last executing test programs: 4m52.10628376s ago: executing program 1 (id=8035): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 4m51.884318135s ago: executing program 1 (id=8038): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0) 4m51.64093031s ago: executing program 1 (id=8041): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}, {@err_cont}, {@journal_async_commit}]}, 0x1, 0x4426, &(0x7f0000008940)="$eJzs3c9vFFUAB/A30yotArbIARMTN5FEo6ZpOaklsZRCaaFiUIjxsmzbBarbLmm3xgOHeiPxZOLBeCCaeOuJ9OAV/wQvHvFMogcvJibEmt2dbTvT3XQlu1TM55PQ6bxf87rfndm3h2HiROXmwkpuYSVXWMqV566vnMx9Vi6tLhZD/ITs9/FpT+dzioLs98+lM+c+uHoyhJ/mf3m4ubm5Gap6Q1MjO37/84/bczu3DXGmT3Xc5qN1yschhGO75lXVE0L46McQohDC6aRsPNn2hxCOhHrd1dtfXst1aDb3HhRP5R/N3NkYPTG9fnej9d8ehfBt6cU3byz+9krP6K+vd+jwAAAAAAAAAAAAAAAAAAA85SYvX7ry/vBIuB+F3vVo9/26k8m21f2xmx3zcvf/WAAAAAAAAAAAAAAAAAAAAPiP2r7/PxcdbXL//0SyHWvRf/Pd7s+R7pl679LE2eGR5Pnv0a76t5Ki30/3hMEmz33PPv/9dKZ/8+e/H+jY/Bvzaxx3IETxUGo/joeGQvg+efD78ehgXCqvVN64Xl5dmu/YNJ5a6fzrT+9PvQuSB/q3m/94ZvzuP///hZB911b3r+1+K9NEOv+elu1++CJqK/8zmX5PIn8eXzr/3lpZ/84GY/ULQDX/r3r3zn8iM3638j8SQshF1bnmUleA6hqmWt5qvUJaOv9namWpS2fyQrY6///K5H82M/5+Xf/Xsh9ENJXO/9laWV+qxfb5Pxjvff6fy4y/H/lX57/m878t6fyTdXlvqkntlWz3+j+ZGb9b+V+Jk3keiVLvgPWoXt7q/6sjLZ1/36767e9/cVvrv/OZ/s3z79zJ2Zhf47iN73+Ny/9rUf37H82l8+9v2a7d838q06/b1/+x2vqPx5XO/2CtLL12Hqj9bDf/6cz43cq/tirpa+S/fT35+0C9/Dvrv7ak83+uXhjvbLFW+1lb/0V7r/8vZMbfj/Vfdf5rcXeP+n+Rzv9Qy3bV/H9u4/P/YqZf9/MPYdha/7Gl8z/csl3t/O/bO/+ZTL9u5/9qNwcHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAqMJ9uBEMVDqf04HhoK4UyyfzwcjGYL8/nZUnnu05UQJpLyXDga3SiVZwul/MJSeb6YL5RK5bkQzib1x0JftFIqV/KLhVvntsbqj24WC8uV2WKhEkKYTMpfCocbY80uVBYLt0II57fqno/Ly7duFpby8wvL7wwPDw+Hqa05DEbFzyvFpUr96PXaEKa3+g5EOyZXq76wNZdD0Sfl1eWlQqlWfnFHn1J5rlDa0Wcmqfs6DEaV5dWluUKlmC+VbzSOt5/Gku3E1OUPL18c2VV/Lapvx5/stAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l+6Pvv1NCKG3vheHEHJR8kuU/Eu596B4Kv9o5s7G6Inp9bsbD5u1AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKu/SP0kAQxQH4zVho6TGslt3OdkURLVwRPIEew8PoUbyEd7BIkTZFCCSzEPYPbJNU39c8mB8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFju8a17f62biBRX28uI38+//+P8udTvu+n7F2eYkdN5eunuH+qm/Hsa5bflaNXmfbpZf33ERO39DPZkuE8H4z5Dc/s2N1/f9zpSriKiLflNyrmqlr0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXwEAAP//ZKcfVQ==") lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) 4m50.204066061s ago: executing program 1 (id=8064): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000380)) 4m48.940218428s ago: executing program 1 (id=8080): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001000008500000008000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m48.646898004s ago: executing program 1 (id=8086): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 4m33.546720405s ago: executing program 32 (id=8086): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2.726178232s ago: executing program 0 (id=12198): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x201, 0x0) write$vga_arbiter(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='decodes i'], 0xf) 2.655736834s ago: executing program 3 (id=12200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff1b0000007c000000090001"], 0x7c}}, 0x0) 2.525088666s ago: executing program 0 (id=12203): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x444b, &(0x7f0000004480)="$eJzs3b9vI1kdAPDvTAJJltslOa44JCQscRIIUJRcBeQkstns5pLbsGiBE6LxOolvN+DEq8RBFFfsdSdRIVEgihNIdKlOKSg5/gQayqM+CQoaJMSJINvjxDO2FW8UJ2T1+RQZz/sdfz3Pb4rxSzONJ9v7pe39UmW3VN98Z//10s/rtYOdaqSX5Kr7J2di0Bs/ijiJ/dV5cOfeD95+PeLPW3/95Pj4+DiaxqOv+a7X//rnu5vdx460UKfZbv/WLspPIuKVnnE1jUXEj/8YkUTE7SxtKTtORcStaOe9/e4vH5UuaDQfflx9o/zp+vtHC6+tHX5wNPh/TyJ+W/viNx/v/P0rYwt/+/oFdQ8AAAAAAAAAAAAAAAAAwDW38vDBj74/Nx8fJTF+mPQ+r7uSHQc9H3t8Yb48+n8WAAAAAAAAAAAAAAAAAAAA/k+dPv9fSl7u8/z/cnZcHFD/+LujHyOjs/q9B8t35+az/d+TnvxvZUn/uD0WM4V939/rs//77UL9/vu/9/ZzXp3xdfqdvhnpbPd5pOnsbMTvs43fX01upLX6fuMb79QPdrcubBjXVj7+7d37c9HJNvTvF//oE/+lQvuj3///Cz2fpub5o7M+Yp8Z4ZCukXz8xwaW+8N7yVDxv1OodxnxP/Wf0Xb1AsrHf7yVNtVdYLE9ATTj/6vxs+O/XGh/VPG/FRGlpDnWUm4GaK5hmumD1ivk5ePfnhRzU2f2Rg66/v9diP/dQvtXNf8/K34R0Vc+/p9tpU3mSpxe/zPp2df/vUL7xfgP/oY5r974N8f/7OKWmC+0fPwn2onjuSKtd3LY+X+l0P5zXv/DfDw6PxjXHuetJPcJOEza4x/0e3Xk5eM/2ZN/ev+XDrX+e7NQ/7Lu/zr9TkfSuv/rTP9fS9r3f/SXj//UwHLDXv+rhXqj/v5fbK3/OK98/G+00vJr5+nW32Hjv1Zof1Txb61KJjvxb00CzVuC+O9EO/131n9Dycf/c+3EtLvEs9bf1vovOXv9/1ah/Stb/6ej7fVFkY//SwPLNeP/lyG+/+8X6o0+/hFz1vrnlo//zYHlWtf/5NnxXz99+ae4hPh/dZSNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwDS9lxOpJ0NneeprOzEXey81fjRrJR2Spv1OqbP9uPWM7SS/Fy8rhW36jUytu79a1quVKr1Tcj7mb5r8Rksl+rN8o7laf3TtqaSp5UK3uNjWqlERErWfqX4manrY3txk7laUS8eZL3+bS+9/RJZbe8tb33nbm5ublYPRnDTFL9RaO622j33s6NWDupO510Da6V/dbJWF5Kflo/2Nut1Frp97vq1OqblVpXnfUs79cxkzT2DnY3K41quVZ/3OnvKi1mx+XVhz98eH++J/9R0j4uXe6wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhOHy18+zcRMd4+SyOilGQvmseJYvkPP66+Uf50/f2jhdfWDj84+iQrBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I8dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NI/SgNBFAfgN2OhpcewWnY72xVFtHBF8AR6DA+jR/ES3sEiRdoUIZDMQtg/EAJJ9X3Ng/kx8x7MAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAjPb517691E5Hian0Z8fv597+fP5f6fTd9/+IMM3I6Ty/d/UPdlH9Po/y2HC3avE1Xy6+PmKi9n8GeDPdpZ9xnaG7f5ubr+15HylVEtCW/STlX1WFvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIYdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//ycSKVs=") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 2.399170579s ago: executing program 3 (id=12205): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x16, &(0x7f0000005440)={[{@noenospc_debug}, {@nossd_spread}, {@nodatasum}, {@notreelog}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x39, 0x67, 0x3d, 0x31]}}, {@discard}]}, 0x9, 0x50f6, &(0x7f0000000340)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75pcNWjiAAAAQF/x/90Xv1qIeT375iDN6089evBc1Xil/N8cLv+P3dJXBQAAANyMI19sf7iqXsr/reHy//htnTUAAACwFO98OPFBVb2U/2dvnP/rSf5fnS/zKx+yTj/Fv0I4NBnCxMLKXFb4ObSf7hYAAACAWyTm9D8/3flD1X6l/D9Xff//eKeDeP1/z/3/Ctf/hzDVW8ju+vdkXgAAAIB7Svl6/nh7/OzJBf2evz/s9f8P/O/gq1XHL+X//cPl/3pxeSuf/wcAAADL8F97/t/20jjVBt3//76P3v2lqn8p/7eHy/9xuab48k7E9+e9yRDWL6zkdxP8Jh5uV1KYHysUOlpJj22xR16YHy8UOuaSHpsnQ3hwYWV/Uvh/LLSTwpW1eeFIUjgdC/n50C0cSwon4pn2+dp8umnh+1jIL7CYj1dQrOleEpH0uNqvx0Lhhj3Odg8OAABwT4nhOc+yY73NkEbZ+dqgHVYP2mFk0A71QTuMJjukO/bbHmZ7C3F7+8zGpT3//8hw+T++Fflz/vpd/x/i9f/5cw271//PxkIjKczHQiu9Y0ArHiMLux/HYzRaeY8r67sFAAAAuKvF7wXqKzwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ie9e42Rq7oPAH72Od6H1wtJFUKjZJPUOG7i9doGErVUWVOqRqQ064aCqohiY6/J4gU7tikxCpGxiWiEoLRBSj4UYRRFNR+gViAiKSBcpDhC5RFRFQUQKLSGKIiUkkSkCVKoZu89s3fO3Xn4scZLfz/JO2fmf553Hp5z751zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/x8OfuWav20Wf/S35z37wsXjV+xZe/Gr15136pMhTMw83pGFO/pvvH3853efe8+eB1bfcd/h8z/am5fL42Gg+qczv3NDrPXw4hDu7wihOw2sGMwCPfn9wVjf+wZDOCXMBmolJvuzEmnD4ft9IewLs4FaVd/rC2GwELjwqUcevrmauK0vhKUhhEraxvOVrI2+NHBGbxboTwNbu7PAr97K1ALf7cwCcMzim6H2oj8wUZ9heO5yDV5/PcetY2+vdHhdMTHcON/P1s5zpwp60wcmjulpK1XHvCi9PQ56ty2Ad1tpO9/qaSt+kcq/obw1G6qEzk2TmzdcPb0zPtIZRke7GtU0T8/zM69/aeORpBfM6zB2YPi4vA5veWLp3V3LL3j8vhVLX97/sb2vHGs3f1TYpMX0fKuE/DW3YJ7HaNznyQJ4+5W+JY340hVC2Pz53/tMs3hp/j/cfP4fX87xtrMud6z1zaFsbh4fGYyJ14ayuTkAAAAsGAthr+nW0Yc+0ay+0vx/pL3j//GQfz6Zz0Z7MITxmcTeJSGcNvN4FrgrNnfZkhA+OJOaqA+sTQIHQ3jvTGJ5raqkxKJYYiQJ/GQoD4wngUMxMJEEvhUDtyaBG2LgQBLYGAMHk8C5MRCm6sfx+0P5ONoO9MXA+mwjHohnIfxiKLaWbKvnalUBAAAcJ/nssKf+buFch2PNEKeXB/paZYhnYDfMUElqSGewtWlVwxq6W9XQ2aqG2rh3Nx9+qeaOVjWXTsPoqM9w+y//5rOhidL8f6z5/L8yR0c6Ssf/Q1g38zfm7swj07X4+om6DAAAAMAxGPjfF7/ZLF6a/4+3d/5/3CfSVcgcHou7IbYsCWGsPpBV+4flQHbUeyAPAAAAwEJQOx5fOxY+ld9mp2in8+ly/okjzB8P/I/Pmb/34IPrm/W3NP+faO/8//7626wTh2IvvrYkhEWFwA9iL6uBGSMx8ONP1gfy8R+KG+CmWFV+YkKtqptiifUxMJYE9jUq8cNaidPqA/mTVWt8b20cU3mJQgAAAABOuLg7IB6Xj+f/f+g3q69pVq40/19/ZOf/z8yDS6f3Tw+EsLI7hK70hwGP9WcLA8bAYEeeeKg/q6srrer6/hDOqQ4srerFfP3/7nSNwaf6sqpi4LQP7X/9jGrim30hrCwGnv7cnWdVEzuTQK3xv+wL4QPV0aaNf2dR1nhP2vjXF4Xw/kKgVtVli0KoNtabVvVIJb+OQVrVP1dCeFchUKvq7EoIuwIAC1T8r3RT8cEdu67dsmF6enL7PCbiPvy+sHlqenJ049bpTZUGfdqU9LluGaPry2Nq98o3z+VLFF1077rBdtK13wmOFdvK9+OXThzM78fvQj0z41zdU3d3TTrkj3y43EQofJNqNOTOeR5yf7GS2SexVH/M3xsGwqKrd0xuH/3ihp07t6/K/rabfXX2Nx5myrbVqnRb9c/VtzZeHg1Xy0oc7bZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3xZDXTZX1clQ37qzzXEdx6Ge3l2o5ER8akhISCy0xNaBZU3/Ty7N/7c1n//HT534yZ+vz9Do+P9wPMyfPT57mH99DOxr9/j/cKOj+bUTA0aSwO4Y2O0wPwAAAO8McZIf92bGvdI/Xf6dl5uVK83/d7f3+//jtP5/ben68xst8788lhhrtP5/usx/bf3/3Y3W/0+X+a+t/7/vbVj//+paINkkv7D+PwAA8E5w4tb/b7m8f3qBgFKGlsv7pxcIKGVouYx/uxcIOOL1/5//z7/679BEaf5/a3vzfwv3AwAAwMnjy392ze80i5fm//vam/+f+PX/QqPz/0caBSYaLQxo/T8AAAAWqEbr/w3f2H9ps3Kl+f+B9ub/8bSLzrrcsdY3h7I17UK6pt1rQ7WfDAAAAMDC0BlGR3vazFu3Murao2/zmXwp0Gbpohf/5PCRnf9/sL35f93vMm55YundXcsvePzN+1YsfXn/x/a+Mnv8HwAAAJg/7e6XAAAAAAAAAAAAAAAA3n4v/seeNc3ipd//h3Uzjzf6/X+87l/8fcG763LHWluv/5ffv/DT9+yaWbLwsaEQPlwMbNmz5ZSQX5t/WTHw8CXL31NN7ElLPPjCuS9VE5emgU+tOPWNauKcJLA+LpL43jQQr6r4xuIkEJdX/Pc0ELfHgTTQmwe+ujgbR0e6rX46mG2rjnRbPTsYwpJCoLat7h/M2uhIB3hbEqgN8AtpIA7wz/NAZ9qrewayXsXAYCx6x0DWKwAATlrxW2BP2Dw1PTkWv8LH29O762+juiXLri9X29Fm88/lS5NddO+6wXbSXel30dlrjfeESnUIq0pfV4tZOmZGeXxqabHp3t1gyK1We+tsUC51pJuut/GI+rIRjW7cOr2pp+XA17TOsrq7ZZZVpclOMUvnzCZto5Y2+tLGiNrcNm10Od7vDKOjXUmuP4jB4VCn1Sui3d/rF9f5a/QqKOa56vDeXzWrrzT/H25v/l8pjuuN/GIAu+OV9f5uiWX+AQAAYH59de2vvxH/ffbGR59ulrc0/x9pb/4f92Dlh4KzvR0H4/X/9y4JYebS+sNZ4K7Y3GVLQvjgTGoilsguqH9+LDGWBe6KO0yWxxLrJ+qrWhQDB5LAT4bywMEkcCgG8r0U+0O+K+fvh0I4aya1rr7EtlhiOAl8JgZGksBoDIwlgcUxMJ4EXl2cByaSwL/FQJiq31b3Ls63FQAAwJHI51k99XdDOs870N0qQ0erDP2tMnS2ylBplaHRKOL9b8cMPcnJKx2FTD1prX1JLaUM8WL4R9yvUobww/qcacFS0/H8g9r5Bh31GR74RHclNFGa/4+1N//vr7/NWj8U5/+z1//LAj+I3ftaPHV8JAZ+/Mn6QL5j4FCc7N5Uq2oiL5FP2m+KJcZjYCQJbIuB8SSwfl0e2Pee+kA+0641vrfW+FReohAAAACAEy7uIIi7aeL8/44dXxloVi6f/4/U5v/j7c3/Y3sDxcZuiLUeXhzC/R2zvakFVgxmgbgfYzD+PP59gyGcUtjBUSsx2Z+V6E0aDt/vy36h3ptW9b2+7McH8f6FTz3y8M3VxG19ISwt7H2ptfF8JWujLw2c0ZsF+tPA1u4sEPf81ALf7cwCcMxqewXjCyo/1aVmeO5yDV5/75RrgqbDK+0DnSPfXL+5mi+lHa75PtWaI3vamu6/5bgpvT0OerctxHfbsHdb8YtU/g3lrdlQJXRumty84erpnfGR4i9ZS+bpeS7+SrWd9HF4He4++t62Vkk7MJZ8fIzNXW7u12FHrO6WJ5be3bX8gsfvW7H05f0f2/tK291oIP5Q+JHr/nXwR4XNO98qIX/NLbjPkwmfJwvxv4ERT1sIYd2rX7+pWbx0/H+ivfl/d3I749dxY+5YEsJHChv3sbj5/3hJ9jlYCGSfku8qB7JD7v811PCTEwAAAI632u6O2v6Cqfw2OyE8nSeX808cYf64v2J8zvzt9rv/ry9Z2ixemv+vbz7/X5R00/F/x/+ZJ47/z+lk3xW9KH1g9zHtii5Vx7xw/H9OJ/u7zfH/OTn+7/j/XBz/b8Hx/zmd7E9b6VvSNl+6Qggv/9FDzzaLl+b/29qb/1v/b+5F+2rr/61vtP7ftkbr/+22/h8AADCvGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvi9f9eOv3534QmSvP/3e3N/+PLYaDY+kJZ/29kXYOqbo2BbRYGBAAA4GTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb68H/uF/NjWLP/rb85594eLxK/asvfjV68479ckQpmYe78jCHf033j7+87vPvWfPA6vvuO/w+R+t5OV68tvfrcsda31zKIR9hUcGY+K1oeqd2cCFn75nV3c18dhQCB8uBrbs2XJKNfGtoRCWFQMPX7L8PdXEnrTEgy+c+1I1cWka+NSKU9+oJs7JAx1pd/9xcdbdjrS7Ny8OYUkhUOvuFYvrq6q18ad5oDNt458GszZiYDAW/cZg1kYMTMcSU4tCWNkdQlda1aOVrKqutKp/qWRVdaVVfbkSwjkhhO60qhd6s6q605E/2ZtVFQOnfWj/62dUE/t6Q1hZDDz9uTvPqia+kARqjf9FbwgfqL5k0sa/3ZM13pM2fltPCO8PIfSmJX7ZnZXoTUu82B3CuwqBWuOf7w5hV+AdIX741H2i7dh17ZYN09OT2+cx0Zu31Rc2T01Pjm7cOr2pkvSpkY5C+q3rj37sz73+pY3V24vuXTfYTro7L9cz0+XVPXV315zsvY/96i9WMvt8lOqP+XvDQFh09Y7J7aNf3LBz5/ZV2d92s6/O/nbl0WxbrVoo22pZsZKVO6/ctnLHrmtXTF254fLJyyevWnX26rEzx9aMffzMldVRjWV/j8dQ7zzxQz29u1DJifgAkJCQWGiJzrpPt7GT/YO89EV/tqM9oTLzAV2aVhSzdMyM8ngMeu1Rjvhovqe0HNGq0sShlGV16yxrSpOJ2Sx9WZaZ73WlyWGxps6ZTRrvd4bR0a5G22G4/m5x8/7sGDbvM/mmazcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FIAAAD//wqqIhQ=") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) 2.201910623s ago: executing program 2 (id=12208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x0) 1.988951178s ago: executing program 2 (id=12211): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x18, &(0x7f00000000c0)=[{0x11, '\x00', @data=0xb, 0x9}]}) 1.732708513s ago: executing program 2 (id=12215): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x40000000, 0x1, 0x80, 0x0, 0x0, 0xffffffec) 1.527832808s ago: executing program 4 (id=12217): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000002380)=[{0x0}, {&(0x7f0000000280)="f6", 0x1}], 0x2, 0x7e, 0xfffffff9) 1.40921914s ago: executing program 4 (id=12218): r0 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r0, &(0x7f0000000080)='-1\x00', 0x3) 1.376160501s ago: executing program 5 (id=12219): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, 0x0, 0x0) 1.235837744s ago: executing program 5 (id=12220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="90000000000000001c0012800b00010067656e65766500000c000280060005004e240000140003"], 0x50}, 0x1, 0x0, 0x0, 0x4008030}, 0x2000000) 1.221611814s ago: executing program 3 (id=12221): r0 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r0, 0x111, 0x2, 0x0, 0x0) 1.046081958s ago: executing program 4 (id=12222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 978.209299ms ago: executing program 3 (id=12223): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001f00), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000001f40)={0xe7e, 0xb, 0x3, 0x0, 0xf9}) 961.44102ms ago: executing program 5 (id=12224): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000240)={0xa, 0x0, 0x0, {0x625, 0xfff, 0x10001, 0x9}}) 930.46701ms ago: executing program 0 (id=12225): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_DIRENTPLUS(r0, 0x0, 0xb0) 759.300634ms ago: executing program 4 (id=12226): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 715.697135ms ago: executing program 2 (id=12227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x18, 0x39, 0x107, 0x1, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x4, 0x8c}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0x2000c004) 681.130505ms ago: executing program 3 (id=12228): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f00000000c0)='*&\\\\&.i\x00', &(0x7f00000001c0)='f!{\x00', &(0x7f0000000240)='GPL\x00']}) 654.302936ms ago: executing program 5 (id=12229): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1ff, 0x80000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x3, 0x0, 0x98, &(0x7f0000000040)={0x3ff, 0x401}}) 615.875247ms ago: executing program 0 (id=12230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r0, &(0x7f00000017c0), 0x0}, 0x20) 479.05837ms ago: executing program 4 (id=12231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x4000000) 385.809622ms ago: executing program 2 (id=12232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000230000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 356.928843ms ago: executing program 5 (id=12233): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r0, 0x0, 0x0) 271.505204ms ago: executing program 0 (id=12234): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x1, 0x4, 0xffff0000, {{0x5, 0x4, 0x1, 0x30, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}}) 195.114506ms ago: executing program 4 (id=12235): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) 120.517648ms ago: executing program 2 (id=12236): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 117.326838ms ago: executing program 