1365.291409][T13338] [ 1365.309733][T13338] CIFS: VFS: Unknown vers= option specified: 3.0/ [ 1365.353094][ T2931] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1365.544745][ T2931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.583417][ T2931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1365.622691][ T2931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1365.652185][ T2931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.669008][ T2931] usb 5-1: Product: syz [ 1365.691605][ T2931] usb 5-1: Manufacturer: syz [ 1365.708962][ T2931] usb 5-1: SerialNumber: syz [ 1365.810107][T13352] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18629'. [ 1365.819453][T13352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18629'. [ 1365.872925][ T4316] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1365.944290][ T2931] usb 5-1: 0:2 : does not exist [ 1365.949258][ T2931] usb 5-1: unit 9 not found! [ 1365.978782][ T2931] usb 5-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1365.999832][ T2931] usb 5-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1366.032152][ T2931] usb 5-1: USB disconnect, device number 100 [ 1366.073195][ T4316] usb 8-1: Using ep0 maxpacket: 16 [ 1366.081188][ T4316] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1366.113213][ T4316] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1366.138820][ T4316] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1366.174002][ T4316] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1366.198353][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.225730][T13358] xt_socket: unknown flags 0x50 [ 1366.233159][ T4316] usb 8-1: Product: syz [ 1366.243151][ T4316] usb 8-1: Manufacturer: syz [ 1366.247802][ T4316] usb 8-1: SerialNumber: syz [ 1366.273889][ T4316] usb 8-1: config 0 descriptor?? [ 1366.285173][T13346] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1366.295611][T11410] udevd[11410]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1366.319406][ T4316] mceusb 8-1:0.0: mceusb_dev_probe: device setup failed! [ 1366.334537][ T4316] mceusb: probe of 8-1:0.0 failed with error -12 [ 1366.341460][T13342] loop1: detected capacity change from 0 to 32768 [ 1366.416880][T13342] XFS (loop1): Mounting V5 Filesystem [ 1366.460672][T13342] XFS (loop1): Ending clean mount [ 1366.542042][ T4316] usb 8-1: USB disconnect, device number 9 [ 1366.669510][ T4272] XFS (loop1): Unmounting Filesystem [ 1367.548301][ T4316] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1367.680888][T13392] loop6: detected capacity change from 0 to 4096 [ 1367.728359][T13378] loop4: detected capacity change from 0 to 32768 [ 1367.751533][T13378] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.18640 (13378) [ 1367.799794][T13378] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1367.812242][T13392] ntfs3: loop6: ino=9, attr_set_size [ 1367.817574][ T4316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.826712][ T4316] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1367.840313][T13378] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1367.858516][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.867793][T13378] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1367.917122][T13378] BTRFS info (device loop4): use zstd compression, level 3 [ 1367.922671][ T4316] usb 1-1: Product: syz [ 1367.939823][ T4316] usb 1-1: Manufacturer: syz [ 1367.943546][T13378] BTRFS info (device loop4): using free space tree [ 1367.965066][ T4316] usb 1-1: SerialNumber: syz [ 1368.090847][T13413] sctp: [Deprecated]: syz.6.18652 (pid 13413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1368.090847][T13413] Use struct sctp_sack_info instead [ 1368.190878][ T4316] usb 1-1: Limiting number of CPorts to U8_MAX [ 1368.220148][ T4316] usb 1-1: Not enough endpoints found in device, aborting! [ 1368.299896][T13378] BTRFS info (device loop4): enabling ssd optimizations [ 1368.355092][T13421] loop7: detected capacity change from 0 to 4096 [ 1368.373499][T13427] netlink: 'syz.6.18655': attribute type 10 has an invalid length. [ 1368.411460][ T9518] usb 1-1: USB disconnect, device number 98 [ 1368.854162][ T4280] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1369.268737][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18663'. [ 1369.292825][T13446] netlink: 132 bytes leftover after parsing attributes in process `syz.6.18663'. [ 1369.516858][T13452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1369.608328][ T9518] kernel write not supported for file /input/mice (pid: 9518 comm: kworker/0:16) [ 1369.883448][T13468] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1370.384730][T13491] netlink: 'syz.6.18684': attribute type 3 has an invalid length. [ 1371.317346][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18707'. [ 1372.011999][ T2931] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1372.225652][ T2931] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1372.243706][ T2931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1372.265470][ T2931] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1372.293677][ T2931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1372.301835][ T2931] usb 2-1: Product: syz [ 1372.328228][ T2931] usb 2-1: Manufacturer: syz [ 1372.339380][ T2931] usb 2-1: SerialNumber: syz [ 1372.355597][ T2931] usb 2-1: config 0 descriptor?? [ 1372.368062][ T2931] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1372.403684][ T2931] pctv452e: pctv452e_power_ctrl: 1 [ 1372.403684][ T2931] [ 1372.565472][ T2931] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 1372.565472][ T2931] [ 1372.584311][ T2931] dvb-usb: bulk message failed: -22 (5/0) [ 1372.589604][ T9519] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1372.606832][ T2931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1372.667335][ T2931] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1372.700213][ T2931] usb 2-1: USB disconnect, device number 102 [ 1372.847798][ T9519] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1372.864467][ T9519] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.892387][ T9519] usb 7-1: Product: syz [ 1372.898088][ T9519] usb 7-1: Manufacturer: syz [ 1372.902872][ T9519] usb 7-1: SerialNumber: syz [ 1372.964483][ T9519] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1373.037987][T13583] loop7: detected capacity change from 0 to 8 [ 1373.123619][ T9519] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1373.266927][T13589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1373.329999][ C0] usb 7-1: ath9k_htc: over RX MAX_PKT_NUM [ 1373.363848][ T4316] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1373.461629][T13593] loop4: detected capacity change from 0 to 4096 [ 1373.505792][T13596] loop1: detected capacity change from 0 to 64 [ 1373.531312][ T2931] usb 7-1: USB disconnect, device number 24 [ 1373.555182][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 1373.565531][ T4316] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 1373.610482][ T4316] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1373.654036][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.679433][ T4316] usb 1-1: Product: syz [ 1373.693973][ T4316] usb 1-1: Manufacturer: syz [ 1373.698769][ T4316] usb 1-1: SerialNumber: syz [ 1373.713352][T13599] loop7: detected capacity change from 0 to 64 [ 1373.720777][ T4316] usb 1-1: config 0 descriptor?? [ 1373.728407][T13585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1373.753960][ T9701] Bluetooth: hci3: command 0x0406 tx timeout [ 1373.783688][ T4316] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 1373.826350][T13599] Trying to free block not in datazone [ 1373.873991][T13599] Trying to free block not in datazone [ 1373.923605][T13599] Trying to free block not in datazone [ 1373.958978][T13599] Trying to free block not in datazone [ 1373.968919][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 1373.975113][ C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 1373.981971][ T9518] usb 1-1: USB disconnect, device number 99 [ 1373.993500][ T9518] mcba_usb 1-1:0.0 can0: device disconnected [ 1374.016039][T13599] Trying to free block not in datazone [ 1374.076875][T13599] Trying to free block not in datazone [ 1374.082436][T13599] Trying to free block not in datazone [ 1374.194880][T13599] Trying to free block not in datazone [ 1374.234409][ T9519] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1374.241472][ T9519] ath9k_htc: Failed to initialize the device [ 1374.284734][ T2931] usb 7-1: ath9k_htc: USB layer deinitialized [ 1374.478078][T13613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18744'. [ 1374.553951][T13613] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18744'. [ 1374.603645][T13613] netlink: 23 bytes leftover after parsing attributes in process `syz.7.18744'. [ 1374.700823][T13613] netlink: 23 bytes leftover after parsing attributes in process `syz.7.18744'. [ 1374.754589][T13626] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1374.754589][T13626] SȘȞZ6' [ 1375.027425][T13635] loop6: detected capacity change from 0 to 512 [ 1375.090425][T13639] Cannot find del_set index 4 as target [ 1375.236569][T13635] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #3: comm syz.6.18752: corrupted inode contents [ 1375.315664][T13635] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #3: comm syz.6.18752: mark_inode_dirty error [ 1375.369648][T13635] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #3: comm syz.6.18752: corrupted inode contents [ 1375.429517][T13635] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #3: comm syz.6.18752: mark_inode_dirty error [ 1375.518787][T13635] Quota error (device loop6): write_blk: dquota write failed [ 1375.534578][T13635] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1375.580024][T13635] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.18752: Failed to acquire dquot type 0 [ 1375.659913][T13635] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.18752: corrupted inode contents [ 1375.708189][T13635] EXT4-fs error (device loop6): ext4_dirty_inode:6156: inode #16: comm syz.6.18752: mark_inode_dirty error [ 1375.794342][T13635] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.18752: corrupted inode contents [ 1375.860087][T13635] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.18752: mark_inode_dirty error [ 1375.907580][T13635] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.18752: corrupted inode contents [ 1375.950323][T13635] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1375.989582][T13635] EXT4-fs error (device loop6): ext4_do_update_inode:5279: inode #16: comm syz.6.18752: corrupted inode contents [ 1376.031777][T13635] EXT4-fs error (device loop6): ext4_truncate:4325: inode #16: comm syz.6.18752: mark_inode_dirty error [ 