last executing test programs: 16m14.15112189s ago: executing program 32 (id=4596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_netdev_private(r0, 0x8991, &(0x7f0000000000)="58a34d3a") 12m16.424034807s ago: executing program 33 (id=7725): r0 = syz_open_procfs(0x0, &(0x7f0000003700)='gid_map\x00') pread64(r0, &(0x7f00000000c0)=""/94, 0x5e, 0x2) 7m26.136782133s ago: executing program 7 (id=11440): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x8d8, 0x5, 0x32314241, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}}) 7m25.834753081s ago: executing program 7 (id=11444): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x0, 0x0, 0x9}) 7m25.526466713s ago: executing program 7 (id=11448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x24004806) 7m25.281736446s ago: executing program 7 (id=11451): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1018056, &(0x7f0000000180)={[{@discard}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@noquota}, {}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@usrquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x24, 0x6260, &(0x7f0000000340)="$eJzs3c1vHGcdB/DfvvolNIl6qEqEkNuGl1Ka1xICBdoe4MCFA8oVJXLdKiIFlASUVhFx5QsS/BEgJI4IceTEH9ADV278AURKkEA9oE419vM44+2u147jnXWez0dyZn77zHifyXdnXzwz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PdyLi6q/SDScjPhe9iG7EUl2vRMTSysnmOs/HZnM8FxGDhYh6/c1/TkS8FhEfHY948PDuan3zhT324/t/+ecff3LsR//48+Ds//56u/f6pOXu3Pndf/927/G3FwAAAEpUVVXVSR/zT0VEP322BwCefvn1v0ry7eq5q9fnrD9qtVqtPoJ1UzXevWYREevNder3DA7HA8ARsx4ft90FWiT/ovUj4ljbnQDmWqftDnAoHjy8u9pJ+XaarwcrW+35XJAd+a93tq/vmDSdZvQck1k9vjaiF89O6M/SjPowT3L+3dH8r261D9Nyh53/rEzKf7h16VNxcv690fxHPD35d8fmX6qcf39f+ffkDwAAAAAAcyz//f9ky8d/Fw6+KXuy2/HflRn1AQAAAAAAAACetP2O/9cfGf9vm/H/AAAAYG7Vn9Vrvz/+6LZJ38VW336lE/HMyPJAYdLFMstt9wMAAAAAAAAAAAAAStLfOof3SidiEBHPLC9XVVX/NI3W+3XQ9Y+60rcfStb2kzwAAGz56PjItfydiMWIuJK+62+wvLxcVYtLy9VytbSQ388OFxarpcbn2jytb1sY7uENcX9Y1b9ssbFe07TPy9PaR39ffV/DqreHjs1Gi4EDQERsvRo9mPSK9H+vV0dTVZ2Ilt/kcETssv9zRNn/2Yu2H6cAAADA4auqquqkr/M+lY75d9vuFAAwE/n1f/S4gFqtVqvV6qevbqrGu9csImK9uU79nsFw/ABwxKzHx213gRbJv2j9iHi+7U4Ac63Tdgc4FA8e3l3tpHw7zdeDNL57PhdkR/7rnc318vrjptOMnmMyq8fXRvTi2Qn9eW5GfZgnOf/uaP5Xt9qHabmD51/t+DNhW+cYTcq/3s6TLfSnbTn/3mj+Iw57/5+VjeiOzb9UOf/+vvLvyR8AAAAAAOZY/vv/ybk6/jt83M2Zarfjvytj1zi8vgAAAAAAAADAk/Lg4d3VfN1rPv7/hTHLuf7z6ZTz78i/SDn/7kj+Xx1ZrteYv//Wo/z/8/Du6p9u//vzebrX/BfyTCc9sjrpEdFJ99Tpp+lBtu6zNga9YX1Pg06310/n/FSDd+J63Ii1OLdj2W76/3jUfn5He93TwWZ71dtqv7Cjvb/dnte/uKN9kM4uqpZy+5lYjZ/HjXh7s71uW5iy/YtT2qsp7Tn/nv2/SDn/fuOnzn85tXdGprX7H3Y/s983p+Pu583rX/zNucPfnKk2ore9bU319r3YQn82/0+ODeOXt9Zunrlz7fbtm+cjTXbceiHS5AnL+Q/Sz/bz/0tb7fl5v7m/3v9wuO/858VG9Cfm/1Jjvt7el2fctzbk/IfpJ+f/dmofv/8f5fwn7/+vtNAfAAAAAAAAAAAAAAAA2E1VVZuXiL4ZEZfS9T9tXZsJAMxWfv2vknz7rOrejO9PrT7idWfO+jPT+pNqvvqjVh/Fuqka741mERF/b65Tv2f49bhfBgDMs08i4l9td4LWyL9g+fv+6unptjsDzNSt9z/46bUbN9Zu3mq7JwAAAAAAAADA48rjf640xn8+XVXVvZHldoz/+lasHHT8z36e2R5gdMJA1b39b9NuNrrDXrcx3PgLMWn878H23G7jf/en3N9gSvtwSvvClPbFKe1jL/RoyPm/0Bjv/HREnBoZfr2E8V9Hx7wvQc7/xcbjuc7/KyPLNfOv/nCU8+/uyP/s7fd+cfbW+x+8ev29a++uvbv2s4vnz5+7eOnS5cuXz75z/cbaua1/W+zx4cr557GvnQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9LtfzLkvN/JdXyL0vO/+upln9Zcv6vplr+Zcn5n0m1/MuS8z+b6j3mv3TY/WI2cv75CJf9vyw5/3xmg/zLkvO/kGr5lyXnfzHV8i9Lzv+1VMu/LDn/b6Ra/mXJ+V9KtfzLkvP/ZqrlX5ac/+VUy78sOf9vpVr+Zcn5fzvV8i9Lzv/1VMu/LDn/76Ra/mXJ+X831fIvS87/e6mWf1ly/m+kWv5lefT9/web+e2JJ/N7zBQ7M5iPbpjZmmn7mQkAAAAAAAAAAAAAGDWL04nb3kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4lB04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYe/uYuQ66/uBn9k3r52QGAj5O/kb2DgmhGSTXb/EL7QuJrw2vJVAKPQF2/WuzYLf8Nol0Eg2DZRIGBVVtA0XbQGhNjcVvuCCVoBygVohVSLtBb1BVKhcRFVAAakSrSBbzTnP8+zM7OzMrne8O3PO5yPZP+/MmXOeOfOcs/Pb9XcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uuMNs5+pZVlW/5P/tTXLbqz/e/PE1vy21270CAEAAIC1+lX+9/M3pxsOr+BBDcv88yu+9/WFhYWF7P3Dfz76hYWFdMdElo1uyrL8vujqjz5Qa1wmeDwbrw01fD3UZfPDXe4f6XL/aJf7x7rcv6nL/eNd7l+yA5bYXPw8Jl/ZzvyfW4tdmt2Sjeb37WzzqMdrm4aG4s9ycrX8MQujJ7K57FQ2m003LV8sW8uX/+Yd9W29NYvbGmrY1vb6DPnZY8fjGGphH+9s2tbiOqOfvD6b+PnPHjv+txeeu61d7bobmtZXjPPuHfVxfircUoy1lm1K+ySOc6hhnNvbvCbDTeOs5Y+r/7t1nM+vcJzDi8NcV62v+Xg2lP/7mXw/jTT+WC/tp+3htl/cmWXZ5cVhty6zZFvZULal6ZahxddnvJiR9XXUp9JLspFVzdM7VjBP63VmZ/M8bT0m4ut/R3jcyDJjaHyZfvLJsYbX/ZcL1zJPo/qzLsawMLx4WzGG1jnY62OlX+ZgnBfP5E/6ibZzcGd4/o/dtfwcbDt32szB9Lwb5uCObnNwaGw4H3N6EWr5Yxbn4K6m5YfzLdXy+uxdnefg1IXT56bmP/6J++ZOHzs5e3L2zJ5du6b37Nt34MCBqRNzp2ani7+vcW/3vy3ZUDoOd4R9F4+BV7cs2zhVF748tuT8e63H4Xg6Dpd+z9rasmyvj8OR1idXW58DcumcLo6N99Z3+viVoWyZYyx/fe5Z+3GYnnfDcTjScBy2/Z7S5jgcWcFxWF/m3D0re88y0vCn3RiW/16wtjm4tWEOtr4faZ2DvX4/0i9zcDzMix/cs/z3gu1hvE9Mrvb9yPCSOZiebjj31G9J7/fHD+Sl3by8vX7HDWPZxfnZ8/c/euzChfO7slDWxUsb5krrfN3S8JyyJfN1aNXz9fDcK564vc3tW8O+Gr+v/tf4sq9VfZm993d+rfLvbu33Z9Otu7NQemy992e77+b1/TmWZV/8zicf/tZjX3zDsvuz3m9+amrt78VTX9pw/h1d5vwb+/4Xiu2lVT0+PDpSHL/Dae+MNp2Pm1+qkfzcVcu3/fzUys7Ho+HPep+Pb+lwPt7Wsmyvz8ejrU8uno9r3X7asTatr+d4mCenpjufj+vLbNu92jk50vF8fGeotbD/XxM6hdQXNcyd5eZt2tbIyGh4XiNxC83zdE/T8qOhN6tv66nd4U1hGuXK5unddxbLDzc8LlqveTrRsmyv52n62ddy87TW7adv16b19RwP8+KWPZ3naX2Zp/eu/dy5Of6z4dw51m0Ojg6P1cc8miZhfr7PFjbHOXh/djw7m53KZvJ7x/L5VMu3NfnAys6VY+HPep8rt3WYg3e3LNvrOZi+jy0392ojS598D7S+nuNhXjz5QOc5WF/mjft7+9717nBLWqbhvWvrz9eW+5nX7S276XrNlZEwzu/s7/yz2foypw6sts/svJ/uDbfc0GY/tR6/yx1TM9n67KdtYZzPHVh+P9XHU1/mCwdXOJ8OZ1l26aMP5j/vDb9fuXTx+19v+r1Lu9/pXProgz990Yl/Ws34ARh8LxRlS/G9ruE3Uyv5/T8AAACw8br9B/X0M+7x8DtM/T8AAACUUez74/8KT/T/AAAAUBqx7x8JNSlD///H3RfZ9sbn5l64lKVk/kIQ70+74aFiuZhxnQ5fTywsqt/+4Fdn//sfL61seENZlv3yoT9qu/y2h+K4ChNhnFff1Hz7El+/b0XbPvrIpbTdxvz6l8L64/NZ6TRoF8GdzrLsmzd/Lt/OxAeu5PXph47m9eHLTzxeX+b5g8XX8fHPvrRY/q/C/105fOJY0+OfDfvhx6FOv639/oiP+9qV12zf/77F7cXH1XbclD/tJz9YrDd+Ts7nHy+Wj/t5ufF/67NPfa2+/KOvaj/+S0Ptx/9UWO9XQ/2flxfLN74G9a/j4z4dxh+3Fx93/1e+3Xb8Vz9TLH/uzcVyR0ON2787fL3zzc/NNe6vR2vHmp5X9pZiubj96e//aX5/XF9cf+v4x49cadofrfPj6X8r1jPVsny8PW4n+oeW7dfX0zg/4/af+pOjTfu52/avPvzsy+vrbd3+vS3LnfvoPfn2F9fX/IlNf/3pz7XdXhzP4b8/1/R8Dr87HMdh+09+MMzHcP//Xi3W1/rpCkff3Xz+ict/aeulpucTvfXnxfavvu5kXjeNb95yw40vuunyu+r7Lsue2VSsr9v2T/7N2abxf/nWYn/E++N/MWvd/nIuv7LY/vmPTZ45O39xbibt1cduzj875+3FeOJ4bw7n1tavj5y98KHZ8xPTE9NZNlHej9C7Zl8J9adFudx56YUlZ9B7Hgmv5+1/+c0td/3rZ+Pt//7e4vYrbyu+b706LPf5cPvW8PqtbvtLPXnHrfnxXXs6jHBh6ecFr8X2nf91YEULhuff+r4gzvdzL/tQvh/q9+XfN+Jxvcbx/3CmWM83wn5dCJ/MvOPWxe01Lh8/G+HKe4rjfc37L5zm4uv6d+H1fsePi/XHccXn+8PwPubb25rPd3F+fOPSUOv680/xuBzOJ9nl4v64VNzfV56/te3w4ueQZJdvy7/+s7Se21b1NJcz//H5qVNzZy4+OnVhdv7C1PzHP3Hk9NmLZy4cyT/L88iHuz1+8fy0JT8/zczu25vlZ6uzRbnONnr85x45PrN/+q6Z2RPHLp648Mi52fMnj8/PH5+dmb/r2IkTsx/r9vi5mUO7dh/cs3/35Mm5mUMHDh7cc3By7szZ+jCKQXWxb/ojk2fOH8kfMn9o78FdDzywd3ry9NmZ2UP7p6cnL3Z7fP69abL+6D+cPD976tiFudOzk/Nzn5g9tOvgvn27u34a4OlzJ+Ynps5fPDN1cX72/FTxXCYu5DfXv/d1ezzlNP8fxfvZVrXig/iyd927L30+a91XP7nsqopFWj5A9LnwWTTfffG5Ayv5Ovb9o6EmZej/AQAAgFzs+8dCTfT/AAAAUBqx798UaqL/BwAAgNKIff94qOm/BFSk/y9d/n/bpRVtX/5/I/P/+dWf5f/l/9c//x/y98+8p9/y/8X5Qv6/N9aav5f/D+T/5f/l/+X/5f/pgX7L/8e+f3OW+f0/AAAAlFTs+7eEmuj/AQAAoDRi339DqIn+HwAAAEoj9v03hppUpP+X/5f/d/1/+X/5//bbl/8fTPL/ncn/dyH/P5VVK/9/uZfj34D8/+bGL+T/6Uf9lv+Pff+LQk0q0v8DAABAFcS+/6ZQE/0/AAAAlEbs+28ONdH/AwAAQGnEvn9rqElF+n/5/zXl/1PmSv6/efzy/83k/8N8kP+X/18H8v+dyf93If/v+v+Dlf9vIv9PP+q3/H/s+18calKR/h8AAACqIPb9Lwk10f8DAABA/xm5tofFvv+loSZL+v9r3AAAAACw4WLff0vWEgSvyO//5f9d/1/+X/5f/r/99lee/x/O5P/7h/x/Z/L/Xcj/y//L/8v/01P9lv/P+/5sPHtZqElF+n8AAACogtj33xpqsoL+f9N1GxUAAADQS7Hv/3+hJn7/DwAAAKUR+/5toSYV6f/l/0uT//9F40sn/y//32n78v+u/19m8v+dyf93If8v/y//L/9PT/Vb/j/2/beFmlSk/wcAAIAqiH3/7aEm+n8AAAAojdj3//9QE/0/AAAAlEbs+7eHmlSk/5f/7/P8f0yOuv6//L/8f1/m/8fl//uO/H9n8v9drCT/f6P8/3Lk/+X/5f9p1W/5/9j3vzzUpCL9PwAAAFRB7PtfEWqi/wcAAIDSiH3/K0NN9P8AAABQGrHvnwg1qUj/v5r8f+2y/P9yrvP1/8dWcP3/JvL/8v+dti//7/r/ZSb/35n8fxeu/y//L/8v/09P9Vv+P/b9d4SaVKT/BwAAgCqIff+OUBP9PwAAAJRG7PvvDDXR/wMAAEBpxL5/Z6hJRfp/1/8fiPx/Jv8v/y//L/8v/78y8v+dyf93If8v/y//L/9PT/Vb/j/2/a8KNalI/w8AAABVEPv+u0JN9P8AAABQGrHvf3Woif4fAAAASiP2/XeHmlSk/5f/l/+X/5f/l/9vv335/8Ek/9+Z/H8X8v/y//L/8v/0VL/l/2Pf/5pQk4r0/wAAAFAFse+/J9RE/w8AAAClEfv+e0NN9P8AAABQGrHvnww1qUj/L/8v/y//L/8v/99++/L/g0n+vzP5/y7k/+X/5f/l/+mpfsv/x77/vlCTivT/AAAAUAWx778/1ET/DwAAAKUR+/6pUBP9PwAAAJRG7PunQ00q0v/L/8v/y//L/68q///KxfXK/xfk//uL/H9n8v9dyP/L/294/n9U/p9S6bf8f+z7d4WaVKT/BwAAgCqIff/uUBP9PwAAAJRG7Pv3hJro/wEAAKA0Yt+/N9SkIv2//L/8v/x/T/P/tXbzoVT5/wby/wX5//4i/99Z7/P/8SnK/8v/y/+7/r/8P0v1W/4/9v0PhJpUpP8HAACAKoh9/75QE/0/AAAAlEbs+/eHmuj/AQAAoDRi338g1KQi/b/8v/y//L/r/8v/t9++/P9gkv/vzPX/u5D/l/8f4Px/fW7J/9Nv+i3/H/v+g6EmFen/AQAAoApi3//aUBP9PwAAAJRG7Pt/LdRE/w8AAAClEfv+Xw81qUj/L/8v/y//L//f7/n/Mfl/+f9VkP/vTP6/C/l/+f8Bzv+7/j/9qN/y/7HvPxRqUpH+HwAAAKog9v2/EWqi/wcAAIDSiH3/60JN9P8AAABQGrHvPxxqUpH+X/5/nfL/8Ub5f/l/+X/X/5f/v67k/zuT/+9C/l/+X/5f/p+e6rf8f+z7Xx9qUpH+HwAAAKog9v0Phpro/wEAAKA0Yt//hlAT/T8AAACURuz73xhqUpH+X/7f9f83Pv8/2jR2+f/Fx8n/F+T/5f9XQ/6/M/n/LuT/5f/l/+X/6al+y//Hvv9NoSYV6f8BAACgCmLf/+ZQE/0/AAAAlEbs+98SaqL/BwAAgNKIff9bQ00q0v/L/8v/b3z+3/X/5f8L8v/y/70g/9+Z/H8Xvc//j7asX/7/Otro8cv/y/+zVL/l/2Pf/5uhJhXp/wEAAKAKYt//UKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f/l/+X/5f/bb1/+fzDJ/3c2YPn/X90Ubh/g/H/r+uX/r6ONHv9q8/8jLV9fl/z/j5bL/y9san28/D/XQ7/l/2Pf/45Qk4r0/wAAAFAFse9/Z6iJ/h8AAABKI/b97wo10f8DAABAacS+/7dCTSrS/8v/18exmF6W/5f/z2+Q/5f/l/8fWPL/nQ1Y/r8M1/9vXb/8/3W00eN3/X/5f5bqt/x/7PvfHWpSkf4fAAAAqiD2/Q+Hmuj/AQAAoDRi3/+eUBP9PwAAAJRG7PvfG2pSkf5f/t/1/+X/5f/l/9tvX/5/MMn/dyb/34X8v/x/v+X//1P+n8HWb/n/2Pc/EmpSkf4fAAAAqiD2/e8LNdH/AwAAQGnEvv+3Q030/wAAAFAase9/f6hJRfp/+f9Byf9PyP+vMv8/Fm6T/5f/l/+vFvn/zuT/u5D/l//vt/y/6/8z4Pot/x/7/g+Emqy8/x9f8ZIAAADAhoh9/++EmlTk9/8AAABQBbHv/91QE/0/AAAAlEbs+38v1KQi/b/8/6Dk/13/P3P9f/n/ludTyvz/kPz/Wq1f/j+eeeT/5f/l/yP5f/l/+X9a9Vv+P/b9vx9qUpH+HwAAAKog9v0fDDXR/wMAAMBAaPd/slvFvv9IqIn+HwAAAEoj9v1HQ00q0v/L/8v/y/9fU/4/X+y65v//Yse//OB77zy6S/6/Wvl/1/9fs3W9/n/94Hf9f/l/+f9E/l/+X/6fVv2W/499/7FQk8XG7+0u8A8AAACDLfb9fxBqUpHf/wMAAEAVxL7/eKiJ/h8AAABKI/b9M6EmFen/5f/l/+X/Xf+/1/n/uD8GKf8/uWmA8v/xpCv/39a65v/ft5gTl/9fbf5/rO2trfn/mvx/E/n/VY//u1mWyf/L/7OB+i3/H/v+2VCTivT/AAAAUAWh7x86UdTFO/T/AAAAUBqx7z8ZaqL/BwAAgNKIff+HQk0q0v/L/8v/y//L/7v+f/vt923+3/X/O5L/76x/8v/tuf6//P8gj1/+X/6fpfot/x/7/rlQk4r0/wAAAFAFse//cKiJ/h8AAABKI/b9Hwk10f8DAABAacS+/1SoSUX6f/l/+X/5f/l/+f/225f/H0zy///H3n08aVqWexx/Bxpmpqg6dXZncRaH/fkTWMhad25csHGhVZZVgoo5MYg5YM4BsxgwoYgJcwITillUzDlgRq2xmLmua7qnn37e7pm3+32e+/58FufCxvFtTlHij+E79zj9/xL6f/2//l//z0pNrf/P3f+guKWT/Q8AAAA9yN1/adxi/wMAAEAzcvdfFrfY/wAAANCM3P0Pjls62f/6f/1/s/3/PfT/O32+/l//3zL9/zj9/5DzTv2m/l//r//X/7NSU+v/c/c/JG7pZP8DAABAD3L3PzRusf8BAACgGbn7L49b7H8AAABoRu7+h8Utnez/0/r/Q4v19P/nb/u+Drb/z4xX/99S/+/9/x0/X/+v/2/Zwfb/V97933z6/9n3/5vo//X/+n/9Pys1tf4/d//D45ZO9j8AAAD0IHf/I+IW+x8AAACakbv/kXGL/Q8AAADNyN3/qLilk/3v/X/v/+v/9f/6/+HP1//Pk/f/x/XU/19+2wWX3nnD/964l8/X/+v/9f/6f1Zrav1/7v5Hxy2d7H8AAADoQe7+x8Qt9j8AAAA0I3f/Y+MW+x8AAABm6OjgV3P3Py5u6WT/6//1//r/6P+P6P/1//r/Fuj/x/XU/5/J5+v/9f/6f/0/qzW1/j93/+Pjlk72PwAAAPQgd/8T4hb7HwAAAKZr6B/EHpG7/4q4xf4HAACAZuTuPxa3dLL/9f/73///W/8/j/7f+//6f/1/E/T/4/T/S+j/9f/6f/0/KzW1/j93/5VxSyf7HwAAAHqQu/+JcYv9DwAAAM3I3X9V3GL/AwAAQDNy9z8pbulk/+v/vf+v/9f/6/+HP1//P0/T7v83ln6+/l//P/P+/zz9v/5f/89me+z/7xr5r+2V9P+5+58ct3Sy/wEAAKAHufufErfY/wAAANCM3P1PjVvsfwAAAGhG7v6nxS2d7H/9v/5f/6//P+P+f/ufeifo/4fp/w/GtPv/5brp/w8N/1oI+v/Z9//e/9f/6//ZYmrv/+fuf3rc0sn+BwAAgB7k7n9G3DKy//f8N/MBAACAtcrd/8y4xc//AwAAwOxldZa7/1lxSyf7X/+v/9f/6/+9/z/8+WP9/42bvj/9/7To/8dNpv/fgf5f/z/n71//r/9nu6n1/7n7nx23dLL/AQAAoAe5+6+OW+x/AAAAaEbu/ufELfY/AAAANCN3/3Pjlk72/3D/f+r36/93R/+/9fvX/w//+bGq/j//E/X/o/3/xd7/75P+f5z+f4kt/f+9NxYL/b/+X/8f/f/RZT9e/8+QqfX/ufufF7d0sv8BAACgB7n7nx+32P8AAADQjNz9L4hb7H8AAABoRu7+F8Ytnex/7//r//X/8+v/vf9/0jrf/18ceP+/of/fJf3/OP3/Et7/1//r/8ff/x/5VQD0/wyZWv+fu/9FcUsn+x8AAAB6kLv/xXGL/Q8AAADzsPmfHTj9HygNuftfErfY/wAAANCM3P0vjVva2f+jb3Xq//X/+n/9v/5/+POn1f97/3+39P/j9P9L6P/3o5/faKz/v2anHz+F/v+K/e7/R+j/GbKl/7/p1NfX1f/n7n9Z3NLO/gcAAIDu5e5/edxi/wMAAEAzcve/Im6x/wEAAKAZuftfGbd0sv/3vf8f+dUH9P/6f/2//l//r/9fNf3/OP3/Evp/7/97/1//z0pt6f83WVf/n7v/VXFLJ/sfAAAAepC7/9Vxi/0PAAAAzcjdf03cYv8DAABAM3L3vyZu6WT/e/9f/6//1//r/4c/X/8/T2fV35+j/y/6f/2//l//r/9nBabW/+fuf23c0sn+BwAAgB7k7n9d3GL/AwAAwJwcHvuduftfH7fY/wAAANCM3P1viFs62f/6//3t//Pr+n/9/0L/r//X/x+Ibt//PzT0V6Ltduj/b3nAsXtt/Yr+X/+v/9f/6//Zpf8e+X2T6P+Pn/pfl7n73xi3dLL/AQAAoAe5+98Ut9j/AAAA0Izc/W+OW+x/AAAAaEbu/mvjlj3u/7HmYcr0/97/1//r//X/w5+v/5+nbvv/XfL+/xL6f/2//l//z0pNov/f9K9z978lbvHz/wAAANCM3P1vjVvsfwAAAGhG7v63xS32PwAAADQjd//b45ZO9r/+X/+v/9f/6/+HP1//P0/6/3H6/yXm1P9fexb9/8bwl9fdz5+tdX//+n/9P9tNrf/P3X9d3NLJ/gcAAIAe5O5/R9xi/wMAAEAzcve/M26x/wEAAKAZufvfFbd0sv/1//p//b/+X/8//Pn6/3nS/4/T/y8Wi/eMfAND/f/xw9Ps/73/P7nvX/+v/2e7qfX/ufvfHbd0sv8BAACgAxcePXGOxN8Ktv8BAACgRbn7r49b7H8AAABoRu7+98Ytnex//b/+X/9/qv+vPxL9v/5f/z9b+v9x+v8l5vT+v/5/ct+//l//z3ZT6/9z978vbulk/wMAAEAPcvffELfY/wAAANCM3P3vj1vsfwAAAGhG7v4b45ZO9r/+X/+v//f+v/5/+PP1//O0f/3/Qv+v/9f/L6H/1//r/znd1Pr/3P0fiFs62f8AAADQg9z9H4xb7H8AAABoRu7+D8Ut9j8AAAA0I3f/h+OWTva//l//r//X/+v/hz9f/z9P3v8fp/9fQv+v/9f/6/9ZqeH+/4q19f+5+z8St3Sy/wEAAKAHuftvilvsfwAAAGhG7v6Pxi32PwAAADQjd//H4pZO9r/+X/+/tf9fLPT/+v/d9/9X6v/Prv8/stD/r5z+f5z+fwn9f5v9/zmLhvr/ozv+eP0/UzS19/9z9388bulk/wMAAEAPcvd/Im6x/wEAAKAZufs/GbfY/wAAANCM3P2fils62f/6f/2/9//1/97/H/587//Pk/5/nP5/Cf3/WfX/+dfjyfX/3v/X/7M2U+v/c/d/Om7pZP8DAABAD3L3fyZusf8BAACgGbn7Pxu32P8AAADQjNz9n4tbOtn/+n/9v/5f/6//H/58/f886f/H6f+X0P+3+f5/H/3/0YX+nwmaWv+fu//zcUsn+x8AAAB6kLv/5rjF/gcAAIBm5O6/JW6x/wEAAKAZufu/ELd0sv/1//p//f88+/8j+n/9v/5/0FT6/4suuuet+n/9v/5f/+/9f/1/76bW/+fu/2Lc0sn+BwAAgB7k7v9S3GL/AwAAQDNy9385brH/AQAAoBm5+78St3Sy/7f3/+ctThaqJw31/9Gozb7/P7zp+0j6f/3/iS/MoP9f6P/1//r/QVPp/73/f2bfv/5f/z/n739P/f+F23+8/p8WTa3/z91/a9zSyf4HAACAHuTu/2rcYv8DAABAM3L3fy1usf8BAACgGbn7b4tbOtn/3v/X/+v/9f/6/+HP1//Pk/5/nP5/Cf2//t/7/5fd71z9P6sztf4/d//X45ZO9j8AAAD0IHf/N+IW+x8AAACakbv/m3GL/Q8AAADNyN3/rbilk/2v/z+Y/v+/4mv6f/2//l//r//fX/r/cfr/cvof2kn99P9Hhr647n7+bK37+2+m//f+Pys0tf4/d/+345ZO9j8AAAD0IHf/d+IW+x8AAACakbv/u3GL/Q8AAADNyN3/vbilk/2v/+/m/f87zu+2/7+v/v+0z9f/6/9bpv/Pv6IP0/8v0U//P2jd/fzcv3/9v/6f7abW/+fuvz1u6WT/AwAAQA9y938/brH/AQAAoBm5+38Qt9j/AAAA0Izc/T+MWzrZ//r/bvr/q05+nz32/97/1//r/3ui/x+n/19C/6//b7//P3+nH6//Zz9Mrf/P3X/HoY0u9z8AAADM1X3+/4G37/bfe8eJ/3tk8aO45eLF8V3+NDYAAAAwcXfv/kMbi8WPT/wrP/8PAAAALcrd/5O4pZP9r//vq//v8/1//b/+X//fE/3/OP3/Evp//X/7/f+O9P/sh6n1/7n7fxq3bBp+G3v+owQAAACmJHf/z+KWTn7+HwAAAHqQu//nccu2/e+XAwQAAIC5yt3/i7ilk5//X2f/f67+f3n/v9in/j/+ffr/k/T/+v+hz9f/z5P+f9xZ9v/HD+n/9f8j9P/6f/0/p5ta/5+7/5dxSyf7HwAAABq15e8o5O7/Vdxi/wMAAEAzcvf/Om6x/wEAAKAZuft/E7d0sv+9/7/P/f/d/wFb+/lM1ffx/f+j9Vve/++8/7/6yODn6//1/y3T/4/z/v8S+v9W+v/D+n/9P9Mwtf4/d/9v45ZO9j8AAAD0IHf/7+IW+x8AAACakbv/93GL/Q8AAADNyN3/h7ilk/2v/5/4+/9n1P/v4v1//X8f/f8On99O//8/Fxy7+ZL7X3+d/p9TDrL/zz8X9P/6f/3/SRPq/73/r/9nIlbf/29s+eJe+//c/X+MWzrZ/wAAANCD3P13xi32PwAAADQjd/+f4hb7HwAAAJqRu//PcUsn+1//r/+fSv+f/79eQ/9/7Iz7/6OLxWIt/X82xb33/97/1/9v5/3/cfr/JfT/+n/9v/6flVp9/7/1i3vt/3P3/yVu6WT/AwAAQA9y9/81bsn9f2jPf+seAAAAmJjc/X+LW/z8PwAAADQjd//f45ZO9r/+X/8/lf4/ef//1I9r6/3/SypO7bP//7/6Lf3//tL/j9P/L6H/1//r//X/rNTU+v/c/f+IWzrZ/wAAANCD3P13xS32PwAAADQjd/8/4xb7HwAAAJqRu/9fcUsn+1//32r/n0W8/l//P5X+3/v/3v8/GPr/cfr/JfT/+n/9v/6flZpa/5+7/z8BAAD//1KlYrM=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 7m23.278283119s ago: executing program 7 (id=11467): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000006800010000000000fedffff70a000000000000001800088014000300fc020000000000000000000000000000060007000900000008000500", @ANYRES32, @ANYBLOB="140006"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) 7m22.215177179s ago: executing program 7 (id=11475): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000000)=0x4, 0x4) 7m21.393772978s ago: executing program 34 (id=11475): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f0000000000)=0x4, 0x4) 6m13.24148244s ago: executing program 1 (id=12269): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYBLOB="d1794da8c0ccda034276e28a25c45c8e1eb8b595a37ffdfe7d2a8c3972a6931d2cbb0d8dc920bbde15d8790d46ccb3a5f36ff412236251d86334f17545ccae88", @ANYRES8=0x0, @ANYRES32, @ANYBLOB="e5f0986a95b4a041c6140884aa3ee1b8a51aa12c4e1790181917f9b22d45f7d86339c33c4a5e4f7224ec1900"/54, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0xa8f, &(0x7f0000001400)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 6m12.565602065s ago: executing program 1 (id=12275): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x30, 0x40, 0x107, 0x70bd2c, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x12}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6m12.060386825s ago: executing program 1 (id=12279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000010c0)=@migrate={0xb4, 0x21, 0x1, 0x70bd25, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x4e21, 0x800, 0x4e21, 0xc43, 0xa, 0x20, 0x180, 0x73}}, [@offload={0xc}, @migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast1, 0x6c, 0x1, 0x0, 0x3500, 0x2, 0xa}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4013}, 0x24008800) 6m11.650111378s ago: executing program 1 (id=12282): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 6m11.26157311s ago: executing program 1 (id=12287): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 6m10.206566099s ago: executing program 1 (id=12297): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 6m9.330658948s ago: executing program 35 (id=12297): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 3m57.47562239s ago: executing program 8 (id=13899): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 3m57.419690058s ago: executing program 8 (id=13900): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x5) 3m57.361473209s ago: executing program 8 (id=13901): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000240)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x4}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@namecase}, {@namecase}]}, 0x1, 