3 (id=12237): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000100)={0x8, @output={0x0, 0x1, {0xd731c000, 0x7}, 0x3, 0x2}}) 79.054618ms ago: executing program 5 (id=12238): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$tipc(r0, &(0x7f0000002c80)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x3}}, 0x10) 0s ago: executing program 0 (id=12239): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): o: probe of 1-1:1.188 failed with error -22 [ 740.545131][ T9565] udevd[9565]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.669700][ T4394] udevd[4394]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.695989][T10320] usb 1-1: USB disconnect, device number 58 [ 740.827072][T26725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10279'. [ 740.852548][T26725] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10279'. [ 741.056983][T26735] loop3: detected capacity change from 0 to 512 [ 741.102003][T26735] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.10273: inode #1: comm syz.3.10273: iget: illegal inode # [ 741.120327][T26735] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.10273: error while reading EA inode 1 err=-117 [ 741.133372][ T9105] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 741.145622][T26735] EXT4-fs (loop3): 1 orphan inode deleted [ 741.151891][T26735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 741.205057][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 741.320805][ T9105] usb 3-1: Using ep0 maxpacket: 8 [ 741.339243][ T9105] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 741.393485][ T9105] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 741.422368][T26748] netlink: 'syz.4.10278': attribute type 7 has an invalid length. [ 741.429302][ T9105] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 741.459813][ T9105] usb 3-1: Product: syz [ 741.464303][ T9105] usb 3-1: Manufacturer: syz [ 741.468943][ T9105] usb 3-1: SerialNumber: syz [ 741.506192][T26748] netlink: 'syz.4.10278': attribute type 8 has an invalid length. [ 741.698335][ T9105] usb 3-1: Invalid connection information received from device [ 741.952627][ T9105] usb 3-1: USB disconnect, device number 60 [ 742.168952][T26770] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10290'. [ 742.604792][T26784] netlink: 'syz.0.10296': attribute type 3 has an invalid length. [ 742.663093][T26784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10296'. [ 742.734311][T26784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10296'. [ 743.536241][T26819] infiniband syz1: set down [ 743.925562][ T5603] lo speed is unknown, defaulting to 1000 [ 743.964326][T10320] lo speed is unknown, defaulting to 1000 [ 743.977794][T26811] loop2: detected capacity change from 0 to 32768 [ 744.012589][T26811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.10310 (26811) [ 744.090722][T26811] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 744.118668][T26811] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 744.170779][T26811] BTRFS info (device loop2): allowing degraded mounts [ 744.177631][T26811] BTRFS info (device loop2): turning on flush-on-commit [ 744.230655][T26811] BTRFS info (device loop2): max_inline at 0 [ 744.236745][T26811] BTRFS info (device loop2): setting nodatasum [ 744.322496][T26811] BTRFS info (device loop2): turning on sync discard [ 744.329512][T26811] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 744.420895][T26811] BTRFS info (device loop2): trying to use backup root at mount time [ 744.459592][T26811] BTRFS info (device loop2): using free space tree [ 744.861481][T26811] BTRFS info (device loop2): enabling ssd optimizations [ 744.870817][T26872] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10331'. [ 744.893745][T26872] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10331'. [ 744.921426][T26877] loop3: detected capacity change from 0 to 256 [ 744.933588][T26872] netlink: 9 bytes leftover after parsing attributes in process `syz.4.10331'. [ 744.981212][T26877] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 745.181046][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 745.316460][T26883] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10340'. [ 745.436293][T26883] 0X: renamed from caif0 [ 745.640840][ T9565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (9565) [ 745.719853][T26883] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 745.756430][T26887] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10339'. [ 746.234878][T26912] __nla_validate_parse: 1 callbacks suppressed [ 746.234898][T26912] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10350'. [ 746.344549][T26912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10350'. [ 746.431882][T26912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10350'. [ 747.003028][ T27] audit: type=1326 audit(746.929:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.4.10362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 747.026614][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.046517][ T27] audit: type=1326 audit(746.929:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.4.10362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 747.164354][ T27] audit: type=1326 audit(746.929:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.4.10362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 747.257996][ T27] audit: type=1326 audit(746.929:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.4.10362" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 747.447255][T26948] loop5: detected capacity change from 0 to 512 [ 747.508018][T26954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10369'. [ 747.519013][T26948] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 747.688283][T22228] EXT4-fs (loop5): unmounting filesystem. [ 747.763249][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.626435][ T27] audit: type=1326 audit(748.549:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26996 comm="syz.5.10391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 748.716917][ T27] audit: type=1326 audit(748.599:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26996 comm="syz.5.10391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 748.823109][ T27] audit: type=1326 audit(748.599:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26996 comm="syz.5.10391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 748.929649][ T27] audit: type=1326 audit(748.599:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26996 comm="syz.5.10391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 748.990888][ T27] audit: type=1326 audit(748.599:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26996 comm="syz.5.10391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 749.048294][T17679] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 749.066235][ T27] audit: type=1326 audit(748.599:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26996 comm="syz.5.10391" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 749.209662][T27017] loop2: detected capacity change from 0 to 512 [ 749.261005][T17679] usb 1-1: Using ep0 maxpacket: 16 [ 749.268853][T17679] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 749.330705][T17679] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 749.350656][T17679] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 749.379528][T17679] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 