1376.093652][T13635] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1376.107646][T13635] EXT4-fs (loop6): 1 truncate cleaned up [ 1376.113454][T13635] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1376.123394][T13635] ext4 filesystem being mounted at /1281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1376.124855][ T9519] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1376.289492][T31377] EXT4-fs (loop6): unmounting filesystem. [ 1376.334257][ T9519] usb 8-1: Using ep0 maxpacket: 16 [ 1376.343193][ T9519] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 1376.394297][ T9519] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1376.402542][ T9519] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1376.468176][ T9519] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1376.487805][T13688] sctp: [Deprecated]: syz.1.18774 (pid 13688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1376.487805][T13688] Use struct sctp_sack_info instead [ 1376.508352][ T9519] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1376.537905][ T9519] usb 8-1: config 0 has no interface number 0 [ 1376.564163][ T9519] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1376.614158][ T9519] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1376.654459][ T9519] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1376.692633][ T9519] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1376.739560][ T9519] usb 8-1: config 0 interface 125 has no altsetting 0 [ 1376.769987][ T9519] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1376.812935][ T9519] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.859579][ T9519] usb 8-1: Product: syz [ 1376.881802][ T9519] usb 8-1: Manufacturer: syz [ 1376.897761][ T9519] usb 8-1: SerialNumber: syz [ 1376.919017][ T9519] usb 8-1: config 0 descriptor?? [ 1377.374641][ T4678] usb 8-1: USB disconnect, device number 10 [ 1377.554337][ T4316] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1377.756801][ T4316] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.777498][ T4316] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1377.811950][ T4316] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1377.852184][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.890916][ T4316] usb 2-1: Product: syz [ 1377.904354][ T4316] usb 2-1: Manufacturer: syz [ 1377.914367][ T4316] usb 2-1: SerialNumber: syz [ 1377.955431][ T4316] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1377.995342][ T4316] usb 2-1: selecting invalid altsetting 0 [ 1378.015297][ T4316] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1378.074448][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1378.184540][ T2939] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1378.205313][ T4316] usb 2-1: USB disconnect, device number 103 [ 1378.379009][ T2939] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1378.394430][ T2939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.422906][ T2939] usb 5-1: Product: syz [ 1378.450467][ T2939] usb 5-1: Manufacturer: syz [ 1378.464828][ T2939] usb 5-1: SerialNumber: syz [ 1378.896308][ T2939] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1378.935230][ T2939] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1378.974049][ T2939] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1379.005961][ T2939] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1379.035438][ T2939] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1379.066956][ T2939] lan78xx: probe of 5-1:1.0 failed with error -71 [ 1379.102092][ T2939] usb 5-1: USB disconnect, device number 101 [ 1379.319447][T13737] loop7: detected capacity change from 0 to 32768 [ 1379.354616][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1379.518833][T13737] XFS (loop7): Mounting V5 Filesystem [ 1379.620408][T13737] XFS (loop7): Ending clean mount [ 1379.787815][T13787] netlink: 'syz.1.18810': attribute type 16 has an invalid length. [ 1379.824596][T13787] netlink: 'syz.1.18810': attribute type 3 has an invalid length. [ 1379.832481][T13787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18810'. [ 1379.966313][ T9698] XFS (loop7): Unmounting Filesystem [ 1380.545078][ T4678] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1380.770117][ T4678] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 1380.797426][ T4678] usb 7-1: config 0 has no interface number 0 [ 1380.805053][ T4678] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1380.824640][ T4678] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1380.854876][ T4678] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1380.874338][ T4678] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.930091][ T4678] usb 7-1: Product: syz [ 1380.944287][ T4678] usb 7-1: Manufacturer: syz [ 1380.963282][ T4678] usb 7-1: SerialNumber: syz [ 1380.992711][ T4678] usb 7-1: config 0 descriptor?? [ 1381.016980][T13799] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1381.030629][ T4678] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1381.065304][ T4678] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1381.066160][T13825] loop7: detected capacity change from 0 to 64 [ 1381.253267][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1381.459161][ T4678] usb 7-1: USB disconnect, device number 25 [ 1381.494921][ T4678] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1381.543802][ T4678] cyberjack 7-1:0.69: device disconnected [ 1381.737365][T13815] loop1: detected capacity