0x1530, &(0x7f0000006800)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJMmZJMktt2T9PxPzV6fO/5zzO538/mee7+fzfmY9s95n7WfPM+9+995z+bbL0BqNalZtQETwb8FLHxIAIBYABgLAdQAQAEDZuLJxGfPZJSb8exthf6xHkq92Bexq4v5nbdz/rI37n7Vx/7M27n/Wxv3P2rj/WRv3n7GsbPP0/NfzI+s++P5/Vsbv//9F0kuO/WptyRu7AsT8sync////4b+Ry/3/rxX8M0/i/mdt3P+sKvZqF8D+F+DXf1aQ7e/OcP+zNu4/Y1nZL+8Fx8LVvx/9Zz8g8p/8GYjvdemrfPX38+/uP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9ic4669QAJA5vtp1McYYY4wxxhhj7I/js13tChhjjDHGGGOMMfafhyBAgoIAYiAbxEJ2yAECICZz/nqIgxsgN9wIeSAv5IP8EA8FoCBoMGCBIIRCUBiicBMUgZuhKBSD4lACHJSEUnALlIZboQzcBmXhdigHd0B5qAAVoRLcCZXhLqgCd0NVuAeqQXWoATXhXqgF90FtuB/qwANQFx6EevAQ1IeHoQE8Ag3hUWgEj0FjeByaQFNoBs2hxf8o/yXoAS9DT+gFCdAb+sAr0Bf6QX8YAAPhVRgEr8FgeB0SYQgMhTdgGLwJw+EtGAEjYRS8DaPhHRgDY2EcjIckmAAT4V2YBO/BZJgCU2EaJMN0mAHvw0yYBbPhA5gDH8JcmAfzYQGkwEewEBZBKnwMi+ETSIMlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO+FT2AWfwW7YA3vhc9gHX/yL+Wf+Jr8rAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObG3JgH82A+zIfxGI8FsSAaNEhIWAgLYRSjWASLYFEsisWxODp0WApLYWm8FctgGSyLZbEclsPyWAErYCWshJWxMlbBKlgVq2I1rIY1sAbei/dib6yNtbEO1sG6WDfz9hQ2wAbYEBtiI2yEjbExNsEm2AybYQtsgS2xJbbCVtgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AW7YFfsht3SX8oG+DK+jL2wmuiNfbAP9sXEbP1xAA7AV3EQvoav4euYiENwKL6Bb+CbOBxP44iLI3EUjsLK4h0cg2ORxHhMwiSciBNxEk7CyTgFp+A0TMbpOANn4EychbPwA5yDH+KHOA/n4QJMwRRciIswFVNxMZ7BNFyCS3EZLscVuBxX4WpchWtxHa7FDbgBN+Em3IJbcBtuwx24Az9FBYCf4R7cg4m4D/fhftyPB/AAHsSDmI7peAgP4WE8jEfwCB7Fo3gMj+MJPI6n8BSexjN4Fs/ieTyPF/CF+K8bflpsTSKIDEooESNiRKyIFTlEDpFT5BS5RC4RERERJ+JEbpFb5BF5RD6RT8SLeFFQFBRGGEEizDhSiKiIiiKiiCgqioriorhwwolSopQoLUqLMqKMKCtuF+XEHaK8qCBau0qikqgs2rgq4m5RVVQV1UR1UUPUFDVFLVFL1Ba1RR1RR9QVdUU98ZCoL3pjf3xEZHSmkRiCjcVQbCKaCnn5CNVSDMdWorVoI54SI3EEthMtXXvxrOggxmBH8RcxFp8XncV47CJeFF1FN9FdvCR6iFaup+glJmNv0UdMw76in+gvBoiZWF18gHOy1xCvi0QxRAwVb4gF+KYYLt4SI8RIMUq8LUaLd8QYMVaME+NFkpggJop3xSTxnpgspoipYppIFtPFDPG+mClmidniAzFHfCjminlivlggUsRHYqFYJFLFx2Kx+ESkiSViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn+FTsEp+J3WKP2Cs+F/vEF2K/+FIcEF+Jg+KvIl18LQ6Jb8Rh8a04Ir4TR8X34pg4Lk6Ik+KU+EGcFmfEWXFOnBc/igviJ3FReAESpZBSKhnIGJlNxsrsMoe8RuaUQebxX8bJG2RueaPMI/PKfDK/jJcFZEGppZFWkgxlIVlYRuVNsoi8WRaVxWRxWUI6WVKWkrfI0vJWWUbeJsvK22U5eYcsLyvIirKSvFNWlndJiFzaRjVZXdaQNeW9MgHuk7Xl/bKOfEDWlQ/KevIhWV8+LBvIR2RD+ahsJB+TjeXjsolsKpvJ5rKFfEK2lE/KVrK1bCOfkm3l07KdfEa2l8/KDtJf/hZ5XnaWL8gu8kXZVXaT3eVP8qL0sqfsJaE3yD7yFdlX9pP95QA5UL4qB8nX5GD5ukyUQ+RQ+YYcJt+Uw+VbcoQcKUfJt+Vo+Y4cI8fKcXK8TJIT5ET5rpwk35OT5RQ5VU6TyXK67H95pdlS/sP8d38nf/DPW98kN8stcqvcJrfLHXKn/FTukrvkbrlb7pV75T65T+6X++UBeUAelAdlukyXh+QheVgelkfkEXlUHpXH5HF5Tp6Up+QP8rQ8I8/Ic/K8PC8vXP4agEIllFRKBSpGZVOxKrvKoa5ROdW1Kpe6TkXU9SpO3aByqxtVHpVX5VP5VbwqoAoqrYyyilSoCqnCKqpuwsvfMKq4KqGcKqlKqVv+lXxVRN2siqpiv8rPrC/h79TXQrVQLVVL1Uq1Um1UG9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VV31UP1UD1VT5WgElQf9Yrqq/qp/mqAGqheFRn7MFgNVokqUQ1VQ9UwNUwNV8PVCDVCjVKj1Gg1Wo1RY9Q4NU4lqSQ1UU1UUk1Sk9VkNVVNVckqWc1QM9RMNVPNVrPVHDVHzVVz1Xw1X6WoFLVQLVSpKlUtVotVmlqilqhlaplaoVaoVWqVWqPWqHVqndqgNqg0tVltVlvVVrVdbVc71U61S+1Su9VutVftVfvUPrVf7VcH1AF1UB1U6SpdHVKH1GF1WB1RR9RRdVQdU8fUCXVCnVKn1Gl1Wp1VZ9V5dV5dUBfURXUx47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzBjUGeIG+QL8gfxAcFgoKBDkxgA3G56dHgpqBIcHNQNCgWFA9KBC4oGZQKbglKB7cGZYLbgrLB7UG54I6gfFAhqBhUCu4MKgd3BVWCu4OqwT1BtaB6UCOoGdwb1AruC2oH9wd1ggeCusGDQb3goaB+8HDQIHgkaBg8GjQKHgsaB48HTYKmQbOgedDiD13f+9N5n3Q9dS+doHvrPvoV3Vf30/31AD1Qv6oH6df0YP26TtRD9FD9hh6m39TD9Vt6hB6pR+m39Wj9jh6jx+pxerxO0hP0RP2unqTf05P1FD1VT9PJerqeod/XM/UsPVt/oOfoD/VcPU/P1wt0iv5IL9SLdKr+WC/Wn+g0vUQv1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Un+pd+jO9W+/Re/Xnep/+Qu/XX+oD+it9UP9Vp+uv9SH9jT6sv9VH9Hf6qP5eH9PHdRl9Up/SP+jT+ow+q8/p8/pHfUH/pC9qn3Fyn/H2bpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVNceOMM6VMKVPalDZlTBlT1pQ15Uw5U96UNxVNRXOnudPcZe4yd5u7zT3mHlPdVDc1TU1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDHNTDPTwrQwLU1L08q0Mm1MG9PWtDXtTDvT3rQ3HUwH09F0NJ1MJ9PZdDZdTBfT1XQ13U1308P0MD1NT5NgEkwf08f0NX1Nf9PfDDQDzSAzyAw2g02iSTRDzVAzzAwzw81wM8KMNKMyTlTNO2aMGWvGmfEmySSZiWaimWQmmclmsplqpppkk2xmmBlmpplpZpvZZo6ZY+aauWa+mW9STIpZaBaaVJNqFpvFJs2kmaVmqVlulpuVZqVZbVabtWatWQ/rzUaz0Ww2m81Ws9VsN9vNTrPT7DK7zG6z2+w1e80+s8/sN/vNAXPAHDQHTbpJN4fMIXPYHDZHzBFz1Bw1x8wxc8KcMKfMKXPanDZnzVlz3uS9/H7pTazNbnPYa2xOe63NZa+zfxvns/ltvC1gC1pt89i8v4qNtbaoLWaL2xLW2ZK2lL3lN3F5W8FWtJXsnbayvctW+U1cy95na9v7bR37gK1p7/1VXNc+aOvZx2x9RADb1Da0zW0j+5htbB+3TWxT28w2t23t07adfca2t8/aDva538QL7SK72q6xa+06u9vusWftOXvYfmvP2x9tT9vLDrSv2kH2NTvYvm4T7ZDfxKPs23a0fceOsWPtODv+N/FUO80m2+l2hn3fzrSzfhOn2I/sHJtq59p5dr5d8HOcUVOq/dgutp/YNBvAUrvMLrcr7Eq76v/WusxusBvtJrvLfma32m12u91hd2aeCNs9dq/93O6zX9hD9ht7wH5lD9ojNt1+/XOcsX9H7Hf2qP3eHrPH7Ql70p6yP6jM7Ix9P2l/shett0BIQJIUBRRD2SiWslMOuoZy0rWUi66jCF1PcXQD5aYbKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6izPKKUwlyVJJK0S1Umm6lMnQblaXbqRzdQeWpAlWkSnQnVaa7qArdTVXpHqpG1akG1aR7qRbdR7XpfqpDD1BdepDq0UNUnx6mBvQINaRHqRE9Ro3pcWpCTakZNacW9AS1pCepFbWmNvQUtaWnqR09Q+3pWepAz1FH+gt1ouepM71AXehF6krdqDu9RD3oZepJvSiBelMfeoX6Uj/qTwNoIL1Kg+g1GkyvUyINoaH0Bg2jN2k4vUUjaCSNordpNL1DY2gsjaPxlEQTaCK9S5PoPZpMU2gqTaNkmk4z6H2aSbNoNn1Ac+hDmkvzaD4toBT6iBbSIkqlj2kxfUJptISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO2gnfUq76DPaTXtoL31O++gL2k9f0gH6ig7SXymdvqZD9A0dpm/pCH3ne9H3dIyO0wk6SafoBzpNZ+gsnaPz9CNdoJ/oInmCEEMRylCFQRgTZgtjw+xhjvCaMGd4bZgrvC6MhNeHceENYe7wxjBPmDfMF+YP48MCYcFQhya0IYVhWCgsHEbDm8Ii4c1h0bBYWDwsEbqwZFgqvCUsHd4alglvC8uGt4flwjvC8mGF8LEHKoV3hpXDu8Iq4d1h1fCesFpYPawR1gzvDWuF94W1w/vDOuEDYZnwwbBe+FBYP3w4bBA+EjYMHw0bhY+FjcPHwyZh07BZ2DxsET4RtgyfDFuFrcM24TVh2/DpsF34TNg+fDbsED738/yDizLnn/rNfELYO+wTvhK+Enp/v5wfXRBNiX4UXRhdFE2NfhxdHP0kmhZdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RT1vmY2cOiEk065wMW4bC7WZXc53DUup7vW5XLXuYi73sW5G1xud6PL4/K6fC6/i3cFXEGnnXHWkQtdIVfYRd1Nroi72RV1xVxxV8I5V9KVcs1dC9fCtXRPulautWvjnnJPuafd0+4Z94x71nVwz7mO7i+uk3vedXYvuBfci66r6+a6u5dcDzch16XXZILr4/q4vq6v6+/6u4FuoBvkBrnBbrBLdIluqBvqhrlhbrgb7ka4EW6UG+VGu9FujBvjxrlxLskluYluopvkJrnJbrKb6qa6ZJfsZrgZbqab6SrPurSVuW6um+/muxSX4ha6jHPGVLfYLXZpLs0tdUvdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O90ut8vt9tddWtTtc/vdfnfAHXAH3V9duvvaHXLfuMPuW3fEfeeOuu/dMXfcnXAn3Sn3gzvtzriz7pw77350F9xP7qLzLikyITIx8m5kUuS9yOTIlMjUyLRIcmR6ZEbk/cjMyKzI7MgHkTmRDyNzI/Mi8yMLIimRjyILI4siqZGPI4sjn0TSIksiSyPLIssjKyLeF9ga+kK+sI/6m3wRf7Mv6ov54r6Ed76kL+Vv8aUv1Z3m/e2+nL/Dl/cVfEX/uG/im/pmvrlv4Z/wLf2TvpVv7dv4p3xb/7Rv55/x7f2zvoN/znf0f/Gd/PO+s3/Bd/Ev+q6+m+/uX/I9/Mu+p+/lE3xv38e/4vv6fr6/H+AH+lf9IP+aH+xf94l+iB/q3/DD/Jt+uH/Lj/Aj/aiYt/3ozEtkGO+T/AQ/0b/rJ/n3/GQ/xU/103yyn+5n+Pf9TD/Lz/Yf+Dn+Qz/Xz/Pz/QKf4j/yC/0in+o/9ov9Jz7NL8m8aexX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u9/hd/pP/S7/md/t9/i9/nO/z3/h9/sv/YGLmX+B9rU/5L/xh/23/oj/zh/13/tj/rg/4U/6U/4Hf9qf8Wf9OX/e/+gv+J/8Rf6bNcYYY4yxf8qEK0Px65lLt/N7/06O+MWT+wDAtdvyp/9yPuOMcn2eS+N+Ij424+Ozvbo8kvmoVi0hIeHyc9MkBIXnAWT+JCjDz796cDleAm3gaWgPraH079bfT3Q7T/9g/ejtADl+kZNRUGZ8Zf0vATDhd9Z/4qlRC8uFZ+P+H+vPAyha+EpOdrgSL4E2P99faQ1l/k79eVv+g/qzf5UE0OoXOTnhSnyl/lLwJDwH7X/1TMYYY4wxxhhj7JJ+omKnzOvPzN/4/L3r83h1JScbXIn/0fU5Y4wxxhhjjDHGrr7nu3V/5on27Vt3+tcHVf5HWf/0oDH8p1bmwe8OvAfI/IwCgH9zQYCMgfwz92LLn7KtxMsvnb+dWn7OB/C/o5V/xOAqH5gYY4wxxhhjf7grJ/2//ry6WgUxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGNZ0J/x78Su9j4yxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjV9v/CQAA//9F2vrQ") openat(0xffffffffffffff9c, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) 3m57.001321228s ago: executing program 8 (id=13904): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f00000001c0)={[{@utf8}, {@dmask={'dmask', 0x3d, 0x6}}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@namecase}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1533, &(0x7f0000006800)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0) 3m56.381728698s ago: executing program 8 (id=13910): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r0, 0x8d, 0x3, &(0x7f0000000340)="d021ed") 3m55.621943251s ago: executing program 8 (id=13919): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r0, r0, 0x0, 0x2000006) 3m54.804848867s ago: executing program 36 (id=13919): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r0, r0, 0x0, 0x2000006) 1m20.487737406s ago: executing program 2 (id=15825): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1m19.987417577s ago: executing program 2 (id=15834): r0 = socket$isdn(0x22, 0x2, 0x23) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000240)=[{0x4, 0xc, 0x6, 0x10000}, {0x9, 0x9, 0xf0, 0x7}]}, 0x10) 1m19.635777269s ago: executing program 2 (id=15840): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)='1', 0x1}, {&(0x7f00000002c0)="1c0000", 0x3}], 0x2, 0x8, 0xb) 1m19.317107642s ago: executing program 2 (id=15845): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 1m18.548774386s ago: executing program 2 (id=15856): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m17.370186985s ago: executing program 2 (id=15866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m16.488525548s ago: executing program 37 (id=15866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 8.567590338s ago: executing program 4 (id=16425): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) close(0x3) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x4f, 0xc0, 0x8f, 0x8, 0x16c0, 0x5df, 0xb085, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc2, 0x92, 0x40, 0x7d, "", [{{0x9, 0x4, 0x4, 0xe2, 0x0, 0x3, 0x0, 0x0, 0x6}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 6.842749591s ago: executing program 5 (id=16433): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 6.051617259s ago: executing program 5 (id=16438): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4443, &(0x7f0000004480)="$eJzs3c9rHNcdAPA3I9WWXNuVXB9cKHShhpa2CMmntjJUlmXLkq26uLUpvaxX0tpWu9IaaVV6MFS9GXoK5BByMAnkppPRIVcH8g/kkqNzNiSHXAIBkw27OyvtjHbRxtm1IvP5gDU779d8d78zs28P4xcnKg9WNnIrG7nCWq68dG/jQu7f5dLmajHEr8lhH5/u9D5PUZD7w3Pz8tW/3rkQwkfLn76oVqvVUDMY2ppoef3Vl4+WWrdNcaZPbdz2o/XKP0IIZ/fFVTMQQvj7hyFEIYRLSdl0sh0OIZwOjbo7j/5/N9ejaJ4+L17Mv1x4vDN5fn77yU7n9x6F8G7pZ7+7v/r5LwcmP/tNjw4PAAAAAAAAAAAAAAAAAMARN3vr5u2/jE+EZ1EY3I72P687m2w7PR9b7Zlf9P/NAgAAAAAAAAAAAAAAAAAAwA/U3vP/uehMm+f/Z5LtVIf+1T/1P0b6Z+7PN2eujE8k679H++p/nxR9cWkgjLZZ9z27/vulTP/2678f71n8zfiaxx0JUTyW2o/jsbEQ3k8Wfj8XnYhL5Y3Kb++VN9eWexbGkZXOf2P1/tRZkCzo323+pzPj93/9/5+G7Flb27+7/1SmjXT+Bzq2++B/UVf5v5zp9zryz6tL53+wXjbc2mCqcQOo5f+twYPzP5MZv1/5Px1CyEW1WHOpO0BtDlMr7zRfIS2d/x/Vy1K3zuSD7HT9f53J/5XM+Id1/9/KfhHRVjr/x+plQ6kWe9f/aHzw9X81M/5h5L8W/5bv/66k85/MywdTTeqfZLf3/9nM+P3K/+04ifN0lDoDtqNGeaf/r460dP6H9tXv/f6Lu5r/Xcv0b5//3l2czfiax63//qtWq/9N9n8dNX7/0V46/8Md23V7/c9l+vX7/j9Vn/9151g/Azmi0vk/US9Lz51H6n+7zf98Zvx+5b8+Kxlq5n/vfvLN8Ub5ey3zv9v9COANkc7/jxuFcWuLrfrf+vwvOnj+fz0z/mHM/2rxb8X9PeqbIp3/kx3b1fL/SRff/zcy/fqf/xDGzfVfWTr/pzq2q1//QwfnfyHTr9/5/1U/BwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4AqaT7UiI4rHUfhyPjYVwOdk/F05Ei4Xl/GKpvPSvjRBmkvJcOBPdL5UXC6X8ylp5uZgvlErlpRCuJPVnw1C0USpX8quFh1d3xxqOHhQL65XFYqESQphNyn8eTjXHWlyprBYehhCu7db9JC6vP3xQWMsvr6z/cXx8fDzM7cYwGhX/UymuVRpHb9SGML/bdyRqCa5efX03lpPRP8ub62uFUr38RkufUnmpUGrps5DUvR1Go8r65tpSoVLMl8r3m8fr5ONjr5ic72Aq2c7M3frbrRsT++rvRo3tdP9DAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB7eDb5h3dCCIONvTiEkIuSF1HyL+Xp8+LF/MuFxzuT5+e3n+y8aNcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4lh04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs0j9KA0EUB+A3Y6Glx7BadjvbFUW0cEXwBHoMD6NH8RLewSJF2hQhkMxC2D+wTVJ9X/Ngfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYLnHt+79tW4iUlxtLyN+P//+j/PnUr/vpu9fnGFGTufppbt/qJvy72mU35ajVZv36Wb99RETtfcz2JPhPh2M+wzN7dvcfH3f60i5ioi25Dcp56pa9hYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3jqJvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA///tOyO0") lchown(&(0x7f0000000040)='.\x00', 0xee00, 0xffffffffffffffff) mknod(&(0x7f0000000000)='./file1\x00', 0x8, 0x6) 3.296361017s ago: executing program 5 (id=16451): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000003c0)={[{}, {@discard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@discard}, {@order_relaxed}, {}], [], 0x2c}, 0x3, 0xeea, &(0x7f0000001e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80086e8a, 0xfffffffffffffffe) 3.151678014s ago: executing program 3 (id=16454): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x500, 0x4) sendmmsg(r0, &(0x7f0000004000)=[{{&(0x7f00000001c0)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x80, 0x0}}], 0x1, 0x4000) 2.834933381s ago: executing program 0 (id=16458): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x5}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x80002, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x272, 0xb, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xe, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb9a, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0x6, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0xffff8003, 0x0, 0xffffffff, 0x1, 0x0, 0x800009, 0xfffffffd, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x2, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x5, 0x0, 0x9, 0xfffffffd, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x2, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0xaa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x26c, 0x4, 0x7, 0xffff, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x100007f, 0x2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.72067942s ago: executing program 4 (id=16459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, 0x0, 0x2c, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 2.510719065s ago: executing program 4 (id=16461): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0x12}) 2.190117962s ago: executing program 4 (id=16463): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) 2.170991697s ago: executing program 6 (id=16464): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000340)={0x0, 0x0}) 2.140262942s ago: executing program 0 (id=16465): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000001080), 0x1) 2.103441715s ago: executing program 3 (id=16467): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1.914173757s ago: executing program 4 (id=16468): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) 1.912568595s ago: executing program 5 (id=16469): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c646f74732c646d61736b3d3030303030300001000000000000303630303030302c6e6f646c74732c123273636172642c6e66733d6e6f7374616c655f726f2c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.864666039s ago: executing program 6 (id=16470): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x7, @time={0xffff7fff, 0x1}, 0xfa, {0x0, 0x1d}, 0x0, 0x2, 0x7f}) 1.860289628s ago: executing program 0 (id=16471): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x2904c, 0x6, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x94fa}, {0xffffffff, 0x0, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.831232972s ago: executing program 9 (id=16472): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000008c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001740)="0800b1e688b8867d", 0x8}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @dev={0xac, 0x14, 0x14, 0x18}}}}], 0x20}, 0x24000084) 1.796084849s ago: executing program 3 (id=16473): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0x11) 1.542720111s ago: executing program 9 (id=16474): unshare(0x8040480) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') readahead(r0, 0x8, 0x9) 1.481361976s ago: executing program 3 (id=16475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x68, r1, 0x909, 0x70bd25, 0x0, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.462756192s ago: executing program 6 (id=16476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080020"], 0x44}}, 0x0) 1.405672498s ago: executing program 5 (id=16477): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 1.213731619s ago: executing program 9 (id=16478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.149094103s ago: executing program 0 (id=16479): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd28, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x1, 0x1, {@ip4=@rand_addr=0x64010100, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.13016534s ago: executing program 6 (id=16480): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000100)='./file2\x00', 0x1699) 1.117320725s ago: executing program 3 (id=16481): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000007c0)={[{@fat=@errors_remount}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@fat=@debug}, {@dots}, {@dots}, {@fat=@flush}, {}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffffc}}, {@dots}], [{@subj_role={'subj_role', 0x3d, 'dots'}}, {@fowner_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, '*'}}]}, 0x1, 0x20e, &(0x7f0000000400)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 993.939175ms ago: executing program 5 (id=16482): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000280)={[{}, {@nobarrier}, {@discard}, {@resgid}, {@resuid}]}, 0x1, 0x513, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) 762.964513ms ago: executing program 9 (id=16483): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x3000, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f00000002c0)="411eec2ca010ffddca666cb9a6a70624735f5029bc585dc34055e4aeea169558a2e220484244dd3b63973ca9c3ed622196bb", 0x1a000}, &(0x7f0000000040)={0x22000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfce6}]) 656.136197ms ago: executing program 6 (id=16484): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000000080)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@uni_xlate}, {@shortname_lower}, {@fat=@fmask={'fmask', 0x3d, 0x2c}}, {@shortname_mixed}, {@rodir}, {@utf8no}, {@rodir}]}, 0x81, 0x2a6, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 598.141388ms ago: executing program 0 (id=16485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x2) 597.897813ms ago: executing program 3 (id=16486): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xff}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="701012"], 0x0, 0x0}) 404.467612ms ago: executing program 4 (id=16487): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x651) ioctl$sock_TIOCOUTQ(r0, 0x8905, 0x0) 346.109013ms ago: executing program 9 (id=16488): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 66.161322ms ago: executing program 0 (id=16489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd2c, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048184}, 0x0) 21.749009ms ago: executing program 9 (id=16490): r0 = semget$private(0x0, 0x6, 0x583) semop(r0, &(0x7f0000000900)=[{0x0, 0x8000}, {0x3, 0x2, 0x1800}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xeff7}) 0s ago: executing program 6 (id=16491): unshare(0x4040400) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): syz.3.15360 (10222) [ 1443.370976][T10222] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1443.386365][ T30] audit: type=1326 audit(1777278667.852:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.0.15376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81399c819 code=0x7ffc0000 [ 1443.386388][T10222] BTRFS info (device loop3): using sha256 checksum algorithm [ 1443.542977][T10225] XFS (loop5): Ending clean mount [ 1443.570299][T10222] BTRFS info (device loop3): enabling ssd optimizations [ 1443.654663][T10222] BTRFS info (device loop3): turning on async discard [ 1443.687772][T10222] BTRFS info (device loop3): enabling free space tree [ 1443.852073][T10222] BTRFS info (device loop3): resizing devid 73709551615 [ 1443.932116][ T6611] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1443.934304][T10222] BTRFS info (device loop3): resizer unable to find device 73709551615 [ 1444.022887][T10292] loop2: detected capacity change from 0 to 8192 [ 1444.148699][T10292] loop2: p1 p2[DM] p4 [ 1444.160197][T10292] loop2: p1 start 134217728 is beyond EOD, truncated [ 1444.214449][T10292] loop2: p2 start 4292936063 is beyond EOD, truncated [ 1444.253856][T10292] loop2: p4 size 50331648 extends beyond EOD, truncated [ 1444.282649][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1444.456681][T10300] loop9: detected capacity change from 0 to 512 [ 1444.523944][T10300] EXT4-fs: Ignoring removed nobh option [ 1444.549919][T10302] loop6: detected capacity change from 0 to 64 [ 1444.557051][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1444.628257][T10300] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 1444.640102][T10300] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -61 [ 1444.648632][T10300] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #13: comm syz.9.15388: inode has both inline data and extents flags [ 1444.662494][T10300] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1444.684998][T10300] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.15388: couldn't read orphan inode 13 (err -117) [ 1444.694374][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1444.694400][ C0] EXT4-fs (loop9): initial error at time 1777278669: ext4_orphan_get:1397: inode 13 [ 1444.694441][ C0] EXT4-fs (loop9): last error at time 1777278669: ext4_orphan_get:1397: inode 13 [ 1444.861565][T10306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15391'. [ 