749.414344][T17679] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 749.438580][T17679] usb 1-1: config 0 has no interface number 0 [ 749.458829][T17679] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 749.478244][T17679] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 749.488481][T17679] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 749.510468][T17679] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.556563][T17679] usb 1-1: config 0 interface 125 has no altsetting 0 [ 749.563750][T17679] usb 1-1: config 0 interface 125 has no altsetting 2 [ 749.585141][T17679] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 749.616426][T17679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.660657][T17679] usb 1-1: Product: syz [ 749.664895][T17679] usb 1-1: Manufacturer: syz [ 749.669527][T17679] usb 1-1: SerialNumber: syz [ 749.730384][T17679] usb 1-1: config 0 descriptor?? [ 749.746145][T17679] usb 1-1: selecting invalid altsetting 2 [ 750.171548][ C0] usb 1-1: async_complete: urb error -71 [ 750.177346][ C0] usb 1-1: async_complete: urb error -71 [ 750.179857][T27044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10415'. [ 750.183065][ C0] usb 1-1: async_complete: urb error -71 [ 750.185820][T17679] get_1284_register: usb error -71 [ 750.220354][T17679] usb 1-1: USB disconnect, device number 59 [ 750.478190][T27053] loop2: detected capacity change from 0 to 512 [ 750.487990][T27025] loop5: detected capacity change from 0 to 32768 [ 750.511352][T27025] (syz.5.10405,27025,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 750.527994][T27025] (syz.5.10405,27025,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 750.554000][T27053] EXT4-fs: Ignoring removed bh option [ 750.587868][T27025] JBD2: Ignoring recovery information on journal [ 750.600013][T27053] EXT4-fs: Ignoring removed mblk_io_submit option [ 750.630934][ T4319] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 750.654680][T27025] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 750.686454][T27053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 750.757772][T27025] (syz.5.10405,27025,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 750.782289][T27053] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 750.844511][ T4319] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 750.889290][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.954420][ T4319] usb 5-1: Product: syz [ 750.956610][T27053] EXT4-fs error (device loop2): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.2.10419: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 750.958683][ T4319] usb 5-1: Manufacturer: syz [ 751.048414][ T4319] usb 5-1: SerialNumber: syz [ 751.087657][ T4319] usb 5-1: config 0 descriptor?? [ 751.123837][ T4319] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 751.135881][T27053] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #12: comm syz.2.10419: directory missing '.' [ 751.247998][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 751.464058][T22228] ocfs2: Unmounting device (7,5) on (node local) [ 751.545614][ T5607] usb 5-1: USB disconnect, device number 47 [ 751.820872][T10320] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 751.928562][T27094] netlink: 'syz.5.10436': attribute type 2 has an invalid length. [ 751.954168][T27094] netlink: 'syz.5.10436': attribute type 11 has an invalid length. [ 752.003489][T27094] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10436'. [ 752.026362][T10320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 752.040347][T10320] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 752.059629][T10320] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 752.097162][T10320] usb 1-1: config 1 interface 0 has no altsetting 0 [ 752.142674][T10320] usb 1-1: config 1 interface 0 has no altsetting 1 [ 752.156384][T10320] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 752.190793][T10320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.202497][T27099] loop5: detected capacity change from 0 to 128 [ 752.230653][T10320] usb 1-1: Product: syz [ 752.234886][T10320] usb 1-1: Manufacturer: syz [ 752.239512][T10320] usb 1-1: SerialNumber: syz [ 752.270839][T27099] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 752.300453][T27099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.473877][T27107] tmpfs: Bad value for 'mpol' [ 752.507498][T10320] smsusb:smsusb_probe: board id=8, interface number 0 [ 752.520900][T10320] usb 1-1: selecting invalid altsetting 0 [ 752.526680][T10320] smsusb:smsusb_probe: usb_set_interface failed, rc -22 [ 752.561855][T10320] smsusb: probe of 1-1:1.0 failed with error -22 [ 752.594690][T10320] usb 1-1: USB disconnect, device number 60 [ 752.981992][T27124] netlink: 'syz.5.10451': attribute type 10 has an invalid length. [ 753.005945][T27124] device veth1_macvtap left promiscuous mode [ 753.060824][T27130] netlink: 'syz.3.10453': attribute type 7 has an invalid length. [ 753.296555][T27139] loop0: detected capacity change from 0 to 128 [ 753.331803][T27139] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 753.413642][T27139] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 754.504349][T27182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10478'. [ 754.584931][T27182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10478'. [ 754.645095][T27182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10478'. [ 754.856847][T27196] netlink: 'syz.5.10486': attribute type 15 has an invalid length. [ 755.280009][T27214] loop3: detected capacity change from 0 to 256 [ 756.080858][ T9105] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 756.280712][ T9105] usb 1-1: Using ep0 maxpacket: 32 [ 756.292538][ T9105] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.322402][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 756.322419][ T27] audit: type=1326 audit(756.249:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 756.332719][ T9105] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 756.384572][T27253] loop5: detected capacity change from 0 to 512 [ 756.433590][T27253] EXT4-fs: Ignoring removed oldalloc option [ 756.464032][ T27] audit: type=1326 audit(756.249:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 756.487689][ T9105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.487719][ T9105] usb 1-1: Product: syz [ 756.500604][ T9105] usb 1-1: Manufacturer: syz [ 756.505241][ T9105] usb 1-1: SerialNumber: syz [ 756.533239][ T9105] usb 1-1: config 0 descriptor?? [ 756.582268][T27253] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.10512: invalid block [ 756.589346][ T27] audit: type=1326 audit(756.249:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 756.596821][ T9105] usb 1-1: bad CDC descriptors [ 756.694000][T27253] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.10512: invalid indirect mapped block 1024 (level 0) [ 756.714411][T27262] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 756.749055][ T27] audit: type=1326 audit(756.249:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 756.758212][ T52] block nbd3: Attempted send on invalid socket [ 756.779171][ T52] blk_print_req_error: 2 callbacks suppressed [ 756.779186][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 756.781587][T27253] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.10512: bg 0: block 35: padding at end of block bitmap is not set [ 756.788274][ T9105] usb 1-1: unsupported