change from 0 to 32768 [ 1381.844826][ T9518] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1381.892838][T13815] XFS (loop1): Mounting V5 Filesystem [ 1381.916783][ T9873] kworker/dying (9873) used greatest stack depth: 15888 bytes left [ 1382.016148][T13815] XFS (loop1): Ending clean mount [ 1382.037163][T13815] XFS (loop1): Quotacheck needed: Please wait. [ 1382.066631][ T9518] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1382.092751][ T9518] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1382.139106][ T9518] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1382.154905][ T9518] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1382.179652][ T9518] usb 1-1: Product: syz [ 1382.194116][ T9518] usb 1-1: Manufacturer: syz [ 1382.199240][ T9518] usb 1-1: SerialNumber: syz [ 1382.215112][ T4678] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1382.225501][ T9518] usb 1-1: config 0 descriptor?? [ 1382.232142][T13815] XFS (loop1): Quotacheck: Done. [ 1382.250578][ T9518] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1382.265660][ T9518] pctv452e: pctv452e_power_ctrl: 1 [ 1382.265660][ T9518] [ 1382.346363][ T4272] XFS (loop1): Unmounting Filesystem [ 1382.358740][T13865] loop6: detected capacity change from 0 to 8 [ 1382.433408][T13865] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1382.445605][ T4678] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1382.455011][ T9518] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71 [ 1382.455011][ T9518] [ 1382.475147][ T4678] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.483389][ T9518] dvb-usb: bulk message failed: -22 (5/0) [ 1382.497727][T13867] x_tables: duplicate underflow at hook 2 [ 1382.511767][ T4678] usb 8-1: Product: syz [ 1382.521634][ T9518] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1382.533842][ T4537] udevd[4537]: incorrect cramfs checksum on /dev/loop6 [ 1382.545560][ T4678] usb 8-1: Manufacturer: syz [ 1382.550226][ T4678] usb 8-1: SerialNumber: syz [ 1382.636719][ T4678] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1382.655287][ T9518] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1382.657849][ T4537] udevd[4537]: incorrect cramfs checksum on /dev/loop6 [ 1382.715232][ T9518] usb 1-1: USB disconnect, device number 100 [ 1382.755963][ T4675] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1382.840839][T13870] device sit0 entered promiscuous mode [ 1382.871954][T13870] netlink: 'syz.6.18849': attribute type 1 has an invalid length. [ 1382.890772][T13870] netlink: 1 bytes leftover after parsing attributes in process `syz.6.18849'. [ 1383.222244][ T9518] usb 8-1: USB disconnect, device number 11 [ 1383.390815][T13884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18847'. [ 1383.425092][T13884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18847'. [ 1383.455355][T13884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18847'. [ 1383.835036][ T4675] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1383.845907][ T4675] ath9k_htc: Failed to initialize the device [ 1383.865135][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18862'. [ 1383.875335][ T9518] usb 8-1: ath9k_htc: USB layer deinitialized [ 1384.365212][ T2931] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1384.576850][ T2931] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 1384.604716][ T2931] usb 5-1: config 4 has no interface number 0 [ 1384.625344][ T2931] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1384.665114][ T2931] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.695100][ T2931] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1384.704452][ T2931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.736966][ T2931] hub 5-1:4.128: USB hub found [ 1384.743480][T13901] loop7: detected capacity change from 0 to 32768 [ 1384.794956][T13901] ea_get: invalid extended attribute [ 1384.920463][T13927] netlink: 160 bytes leftover after parsing attributes in process `syz.0.18875'. [ 1384.951862][ T2931] hub 5-1:4.128: 27 ports detected [ 1384.957703][ T2931] hub 5-1:4.128: Using single TT (err -22) [ 1384.970373][T13927] netlink: 160 bytes leftover after parsing attributes in process `syz.0.18875'. [ 1384.981152][ T2931] hub 5-1:4.128: insufficient power available to use all downstream ports [ 1385.158986][ T2931] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 1385.176003][ T2931] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 1385.236451][ T2931] usb 5-1: USB disconnect, device number 102 [ 1385.395521][ T4675] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1385.417905][T13940] netlink: 128 bytes leftover after parsing attributes in process `syz.1.18882'. [ 1385.447937][T13940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1385.587567][ T4675] usb 7-1: Using ep0 maxpacket: 8 [ 1385.604405][ T4675] usb 7-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1385.633972][ T4675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.655716][ T4675] usb 7-1: Product: syz [ 1385.662732][ T4675] usb 7-1: Manufacturer: syz [ 1385.664830][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18885'. [ 1385.685580][ T4675] usb 7-1: SerialNumber: syz [ 1385.697137][T13947] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1386.132994][ T4675] mxuport 7-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1386.149120][ T4675] mxuport: probe of 7-1:254.0 failed with error -5 [ 1386.180522][ T4675] usb 7-1: USB disconnect, device number 26 [ 1386.313967][T13964] netlink: 'syz.4.18894': attribute type 5 has an invalid length. [ 1387.235160][T13996] loop4: detected capacity change from 0 to 512 [ 1387.340845][T13996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1387.507323][T13996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1387.530902][T13996] ext4 filesystem being mounted at /3731/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.651460][T14007] loop1: detected capacity change from 0 to 4096 [ 1387.757990][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1387.914254][T13986] loop7: detected capacity change from 0 to 32768 [ 1387.965954][T13986] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.18904 (13986) [ 1388.044713][T13986] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1388.073582][T13986] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1388.114694][T13986] BTRFS info (device loop7): using free space tree [ 1388.455650][T13986] BTRFS info (device loop7): enabling ssd optimizations [ 1388.535795][ T4675] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1388.601317][T14049] netlink: 'syz.0.18926': attribute type 1 has an invalid length. [ 1388.612198][ T9698] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1388.635568][T14049] netlink: 1 bytes leftover after parsing attributes in process `syz.0.18926'. [ 1388.777066][ T4675] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1388.791207][ T4675] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.815279][ T4675] usb 7-1: Product: syz [ 1388.843708][ T4675] usb 7-1: Manufacturer: syz [ 1388.855637][ T4675] usb 7-1: SerialNumber: syz [ 1389.097799][T14019] loop1: detected capacity change from 0 to 32768 [ 1389.189394][T14019] JBD2: Ignoring recovery information on journal [ 1389.309542][ T4675] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1389.336720][T14019] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1389.366458][ T4675] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1389.434498][ T4675] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1389.499715][ T4675] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1389.550320][ T4675] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1389.592506][ T4675] lan78xx: probe of 7-1:1.0 failed with error -71 [ 1389.657439][ T4675] usb 7-1: USB disconnect, device number 27 [ 1389.784888][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 1390.934476][T14098] cgroup: none used incorrectly [ 1390.954358][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18949'. [ 1390.988329][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18949'. [ 1391.002883][T14102] netlink: 11 bytes leftover after parsing attributes in process `syz.1.18949'. [ 1391.018472][T14075] loop6: detected capacity change from 0 to 32768 [ 1391.059086][T14075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.18938 (14075) [ 1391.148641][T14075] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1391.188915][T14075] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1391.225955][T14075] BTRFS info (device loop6): using free space tree [ 1391.508146][T14075] BTRFS info (device loop6): enabling ssd optimizations [ 1391.736552][T31377] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1392.887494][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18972'. [ 1393.106064][T14152] loop7: detected capacity change from 0 to 32768 [ 1393.151661][T14152] XFS (loop7): Mounting V5 Filesystem [ 1393.235472][T14152] XFS (loop7): Ending clean mount [ 1393.262459][T14152] XFS (loop7): Quotacheck needed: Please wait. [ 1393.286180][ T7] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1393.348796][ T2932] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1393.366252][ T3383] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1393.384653][T14152] XFS (loop7): Quotacheck: Done. [ 1393.407949][T14171] loop1: detected capacity change from 0 to 32768 [ 1393.446913][T14171] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.18973 (14171) [ 1393.476468][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 1393.480288][T14171] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1393.487756][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.494925][T14171] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1393.513446][T14171] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1393.534877][T14171] BTRFS info (device loop1): use zstd compression, level 3 [ 1393.545012][T14171] BTRFS info (device loop1): using free space tree [ 1393.552887][ T2932] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.563279][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.567737][ T3383] usb 7-1: config 4 has an invalid interface number: 128 but max is 0 [ 1393.589557][ T2932] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1393.599931][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1393.606319][ T3383] usb 7-1: config 4 has no interface number 0 [ 1393.610505][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.626472][ T7] usb 1-1: config 0 descriptor?? [ 1393.634651][ T7] hub 1-1:0.0: USB hub found [ 1393.635977][ T2932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.653425][ T9698] XFS (loop7): Unmounting Filesystem [ 1393.661780][ T3383] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1393.673255][ T2932] usb 5-1: Product: syz [ 1393.677632][ T2932] usb 5-1: Manufacturer: syz [ 1393.682272][ T2932] usb 5-1: SerialNumber: syz [ 1393.687093][ T3383] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.698074][ T3383] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1393.708455][ T3383] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.780299][ T3383] hub 7-1:4.128: USB hub found [ 1393.806316][T14171] BTRFS info (device loop1): enabling ssd optimizations [ 1393.847668][ T7] hub 1-1:0.0: 1 port detected [ 1393.927859][ T2932] usb 5-1: Limiting number of CPorts to U8_MAX [ 1393.937880][ T2932] usb 5-1: Not enough endpoints found in device, aborting! [ 1393.972728][ T3383] hub 7-1:4.128: 27 ports detected [ 1393.980608][ T3383] hub 7-1:4.128: Using single TT (err -22) [ 1394.007295][ T3383] hub 7-1:4.128: insufficient power available to use all downstream ports [ 1394.055030][ T7] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 1394.073887][ T7] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 1394.095859][ T7] usbhid 1-1:0.0: can't add hid device: -71 [ 1394.106856][ T7] usbhid: probe of 1-1:0.0 failed with error -71 [ 1394.132159][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1394.161732][ T3382] usb 5-1: USB disconnect, device number 103 [ 1394.178695][ T7] usb 1-1: USB disconnect, device number 101 [ 1394.188292][ T3383] hub 7-1:4.128: hub_hub_status failed (err = -71) [ 1394.195164][ T3383] hub 7-1:4.128: config failed, can't get hub status (err -71) [ 1394.240160][ T3383] usb 7-1: USB disconnect, device number 28 [ 1394.565948][T14206] netlink: 'syz.1.18978': attribute type 10 has an invalid length. [ 1394.739120][T14206] team0: Port device macsec0 removed [ 1394.774391][T14210] netlink: 96 bytes leftover after parsing attributes in process `syz.0.18981'. [ 1395.545709][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18994'. [ 1395.569517][T14236] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18993'. [ 1395.930328][ T2939] kernel write not supported for file /input/mice (pid: 2939 comm: kworker/1:7) [ 1396.092502][T14256] netlink: 'syz.0.19003': attribute type 29 has an invalid length. [ 1396.135664][T14256] netlink: 'syz.0.19003': attribute type 29 has an invalid length. [ 1396.887067][T14277] loop1: detected capacity change from 0 to 16 [ 1396.937845][T14277] erofs: (device loop1): mounted with root inode @ nid 36. [ 1396.985359][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.056675][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.079589][T14283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19016'. [ 1397.116619][T14277] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1397.136200][T14285] xt_ecn: cannot match TCP bits for non-tcp packets [ 1397.156817][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.196829][T14277] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1397.261818][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.289132][T14277] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1397.327196][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.346980][T14277] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1397.376686][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.396908][T14277] erofs: (device loop1): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 89 [ 1397.436816][T14277] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1397.457407][ T26] audit: type=1800 audit(1786456275.695:1025): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19014" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1397.705831][T14299] loop7: detected capacity change from 0 to 64 [ 1398.487165][T14323] loop4: detected capacity change from 0 to 512 [ 1398.520498][T14323] EXT4-fs: Ignoring removed oldalloc option [ 1398.570383][T14320] loop1: detected capacity change from 0 to 4096 [ 1398.602469][T14323] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1398.666832][T14323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 1398.689188][T14323] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1398.730443][T14323] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.19035: bad orphan inode 267 [ 1398.749420][T14320] ntfs3: loop1: ino=9, attr_set_size [ 1398.757000][T14323] EXT4-fs (loop4): Remounting filesystem read-only [ 1398.773920][T14323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1399.031067][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1399.231833][T14343] Cannot find del_set index 4 as target [ 1399.444360][T14351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19048'. [ 1399.524196][T14353] loop7: detected capacity change from 0 to 764 [ 1399.531424][T14355] netlink: 'syz.1.19050': attribute type 29 has an invalid length. [ 1399.562101][T14355] netlink: 'syz.1.19050': attribute type 29 has an invalid length. [ 1399.669104][T14359] loop4: detected capacity change from 0 to 256 [ 1400.588671][T14357] loop6: detected capacity change from 0 to 32768 [ 1400.655022][T14357] JBD2: Ignoring recovery information on journal [ 1400.675132][T14357] jbd2_journal_bmap: journal block not found at offset 32 on loop6-75 [ 1400.693012][T14357] JBD2: bad block at offset 32 [ 1400.731937][T14357] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1400.830101][T14357] [ 1400.832509][T14357] ====================================================== [ 1400.839564][T14357] WARNING: possible circular locking dependency detected [ 1400.846626][T14357] syzkaller #0 Not tainted [ 