1444.886117][T10300] loop9: lost filesystem error report for type 5 error -117 [ 1444.889171][T10300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1444.944708][T10300] fscrypt (loop9, inode 2): Error -61 getting encryption context [ 1445.061908][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 1445.126351][ T2466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.234878][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15393'. [ 1445.244605][T10310] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15393'. [ 1445.814268][T10324] loop2: detected capacity change from 0 to 1024 [ 1446.023338][ T29] wg0 speed is unknown, defaulting to 1000 [ 1446.040673][T23076] netdevsim netdevsim0 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.066680][ T29] syz0: Port: 1 Link DOWN [ 1446.075648][T23076] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.238881][T23071] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.274855][T23071] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.506628][ T29] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1446.665989][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1446.695808][ T29] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1446.719901][ T29] usb 6-1: config 0 has no interface number 0 [ 1446.752302][ T29] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1446.803683][ T29] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1446.857820][ T29] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1446.902981][ T29] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1446.932784][T10360] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 1446.956527][ T29] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1447.011227][ T29] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1447.060733][ T29] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1447.103174][ T29] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 115 [ 1447.133654][ T29] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1447.190873][ T29] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1447.209929][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.252678][ T29] usb 6-1: Product: syz [ 1447.270082][ T29] usb 6-1: Manufacturer: syz [ 1447.288890][ T29] usb 6-1: SerialNumber: syz [ 1447.307514][T10376] loop6: detected capacity change from 0 to 1024 [ 1447.326696][ T29] usb 6-1: config 0 descriptor?? [ 1447.342711][T10332] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1447.352269][T10376] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1447.364639][T10332] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1447.414871][ T29] usb 6-1: will this work? Response EP is not usually 3 [ 1447.461938][ T29] usb 6-1: will this work? Image data EP is not usually 2 [ 1447.509554][ T29] scsi host1: microtekX6 [ 1447.593748][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15427'. [ 1447.643581][ T29] usb 6-1: USB disconnect, device number 106 [ 1447.666147][T25424] usb 6-1: error -19 submitting URB [ 1447.692100][T10379] loop3: detected capacity change from 0 to 2048 [ 1447.718238][T10386] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15428'. [ 1447.861837][T10391] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1448.071464][T10395] netlink: 'syz.9.15431': attribute type 30 has an invalid length. [ 1448.301932][T10402] loop0: detected capacity change from 0 to 512 [ 1448.389304][T10402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 1448.441288][T10402] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1448.514693][T10402] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1448.575997][T10402] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1448.604619][T10402] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.15436: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1448.705123][T10402] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1448.705967][T10402] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.15436: couldn't read orphan inode 13 (err -117) [ 1448.715205][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1448.715229][ C1] EXT4-fs (loop0): last error at time 1777278673: ext4_ext_check_inode:521: inode 13 [ 1448.858963][T10402] loop0: lost filesystem error report for type 5 error -117 [ 1448.862235][T10402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1448.879866][T10421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15444'. [ 1448.961834][T10402] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.15436: inode #15: comm syz.0.15436: iget: illegal inode # [ 1449.087903][T10423] loop9: detected capacity change from 0 to 1024 [ 1449.133239][T10423] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1449.152863][T10423] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1449.174160][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.199224][T10423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1449.293675][T10423] System zones: 0-1, 3-36 [ 1449.358266][T10423] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.652108][ T2466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.664125][T10446] netlink: 156 bytes leftover after parsing attributes in process `syz.5.15455'. [ 1449.691450][T10446] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1449.776677][T10450] loop6: detected capacity change from 0 to 1024 [ 1449.804059][T10450] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1449.861632][T10450] overlay: filesystem on ./file0 not supported [ 1449.918813][T10453] loop3: detected capacity change from 0 to 16 [ 1449.950726][T10453] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1449.974690][T10454] delete_channel: no stack [ 1450.011782][ T6101] udevd[6101]: incorrect cramfs checksum on /dev/loop3 [ 1450.061206][T10459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15461'. [ 1450.123917][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15461'. [ 1450.183462][T10459] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1450.258674][T10461] loop6: detected capacity change from 0 to 512 [ 1450.350712][T10461] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.15462: invalid indirect mapped block 256 (level 2) [ 1450.364546][T10461] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1450.365947][T10461] EXT4-fs (loop6): 2 truncates cleaned up [ 1450.375190][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1450.375212][ C0] EXT4-fs (loop6): initial error at time 1777278675: ext4_free_branches:1023: inode 11 [ 1450.375253][ C0] EXT4-fs (loop6): last error at time 1777278675: ext4_free_branches:1023: inode 11 [ 1450.427291][T10461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1450.591224][T10474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15466'. [ 1450.622022][T16598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.991722][T10488] loop3: detected capacity change from 0 to 64 [ 1451.054158][T10442] loop2: detected capacity change from 0 to 32768 [ 1451.066886][ T804] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1451.119890][T10442] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1451.136723][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1451.227130][ T804] usb 10-1: Using ep0 maxpacket: 8 [ 1451.238127][ T804] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 1451.248406][ T804] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.261557][ T804] usb 10-1: config 0 has no interface number 0 [ 1451.270326][ T804] usb 10-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1451.282272][ T804] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1451.294945][ T804] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1451.306890][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1451.312190][ T804] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1451.325669][ T804] usb 10-1: config 0 interface 52 has no altsetting 0 [ 1451.334025][ T804] usb 10-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1451.343566][ T9] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1451.352690][ T9] usb 7-1: config 179 has no interface number 0 [ 1451.359252][ T804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.369050][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1451.383086][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1451.395979][ T804] usb 10-1: config 0 descriptor?? [ 1451.430084][T10442] XFS (loop2): Ending clean mount [ 1451.432211][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1451.461534][T10442] XFS (loop2): Quotacheck needed: Please wait. [ 1451.497753][ T9] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1451.542133][ T9] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1451.572414][T10506] loop5: detected capacity change from 0 to 64 [ 1451.592709][ T9] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1451.655767][ T9] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1451.660117][T10442] XFS (loop2): Quotacheck: Done. [ 1451.670887][ T804] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.52/input/input82 [ 1451.687204][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15479'. [ 1451.696752][T10508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15479'. [ 1451.736350][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.833954][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1451.903304][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input83 [ 1451.929236][ T804] usb 10-1: USB disconnect, device number 13 [ 1451.930434][ C1] synaptics_usb 10-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1452.226857][ T5189] input input83: unable to receive magic message: -110 [ 1452.295275][ T5189] input input83: unable to receive magic message: -32 [ 1452.353880][ T9] usb 7-1: USB disconnect, device number 41 [ 1452.359985][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1452.360036][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1452.651180][T10518] loop0: detected capacity change from 0 to 512 [ 1452.677895][T10518] EXT4-fs: Ignoring removed nobh option [ 1452.774933][T10518] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.15485: corrupted inode contents [ 1452.787991][T10518] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1452.791838][T10518] EXT4-fs (loop0): Remounting filesystem read-only [ 1452.800988][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1452.801012][ C0] EXT4-fs (loop0): initial error at time 1777278677: ext4_do_update_inode:5690: inode 3 [ 1452.801053][ C0] EXT4-fs (loop0): last error at time 1777278677: ext4_do_update_inode:5690: inode 3 [ 1452.869990][T10518] __quota_error: 4 callbacks suppressed [ 1452.870011][T10518] Quota error (device loop0): write_blk: dquota write failed [ 1452.916966][T10518] Quota error (device loop0): qtree_write_dquot: Error -30 occurred while creating quota [ 1452.962028][T10518] EXT4-fs (loop0): 1 truncate cleaned up [ 1452.998844][T10518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1453.064655][T10518] ext4 filesystem being mounted at /2664/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1453.259935][T10540] loop6: detected capacity change from 0 to 2048 [ 1453.302445][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.362038][T10540] Alternate GPT is invalid, using primary GPT. [ 1453.399894][T10540] loop6: p2 p3 p7 [ 1453.453999][T10547] netlink: 84 bytes leftover after parsing attributes in process `syz.5.15497'. [ 1453.603328][T10552] loop9: detected capacity change from 0 to 1024 [ 1453.808575][ T6108] udevd[6108]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1453.809171][ T6101] udevd[6101]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1453.837369][ T6107] udevd[6107]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 1453.844903][T10562] loop0: detected capacity change from 0 to 512 [ 1453.911180][T10562] EXT4-fs: Ignoring removed bh option [ 1453.948129][T10562] EXT4-fs: inline encryption not supported [ 1453.990675][T10562] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1454.065802][T10562] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1454.123053][T10562] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.15503: bg 0: block 248: padding at end of block bitmap is not set [ 1454.138695][T10562] loop0: lost filesystem error report for type 5 error -117 [ 1454.146632][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1454.160407][ C0] EXT4-fs (loop0): last error at time 1777278678: ext4_validate_block_bitmap:441 [ 1454.174048][T10562] Quota error (device loop0): write_blk: dquota write failed [ 1454.181714][T10562] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1454.214738][T10562] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.15503: Failed to acquire dquot type 1 [ 1454.227837][T10575] loop3: detected capacity change from 0 to 1024 [ 1454.245748][T10579] loop5: detected capacity change from 0 to 1024 [ 1454.275269][T10579] hfsplus: invalid file type 0174377 for inode 21 [ 1454.287140][T10562] loop0: lost filesystem error report for type 5 error -28 [ 1454.303999][T10562] EXT4-fs (loop0): 1 truncate cleaned up [ 1454.334603][T10562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1454.524932][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1454.544758][T23076] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 1454.589207][T23076] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:11: Failed to release dquot type 1 [ 1454.646162][T23076] loop0: lost filesystem error report for type 5 error -117 [ 1454.823998][T10591] netlink: 'syz.2.15518': attribute type 10 has an invalid length. [ 1455.107818][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15521'. [ 1455.280019][T10559] loop6: detected capacity change from 0 to 32768 [ 1455.330593][T10559] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.15501 (10559) [ 1455.414000][T10559] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1455.445325][T10559] BTRFS info (device loop6): using sha256 checksum algorithm [ 1455.621911][T10559] BTRFS info (device loop6): rebuilding free space tree [ 1455.790185][T10559] BTRFS info (device loop6): enabling ssd optimizations [ 1455.820437][T10559] BTRFS info (device loop6): using spread ssd allocation scheme [ 1455.849542][T10559] BTRFS info (device loop6): turning on async discard [ 1455.889597][T10559] BTRFS info (device loop6): enabling free space tree [ 1455.911776][T10639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1455.936906][T10559] BTRFS info (device loop6): force clearing of disk cache [ 1456.028238][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15536'. [ 1456.192257][T16598] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1456.455690][T10653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1456.583640][T10666] netlink: 'syz.5.15546': attribute type 10 has an invalid length. [ 1456.674160][T10666] veth1_macvtap: left promiscuous mode [ 1457.163046][T10687] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.15540'. [ 1457.177943][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15555'. [ 1457.217725][T10687] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 1457.521430][T10694] loop2: detected capacity change from 0 to 2048 [ 1457.602290][T10694] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1457.666804][T10701] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1457.931739][T10708] netlink: 'syz.3.15565': attribute type 1 has an invalid length. [ 1458.260701][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15570'. [ 1458.759142][T10741] netlink: 'syz.3.15583': attribute type 4 has an invalid length. [ 1458.932350][T10748] netlink: 'syz.3.15585': attribute type 4 has an invalid length. [ 1458.950249][T10748] netlink: 17 bytes leftover after parsing attributes in process `syz.3.15585'. [ 1459.160906][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15587'. [ 1459.400735][T10762] openvswitch: netlink: IP tunnel dst address not specified [ 1459.687559][T10774] netlink: 'syz.6.15597': attribute type 29 has an invalid length. [ 1459.733135][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15597'. [ 1460.271584][T10801] xt_l2tp: v2 doesn't support IP mode [ 1460.728486][ T9] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1460.911467][ T9] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1460.911906][T10821] netlink: 'syz.2.15621': attribute type 6 has an invalid length. [ 1460.948941][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1460.971272][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1460.983212][T10794] loop3: detected capacity change from 0 to 32768 [ 1460.993902][ T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1460.995637][T10823] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15622'. [ 1461.004245][ T9] usb 7-1: Product: syz [ 1461.016708][T10794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.15608 (10794) [ 1461.029823][T10823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15622'. [ 1461.039506][ T9] usb 7-1: Manufacturer: syz [ 1461.045049][ T9] usb 7-1: SerialNumber: syz [ 1461.054976][T10794] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1461.080517][ T9] usb 7-1: config 0 descriptor?? [ 1461.095300][T10794] BTRFS info (device loop3): using sha256 checksum algorithm [ 1461.121571][ T9] usb 7-1: selecting invalid altsetting 0 [ 1461.278922][T10794] BTRFS info (device loop3): enabling ssd optimizations [ 1461.332065][T10794] BTRFS info (device loop3): turning on async discard [ 1461.344435][T10794] BTRFS info (device loop3): enabling free space tree [ 1461.475153][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1461.525711][ T5922] usb 7-1: USB disconnect, device number 42 [ 1461.769350][ T9] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1461.987894][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1462.010455][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.056277][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1462.099784][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.137911][ T9] usb 6-1: Product: syz [ 1462.158966][ T9] usb 6-1: Manufacturer: syz [ 1462.197412][ T9] usb 6-1: SerialNumber: syz [ 1462.221396][ T9] usb 6-1: config 0 descriptor?? [ 1462.256151][ T9] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1462.465582][ T9] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 1462.494938][ T9] quatech2 6-1:0.0: probe with driver quatech2 failed with error -8 [ 1462.521384][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15637'. [ 1462.705123][ T9] usb 6-1: USB disconnect, device number 107 [ 1462.821572][T10875] loop6: detected capacity change from 0 to 4096 [ 1462.874898][T10884] netlink: 'syz.9.15644': attribute type 10 has an invalid length. [ 1462.902125][T10884] netlink: 40 bytes leftover after parsing attributes in process `syz.9.15644'. [ 1462.975553][T10884] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1463.010425][T10884] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1463.060391][T10884] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1463.141993][T10890] netlink: 'syz.3.15646': attribute type 5 has an invalid length. [ 1463.331144][T10894] loop6: detected capacity change from 0 to 1024 [ 1463.396812][T10899] loop2: detected capacity change from 0 to 164 [ 1463.414380][T10898] sit0: entered promiscuous