MDLM descriptors [ 756.819129][ T9105] usb 1-1: USB disconnect, device number 61 [ 756.837590][ T27] audit: type=1326 audit(756.249:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f541db9dc02 code=0x7ffc0000 [ 756.871130][ T27] audit: type=1326 audit(756.249:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f541db5e6ce code=0x7ffc0000 [ 756.876421][T27253] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 756.910720][ T27] audit: type=1326 audit(756.249:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f541db9dcc7 code=0x7ffc0000 [ 756.941710][T27253] EXT4-fs (loop5): 1 truncate cleaned up [ 756.947823][T27253] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 757.010695][ T27] audit: type=1326 audit(756.309:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f541db5e6ce code=0x7ffc0000 [ 757.100637][ T27] audit: type=1326 audit(756.309:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f541db9db2b code=0x7ffc0000 [ 757.174800][ T27] audit: type=1326 audit(756.349:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27250 comm="syz.5.10512" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f541db5e6ce code=0x7ffc0000 [ 757.232414][T22228] EXT4-fs (loop5): unmounting filesystem. [ 757.389690][T27278] netlink: 'syz.2.10526': attribute type 2 has an invalid length. [ 757.459471][T27278] netlink: 'syz.2.10526': attribute type 1 has an invalid length. [ 757.561653][T27283] netlink: 'syz.5.10529': attribute type 2 has an invalid length. [ 757.601014][T27283] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 757.750523][T27292] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10533'. [ 757.991791][T27300] device sit0 entered promiscuous mode [ 758.029819][T27300] netlink: 'syz.3.10536': attribute type 1 has an invalid length. [ 758.072676][T27300] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10536'. [ 758.173251][T27304] loop4: detected capacity change from 0 to 4096 [ 758.201276][T27304] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 758.611112][T27321] netlink: 'syz.4.10546': attribute type 4 has an invalid length. [ 758.840878][T27327] usb usb9: usbfs: process 27327 (syz.5.10549) did not claim interface 1 before use [ 759.589415][T27357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 759.596746][T27357] IPv6: NLM_F_CREATE should be set when creating new route [ 759.604096][T27357] IPv6: NLM_F_CREATE should be set when creating new route [ 760.450774][ T4319] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 760.650823][ T4319] usb 4-1: Using ep0 maxpacket: 8 [ 760.657887][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 760.697058][ T4319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 760.698916][T27404] loop4: detected capacity change from 0 to 512 [ 760.725614][ T4319] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 760.752262][ T4319] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68 [ 760.769037][ T4319] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 760.793921][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.828517][ T4319] usb 4-1: config 0 descriptor?? [ 760.829757][T27404] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 760.834391][T27384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 760.964888][T27404] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 760.998100][T27404] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.10585: iget: bad i_size value: 12154757448730 [ 761.041369][T27404] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.10585: couldn't read orphan inode 13 (err -117) [ 761.140186][T27404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 761.154929][T27418] loop0: detected capacity change from 0 to 164 [ 761.178915][T27404] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 761.307280][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 761.386041][T20947] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 761.395232][ T9105] usb 4-1: USB disconnect, device number 42 [ 761.550720][ T5600] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 761.733157][T27434] netlink: 'syz.0.10600': attribute type 4 has an invalid length. [ 761.742740][T27434] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.10600'. [ 761.770880][ T5600] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 761.791221][ T5600] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.821671][ T5600] usb 6-1: config 0 descriptor?? [ 761.892389][T27437] loop2: detected capacity change from 0 to 1024 [ 761.943519][T27437] hfsplus: invalid file type 0174377 for inode 21 [ 762.033460][ T5600] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 762.043369][ T5600] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 762.243344][ T5600] [drm:udl_init] *ERROR* Selecting channel failed [ 762.276942][ T5600] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 762.288223][ T5600] [drm] Initialized udl on minor 2 [ 762.301547][ T5600] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 762.317690][ T5600] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 762.366959][ T5600] usb 6-1: USB disconnect, device number 16 [ 762.399191][T10320] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 762.414658][T10320] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 762.428090][T27450] xt_CT: No such helper "pptp" [ 762.451146][T10320] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 762.477160][T27455] loop4: detected capacity change from 0 to 1024 [ 762.668848][T22421] hfsplus: b-tree write err: -5, ino 25 [ 762.681063][T22421] hfsplus: b-tree write err: -5, ino 4 [ 762.691684][T22421] hfsplus: b-tree write err: -5, ino 2 [ 762.745339][T27459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10611'. [ 762.920392][T27463] xt_cgroup: invalid path, errno=-2 [ 762.943760][T27465] loop5: detected capacity change from 0 to 256 [ 763.028156][T27465] FAT-fs (loop5): Directory bread(block 64) failed [ 763.062004][T27465] FAT-fs (loop5): Directory bread(block 65) failed [ 763.076246][T27467] loop3: detected capacity change from 0 to 1024 [ 763.083091][T27465] FAT-fs (loop5): Directory bread(block 66) failed [ 763.135769][T27465] FAT-fs (loop5): Directory bread(block 67) failed [ 763.165286][T27465] FAT-fs (loop5): Directory bread(block 68) failed [ 763.185187][T27444] loop0: detected capacity change from 0 to 32768 [ 763.190780][T27465] FAT-fs (loop5): Directory bread(block 69) failed [ 763.213137][T27444] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 763.224359][T27465] FAT-fs (loop5): Directory bread(block 70) failed [ 763.238150][T27465] FAT-fs (loop5): Directory bread(block 71) failed [ 763.246539][T27465] FAT-fs (loop5): Directory bread(block 72) failed [ 763.253598][T27465] FAT-fs (loop5): Directory bread(block 73) failed [ 763.262567][T27467] __quota_error: 16 callbacks suppressed [ 763.262585][T27467] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 763.370985][T27467] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 763.420378][T27467] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.10615: Failed to acquire dquot type 0 [ 763.463410][ T27] audit: type=1800 audit(763.389:457): pid=27465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10614" name="file1" dev="loop5" ino=1048661 res=0 errno=0 [ 763.518468][T27467] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 763.570089][T27467] EXT4-fs (loop3): 1 truncate cleaned up [ 763.596636][T27467] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 