1400.851078][T14357] ------------------------------------------------------ [ 1400.858129][T14357] syz.6.19051/14357 is trying to acquire lock: [ 1400.864347][T14357] ffff8880771409c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbe4/0x1390 [ 1400.876652][T14357] [ 1400.876652][T14357] but task is already holding lock: [ 1400.884056][T14357] ffff88805740eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 1400.893642][T14357] [ 1400.893642][T14357] which lock already depends on the new lock. [ 1400.893642][T14357] [ 1400.904116][T14357] [ 1400.904116][T14357] the existing dependency chain (in reverse order) is: [ 1400.913170][T14357] [ 1400.913170][T14357] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1400.921055][T14357] down_read+0x42/0x2d0 [ 1400.925789][T14357] ocfs2_init_acl+0x307/0x770 [ 1400.931108][T14357] ocfs2_mknod+0x18e0/0x2580 [ 1400.936339][T14357] ocfs2_create+0x1b6/0x4b0 [ 1400.941415][T14357] vfs_create+0x2db/0x460 [ 1400.946319][T14357] do_mknodat+0x3a1/0x4d0 [ 1400.951220][T14357] __x64_sys_mknodat+0xa5/0xc0 [ 1400.956562][T14357] do_syscall_64+0x4c/0xa0 [ 1400.961558][T14357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.968024][T14357] [ 1400.968024][T14357] -> #1 (jbd2_handle){++++}-{0:0}: [ 1400.975372][T14357] jbd2_journal_lock_updates+0xa8/0x390 [ 1400.981555][T14357] __ocfs2_flush_truncate_log+0x2cf/0x1220 [ 1400.987985][T14357] ocfs2_truncate_log_shutdown+0x140/0x2f0 [ 1400.994369][T14357] ocfs2_dismount_volume+0x207/0x940 [ 1401.000276][T14357] generic_shutdown_super+0x130/0x340 [ 1401.006269][T14357] kill_block_super+0x7c/0xe0 [ 1401.011520][T14357] deactivate_locked_super+0x93/0xf0 [ 1401.017369][T14357] cleanup_mnt+0x471/0x4f0 [ 1401.022409][T14357] task_work_run+0x1d0/0x260 [ 1401.027638][T14357] exit_to_user_mode_loop+0xe6/0x110 [ 1401.033569][T14357] exit_to_user_mode_prepare+0xee/0x180 [ 1401.039690][T14357] syscall_exit_to_user_mode+0x16/0x40 [ 1401.045714][T14357] do_syscall_64+0x58/0xa0 [ 1401.050699][T14357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.057250][T14357] [ 1401.057250][T14357] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 1401.067827][T14357] __lock_acquire+0x2d18/0x7c40 [ 1401.073247][T14357] lock_acquire+0x1bb/0x4a0 [ 1401.078344][T14357] down_write+0x36/0x60 [ 1401.083098][T14357] ocfs2_xattr_set+0xbe4/0x1390 [ 1401.088513][T14357] ocfs2_set_acl+0x4d4/0x580 [ 1401.093686][T14357] ocfs2_iop_set_acl+0x190/0x2b0 [ 1401.099226][T14357] posix_acl_xattr_set+0x388/0x3f0 [ 1401.104992][T14357] __vfs_setxattr+0x3d8/0x410 [ 1401.108418][T14399] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19072'. [ 1401.110244][T14357] __vfs_setxattr_noperm+0x126/0x5e0 [ 1401.125117][T14357] vfs_setxattr+0x167/0x2e0 [ 1401.130199][T14357] setxattr+0x2a3/0x330 [ 1401.134955][T14357] path_setxattr+0x147/0x290 [ 1401.140122][T14357] __x64_sys_setxattr+0xb7/0xd0 [ 1401.145545][T14357] do_syscall_64+0x4c/0xa0 [ 1401.150538][T14357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.157007][T14357] [ 1401.157007][T14357] other info that might help us debug this: [ 1401.157007][T14357] [ 1401.167268][T14357] Chain exists of: [ 1401.167268][T14357] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 1401.167268][T14357] [ 1401.183073][T14357] Possible unsafe locking scenario: [ 1401.183073][T14357] [ 1401.190561][T14357] CPU0 CPU1 [ 1401.195962][T14357] ---- ---- [ 1401.201360][T14357] lock(&oi->ip_xattr_sem); [ 1401.206002][T14357] lock(jbd2_handle); [ 1401.212630][T14357] lock(&oi->ip_xattr_sem); [ 1401.219785][T14357] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 1401.227113][T14357] [ 1401.227113][T14357] *** DEADLOCK *** [ 1401.227113][T14357] [ 1401.235294][T14357] 3 locks held by syz.6.19051/14357: [ 1401.240624][T14357] #0: ffff8880246c4460 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1401.249933][T14357] #1: ffff88805740ed88 (&type->i_mutex_dir_key#25){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 1401.260280][T14357] #2: ffff88805740eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 1401.270292][T14357] [ 1401.270292][T14357] stack backtrace: [ 1401.276214][T14357] CPU: 0 PID: 14357 Comm: syz.6.19051 Not tainted syzkaller #0 [ 1401.278412][T14401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.19073'. [ 1401.283785][T14357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1401.302925][T14357] Call Trace: [ 1401.306237][T14357] [ 1401.309212][T14357] dump_stack_lvl+0x188/0x24e [ 1401.313947][T14357] ? load_image+0x410/0x410 [ 1401.318494][T14357] ? show_regs_print_info+0x12/0x12 [ 1401.323745][T14357] ? print_circular_bug+0x12b/0x1a0 [ 1401.323821][T14403] netlink: 'syz.1.19074': attribute type 29 has an invalid length. [ 1401.328986][T14357] check_noncircular+0x296/0x330 [ 1401.329020][T14357] ? look_up_lock_class+0x75/0x140 [ 1401.329044][T14357] ? add_chain_block+0x9b0/0x9b0 [ 1401.329074][T14357] ? lockdep_lock+0xf1/0x1f0 [ 1401.329103][T14357] ? lockdep_unlock+0x142/0x2e0 [ 1401.361517][T14357] ? _find_first_zero_bit+0xd2/0x100 [ 1401.367040][T14357] __lock_acquire+0x2d18/0x7c40 [ 1401.371949][T14357] ? schedule_timeout_idle+0x60/0x90 [ 1401.377295][T14357] ? ocfs2_downconvert_lock+0x500/0x500 [ 1401.382954][T14357] ? verify_lock_unused+0x140/0x140 [ 1401.388209][T14357] ? ocfs2_inode_lock_tracker+0x14f/0x700 [ 1401.389945][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19074'. [ 1401.393968][T14357] ? do_raw_spin_lock+0x128/0x2f0 [ 1401.407981][T14357] lock_acquire+0x1bb/0x4a0 [ 1401.412527][T14357] ? ocfs2_xattr_set+0xbe4/0x1390 [ 1401.417600][T14357] ? ocfs2_xattr_block_find+0x157/0x4e0 [ 1401.423189][T14357] ? __might_sleep+0xd0/0xd0 [ 1401.427885][T14357] ? read_lock_is_recursive+0x10/0x10 [ 1401.433314][T14357] ? rwsem_write_trylock+0x135/0x1c0 [ 1401.437862][T14403] netlink: 'syz.1.19074': attribute type 29 has an invalid length. [ 1401.438627][T14357] ? ocfs2_xattr_ibody_find+0x780/0x780 [ 1401.452128][T14357] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 1401.457635][T14357] down_write+0x36/0x60 [ 1401.461870][T14357] ? ocfs2_xattr_set+0xbe4/0x1390 [ 1401.466943][T14357] ocfs2_xattr_set+0xbe4/0x1390 [ 1401.471838][T14357] ? _raw_spin_unlock+0x40/0x40 [ 1401.476754][T14357] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 1401.482515][T14357] ? ocfs2_set_acl+0xe6/0x580 [ 1401.487242][T14357] ? posix_acl_xattr_set+0x388/0x3f0 [ 1401.487473][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19074'. [ 1401.492611][T14357] ? __vfs_setxattr+0x3d8/0x410 [ 1401.492642][T14357] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 1401.511985][T14357] ? setxattr+0x2a3/0x330 [ 1401.516378][T14357] ? __x64_sys_setxattr+0xb7/0xd0 [ 1401.521470][T14357] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1401.527154][T14357] ? ocfs2_set_acl+0xe6/0x580 [ 1401.531878][T14357] ? rcu_is_watching+0x11/0xa0 [ 1401.536762][T14357] ? ocfs2_set_acl+0xe6/0x580 [ 1401.541493][T14357] ? __kmalloc+0xe4/0x240 [ 1401.545889][T14357] ocfs2_set_acl+0x4d4/0x580 [ 1401.550545][T14357] ocfs2_iop_set_acl+0x190/0x2b0 [ 1401.555539][T14357] ? ocfs2_xattr_get+0x260/0x260 [ 1401.560520][T14357] ? vfs_set_acl_prepare+0x100/0x750 [ 1401.565857][T14357] ? rcu_is_watching+0x11/0xa0 [ 1401.570679][T14357] ? vfs_set_acl_prepare+0x650/0x750 [ 1401.576018][T14357] ? posix_acl_valid+0x37d/0x3f0 [ 1401.581011][T14357] posix_acl_xattr_set+0x388/0x3f0 [ 1401.586216][T14357] ? posix_acl_xattr_get+0x540/0x540 [ 1401.591563][T14357] __vfs_setxattr+0x3d8/0x410 [ 1401.596308][T14357] __vfs_setxattr_noperm+0x126/0x5e0 [ 1401.601660][T14357] vfs_setxattr+0x167/0x2e0 [ 1401.606239][T14357] ? xattr_permission+0x510/0x510 [ 1401.611313][T14357] ? _copy_from_user+0x10b/0x170 [ 1401.616330][T14357] ? setxattr+0x22b/0x330 [ 1401.620714][T14357] setxattr+0x2a3/0x330 [ 1401.624920][T14357] ? path_setxattr+0x290/0x290 [ 1401.629750][T14357] ? __mnt_want_write+0x21f/0x2a0 [ 1401.634836][T14357] path_setxattr+0x147/0x290 [ 1401.639486][T14357] ? simple_xattr_list_add+0xf0/0xf0 [ 1401.644820][T14357] ? lock_chain_count+0x20/0x20 [ 1401.649726][T14357] __x64_sys_setxattr+0xb7/0xd0 [ 1401.654628][T14357] do_syscall_64+0x4c/0xa0 [ 1401.659103][T14357] ? clear_bhb_loop+0x60/0xb0 [ 1401.663838][T14357] ? clear_bhb_loop+0x60/0xb0 [ 1401.668659][T14357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.674619][T14357] RIP: 0033:0x7f375619e0d9 [ 1401.679089][T14357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.698753][T14357] RSP: 002b:00007f375706a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1401.707218][T14357] RAX: ffffffffffffffda RBX: 00007f3756425fa0 RCX: 00007f375619e0d9 [ 1401.715232][T14357] RDX: 0000200000000100 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 1401.723243][T14357] RBP: 00007f3756235024 R08: 0000000000000000 R09: 0000000000000000 [ 1401.731260][T14357] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1401.739289][T14357] R13: 00007f3756426038 R14: 00007f3756425fa0 R15: 00007ffdee5c2658 [ 1401.747313][T14357] [ 1401.810290][T14357] OCFS2: ERROR (device loop6): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 1401.866391][T14357] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1401.881850][T14357] OCFS2: File system is now read-only. [ 1401.888476][T14357] (syz.6.19051,14357,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1401.900143][T14357] (syz.6.19051,14357,1):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1401.909564][T14357] (syz.6.19051,14357,1):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1401.921084][T14357] (syz.6.19051,14357,1):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 1401.931003][T14357] (syz.6.19051,14357,1):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 1401.942736][T14357] (syz.6.19051,14357,1):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 1401.951436][T14357] (syz.6.19051,14357,1):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 1401.963330][T14357] (syz.6.19051,14357,1):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 1401.973037][T14357] (syz.6.19051,14357,1):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 1401.984195][T14357] (syz.6.19051,14357,1):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 1401.994831][T14357] (syz.6.19051,14357,1):ocfs2_init_xattr_set_ctxt:3284 ERROR: status = -30 [ 1402.003806][T14357] (syz.6.19051,14357,1):ocfs2_xattr_set:3641 ERROR: status = -30 [ 1402.013740][T14379] loop7: detected capacity change from 0 to 32768 [ 1402.033930][T31377] ocfs2: Unmounting device (7,6) on (node local) [ 1402.080376][T14379] JBD2: Ignoring recovery information on journal [ 1402.117187][T14379] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1402.203000][ T9698] ocfs2: Unmounting device (7,7) on (node local) [ 1409.438123][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1410.078164][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!