mode [ 1463.451694][T10898] netlink: 'syz.9.15650': attribute type 1 has an invalid length. [ 1463.471663][T10899] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1463.506876][T10898] netlink: 1 bytes leftover after parsing attributes in process `syz.9.15650'. [ 1463.781835][T10913] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15659'. [ 1463.847110][T10916] netlink: 352 bytes leftover after parsing attributes in process `syz.9.15660'. [ 1464.202098][ T6060] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1464.233370][T10928] netlink: 220 bytes leftover after parsing attributes in process `syz.9.15666'. [ 1464.363739][T10934] xt_TCPMSS: Only works on TCP SYN packets [ 1464.409398][ T6060] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.444279][ T6060] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1464.480776][ T6060] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.497002][T10941] netlink: 'syz.9.15673': attribute type 39 has an invalid length. [ 1464.532822][ T6060] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1464.798708][ T9] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 1464.970315][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1464.986487][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 1465.020036][ T9] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 1465.037610][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.055507][ T9] usb 7-1: Product: syz [ 1465.073590][ T9] usb 7-1: Manufacturer: syz [ 1465.085921][ T9] usb 7-1: SerialNumber: syz [ 1465.140574][ T9] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1465.340426][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.367537][T10936] loop2: detected capacity change from 0 to 32768 [ 1465.376467][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.407649][T10936] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 97ef1906-9450-4bb2-aa56-4a6e385327b0 [ 1465.435580][T10936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15670 (10936) [ 1465.478937][T10936] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1465.507127][T10936] BTRFS info (device loop2): using crc32c checksum algorithm [ 1465.622335][ T9] usb 7-1: USB disconnect, device number 43 [ 1465.626762][ T6060] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 1465.743527][T10936] BTRFS info (device loop2): enabling ssd optimizations [ 1465.772712][T10936] BTRFS info (device loop2): using spread ssd allocation scheme [ 1465.815254][T10936] BTRFS info (device loop2): turning on flush-on-commit [ 1465.831486][ T6060] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1465.863956][T10936] BTRFS info (device loop2): enabling free space tree [ 1465.877999][ T6060] stv0680 1-1:4.0: last error: 86, command = 0x3 [ 1465.884277][ T6108] udevd[6108]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1465.907959][T10936] BTRFS info (device loop2): force zlib compression, level 3 [ 1465.929167][ T6060] usb 1-1: USB disconnect, device number 8 [ 1465.952198][T10993] SET target dimension over the limit! [ 1466.106048][T10997] netlink: 'syz.3.15692': attribute type 1 has an invalid length. [ 1466.142765][T10997] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15692'. [ 1466.185171][T10997] netlink: 1 bytes leftover after parsing attributes in process `syz.3.15692'. [ 1466.204378][T10999] netlink: 'syz.5.15694': attribute type 13 has an invalid length. [ 1466.214381][T10997] netlink: 658 bytes leftover after parsing attributes in process `syz.3.15692'. [ 1466.232450][T10999] netlink: 152 bytes leftover after parsing attributes in process `syz.5.15694'. [ 1466.284824][T10999] syz_tun: refused to change device tx_queue_len [ 1466.313198][T10999] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1466.335475][T11003] loop9: detected capacity change from 0 to 256 [ 1466.376900][ T5837] BTRFS info (device loop2): last unmount of filesystem 97ef1906-9450-4bb2-aa56-4a6e385327b0 [ 1466.742066][T11014] loop9: detected capacity change from 0 to 64 [ 1466.965854][T11020] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1468.078399][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1468.253953][ T9] usb 7-1: config 2 has an invalid interface number: 79 but max is 0 [ 1468.263618][ T9] usb 7-1: config 2 has no interface number 0 [ 1468.287025][ T9] usb 7-1: config 2 interface 79 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 1468.315338][ T9] usb 7-1: config 2 interface 79 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1468.351045][ T9] usb 7-1: config 2 interface 79 has no altsetting 0 [ 1468.383055][ T9] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=ca.fb [ 1468.404947][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.433778][ T9] usb 7-1: Product: syz [ 1468.445016][ T9] usb 7-1: Manufacturer: syz [ 1468.455859][ T9] usb 7-1: SerialNumber: syz [ 1468.508326][T11047] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1468.520752][T11047] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1468.756838][ T9] esd_usb 7-1:2.79: sending version message failed [ 1468.768870][T11077] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15730'. [ 1468.784798][ T9] esd_usb 7-1:2.79: probe with driver esd_usb failed with error -71 [ 1468.830637][ T9] usb 7-1: USB disconnect, device number 44 [ 1469.291613][T11085] loop5: detected capacity change from 0 to 8192 [ 1469.291690][T11063] loop3: detected capacity change from 0 to 32768 [ 1469.366097][T11063] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1469.497791][T11105] loop2: detected capacity change from 0 to 256 [ 1469.631925][T11063] XFS (loop3): Ending clean mount [ 1469.930074][ T5838] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1469.979793][T11109] loop0: detected capacity change from 0 to 4096 [ 1470.029780][T11109] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1470.137930][T11109] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1470.208907][T11109] System zones: 0-5 [ 1470.296732][T11109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1470.670754][T11129] netlink: 'syz.2.15752': attribute type 1 has an invalid length. [ 1470.700650][T11095] loop9: detected capacity change from 0 to 32768 [ 1470.739900][T11129] netlink: 228 bytes leftover after parsing attributes in process `syz.2.15752'. [ 1470.810446][T11095] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1470.854691][T11095] JBD2: Ignoring recovery information on journal [ 1471.070244][T11095] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1471.080974][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1471.279202][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1471.443509][ T2466] ocfs2: Unmounting device (7,9) on (node local) [ 1471.465819][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1471.481020][ T9] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 1471.495984][ T803] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1471.521398][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1471.557422][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.593889][ T9] usb 7-1: Product: syz [ 1471.610894][ T9] usb 7-1: Manufacturer: syz [ 1471.628176][ T9] usb 7-1: SerialNumber: syz [ 1471.664606][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1471.668520][ T803] usb 4-1: Using ep0 maxpacket: 32 [ 1471.682745][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 1471.699602][ T803] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1471.733022][ T803] usb 4-1: config 0 has no interface number 0 [ 1471.754790][ T803] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1471.792346][ T803] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1471.822727][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.857095][ T803] usb 4-1: Product: syz [ 1471.874365][ T803] usb 4-1: Manufacturer: syz [ 1471.892734][ T803] usb 4-1: SerialNumber: syz [ 1471.918567][ T803] usb 4-1: config 0 descriptor?? [ 1472.171576][ T9] r8152-cfgselector 7-1: USB disconnect, device number 45 [ 1472.373452][ T803] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1472.398158][ T803] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1472.427222][ T803] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1472.448773][ T803] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1472.510122][ T803] usb 4-1: USB disconnect, device number 30 [ 1472.542635][T11175] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1472.570525][T11152] loop2: detected capacity change from 0 to 32768 [ 1472.597794][T11152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.15762 (11152) [ 1472.650415][T11152] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1472.679733][T11152] BTRFS info (device loop2): using sha256 checksum algorithm [ 1472.794889][T11152] BTRFS info (device loop2): enabling ssd optimizations [ 1472.825640][T11152] BTRFS info (device loop2): turning on async discard [ 1472.865218][T11152] BTRFS info (device loop2): enabling free space tree [ 1473.524990][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15788'. [ 1473.647798][ T5837] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1473.677742][T11226] loop6: detected capacity change from 0 to 256 [ 1473.839120][T11226] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x614dc512, utbl_chksum : 0xe619d30d) [ 1473.926360][T11233] loop5: detected capacity change from 0 to 64 [ 1473.945895][T11226] exFAT-fs (loop6): valid_size(9000) is greater than size(0) [ 1473.974817][T11233] minix: block size(59136) > page size(4096) not supported by filesystem [ 1474.291091][T11242] netlink: 'syz.0.15796': attribute type 3 has an invalid length. [ 1474.386340][T11246] loop6: detected capacity change from 0 to 256 [ 1474.416570][T11246] exfat: Deprecated parameter 'utf8' [ 1474.540104][T11246] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 1474.995153][T11255] loop0: detected capacity change from 0 to 4096 [ 1475.060220][T11263] wg0 speed is unknown, defaulting to 1000 [ 1475.461235][T11267] loop2: detected capacity change from 0 to 4096 [ 1475.497657][T11267] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 1475.557846][ T30] audit: type=1400 audit(1777278700.339:2409): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=11276 comm="syz.5.15814" [ 1475.850122][T11267] ntfs3(loop2): ino=0, attr_set_size_ex [ 1475.856086][T11285] loop5: detected capacity change from 0 to 256 [ 1475.900544][T11267] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1476.003234][T11285] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1476.095660][T11285] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 1476.408309][T11302] loop0: detected capacity change from 0 to 128 [ 1476.433000][T11302] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1476.516485][T11302] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1476.598011][T11310] netlink: 830 bytes leftover after parsing attributes in process `syz.2.15825'. [ 1476.651425][T11302] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.15828: checksumming directory block 0 [ 1476.841980][T11319] delete_channel: no stack [ 1476.847485][ T5836] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1476.910502][ T9] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1477.090647][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1477.121121][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1477.135889][ T9] usb 6-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1477.157705][ T9] usb 6-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 1477.169270][ T30] audit: type=1326 audit(1777278701.959:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.3.15838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac6d9c819 code=0x7ffc0000 [ 1477.193614][ T9] usb 6-1: config 12 interface 0 has no altsetting 0 [ 1477.239938][ T9] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1477.278349][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.293746][ T30] audit: type=1326 audit(1777278701.959:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.3.15838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac6d9c819 code=0x7ffc0000 [ 1477.325322][ T9] usb 6-1: Product: syz [ 1477.353696][ T9] usb 6-1: Manufacturer: syz [ 1477.384676][ T9] usb 6-1: SerialNumber: syz [ 1477.406595][ T30] audit: type=1326 audit(1777278701.969:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.3.15838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f4ac6d9c819 code=0x7ffc0000 [ 1477.534771][ T30] audit: type=1326 audit(1777278701.969:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.3.15838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac6d9c819 code=0x7ffc0000 [ 1477.605836][T11342] loop2: detected capacity change from 0 to 512 [ 1477.678687][T11342] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1477.680183][ T30] audit: type=1326 audit(1777278701.969:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11327 comm="syz.3.15838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ac6d9c819 code=0x7ffc0000 [ 1477.718610][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1477.759661][ T9] usb 6-1: selecting invalid altsetting 0 [ 1477.788253][T11342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1477.805561][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15847'. [ 1477.815221][T11350] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15847'. [ 1477.857948][T11342] System zones: 1-12 [ 1477.873817][T11342] EXT4-fs (loop2): 1 truncate cleaned up [ 1477.929585][T11342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1478.100119][ T6060] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1478.220693][ T9] snd-usb-audio 6-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 1478.266395][ T5837] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 1478.273529][ T6060] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1478.292844][ T9] usb 6-1: USB disconnect, device number 108 [ 1478.361555][ T6060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.372187][ T5837] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1478.399289][ T6060] usb 1-1: Product: syz [ 1478.405094][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.415441][ T6060] usb 1-1: Manufacturer: syz [ 1478.452721][ T6060] usb 1-1: SerialNumber: syz [ 1478.459421][ T5837] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 1478.488112][ T6060] usb 1-1: config 0 descriptor?? [ 1478.679781][T11370] loop6: detected capacity change from 0 to 1764 [ 1478.692856][T11372] loop3: detected capacity change from 0 to 64 [ 1479.081879][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.380103][ T6060] usb 1-1: USB disconnect, device number 9 [ 1479.545057][T23084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.673377][T11366] loop5: detected capacity change from 0 to 32768 [ 1479.695621][T11366] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.15857 (11366) [ 1479.777006][T11366] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1479.802099][T11366] BTRFS info (device loop5): using sha256 checksum algorithm [ 1479.980713][T11366] BTRFS info (device loop5): turning off barriers [ 1480.026963][T11366] BTRFS info (device loop5): enabling free space tree [ 1480.205582][T23084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.278206][ T6611] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1480.407504][T11385] loop9: detected capacity change from 0 to 32768 [ 1480.571835][T11385] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1480.713068][T23084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.727269][T11424] loop3: detected capacity change from 0 to 8 [ 1480.808960][T11385] XFS (loop9): Ending clean mount [ 1480.868845][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1480.895765][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1480.905561][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1480.920358][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1480.929689][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1480.945094][T11424] cramfs: bad data blocksize 3959421443 [ 1480.981376][T11424] cramfs: bad data blocksize 4294965915 [ 1481.028968][T11424] cramfs: bad data blocksize 802397048 [ 1481.074674][T11424] cramfs: bad data blocksize 4294742353 [ 1481.141419][T11427] lo: entered allmulticast mode [ 1481.146876][T11424] cramfs: bad data blocksize 3367320904 [ 1481.176386][T11424] cramfs: bad data blocksize 859179931 [ 1481.205149][T11424] cramfs: bad data blocksize 3436389781 [ 1481.231606][T11424] cramfs: bad data blocksize 4294365136 [ 1481.281832][T11426] wg0 speed is unknown, defaulting to 1000 [ 1481.292535][T11424] cramfs: bad data blocksize 4294967040 [ 1481.313487][T11424] cramfs: bad data blocksize 3959421443 [ 1481.347947][ T30] audit: type=1800 audit(1777278706.128:2415): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.15874" name="file2" dev="loop3" ino=268 res=0 errno=0 [ 1481.507609][ T2466] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1481.676889][T23084] team0: Port device netdevsim0 removed [ 1481.769418][T23084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.004780][T11439] loop6: detected capacity change from 0 to 4096 [ 1482.057972][T11444] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1482.555490][T11452] Zero length message leads to an empty skb [ 1482.753375][T11432] loop0: detected capacity change from 0 to 32768 [ 1482.800956][T11432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.15879 (11432) [ 1482.854645][T11432] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1482.944477][T11432] BTRFS info (device loop0): using sha256 checksum algorithm [ 1482.984155][ T5154] Bluetooth: hci2: command tx timeout [ 1483.008118][T11464] loop5: detected capacity change from 0 to 256 [ 1483.155510][T11464] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d) [ 1483.260735][T11432] BTRFS info (device loop0): rebuilding free space tree [ 1483.340811][T11432] BTRFS info (device loop0): enabling ssd optimizations [ 1483.366475][T11432] BTRFS info (device loop0): using spread ssd allocation scheme [ 1483.400169][T11432] BTRFS info (device loop0): turning on async discard [ 1483.447808][T11432] BTRFS info (device loop0): enabling free space tree [ 1483.502842][T11432] BTRFS info (device loop0): force clearing of disk cache [ 1483.575130][T11486] mkiss: ax0: crc mode is auto. [ 1483.816149][ T5836] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1483.985928][T11500] loop5: detected capacity change from 0 to 256 [ 1484.005927][T11500] exfat: Deprecated parameter 'namecase' [ 1484.073533][T11497] ALSA: seq fatal error: cannot create timer (-19) [ 1484.096688][T11500] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x544194fd, utbl_chksum : 0xe619d30d) [ 1484.102184][T11426] chnl_net:caif_netlink_parms(): no params data found [ 1484.817753][T11524] loop3: detected capacity change from 0 to 1024 [ 1484.938327][T23084] bridge_slave_1: left allmulticast mode [ 1484.965736][T23084] bridge_slave_1: left promiscuous mode [ 1485.008541][T23084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.062739][ T5154] Bluetooth: hci2: command tx timeout [ 1485.101225][T23084] bridge_slave_0: left allmulticast mode [ 1485.107168][T23084] bridge_slave_0: left promiscuous mode [ 