763.691200][ T4397] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 763.910429][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 764.397105][T27498] IPv6: Can't replace route, no match found [ 764.567630][T27502] loop4: detected capacity change from 0 to 2048 [ 764.695734][T27502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 764.960118][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 765.230057][T27530] loop0: detected capacity change from 0 to 256 [ 765.583348][T27538] device vxcan3 entered promiscuous mode [ 765.674893][T27546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10652'. [ 765.684909][T27546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10652'. [ 765.812881][T27548] IPv6: sit2: Disabled Multicast RS [ 766.424362][T27571] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 767.350840][ T5600] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 767.580877][ T5600] usb 5-1: Using ep0 maxpacket: 16 [ 767.588648][ T5600] usb 5-1: config 0 has no interfaces? [ 767.633127][ T5600] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 767.678322][ T27] audit: type=1326 audit(767.599:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27608 comm="syz.5.10685" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x0 [ 767.701773][ T5600] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.709840][ T5600] usb 5-1: Product: syz [ 767.760713][ T5600] usb 5-1: Manufacturer: syz [ 767.770853][ T5600] usb 5-1: SerialNumber: syz [ 767.790473][ T5600] r8152-cfgselector 5-1: config 0 descriptor?? [ 768.026382][ T5600] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 768.233947][T10320] usb 5-1: USB disconnect, device number 48 [ 768.306167][T27634] loop0: detected capacity change from 0 to 2048 [ 768.374128][T27635] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 768.493676][T27634] syz.0.10696: attempt to access beyond end of device [ 768.493676][T27634] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 768.544609][T27634] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 768.573473][T27634] syz.0.10696: attempt to access beyond end of device [ 768.573473][T27634] loop0: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 768.645816][T27634] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15) [ 768.659003][T27634] NILFS (loop0): error -5 truncating bmap (ino=16) [ 768.897222][T27642] loop3: detected capacity change from 0 to 4096 [ 768.909831][ T27] audit: type=1326 audit(768.839:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27645 comm="syz.2.10702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 768.999548][T27648] loop0: detected capacity change from 0 to 512 [ 769.022344][T27642] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 769.039148][T27648] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 769.090407][ T27] audit: type=1326 audit(768.859:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27645 comm="syz.2.10702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 769.152865][T27648] EXT4-fs (loop0): warning: maximal mount count reached, running e2fsck is recommended [ 769.160591][ T27] audit: type=1326 audit(768.869:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27645 comm="syz.2.10702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 769.232895][T27648] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.10701: inode #15: comm syz.0.10701: iget: illegal inode # [ 769.261275][ T27] audit: type=1326 audit(768.869:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27645 comm="syz.2.10702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 769.285636][ T27] audit: type=1326 audit(768.869:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27645 comm="syz.2.10702" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 769.305376][T27648] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.10701: couldn't read orphan inode 15 (err -117) [ 769.317262][T27657] netlink: 'syz.4.10705': attribute type 29 has an invalid length. [ 769.329654][T27657] netlink: 'syz.4.10705': attribute type 29 has an invalid length. [ 769.350681][T27648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 769.491621][T27648] EXT4-fs error (device loop0): ext4_lookup:1858: comm syz.0.10701: inode #15: comm syz.0.10701: iget: illegal inode # [ 769.684053][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 769.826763][T27670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10711'. [ 769.882185][T27670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10711'. [ 770.063700][T27679] loop4: detected capacity change from 0 to 512 [ 770.184958][T27679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 770.275880][T27687] netlink: 'syz.5.10718': attribute type 21 has an invalid length. [ 770.532916][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 771.077179][T27715] loop2: detected capacity change from 0 to 1024 [ 771.246750][T27723] loop4: detected capacity change from 0 to 512 [ 771.422764][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.461732][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.488709][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.531075][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.545881][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.567984][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.616579][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.649284][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.681031][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.700252][T27739] loop0: detected capacity change from 0 to 512 [ 771.707477][T27723] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 49) [ 771.708714][T27738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10743'. [ 771.744382][T27738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10743'. [ 771.745908][T27739] EXT4-fs: Ignoring removed bh option [ 771.775879][ T27] audit: type=1800 audit(771.699:464): pid=27723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10736" name="file0" dev="loop4" ino=1048663 res=0 errno=0 [ 771.873454][T27739] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 772.168576][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 772.815189][T27733] loop3: detected capacity change from 0 to 32768 [ 772.839464][T27733] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 773.219267][T27786] [U] [ 773.222847][T27786] [U] [ 773.225583][T27786] [U] [ 773.228312][T27786] [U] [ 773.267443][ T9565] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 773.299427][T27786] [U] [ 773.302192][T27786] [U] [ 773.304922][T27786] [U] [ 773.307647][T27786] [U] [ 773.323577][T27786] [U] [ 773.326343][T27786] [U] [ 773.329071][T27786] [U] [ 773.348038][T27788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10767'. [ 773.377885][T27785] [U] [ 773.679009][T27802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10774'. [ 774.414266][T27825] loop0: detected capacity change from 0 to 64 [ 774.463324][T27794] loop2: detected capacity change from 0 to 32768 [ 774.532043][T27794] (syz.2.10770,27794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.589215][T27794] (syz.2.10770,27794,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 774.667415][T27831] x_tables: unsorted underflow at hook 2 [ 774.675880][T27794] JBD2: Ignoring recovery information on journal [ 774.732175][T27832] loop5: detected capacity change from 0 to 256 [ 774.743078][T27832] exfat: Deprecated parameter 'namecase' [ 774.748846][T27832] exfat: Deprecated parameter 'namecase' [ 774.775187][T27794] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 774.796069][T27832] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 774.995744][T27832] loop5: Can't mount, would change RO state [ 775.401970][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 775.510820][T17679] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 775.700890][T17679] usb 4-1: Using ep0 maxpacket: 16 [ 775.707927][T17679] usb 4-1: config 0 has no interfaces? [ 775.733221][T17679] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 775.790510][T17679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.829543][T17679] usb 4-1: Product: syz [ 775.839661][T17679] usb 4-1: Manufacturer: syz [ 775.859915][T17679] usb 4-1: SerialNumber: syz [ 775.891305][T17679] r8152-cfgselector 4-1: config 0 descriptor?? [ 776.019714][T27867] loop0: detected capacity change from 0 to 2048 [ 776.061943][T27867] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 776.082263][T27869] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10806'. [ 776.097797][T27867] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 776.106131][T17679] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 776.182861][T27867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 776.326871][T17679] usb 4-1: USB disconnect, device number 43 [ 776.549794][T27879] 0x000000000000-0x000000020000 : "" [ 776.552480][T27851] loop4: detected capacity change from 0 to 40427 [ 776.641658][T27851] F2FS-fs (loop4): Found nat_bits in checkpoint [ 776.669955][T27879] ftl_cs: FTL header not found. [ 776.757238][T27851] F2FS-fs (loop4): Start checkpoint disabled! [ 776.791686][T27883] loop5: detected capacity change from 0 to 2048 [ 776.855796][T27851] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 776.932267][T27883] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 777.089201][T27893] xt_CONNSECMARK: invalid mode: 66 [ 777.228397][T22228] EXT4-fs (loop5): unmounting filesystem. [ 778.205875][T27935] netlink: 'syz.2.10834': attribute type 12 has an invalid length. [ 778.224993][T27935] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10834'. [ 778.528131][T27945] netlink: 'syz.3.10839': attribute type 3 has an invalid length. [ 778.550869][T27945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10839'. [ 778.877147][T27921] loop4: detected capacity change from 0 to 32768 [ 778.900113][T27921] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 779.275490][ T9105] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 779.289715][ T9565] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 779.500691][ T9105] usb 1-1: Using ep0 maxpacket: 8 [ 779.520230][ T9105] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 779.575855][ T9105] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 779.610638][ T9105] usb 1-1: Product: syz [ 779.625111][ T9105] usb 1-1: Manufacturer: syz [ 779.629764][ T9105] usb 1-1: SerialNumber: syz [ 779.667500][ T9105] usb 1-1: config 0 descriptor?? [ 779.689545][ T9105] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 779.838373][T27988] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129) [ 780.097569][ T9105] gspca_zc3xx: reg_r err -71 [ 780.104158][ T9105] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 780.138877][ T9105] usb 1-1: USB disconnect, device number 62 [ 780.931622][T28028] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10880'. [ 781.310726][T10320] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 781.339549][T28042] IPv6: Can't replace route, no match found [ 781.522877][T10320] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 781.542947][T10320] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.613691][T10320] usb 1-1: config 2 interface 0 has no altsetting 0 [ 781.623895][T10320] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 781.644535][T28020] loop4: detected capacity change from 0 to 32768 [ 781.660378][T10320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.676387][T28051] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 781.697853][T28020] (syz.4.10876,28020,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 781.718728][T10320] usb 1-1: Product: syz [ 781.724809][T10320] usb 1-1: Manufacturer: syz [ 781.729444][T10320] usb 1-1: SerialNumber: syz [ 781.735275][T28020] (syz.4.10876,28020,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 781.811576][T28020] JBD2: Ignoring recovery information on journal [ 781.866515][T28055] binder: 28054:28055 ioctl 400c620e 200000000240 returned -22 [ 781.981986][T10320] ims_pcu: probe of 1-1:2.0 failed with error -22 [ 782.009611][T10320] usb 1-1: USB disconnect, device number 63 [ 782.070724][T28020] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 782.217491][T28065] loop2: detected capacity change from 0 to 256 [ 782.431604][ T4270] ocfs2: Unmounting device (7,4) on (node local) [ 782.563433][T28073] loop2: detected capacity change from 0 to 64 [ 782.757761][T28079] netlink: 44 bytes leftover after parsing attributes in process `syz.5.10904'. [ 782.800883][T28079] gre0: Master is either lo or non-ether device [ 783.054215][T28089] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 783.496159][T28109] loop3: detected capacity change from 0 to 164 [ 783.543818][T28109] rock: directory entry would overflow storage [ 783.565117][T28109] rock: sig=0x4543, size=28, remaining=18 [ 783.610260][T28109] ISOFS: unable to read i-node block [ 783.673949][T28113] loop5: detected capacity change from 0 to 512 [ 783.728910][T28113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 783.839181][T28113] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 783.918915][T28117] loop4: detected capacity change from 0 to 4096 [ 784.019099][T28117] NILFS (loop4): invalid segment: Checksum error in segment payload [ 784.040017][T28113] EXT4-fs error (device loop5): ext4_xattr_block_find:1828: inode #12: comm syz.5.10920: corrupted xattr block 6 [ 784.091121][T28117] NILFS (loop4): trying rollback from an earlier position [ 784.151198][T28117] NILFS (loop4): recovery complete [ 784.185150][T28130] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 784.286603][T22228] EXT4-fs (loop5): unmounting filesystem. [ 784.291209][T28135] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072924056005) [ 784.380839][T28135] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 784.508126][T28139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10932'. [ 784.647520][T28144] SET target dimension over the limit! [ 785.421728][T28171] loop5: detected capacity change from 0 to 2048 [ 785.440868][ T9105] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 785.475632][T28171] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.629821][T28179] loop0: detected capacity change from 0 to 256 [ 785.642566][ T9105] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 785.661175][ T9105] usb 3-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 785.707842][ T9105] usb 3-1: config 220 has no interface number 2 [ 785.725736][ T9105] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 785.761045][ T9105] usb 3-1: config 220 interface 0 has no altsetting 0 [ 785.782663][T28183] loop5: detected capacity change from 0 to 256 [ 785.811130][ T9105] usb 3-1: config 220 interface 76 has no altsetting 0 [ 785.822303][T28183] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 