1485.113601][T23084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.735997][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15915'. [ 1486.608359][T11531] loop0: detected capacity change from 0 to 40427 [ 1486.635726][T11531] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (0, 24) [ 1486.675375][T11531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1486.707557][T11531] F2FS-fs (loop0): build fault injection rate: 6 [ 1486.734921][T11531] F2FS-fs (loop0): build fault injection type: 0x1 [ 1486.758217][T11531] F2FS-fs (loop0): invalid crc value [ 1486.768550][T11531] F2FS-fs (loop0): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x491a/0x7740 [ 1486.813510][T11531] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-12) [ 1487.140361][ T5154] Bluetooth: hci2: command tx timeout [ 1487.148314][T23084]  (unregistering): (slave 70): Releasing backup interface [ 1487.204739][T23084]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.226657][T23084]  (unregistering): Released all slaves [ 1487.242120][T23084] bond1 (unregistering): Released all slaves [ 1487.292625][T23084] bond0 (unregistering): Released all slaves [ 1487.354094][T11558] loop3: detected capacity change from 0 to 32768 [ 1487.384683][T11558] (syz.3.15920,11558,1):ocfs2_verify_volume:2308 ERROR: bad block number on superblock: found 0, should be 2 [ 1487.388607][T11572] loop6: detected capacity change from 0 to 2048 [ 1487.409636][T11558] (syz.3.15920,11558,1):ocfs2_verify_volume:2331 ERROR: status = -22 [ 1487.424747][T11558] (syz.3.15920,11558,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1487.438954][T11575] loop9: detected capacity change from 0 to 512 [ 1487.477924][T11558] (syz.3.15920,11558,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1487.491763][T11575] EXT4-fs: Ignoring removed nobh option [ 1487.506221][T11575] EXT4-fs: Ignoring removed mblk_io_submit option [ 1487.523726][T11576] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1487.597354][ T5499] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1487.618380][T11572] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1487.643077][ T136] smbdirect: ib_dev[syz1] removed [ 1487.646131][T11575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1487.657429][T11558] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 1487.672463][T11575] ext4 filesystem being mounted at /568/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1487.703809][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15924'. [ 1487.744787][T11572] Remounting filesystem read-only [ 1487.890593][T11572] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 1487.962881][T11572] NILFS error (device loop6): nilfs_readdir: bad page in #2 [ 1488.097914][ T2466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.459360][T11596] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15934'. [ 1488.483913][T11426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.529336][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.563430][T11426] bridge_slave_0: entered allmulticast mode [ 1488.621483][T11426] bridge_slave_0: entered promiscuous mode [ 1488.654774][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.700068][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1488.718709][T11426] bridge_slave_1: entered allmulticast mode [ 1488.790112][T11426] bridge_slave_1: entered promiscuous mode [ 1488.795325][T11603] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1489.036063][T11606] tipc: Enabling of bearer rejected, failed to enable media [ 1489.220182][ T5154] Bluetooth: hci2: command tx timeout [ 1489.288534][T11426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.362490][T11426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.685419][T11628] loop3: detected capacity change from 0 to 2048 [ 1489.725681][T11426] team0: Port device team_slave_0 added [ 1489.788275][T11426] team0: Port device team_slave_1 added [ 1489.829215][T11594] loop9: detected capacity change from 0 to 32768 [ 1489.896272][T11594] JBD2: Ignoring recovery information on journal [ 1489.938635][T11628] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 1490.150538][T11594] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1490.185880][T11642] loop0: detected capacity change from 0 to 4096 [ 1490.309957][T11642] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1490.394641][T11426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1490.415336][T11642] ntfs3(loop0): Failed to load $Extend (-22). [ 1490.435582][T11426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.487679][T11642] ntfs3(loop0): Failed to initialize $Extend. [ 1490.565756][T11426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1490.587038][ T2466] ocfs2: Unmounting device (7,9) on (node local) [ 1490.714716][T11426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.765866][T11426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.893916][T11426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.270665][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1491.352925][T11673] loop5: detected capacity change from 0 to 8 [ 1491.353746][T11669] loop0: detected capacity change from 0 to 2048 [ 1491.410948][T11669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1491.456638][T11673] SQUASHFS error: Unable to read directory block [2c0:35] [ 1491.471430][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1491.494075][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1491.548965][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1491.583615][T11426] hsr_slave_0: entered promiscuous mode [ 1491.612746][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1491.619149][T11426] hsr_slave_1: entered promiscuous mode [ 1491.667019][T11426] debugfs: 'hsr0' already exists in 'hsr' [ 1491.669214][ T9] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8 [ 1491.703587][T11426] Cannot create hsr debugfs directory [ 1491.752527][ T9] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 128 [ 1491.804542][ T9] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1491.827938][ T5499] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1491.845004][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.874712][ T9] usb 10-1: Product: syz [ 1491.896091][ T9] usb 10-1: Manufacturer: syz [ 1491.912893][ T9] usb 10-1: SerialNumber: syz [ 1491.943555][ T9] usb 10-1: config 0 descriptor?? [ 1491.955232][T11662] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1491.968440][ T9] kvaser_usb 10-1:0.0: error -EPROTO: Cannot get software info [ 1491.987050][ T9] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -71 [ 1492.087551][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15966'. [ 1492.216995][T11676] wg0 speed is unknown, defaulting to 1000 [ 1492.247954][ T9] usb 10-1: USB disconnect, device number 14 [ 1492.359024][T23084] hsr_slave_0: left promiscuous mode [ 1492.375420][T23084] hsr_slave_1: left promiscuous mode [ 1492.388934][T23084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1492.398263][T23084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1492.405808][T11692] loop5: detected capacity change from 0 to 512 [ 1492.436843][T11692] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1492.460190][T11692] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1492.495160][T11698] loop0: detected capacity change from 0 to 256 [ 1492.506037][T11692] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.15970: Corrupt directory, running e2fsck is recommended [ 1492.510043][T23084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1492.549092][T11692] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1492.568211][T23084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1492.576303][T11692] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.15970: corrupted in-inode xattr: e_name out of bounds [ 1492.590425][T11692] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1492.592409][T11692] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.15970: couldn't read orphan inode 15 (err -117) [ 1492.601591][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1492.601617][ C1] EXT4-fs (loop5): initial error at time 1777278717: ext4_iget_extra_inode:5128: inode 15 [ 1492.601657][ C1] EXT4-fs (loop5): last error at time 1777278717: ext4_iget_extra_inode:5128: inode 15 [ 1492.672165][T23084] veth0_macvtap: left promiscuous mode [ 1492.716749][T11692] loop5: lost filesystem error report for type 5 error -117 [ 1492.729605][T11692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1492.813140][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.969557][T11700] loop0: detected capacity change from 0 to 4096 [ 1492.992160][T11700] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1493.075972][T11700] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1493.482112][T23084] team0 (unregistering): Port device team_slave_1 removed [ 1493.532957][T11711] loop0: detected capacity change from 0 to 64 [ 1493.545144][T23084] team0 (unregistering): Port device team_slave_0 removed [ 1493.625171][T11702] loop9: detected capacity change from 0 to 32768 [ 1493.642813][T11702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.15974 (11702) [ 1493.688817][T11702] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1493.727256][T11702] BTRFS info (device loop9): using sha256 checksum algorithm [ 1493.844462][T11702] BTRFS info (device loop9): enabling ssd optimizations [ 1493.878663][T11702] BTRFS info (device loop9): turning on async discard [ 1493.909374][T11702] BTRFS info (device loop9): enabling free space tree [ 1493.994202][T11732] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1494.035666][ T2466] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1495.299601][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15988'. [ 1495.350359][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15988'. [ 1495.648624][T11736] set_capacity_and_notify: 1 callbacks suppressed [ 1495.648645][T11736] loop9: detected capacity change from 0 to 32768 [ 1495.699777][T11756] xt_hashlimit: size too large, truncated to 1048576 [ 1495.788157][T11763] loop6: detected capacity change from 0 to 256 [ 1495.819718][T11736] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1495.831069][T11763] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1495.966034][T11736] XFS (loop9): Ending clean mount [ 1495.995671][T11768] loop0: detected capacity change from 0 to 2048 [ 1496.030195][T11736] XFS (loop9): Quotacheck needed: Please wait. [ 1496.051773][T11768] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1496.162061][T11768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1496.589241][T11777] loop0: detected capacity change from 0 to 128 [ 1496.762960][T11736] XFS (loop9): Quotacheck: Done. [ 1497.069239][ T2466] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1497.301438][ T5154] Bluetooth: hci2: command tx timeout [ 1498.332735][T11821] loop9: detected capacity change from 0 to 128 [ 1498.362715][ T5499] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1498.433310][T11817] loop0: detected capacity change from 0 to 4096 [ 1498.469457][T11821] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1498.488673][T11821] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1498.507809][T11817] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1498.619984][T11817] ntfs3(loop0): ino=18, mi_enum_attr [ 1498.632106][T11817] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1498.677637][ T2466] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1498.873595][T11828] loop6: detected capacity change from 0 to 256 [ 1498.917985][T11828] exfat: Deprecated parameter 'namecase' [ 1498.961351][T11828] exfat: Deprecated parameter 'namecase' [ 1499.036484][T11828] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1499.285877][T11835] loop3: detected capacity change from 0 to 4096 [ 1499.439152][T11841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1500.010683][ T803] kernel write not supported for file /uinput (pid: 803 comm: kworker/1:2) [ 1500.067663][T11857] mkiss: ax0: crc mode is auto. [ 1500.124702][T11865] loop0: detected capacity change from 0 to 512 [ 1500.189830][T11865] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1500.266145][T11865] EXT4-fs (loop0): 1 orphan inode deleted [ 1500.306644][T11865] EXT4-fs (loop0): 1 truncate cleaned up [ 1500.356147][T11865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1500.387700][T11426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1500.454210][T11865] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.0.16026: path /2770/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1500.553006][T11865] EXT4-fs (loop0): Remounting filesystem read-only [ 1500.790186][T11426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1500.794919][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1500.807381][T11426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1500.903624][T11426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1500.929994][ T5499] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1500.958620][T11426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1500.999984][T11426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1501.064177][T11426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1501.108538][T11426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1501.338601][T11904] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.16037'. [ 1501.460278][T11901] loop5: detected capacity change from 0 to 4096 [ 1501.505470][T11901] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1501.629873][T11901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.636887][T11426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.667023][T11426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1501.709308][T23071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.716551][T23071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.768963][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.776311][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.972923][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1502.050687][T11920] netlink: 'syz.9.16042': attribute type 29 has an invalid length. [ 1502.094731][T11920] netlink: 'syz.9.16042': attribute type 29 has an invalid length. [ 1502.106109][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.130715][T11923] netlink: 'syz.6.16044': attribute type 13 has an invalid length. [ 1502.162244][ T5914] usb 1-1: Using ep0 maxpacket: 16 [ 1502.184248][ T5914] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1502.260067][ T5914] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.309788][ T5914] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1502.385770][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1502.406878][ T30] audit: type=1326 audit(1777278727.206:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbad9c819 code=0x7ffc0000 [ 1502.439017][ T5914] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1502.462358][T11930] loop9: detected capacity change from 0 to 512 [ 1502.485011][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.498337][ T30] audit: type=1326 audit(1777278727.206:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbad9c819 code=0x7ffc0000 [ 1502.574451][ T5914] usb 1-1: config 0 descriptor?? [ 1502.613268][T11930] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1502.620553][ T30] audit: type=1326 audit(1777278727.216:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbad9c819 code=0x7ffc0000 [ 1502.652525][ T30] audit: type=1326 audit(1777278727.216:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6dbad9c819 code=0x7ffc0000 [ 1502.676730][ T30] audit: type=1326 audit(1777278727.216:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6dbad9c582 code=0x7ffc0000 [ 1502.699435][ T30] audit: type=1326 audit(1777278727.226:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dbad9c819 code=0x7ffc0000 [ 1502.726770][ T30] audit: type=1326 audit(1777278727.236:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6dbad5d04e code=0x7ffc0000 [ 1502.730381][T11930] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.750504][ T30] audit: type=1326 audit(1777278727.246:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6dbad9c647 code=0x7ffc0000 [ 1502.784708][ T30] audit: type=1326 audit(1777278727.256:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dbad5d04e code=0x7ffc0000 [ 1502.820777][ T30] audit: type=1326 audit(1777278727.256:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.9.16046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6dbad9c4ab code=0x7ffc0000 [ 1503.022119][ T5914] hid (null): invalid report_count 438683788 [ 1503.046180][ T5914] hid (null): invalid report_size 8049 [ 1503.047698][ T2466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.061617][ T5914] hid (null): unknown global tag 0xe [ 1503.068471][ T5914] hid (null): unknown global tag 0xd [ 1503.082909][ T5914] hid (null): invalid report_count 46221 [ 1503.095975][ T5914] hid (null): unknown global tag 0xc [ 1503.113311][ T5914] hid (null): unknown global tag 0x10 [ 1503.121067][ T5914] hid (null): unknown global tag 0xd [ 1503.266748][ T5914] usb 1-1: USB disconnect, device number 10 [ 1503.345293][T11942] loop9: detected capacity change from 0 to 128 [ 1503.389990][T11942] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1503.424307][T11921] loop3: detected capacity change from 0 to 32768 [ 1503.424340][T11942] ext4 filesystem being mounted at /585/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1503.486952][T11921] JBD2: Ignoring recovery information on journal [ 1503.619595][T11921] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1503.643946][ T2466] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1504.087504][ T5838] ocfs2: Unmounting device (7,3) on (node local) [ 1504.917837][T11923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.961080][T11923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.113560][T11996] netlink: 47 bytes leftover after parsing attributes in process `syz.0.16055'. [ 1505.244213][T11966] loop9: detected capacity change from 0 to 32768 [ 1505.266792][T11966] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1505.362586][T11966] XFS (loop9): Ending clean mount [ 1505.388134][T11966] XFS (loop9): Quotacheck needed: Please wait. [ 1505.592518][T11966] XFS (loop9): Quotacheck: Done. [ 1505.680259][ T2466] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1506.245622][ T2470] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.293375][ T2470] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.348388][ T2470] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.406236][ T2470] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.577308][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16060'. [ 1506.591420][T12026] trusted_key: encrypted_key: insufficient parameters specified [ 1506.693991][T11426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.906974][T12038] tipc: Invalid UDP bearer configuration [ 1506.907030][T12038] tipc: Enabling of bearer rejected, failed to enable media [ 1507.329867][T12052] loop0: detected capacity change from 0 to 128 [ 1507.361374][T12052] EXT4-fs: Ignoring removed nobh option [ 1507.400175][T12052] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1507.436834][T12052] ext4 filesystem being mounted at /2782/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1507.476058][T12021] loop6: detected capacity change from 0 to 32768 [ 1507.493349][T12021] (syz.6.16057,12021,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1507.522988][T12021] (syz.6.16057,12021,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1507.556526][ T5836] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1507.627242][T12021] JBD2: Ignoring recovery information on journal [ 1507.873413][T12021] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1507.975653][T12072] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16074'. [ 1508.053552][T11426] veth0_vlan: entered promiscuous mode [ 1508.114395][T12078] netlink: 48 bytes leftover after parsing attributes in process `syz.9.16075'. [ 1508.144117][T11426] veth1_vlan: entered promiscuous mode [ 1508.172443][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1508.172465][ T30] audit: type=1400 audit(1777278732.966:2441): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A611162 pid=12079 comm="syz.5.16076" [ 1508.407511][T16598] ocfs2: Unmounting device (7,6) on (node local) [ 1508.499763][T12078] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1508.527661][T12078] bond2 (unregistering): Released all slaves [ 1508.718792][T11964] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1508.743036][T11426] veth0_macvtap: entered promiscuous mode [ 1508.787673][T11426] veth1_macvtap: entered promiscuous mode [ 1508.883962][T11426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.904888][T12097] loop0: detected capacity change from 0 to 512 [ 1508.927178][T11964] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1508.952687][T11964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.987236][T12097] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1508.998033][T11964] usb 6-1: Product: syz [ 1509.014949][T12097] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1509.027150][T11426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.038248][T11964] usb 6-1: Manufacturer: syz [ 1509.058963][T11964] usb 6-1: SerialNumber: syz [ 1509.090881][T12097] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.16082: bad orphan inode 131083 [ 1509.136671][T11964] usb 6-1: config 0 descriptor?? [ 1509.164400][T12097] loop0: lost filesystem error report for type 5 error -117 [ 1509.187393][T12097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.213147][T11964] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1509.252613][ T136] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.275893][T11964] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1509.292968][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.324001][T11964] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1509.346683][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.367401][T11964] usb 6-1: media controller created [ 1509.386662][ T136] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.490559][T11964] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1509.519696][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.799620][T23076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.817032][T12091] loop6: detected capacity change from 0 to 32768 [ 1509.842440][T12116] xt_cgroup: invalid path, errno=-2 [ 1509.845113][T23076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.859057][T12091] BTRFS info: device /dev/loop6 (7:6) using temp-fsid a5b2a8af-5f14-451d-8fe5-39db956e6d1f [ 1509.892039][T11964] DVB: Unable to find symbol mt352_attach() [ 1509.914793][T12091] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16077 (12091) [ 1510.031592][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.065591][T12091] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1510.084895][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.138991][T12091] BTRFS info (device loop6): using crc32c checksum algorithm [ 1510.170854][T11964] DVB: Unable to find symbol nxt6000_attach() [ 1510.240431][T11964] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1510.274173][T12132] loop0: detected capacity change from 0 to 256 [ 1510.275411][T11964] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input87 [ 1510.308041][T11964] dvb-usb: schedule remote query interval to 1000 msecs. [ 1510.332698][T11964] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1510.362038][T11964] dvb-usb: bulk message failed: -22 (7/0) [ 1510.370791][T11964] dvb-usb: bulk message failed: -22 (7/0) [ 1510.387471][T11964] usb 6-1: USB disconnect, device number 109 [ 1510.456569][T12091] BTRFS info (device loop6): enabling ssd optimizations [ 1510.501114][T12091] BTRFS info (device loop6): turning on flush-on-commit [ 1510.534819][T12132] FAT-fs (loop0): Directory bread(block 64) failed [ 1510.550879][T12091] BTRFS info (device loop6): enabling free space tree [ 1510.584563][T12132] FAT-fs (loop0): Directory bread(block 65) failed [ 1510.599334][T12091] BTRFS info (device loop6): enabling auto defrag [ 1510.624884][T12132] FAT-fs (loop0): Directory bread(block 66) failed [ 1510.646976][T12091] BTRFS info (device loop6): use lzo compression, level 1 [ 1510.667262][T12132] FAT-fs (loop0): Directory bread(block 67) failed [ 1510.693613][T12091] BTRFS info (device loop6): max_inline set to 4096 [ 1510.709353][T12132] FAT-fs (loop0): Directory bread(block 68) failed [ 1510.748677][T11964] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1510.748768][T12132] FAT-fs (loop0): Directory bread(block 69) failed [ 1510.841356][T12132] FAT-fs (loop0): Directory bread(block 70) failed [ 1510.871094][T12132] FAT-fs (loop0): Directory bread(block 71) failed [ 1510.907631][T12132] FAT-fs (loop0): Directory bread(block 72) failed [ 1510.972032][T12132] FAT-fs (loop0): Directory bread(block 73) failed [ 1511.043011][T12152] kAFS: unable to lookup cell 'էKyy [ 1511.043011][T12152] [ 1511.043011][T12152] =6%*;eܲ5;Z*d{iElZSjUF/k!btF\_vfVnDPPB1%A)X\YT"8ώdJ_.5d#ۜhGp6"5ͺ*,ImI-(WA?WZ)n[qG jnڇ%(J-%ؘccʵ{|6ZA5k@a+oST;]5 !G3{K,' [ 1511.191712][T16598] BTRFS info (device loop6): last unmount of filesystem a5b2a8af-5f14-451d-8fe5-39db956e6d1f [ 1511.726331][T12121] loop9: detected capacity change from 0 to 32768 [ 1511.796453][T12121] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1512.108539][T12121] XFS (loop9): Ending clean mount [ 1512.161720][T12121] XFS (loop9): Quotacheck needed: Please wait. [ 1512.567275][T12121] XFS (loop9): Quotacheck: Done. [ 1512.694723][T12198] netlink: 'syz.5.16107': attribute type 29 has an invalid length. [ 1512.725672][T12198] netlink: 'syz.5.16107': attribute type 29 has an invalid length. [ 1512.809344][ T2466] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1513.027591][T12201] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1513.027591][T12201] program syz.5.16109 not setting count and/or reply_len properly [ 1513.358003][T12161] loop3: detected capacity change from 0 to 32768 [ 1513.388780][T12161] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16097 (12161) [ 1513.484616][T12161] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1513.520672][T12161] BTRFS info (device loop3): using sha256 checksum algorithm [ 1513.590364][T12186] loop6: detected capacity change from 0 to 32768 [ 1513.641967][T12216] netlink: 'syz.9.16108': attribute type 2 has an invalid length. [ 1513.713509][T12216] : entered promiscuous mode [ 1513.903582][T12186] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1514.023887][T12161] BTRFS info (device loop3): enabling ssd optimizations [ 1514.042522][T12161] BTRFS info (device loop3): turning on async discard [ 1514.099739][T12186] XFS (loop6): Ending clean mount [ 1514.124086][T12161] BTRFS info (device loop3): enabling free space tree [ 1514.259526][T12192] loop4: detected capacity change from 0 to 32768 [ 1514.351556][T12246] BTRFS warning (device loop3): get dev_stats failed, device not found [ 1514.366462][T12192] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 029bbbf9-c3ad-4305-8102-32e20fb86c61 [ 1514.403146][T12192] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16105 (12192) [ 1514.542000][T12192] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1514.610618][T12192] BTRFS info (device loop4): using crc32c checksum algorithm [ 1514.718423][T16598] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1514.818817][T12272] netlink: 432 bytes leftover after parsing attributes in process `syz.9.16119'. [ 1515.031533][T12192] BTRFS info (device loop4): enabling ssd optimizations [ 1515.093529][T12192] BTRFS info (device loop4): turning on flush-on-commit [ 1515.136298][T12192] BTRFS info (device loop4): enabling free space tree [ 1515.187777][T12192] BTRFS info (device loop4): enabling auto defrag [ 1515.234390][T12192] BTRFS info (device loop4): use lzo compression, level 1 [ 1515.275012][T12283] xt_connbytes: Forcing CT accounting to be enabled [ 1515.319651][T12192] BTRFS info (device loop4): max_inline set to 4096 [ 1515.333127][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1515.628598][T11426] BTRFS info (device loop4): last unmount of filesystem 029bbbf9-c3ad-4305-8102-32e20fb86c61 [ 1515.815662][T12294] xt_hashlimit: size too large, truncated to 1048576 [ 1516.010569][T12293] wg0 speed is unknown, defaulting to 1000 [ 1516.643056][T12320] loop3: detected capacity change from 0 to 256 [ 1516.779133][T12320] FAT-fs (loop3): Directory bread(block 64) failed [ 1516.794167][T12000] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1516.809426][T12320] FAT-fs (loop3): Directory bread(block 65) failed [ 1516.841300][T12320] FAT-fs (loop3): Directory bread(block 66) failed [ 1516.892179][T12320] FAT-fs (loop3): Directory bread(block 67) failed [ 1516.934079][T12320] FAT-fs (loop3): Directory bread(block 68) failed [ 1516.966209][T12320] FAT-fs (loop3): Directory bread(block 69) failed [ 1516.983126][T12000] usb 1-1: Using ep0 maxpacket: 16 [ 1517.003164][T12320] FAT-fs (loop3): Directory bread(block 70) failed [ 1517.005374][T12000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.037839][T12320] FAT-fs (loop3): Directory bread(block 71) failed [ 1517.072961][T12320] FAT-fs (loop3): Directory bread(block 72) failed [ 1517.076447][T12000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.094959][T12320] FAT-fs (loop3): Directory bread(block 73) failed [ 1517.128168][T12000] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1517.191386][T12000] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1517.238017][T12000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.321606][T12000] usb 1-1: config 0 descriptor?? [ 1517.371271][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16140'. [ 1517.597893][T12344] sp0: Synchronizing with TNC [ 1517.790477][T12000] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 1517.841062][T12350] binder: 12349:12350 ioctl c0306201 200000000540 returned -22 [ 1518.163149][T12358] loop6: detected capacity change from 0 to 65 [ 1518.436577][ T804] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1518.457003][T12358] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1518.491070][T12000] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1518.536122][T12000] microsoft 0003:045E:07DA.0002: no inputs found [ 1518.600906][T12000] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 1518.673076][ T804] usb 10-1: Using ep0 maxpacket: 32 [ 1518.702545][T12000] usb 1-1: USB disconnect, device number 11 [ 1518.721178][ T804] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.784628][ T804] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.870623][ T804] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1518.914445][ T804] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1518.967714][T12375] loop4: detected capacity change from 0 to 1024 [ 1518.986306][ T804] usb 10-1: Product: syz [ 1519.002269][T12367] fido_id[12367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1519.018772][ T804] usb 10-1: Manufacturer: syz [ 1519.107196][ T804] hub 10-1:4.0: USB hub found [ 1519.194173][T12375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1519.248923][T12375] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.331196][ T804] hub 10-1:4.0: 9 ports detected [ 1519.346686][ T804] hub 10-1:4.0: insufficient power available to use all downstream ports [ 1519.392247][T12375] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.16153: bg 0: block 112: padding at end of block bitmap is not set [ 1519.492259][T12375] EXT4-fs (loop4): Remounting filesystem read-only [ 1519.528860][ T136] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 3: len 3: ext4_ext_map_blocks returned -30 [ 1519.591217][ T804] hub 10-1:4.0: hub_hub_status failed (err = -71) [ 1519.626449][ T804] hub 10-1:4.0: config failed, can't get hub status (err -71) [ 1519.754708][ T804] usb 10-1: USB disconnect, device number 15 [ 1519.797169][T11426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1520.482365][T12381] loop6: detected capacity change from 0 to 32768 [ 1520.561682][T12422] xt_hashlimit: size too large, truncated to 1048576 [ 1520.596153][T12381] ea_get: invalid extended attribute [ 1520.605794][T12420] wg0 speed is unknown, defaulting to 1000 [ 1520.707143][T12381] ffff888056c294d8: 04 00 00 00 .... [ 1521.172853][T12423] ea_get: invalid extended attribute [ 1521.209443][T12423] ffff888056c294d8: 04 00 00 00 .... [ 1522.397460][T12429] loop5: detected capacity change from 0 to 32768 [ 1522.748674][T12486] loop9: detected capacity change from 0 to 1024 [ 1522.798925][T12486] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1522.855473][T12483] loop3: detected capacity change from 0 to 4096 [ 1522.901308][T12483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1522.988751][T12483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.165941][T12483] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1523.372899][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.411689][T12507] IPVS: Unknown mcast interface: pimreg0 [ 1523.639025][T12515] loop5: detected capacity change from 0 to 16 [ 1523.667975][T12516] netlink: 'syz.3.16202': attribute type 1 has an invalid length. [ 1523.685886][T12515] erofs (device loop5): mounted with root inode @ nid 36. [ 1523.786211][ T30] audit: type=1800 audit(1777278748.584:2442): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16204" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 1524.038332][T12498] loop4: detected capacity change from 0 to 32768 [ 1524.925935][T12509] loop0: detected capacity change from 0 to 32768 [ 1524.990999][T12549] netlink: 'syz.4.16214': attribute type 1 has an invalid length. [ 1525.022045][T12509] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1525.147192][T12509] XFS (loop0): Ending clean mount [ 1525.181883][T12509] XFS (loop0): Quotacheck needed: Please wait. [ 1525.202471][T12513] loop9: detected capacity change from 0 to 32768 [ 1525.242871][T12540] loop3: detected capacity change from 0 to 4096 [ 1525.261529][T12513] BTRFS info: device /dev/loop9 (7:9) using temp-fsid 0a521cfb-bed4-4741-a1b7-7fc4a0d8d446 [ 1525.315995][T12513] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.16203 (12513) [ 1525.395643][T12540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.523029][T12518] loop6: detected capacity change from 0 to 32768 [ 1525.553560][T12513] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1525.575093][T12518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.16205 (12518) [ 1525.648396][T12513] BTRFS info (device loop9): using crc32c checksum algorithm [ 1525.676344][T12509] XFS (loop0): Quotacheck: Done. [ 1525.689544][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.704498][T12518] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1525.801747][T12518] BTRFS info (device loop6): using sha256 checksum algorithm [ 1525.983287][ T5836] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1525.998787][T12513] BTRFS info (device loop9): enabling ssd optimizations [ 1526.051553][T12513] BTRFS info (device loop9): turning on async discard [ 1526.093624][T12513] BTRFS info (device loop9): enabling free space tree [ 1526.157547][T12597] loop3: detected capacity change from 0 to 1024 [ 1526.165058][T12597] EXT4-fs: inline encryption not supported [ 1526.192190][T12518] BTRFS info (device loop6): enabling ssd optimizations [ 1526.236576][T12597] EXT4-fs (loop3): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1526.245804][T12518] BTRFS info (device loop6): turning on async discard [ 1526.274504][T12538] loop5: detected capacity change from 0 to 32768 [ 1526.320193][T12518] BTRFS info (device loop6): enabling free space tree [ 1526.351605][ T30] audit: type=1800 audit(1777278751.134:2443): pid=12513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.16203" name="file1" dev="loop9" ino=260 res=0 errno=0 [ 1526.368587][T12597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1526.675960][ T2466] BTRFS info (device loop9): last unmount of filesystem 0a521cfb-bed4-4741-a1b7-7fc4a0d8d446 [ 1526.960964][T12612] loop5: detected capacity change from 0 to 128 [ 1527.005738][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1527.036205][T12612] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1527.110841][T12612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1527.231816][T16598] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1527.246725][T12617] netlink: 'syz.9.16224': attribute type 62 has an invalid length. [ 1527.528109][T12626] loop4: detected capacity change from 0 to 256 [ 1527.725593][T12626] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 1527.775725][T12622] loop3: detected capacity change from 0 to 4096 [ 1527.946525][T12622] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1528.081698][T12622] ntfs3(loop3): Failed to load $Extend (-22). [ 1528.156153][T12622] ntfs3(loop3): Failed to initialize $Extend. [ 1528.302837][ T30] audit: type=1800 audit(1777278753.084:2444): pid=12622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.16227" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 1528.480192][T12650] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 1528.573871][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16236'. [ 1529.420067][T12674] set_capacity_and_notify: 1 callbacks suppressed [ 1529.420088][T12674] loop4: detected capacity change from 0 to 2048 [ 1529.507053][T12679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1529.555294][T11967] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1529.796702][T11967] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.827061][T11967] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1529.877287][T11967] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1529.889377][T11967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1529.898059][T11967] usb 10-1: SerialNumber: syz [ 1530.113929][T11994] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1530.142191][T12693] Bluetooth: MGMT ver 1.23 [ 1530.311116][T11967] usb 10-1: 0:2 : does not exist [ 1530.326350][T11994] usb 4-1: Using ep0 maxpacket: 8 [ 1530.350887][T11994] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 137, using maximum allowed: 30 [ 1530.402478][T11994] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.466132][T11994] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 137 [ 1530.500644][T12701] loop5: detected capacity change from 0 to 256 [ 1530.510977][T11994] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1530.529529][T12701] exfat: Deprecated parameter 'namecase' [ 1530.543571][T11994] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1530.553687][T11967] usb 10-1: USB disconnect, device number 16 [ 1530.586362][T11994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.616984][T12701] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x20641574, utbl_chksum : 0xe619d30d) [ 1530.656637][T11994] usb 4-1: config 0 descriptor?? [ 1530.688086][ T6101] udevd[6101]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1531.187051][T12716] loop9: detected capacity change from 0 to 1024 [ 1531.290089][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.313555][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.317360][T12716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1531.338054][ T804] hid-generic 0005:5B44:0004.0004: unknown main item tag 0x0 [ 1531.347364][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.362592][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.371255][ T804] hid-generic 0005:5B44:0004.0004: unknown main item tag 0x0 [ 1531.378870][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.386100][ T804] hid-generic 0005:5B44:0004.0004: unknown main item tag 0x0 [ 1531.396441][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.405092][T11994] waltop 0003:172F:0500.0003: unknown main item tag 0x0 [ 1531.488001][ T804] hid-generic 0005:5B44:0004.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 1531.501779][T11994] waltop 0003:172F:0500.0003: hidraw1: USB HID vff.fc Device [HID 172f:0500] on usb-dummy_hcd.3-1/input0 [ 1531.610212][T11994] usb 4-1: USB disconnect, device number 31 [ 1531.745640][ T2466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.859458][T12697] loop0: detected capacity change from 0 to 32768 [ 1531.871283][T12725] fido_id[12725]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1531.938950][T12727] fido_id[12727]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1532.033497][T12697] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1532.415537][T12709] loop4: detected capacity change from 0 to 32768 [ 1532.456177][T12709] BTRFS warning: excessive commit interval 65536, use with care [ 1532.502516][T12752] loop6: detected capacity change from 0 to 256 [ 1532.513691][T12709] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16259 (12709) [ 1532.538554][T12752] exfat: Deprecated parameter 'utf8' [ 1532.558969][T12755] loop3: detected capacity change from 0 to 512 [ 1532.570339][ T5836] ocfs2: Unmounting device (7,0) on (node local) [ 1532.583908][T12752] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1532.642745][T12755] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1532.670676][T12709] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1532.723167][T12709] BTRFS info (device loop4): using sha256 checksum algorithm [ 1532.725971][T12757] pim6reg: entered allmulticast mode [ 1532.989181][T12709] BTRFS info (device loop4): enabling ssd optimizations [ 1533.053285][T12709] BTRFS info (device loop4): turning on async discard [ 1533.100966][T12709] BTRFS info (device loop4): enabling free space tree [ 1533.401324][T12787] loop6: detected capacity change from 0 to 8 [ 1533.433789][T12787] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1533.502313][ T6108] udevd[6108]: incorrect cramfs checksum on /dev/loop6 [ 1533.936247][T12750] loop5: detected capacity change from 0 to 40427 [ 1533.979700][T12750] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1534.022354][T12750] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1534.080947][T12750] F2FS-fs (loop5): invalid crc value [ 1534.404397][ T804] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1534.502376][T12750] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1534.550777][T12750] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1534.581906][T12750] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1534.607497][ T804] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.658541][ T804] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1534.706718][ T804] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1534.736175][ T804] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1534.772084][ T804] usb 7-1: Product: syz [ 1534.772999][T11426] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1534.792807][ T804] usb 7-1: Manufacturer: syz [ 1534.809205][ T57] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 1534.828317][ T804] usb 7-1: SerialNumber: syz [ 1534.859801][ T804] usb 7-1: config 0 descriptor?? [ 1535.158701][T12000] usb 7-1: USB disconnect, device number 46 [ 1535.368980][T12836] Bluetooth: MGMT ver 1.23 [ 1535.738451][T12841] loop9: detected capacity change from 0 to 256 [ 1535.786180][T12841] exfat: Deprecated parameter 'namecase' [ 1535.854487][T12841] exfat: Deprecated parameter 'utf8' [ 1535.856695][T12843] loop3: detected capacity change from 0 to 1024 [ 1535.916779][T12843] EXT4-fs: Ignoring removed bh option [ 1535.941332][T12841] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1536.018436][T12843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.171108][T12843] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.16298: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1536.277066][T12843] EXT4-fs (loop3): Remounting filesystem read-only [ 1536.492255][ T5838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.664101][T12865] loop4: detected capacity change from 0 to 64 [ 1537.007863][T12877] loop6: detected capacity change from 0 to 128 [ 1537.051743][T12877] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1537.760172][T12908] loop5: detected capacity change from 0 to 128 [ 1537.818995][T12908] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1537.880265][T12908] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1538.414324][T23071] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1538.697667][T12944] loop6: detected capacity change from 0 to 1024 [ 1538.901867][T12952] loop5: detected capacity change from 0 to 256 [ 1538.958810][T12952] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1538.995802][ T30] audit: type=1800 audit(1777278763.793:2445): pid=12952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16336" name="file1" dev="loop5" ino=1048899 res=0 errno=0 [ 1539.028778][T12952] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 1539.051188][T12952] FAT-fs (loop5): Filesystem has been set read-only [ 1539.223648][T12959] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16340'. [ 1539.561617][T12972] loop4: detected capacity change from 0 to 2048 [ 1539.623033][T12972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.821936][T12972] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1539.861007][T12991] loop9: detected capacity change from 0 to 1024 [ 1539.906454][ T30] audit: type=1326 audit(1777278764.693:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12994 comm="syz.0.16354" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd81399c819 code=0x0 [ 1539.961313][T12998] loop6: detected capacity change from 0 to 1024 [ 1539.981973][T12991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.995263][T12991] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.003225][T12998] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1540.098202][T11426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.204653][T12991] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.16352: bg 0: block 3: invalid block bitmap [ 1540.255842][T12991] EXT4-fs (loop9): Remounting filesystem read-only [ 1540.367795][ T136] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:5075: inode #15: block 3: len 3: ext4_ext_map_blocks returned -30 [ 1540.670958][ T2466] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1541.032405][T13033] loop0: detected capacity change from 0 to 128 [ 1541.111326][T13033] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1541.197841][T13033] hpfs: filesystem error: improperly stopped [ 1541.229631][T13033] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1541.286856][T13033] hpfs: You really don't want any checks? You are crazy... [ 1541.311058][T13033] hpfs: hpfs_map_sector(): read error [ 1541.343723][T13033] hpfs: code page support is disabled [ 1541.386790][T13033] hpfs: hpfs_map_4sectors(): unaligned read [ 1541.417109][T13033] hpfs: hpfs_map_4sectors(): unaligned read [ 1541.445130][T13033] hpfs: filesystem error: unable to find root dir [ 1541.495301][ T6066] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1541.613861][T13052] loop4: detected capacity change from 0 to 128 [ 1541.672248][T13052] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1541.708912][ T6066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.721517][T13052] hpfs: filesystem error: improperly stopped [ 1541.754651][T13052] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1541.777019][ T6066] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.807890][T13052] hpfs: You really don't want any checks? You are crazy... [ 1541.816566][ T6066] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1541.852903][T13059] loop0: detected capacity change from 0 to 8 [ 1541.859873][T13052] hpfs: hpfs_map_sector(): read error [ 1541.862752][ T6066] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.888250][T13052] hpfs: code page support is disabled [ 1541.903910][T13059] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1541.924022][ T6066] usb 10-1: config 0 descriptor?? [ 1541.925523][T13052] hpfs: hpfs_map_4sectors(): unaligned read [ 1541.942496][ T6108] udevd[6108]: incorrect cramfs checksum on /dev/loop0 [ 1541.972230][T13059] cramfs: Error -3 while decompressing! [ 1541.992311][T13052] hpfs: hpfs_map_4sectors(): unaligned read [ 1542.026897][T13052] hpfs: filesystem error: unable to find root dir [ 1542.070717][T13059] cramfs: ffffffff9a5fa3c8(26)->ffff888053c26000(4096) [ 1542.080789][ T6108] udevd[6108]: incorrect cramfs checksum on /dev/loop0 [ 1542.098997][T13059] cramfs: Error -3 while decompressing! [ 1542.104123][T13061] loop6: detected capacity change from 0 to 256 [ 1542.122263][ T6108] udevd[6108]: incorrect cramfs checksum on /dev/loop0 [ 1542.135323][T13059] cramfs: ffffffff9a5fa3e2(26)->ffff888051345000(4096) [ 1542.150048][T13059] cramfs: Error -3 while decompressing! [ 1542.161732][T13061] exfat: Deprecated parameter 'utf8' [ 1542.190983][T13059] cramfs: ffffffff9a5fa3c8(26)->ffff888053c26000(4096) [ 1542.212824][T13061] exfat: Deprecated parameter 'namecase' [ 1542.248134][T13061] exfat: Deprecated parameter 'namecase' [ 1542.263608][ T6108] udevd[6108]: incorrect cramfs checksum on /dev/loop0 [ 1542.301881][T13061] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1542.360071][T13035] loop3: detected capacity change from 0 to 32768 [ 1542.403227][T13035] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.16369 (13035) [ 1542.501001][T13035] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1542.564945][T13035] BTRFS info (device loop3): using sha256 checksum algorithm [ 1542.624235][ T6066] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71 [ 1542.736133][ T6066] usb 10-1: USB disconnect, device number 17 [ 1542.781142][T13035] BTRFS info (device loop3): enabling ssd optimizations [ 1542.798245][T13035] BTRFS info (device loop3): turning on async discard [ 1542.819809][T13035] BTRFS info (device loop3): enabling free space tree [ 1543.153731][T13092] loop0: detected capacity change from 0 to 2048 [ 1543.216767][T13054] loop5: detected capacity change from 0 to 32768 [ 1543.246991][T13097] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1543.254668][T13096] loop6: detected capacity change from 0 to 512 [ 1543.332087][T13054] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1543.354296][ T5838] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1543.442337][T13054] XFS (loop5): Ending clean mount [ 1543.458561][T13107] loop9: detected capacity change from 0 to 256 [ 1543.526924][T13107] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1543.653325][ T6611] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1543.865636][T13115] exFAT-fs (loop9): start_clu is invalid cluster(0xffffffff) [ 1544.239903][T13125] loop0: detected capacity change from 0 to 256 [ 1546.115660][T11967] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1546.242064][ T6066] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1546.297174][T11967] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1546.307699][T11967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.322109][T11967] usb 10-1: config 0 descriptor?? [ 1546.367174][T13141] loop0: detected capacity change from 0 to 32768 [ 1546.382149][T11967] cp210x 10-1:0.0: cp210x converter detected [ 1546.460360][ T6066] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 1546.470033][T13146] loop5: detected capacity change from 0 to 32768 [ 1546.482944][ T6066] usb 4-1: config 0 has no interface number 0 [ 1546.499961][ T6066] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 1546.518075][T13146] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.16405 (13146) [ 1546.575689][T13146] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1546.587286][ T6066] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.631794][T13146] BTRFS info (device loop5): using blake2b checksum algorithm [ 1546.702330][ T6066] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.734285][ T6066] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1546.770284][ T6066] usb 4-1: config 0 interface 16 has no altsetting 0 [ 1546.805688][ T6066] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1546.825903][T11967] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1546.933510][T13146] BTRFS info (device loop5): enabling ssd optimizations [ 1546.952599][ T6066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.971231][T13146] BTRFS info (device loop5): turning on async discard [ 1547.008153][T13146] BTRFS info (device loop5): enabling free space tree [ 1547.043308][T11967] usb 10-1: USB disconnect, device number 18 [ 1547.051316][ T6066] usb 4-1: config 0 descriptor?? [ 1547.106711][T11967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1547.180892][T13161] loop4: detected capacity change from 0 to 40427 [ 1547.204559][T11967] cp210x 10-1:0.0: device disconnected [ 1547.210263][ T30] audit: type=1800 audit(1777278771.992:2447): pid=13146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.16405" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 1547.263474][T13161] F2FS-fs (loop4): invalid crc value [ 1547.411445][ T6611] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1547.493539][T13203] netlink: 'syz.0.16419': attribute type 10 has an invalid length. [ 1547.507128][ T6066] uclogic 0003:5543:004D.0006: interface is invalid, ignoring [ 1547.537596][T13203] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16419'. [ 1547.697065][T13161] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1547.710055][ T6066] usb 4-1: USB disconnect, device number 32 [ 1547.769546][T13161] F2FS-fs (loop4): Start checkpoint disabled! [ 1547.811657][T13161] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1547.826290][T13161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1548.169786][ T57] kworker/u8:4: attempt to access beyond end of device [ 1548.169786][ T57] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1548.194264][ T57] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1548.194299][ T57] Tainted: [L]=SOFTLOCKUP [ 1548.194308][ T57] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1548.194324][ T57] Workqueue: writeback wb_workfn (flush-7:4) [ 1548.194366][ T57] Call Trace: [ 1548.194376][ T57] [ 1548.194385][ T57] dump_stack_lvl+0xe8/0x150 [ 1548.194427][ T57] f2fs_handle_critical_error+0x37c/0x540 [ 1548.194469][ T57] f2fs_write_end_io+0x1273/0x1740 [ 1548.194526][ T57] __submit_merged_bio+0x256/0x6a0 [ 1548.194572][ T57] __submit_merged_write_cond+0x3c9/0x4e0 [ 1548.194617][ T57] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1548.194666][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.194703][ T57] f2fs_write_data_pages+0x287e/0x34f0 [ 1548.194736][ T57] ? f2fs_build_free_nids+0xdc/0x1810 [ 1548.194807][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1548.194866][ T57] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1548.194934][ T57] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1548.194994][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.195020][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1548.195075][ T57] ? set_shrinker_bit+0x7c/0x350 [ 1548.195107][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.195138][ T57] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1548.195177][ T57] do_writepages+0x32e/0x550 [ 1548.195222][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.195248][ T57] ? reacquire_held_locks+0x104/0x190 [ 1548.195275][ T57] ? writeback_sb_inodes+0x463/0x19d0 [ 1548.195322][ T57] __writeback_single_inode+0x133/0x10e0 [ 1548.195348][ T57] ? do_raw_spin_unlock+0xf5/0x210 [ 1548.195384][ T57] writeback_sb_inodes+0x979/0x19d0 [ 1548.195419][ T57] ? __lock_acquire+0x6b5/0x2cf0 [ 1548.195489][ T57] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1548.195524][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1548.195601][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.195629][ T57] ? rcu_is_watching+0x15/0xb0 [ 1548.195657][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.195701][ T57] wb_writeback+0x445/0xb00 [ 1548.195742][ T57] ? queue_io+0x221/0x470 [ 1548.195785][ T57] ? __pfx_wb_writeback+0x10/0x10 [ 1548.195823][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1548.195869][ T57] wb_workfn+0x3f8/0xf10 [ 1548.195896][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.195921][ T57] ? look_up_lock_class+0x57/0x110 [ 1548.195969][ T57] ? __pfx_wb_workfn+0x10/0x10 [ 1548.196002][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196027][ T57] ? do_raw_spin_lock+0x12b/0x2f0 [ 1548.196054][ T57] ? lock_acquire+0x106/0x350 [ 1548.196091][ T57] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1548.196124][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196153][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196185][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196215][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1548.196249][ T57] ? process_scheduled_works+0xa70/0x1860 [ 1548.196284][ T57] process_scheduled_works+0xb5d/0x1860 [ 1548.196318][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196382][ T57] ? __pfx_process_scheduled_works+0x10/0x10 [ 1548.196423][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196453][ T57] ? assign_work+0x3d5/0x5e0 [ 1548.196494][ T57] worker_thread+0xa53/0xfc0 [ 1548.196552][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196592][ T57] kthread+0x388/0x470 [ 1548.196621][ T57] ? __pfx_worker_thread+0x10/0x10 [ 1548.196659][ T57] ? __pfx_kthread+0x10/0x10 [ 1548.196689][ T57] ret_from_fork+0x514/0xb70 [ 1548.196729][ T57] ? __pfx_ret_from_fork+0x10/0x10 [ 1548.196767][ T57] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1548.196794][ T57] ? __switch_to+0xc79/0x1410 [ 1548.196838][ T57] ? __pfx_kthread+0x10/0x10 [ 1548.196870][ T57] ret_from_fork_asm+0x1a/0x30 [ 1548.196915][ T57] [ 1548.227891][T13211] mkiss: ax0: crc mode is auto. [ 1548.276470][ T57] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1548.554668][T13180] loop6: detected capacity change from 0 to 32768 [ 1548.756197][T13180] JBD2: Ignoring recovery information on journal [ 1548.774009][T13218] loop0: detected capacity change from 0 to 1024 [ 1548.829182][T13180] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1549.194065][T13216] loop9: detected capacity change from 0 to 32768 [ 1549.250658][T13216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.16424 (13216) [ 1549.371492][T13229] macsec1: entered allmulticast mode [ 1549.418067][T13216] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1549.424683][T13229] bond0: entered allmulticast mode [ 1549.508569][T13216] BTRFS info (device loop9): using sha256 checksum algorithm [ 1549.512102][T13229] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1549.646373][T13235] loop0: detected capacity change from 0 to 512 [ 1549.653732][T13235] EXT4-fs: Ignoring removed bh option [ 1549.659368][T13235] EXT4-fs: Ignoring removed mblk_io_submit option [ 1549.678862][T13235] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1549.690317][T16598] ocfs2: Unmounting device (7,6) on (node local) [ 1549.696831][T13229] bond0: left allmulticast mode [ 1549.894389][T13235] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1549.997460][T13235] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1550.005174][T13235] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 1550.067840][T13235] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 1550.103892][T13216] BTRFS info (device loop9): enabling ssd optimizations [ 1550.116723][T13262] loop5: detected capacity change from 0 to 512 [ 1550.149257][T13216] BTRFS info (device loop9): turning on async discard [ 1550.178715][T13262] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1550.200450][T13235] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.16431: Failed to acquire dquot type 1 [ 1550.222402][T13216] BTRFS info (device loop9): enabling free space tree [ 1550.261156][T13262] EXT4-fs (loop5): 1 truncate cleaned up [ 1550.345383][T13235] loop0: lost filesystem error report for type 5 error -5 [ 1550.345713][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1550.359454][ C0] EXT4-fs (loop0): last error at time 1777278775: ext4_acquire_dquot:7034 [ 1550.371600][T13262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1550.417428][T13235] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.16431: Invalid block bitmap block 0 in block_group 0 [ 1550.475751][T13235] loop0: lost filesystem error report for type 5 error -117 [ 1550.482168][T13235] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.16431: Invalid block bitmap block 0 in block_group 0 [ 1550.593601][T13235] loop0: lost filesystem error report for type 5 error -117 [ 1550.595236][T13235] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.16431: Invalid block bitmap block 0 in block_group 0 [ 1550.701376][T13235] loop0: lost filesystem error report for type 5 error -117 [ 1550.702060][T13235] Quota error (device loop0): write_blk: dquota write failed [ 1550.739988][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.770663][T13235] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1550.841604][T13235] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.16431: Failed to acquire dquot type 1 [ 1550.906932][T13235] loop0: lost filesystem error report for type 5 error -28 [ 1550.915984][T11965] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1550.941409][T13235] Quota error (device loop0): write_blk: dquota write failed [ 1551.005136][T13235] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1551.078163][T13235] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.16431: Failed to acquire dquot type 1 [ 1551.111606][T13235] loop0: lost filesystem error report for type 5 error -28 [ 1551.112650][T13235] EXT4-fs (loop0): 1 orphan inode deleted [ 1551.149640][T11965] usb 5-1: Using ep0 maxpacket: 8 [ 1551.171569][T13235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1551.181427][T11965] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1551.227774][T11965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.257476][T11965] usb 5-1: Product: syz [ 1551.277718][T11965] usb 5-1: Manufacturer: syz [ 1551.298046][T11965] usb 5-1: SerialNumber: syz [ 1551.329163][T11965] usb 5-1: config 0 descriptor?? [ 1551.368927][T11965] gspca_main: se401-2.14.0 probing 047d:5003 [ 1551.496997][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1551.541605][T13216] BTRFS info (device loop9): balance: start -f [ 1551.744768][T13216] BTRFS info (device loop9): balance: ended with status: 0 [ 1552.134581][ T2466] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1552.312740][T11965] gspca_se401: read req failed req 0x06 error -19 [ 1552.358516][T11965] usb 5-1: USB disconnect, device number 100 [ 1552.467874][T13283] loop5: detected capacity change from 0 to 32768 [ 1552.579807][T13277] loop3: detected capacity change from 0 to 40427 [ 1552.622414][T13283] JBD2: Ignoring recovery information on journal [ 1552.666080][T11965] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1552.808554][T13283] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1552.890280][T11965] usb 5-1: string descriptor 0 read error: -22 [ 1552.910903][T11965] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1552.960459][T11965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.022837][T11965] usb 5-1: config 0 descriptor?? [ 1553.064593][T13283] OCFS2: ERROR (device loop5): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 1553.064703][T13283] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1553.163250][T11965] gspca_main: se401-2.14.0 probing 047d:5003 [ 1553.181238][T13277] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1553.211122][T13283] OCFS2: File system is now read-only. [ 1553.231178][T13277] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1553.615256][ T6611] ocfs2: Unmounting device (7,5) on (node local) [ 1554.083924][T13338] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16457'. [ 1554.209127][T13340] bond2: (slave bond_slave_1): Device is not our slave [ 1554.219256][T13340] bond2: option active_slave: invalid value (bond_slave_1) [ 1554.234703][T13340] bond2 (unregistering): Released all slaves [ 1554.292242][T11965] gspca_se401: read req failed req 0x06 error -19 [ 1554.337790][T11965] usb 5-1: USB disconnect, device number 101 [ 1554.583034][T13349] loop5: detected capacity change from 0 to 4096 [ 1554.634187][T13354] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1554.974443][T13367] loop5: detected capacity change from 0 to 128 [ 1555.009483][T13368] loop0: detected capacity change from 0 to 512 [ 1555.095871][T13368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1555.228319][T13368] ext4 filesystem being mounted at /2852/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.535150][T13385] ptrace attach of "./syz-executor exec"[6611] was attempted by "\x22"[13385] [ 1555.603180][ T5836] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1555.770211][T13390] loop3: detected capacity change from 0 to 256 [ 1555.781142][T13391] loop6: detected capacity change from 0 to 64 [ 1555.807848][T13366] loop4: detected capacity change from 0 to 32768 [ 1555.870753][T13391] minix_free_block (loop6:21): bit already cleared [ 1555.904765][T13366] [ 1555.904765][T13366] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1555.904765][T13366] [ 1555.919645][T13394] loop5: detected capacity change from 0 to 512 [ 1556.076802][T13366] ERROR: (device loop4): diWrite: ixpxd invalid [ 1556.076802][T13366] [ 1556.117876][T13366] ERROR: (device loop4): txCommit: [ 1556.117876][T13366] [ 1556.160046][T13399] jfs_create: dtSearch returned -17 [ 1556.262691][T13394] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.16482: invalid block [ 1556.309271][T11426] [ 1556.309271][T11426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1556.309271][T11426] [ 1556.354134][T13394] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1556.366209][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1556.377683][T11426] [ 1556.377683][T11426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1556.377683][T11426] [ 1556.381861][ C0] EXT4-fs (loop5): initial error at time 1777278781: ext4_get_branch:178: inode 11: block 4294967295 [ 1556.403235][ C0] EXT4-fs (loop5): last error at time 1777278781: ext4_get_branch:178: inode 11: block 4294967295 [ 1556.430298][T13394] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.16482: invalid indirect mapped block 4294967295 (level 1) [ 1556.456587][T13394] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1556.459630][T13394] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.16482: invalid indirect mapped block 4294967295 (level 1) [ 1556.503336][T13403] loop6: detected capacity change from 0 to 256 [ 1556.561152][T13394] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1556.561859][T13394] EXT4-fs (loop5): 2 truncates cleaned up [ 1556.645809][T13394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1556.786304][ T5922] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1556.813848][T13394] [ 1556.816237][T13394] ====================================================== [ 1556.823254][T13394] WARNING: possible circular locking dependency detected [ 1556.830281][T13394] syzkaller #0 Tainted: G L [ 1556.836263][T13394] ------------------------------------------------------ [ 1556.843277][T13394] syz.5.16482/13394 is trying to acquire lock: [ 1556.849423][T13394] ffff88804701c600 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10e0 [ 1556.858530][T13394] [ 1556.858530][T13394] but task is already holding lock: [ 1556.865898][T13394] ffff88804701ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 1556.876091][T13394] [ 1556.876091][T13394] which lock already depends on the new lock. [ 1556.876091][T13394] [ 1556.886515][T13394] [ 1556.886515][T13394] the existing dependency chain (in reverse order) is: [ 1556.895560][T13394] [ 1556.895560][T13394] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1556.903997][T13394] percpu_down_read_internal+0x48/0x1c0 [ 1556.910084][T13394] ext4_writepages+0x205/0x3b0 [ 1556.915370][T13394] do_writepages+0x32e/0x550 [ 1556.920483][T13394] __writeback_single_inode+0x133/0x10e0 [ 1556.926632][T13394] writeback_single_inode+0x4ac/0xdc0 [ 1556.932534][T13394] write_inode_now+0x1c2/0x290 [ 1556.937829][T13394] iput+0x8c1/0xe80 [ 1556.942161][T13394] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1556.948065][T13394] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1556.954495][T13394] __ext4_expand_extra_isize+0x30d/0x400 [ 1556.960660][T13394] __ext4_mark_inode_dirty+0x45c/0x710 [ 1556.966643][T13394] ext4_evict_inode+0x986/0x10e0 [ 1556.972130][T13394] evict+0x61e/0xb10 [ 1556.976557][T13394] ext4_orphan_cleanup+0xc38/0x1470 [ 1556.982282][T13394] ext4_fill_super+0x5a19/0x6330 [ 1556.987784][T13394] get_tree_bdev_flags+0x431/0x4f0 [ 1556.993426][T13394] vfs_get_tree+0x92/0x2a0 [ 1556.998378][T13394] do_new_mount+0x341/0xd30 [ 1557.003400][T13394] __se_sys_mount+0x31d/0x420 [ 1557.008598][T13394] do_syscall_64+0x15f/0xf80 [ 1557.013709][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.020114][T13394] [ 1557.020114][T13394] -> #0 (sb_internal){.+.+}-{0:0}: [ 1557.027419][T13394] __lock_acquire+0x15a5/0x2cf0 [ 1557.032804][T13394] lock_acquire+0x106/0x350 [ 1557.037849][T13394] percpu_down_read_internal+0x48/0x1c0 [ 1557.043924][T13394] ext4_evict_inode+0x426/0x10e0 [ 1557.049468][T13394] evict+0x61e/0xb10 [ 1557.053991][T13394] ext4_ext_migrate+0xe11/0x1130 [ 1557.059447][T13394] ext4_fileattr_set+0xf33/0x16d0 [ 1557.064990][T13394] vfs_fileattr_set+0x9f6/0xc90 [ 1557.070356][T13394] ioctl_setflags+0x189/0x1f0 [ 1557.075555][T13394] do_vfs_ioctl+0x9f1/0x1530 [ 1557.080668][T13394] __se_sys_ioctl+0x82/0x170 [ 1557.085785][T13394] do_syscall_64+0x15f/0xf80 [ 1557.090910][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.097319][T13394] [ 1557.097319][T13394] other info that might help us debug this: [ 1557.097319][T13394] [ 1557.107539][T13394] Possible unsafe locking scenario: [ 1557.107539][T13394] [ 1557.115067][T13394] CPU0 CPU1 [ 1557.120424][T13394] ---- ---- [ 1557.125779][T13394] lock(&sbi->s_writepages_rwsem); [ 1557.130980][T13394] lock(sb_internal); [ 1557.137565][T13394] lock(&sbi->s_writepages_rwsem); [ 1557.145285][T13394] rlock(sb_internal); [ 1557.149439][T13394] [ 1557.149439][T13394] *** DEADLOCK *** [ 1557.149439][T13394] [ 1557.157603][T13394] 3 locks held by syz.5.16482/13394: [ 1557.162978][T13394] #0: ffff88804701c410 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 1557.172686][T13394] #1: ffff88803525d7d8 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x161/0xc90 [ 1557.183244][T13394] #2: ffff88804701ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130 [ 1557.193912][T13394] [ 1557.193912][T13394] stack backtrace: [ 1557.199797][T13394] CPU: 1 UID: 0 PID: 13394 Comm: syz.5.16482 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.199831][T13394] Tainted: [L]=SOFTLOCKUP [ 1557.199840][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1557.199855][T13394] Call Trace: [ 1557.199867][T13394] [ 1557.199878][T13394] dump_stack_lvl+0xe8/0x150 [ 1557.199918][T13394] print_circular_bug+0x2e1/0x300 [ 1557.199948][T13394] check_noncircular+0x12e/0x150 [ 1557.199978][T13394] __lock_acquire+0x15a5/0x2cf0 [ 1557.200019][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200047][T13394] ? kernel_text_address+0xa5/0xe0 [ 1557.200082][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200110][T13394] ? __kernel_text_address+0xd/0x30 [ 1557.200138][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200165][T13394] ? unwind_get_return_address+0x4d/0x90 [ 1557.200192][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200219][T13394] ? __asan_memset+0x22/0x50 [ 1557.200245][T13394] ? ext4_evict_inode+0x426/0x10e0 [ 1557.200272][T13394] lock_acquire+0x106/0x350 [ 1557.200307][T13394] ? ext4_evict_inode+0x426/0x10e0 [ 1557.200337][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200368][T13394] percpu_down_read_internal+0x48/0x1c0 [ 1557.200407][T13394] ? ext4_evict_inode+0x426/0x10e0 [ 1557.200435][T13394] ext4_evict_inode+0x426/0x10e0 [ 1557.200463][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200493][T13394] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1557.200525][T13394] ? do_raw_spin_lock+0x12b/0x2f0 [ 1557.200555][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200583][T13394] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1557.200610][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200639][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200666][T13394] ? do_raw_spin_unlock+0xf5/0x210 [ 1557.200696][T13394] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1557.200724][T13394] evict+0x61e/0xb10 [ 1557.200759][T13394] ? __pfx_evict+0x10/0x10 [ 1557.200790][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200817][T13394] ? _raw_spin_unlock+0x28/0x50 [ 1557.200841][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200868][T13394] ? iput+0xb25/0xe80 [ 1557.200896][T13394] ext4_ext_migrate+0xe11/0x1130 [ 1557.200920][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.200953][T13394] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1557.200979][T13394] ? ext4_change_inode_journal_flag+0x20f/0xaa0 [ 1557.201017][T13394] ? ext4_set_inode_flags+0x249/0x5b0 [ 1557.201051][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201082][T13394] ? __ext4_journal_stop+0x34/0x1a0 [ 1557.201120][T13394] ext4_fileattr_set+0xf33/0x16d0 [ 1557.201156][T13394] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1557.201182][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201216][T13394] ? __asan_memset+0x22/0x50 [ 1557.201239][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201266][T13394] ? fileattr_fill_flags+0x229/0x380 [ 1557.201293][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201320][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201350][T13394] vfs_fileattr_set+0x9f6/0xc90 [ 1557.201392][T13394] ? mnt_get_write_access+0x66/0x280 [ 1557.201421][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201453][T13394] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1557.201481][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201509][T13394] ? __asan_memset+0x22/0x50 [ 1557.201534][T13394] ioctl_setflags+0x189/0x1f0 [ 1557.201561][T13394] ? __pfx_ioctl_setflags+0x10/0x10 [ 1557.201589][T13394] ? tomoyo_path_number_perm+0x219/0x630 [ 1557.201624][T13394] ? tomoyo_path_number_perm+0x219/0x630 [ 1557.201660][T13394] do_vfs_ioctl+0x9f1/0x1530 [ 1557.201693][T13394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1557.201730][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201757][T13394] ? do_futex+0x395/0x420 [ 1557.201781][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201818][T13394] ? __fget_files+0x2a/0x420 [ 1557.201842][T13394] ? __fget_files+0x2a/0x420 [ 1557.201864][T13394] ? __fget_files+0x3a0/0x420 [ 1557.201886][T13394] ? __fget_files+0x2a/0x420 [ 1557.201911][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201938][T13394] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1557.201967][T13394] __se_sys_ioctl+0x82/0x170 [ 1557.201997][T13394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.202021][T13394] do_syscall_64+0x15f/0xf80 [ 1557.202054][T13394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.202083][T13394] RIP: 0033:0x7f461df9c819 [ 1557.202104][T13394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.202123][T13394] RSP: 002b:00007f461ee12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1557.202148][T13394] RAX: ffffffffffffffda RBX: 00007f461e215fa0 RCX: 00007f461df9c819 [ 1557.202165][T13394] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000004 [ 1557.202181][T13394] RBP: 00007f461e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1557.202196][T13394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1557.202210][T13394] R13: 00007f461e216038 R14: 00007f461e215fa0 R15: 00007ffec5f96a18 [ 1557.202237][T13394] [ 1557.778473][ T5922] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1557.789526][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1557.813599][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.825504][ T5922] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1557.835312][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.855191][ T5922] usb 4-1: Product: syz [ 1557.860332][ T5922] usb 4-1: Manufacturer: syz [ 1557.865172][ T5922] usb 4-1: SerialNumber: syz [ 1557.873753][ T5922] usb 4-1: config 0 descriptor?? [ 1557.886969][ T5922] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1558.499419][ T5922] usb 4-1: USB disconnect, device number 33