785.851681][ T9105] usb 3-1: config 220 interface 1 has no altsetting 0 [ 785.879846][ T9105] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 785.919445][ T9105] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.938154][ T9105] usb 3-1: Product: syz [ 785.966751][ T9105] usb 3-1: Manufacturer: syz [ 785.980602][ T9105] usb 3-1: SerialNumber: syz [ 786.216498][ T9105] usb 3-1: selecting invalid altsetting 0 [ 786.233380][ T9105] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 786.239808][ T9105] usb 3-1: No valid video chain found. [ 786.290322][T17679] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 786.303208][ T9105] usb 3-1: selecting invalid altsetting 0 [ 786.308996][ T9105] usbtest: probe of 3-1:220.1 failed with error -22 [ 786.350831][ T9105] usb 3-1: USB disconnect, device number 61 [ 786.502486][T17679] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.533288][T17679] usb 4-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 786.581051][T17679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.589122][T17679] usb 4-1: Product: syz [ 786.618623][T17679] usb 4-1: Manufacturer: syz [ 786.634457][T17679] usb 4-1: SerialNumber: syz [ 786.652112][T28203] netlink: 216 bytes leftover after parsing attributes in process `syz.4.10962'. [ 786.672806][T17679] usb 4-1: config 0 descriptor?? [ 786.886694][T17679] cdc_subset: probe of 4-1:0.0 failed with error -22 [ 787.123460][T17679] usb 4-1: USB disconnect, device number 44 [ 787.551911][T28236] loop2: detected capacity change from 0 to 64 [ 787.554454][ T27] audit: type=1326 audit(787.479:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 787.749387][ T27] audit: type=1326 audit(787.539:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 787.850141][ T27] audit: type=1326 audit(787.539:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 787.962282][ T27] audit: type=1326 audit(787.539:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 788.037565][T28252] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 788.054617][ T27] audit: type=1326 audit(787.539:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 788.061098][T28253] program syz.2.10987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 788.128449][ T27] audit: type=1326 audit(787.539:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 788.178076][ T27] audit: type=1326 audit(787.539:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 788.190934][T28256] loop0: detected capacity change from 0 to 2048 [ 788.285534][T28256] Alternate GPT is invalid, using primary GPT. [ 788.304748][ T27] audit: type=1326 audit(787.539:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28234 comm="syz.0.10978" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb00b59de99 code=0x7ffc0000 [ 788.329899][T28256] loop0: p1 p2 p3 [ 788.438069][ T3638] Alternate GPT is invalid, using primary GPT. [ 788.457561][ T3638] loop0: p1 p2 p3 [ 788.643802][ T9565] udevd[9565]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 788.684692][ T4394] udevd[4394]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 788.713973][ T9565] udevd[9565]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 788.794587][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 788.799334][ T9565] udevd[9565]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 788.809712][ T4394] udevd[4394]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 789.000698][T17679] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 789.029464][T28287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11004'. [ 789.190789][T17679] usb 4-1: Using ep0 maxpacket: 8 [ 789.198168][T17679] usb 4-1: unable to get BOS descriptor or descriptor too short [ 789.199277][T17679] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.259286][T17679] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 789.268786][T17679] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 789.298388][T17679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.298420][T17679] usb 4-1: Product: syz [ 789.298437][T17679] usb 4-1: Manufacturer: syz [ 789.298453][T17679] usb 4-1: SerialNumber: syz [ 789.708715][T17679] usb 4-1: 0:2 : does not exist [ 789.755997][T17679] usb 4-1: USB disconnect, device number 45 [ 790.041675][ T9565] udevd[9565]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.513838][T28308] loop5: detected capacity change from 0 to 32768 [ 790.569071][T28308] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.11015 (28308) [ 790.645646][T28308] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 790.721134][T28308] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 790.728406][T28340] Cannot find del_set index 4 as target [ 790.752864][T28308] BTRFS info (device loop5): enabling ssd optimizations [ 790.789139][T28308] BTRFS info (device loop5): not using ssd optimizations [ 790.817978][T28308] BTRFS info (device loop5): turning off barriers [ 790.834909][T28308] BTRFS info (device loop5): use no compression [ 790.877483][T28308] BTRFS info (device loop5): using free space tree [ 791.792373][T28391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11047'. [ 791.808531][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11047'. [ 791.862949][T22228] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 791.880831][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11047'. [ 792.158942][T28397] loop2: detected capacity change from 0 to 764 [ 792.214397][T28400] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 792.264783][T28397] Symlink component flag not implemented [ 792.321258][T28397] Symlink component flag not implemented [ 793.661655][T28441] SET target dimension over the limit! [ 793.805771][T28411] loop4: detected capacity change from 0 to 32768 [ 793.846797][T28411] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.11056 (28411) [ 793.914885][T28411] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 793.949293][T28411] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 794.009028][T28411] BTRFS info (device loop4): enabling ssd optimizations [ 794.040772][T28411] BTRFS info (device loop4): not using ssd optimizations [ 794.047891][T28411] BTRFS info (device loop4): turning off barriers [ 794.087742][T28411] BTRFS info (device loop4): use no compression [ 794.105179][T28411] BTRFS info (device loop4): using free space tree [ 794.413886][T28476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.861083][ T4270] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 795.310720][T28509] ieee802154 phy1 wpan1: encryption failed: -90 [ 795.589983][T28516] loop0: detected capacity change from 0 to 16 [ 795.618356][T28516] erofs: (device loop0): mounted with root inode @ nid 36. [ 795.714496][T28516] syz.0.11098: attempt to access beyond end of device [ 795.714496][T28516] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 795.736034][ T9105] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 795.791005][T28516] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 795.940729][ T9105] usb 6-1: Using ep0 maxpacket: 8 [ 795.950355][ T9105] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 795.997618][ T9105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.020697][ T9105] usb 6-1: Product: syz [ 796.024928][ T9105] usb 6-1: Manufacturer: syz [ 796.039815][ T9105] usb 6-1: SerialNumber: syz [ 796.144815][T28505] loop3: detected capacity change from 0 to 32768 [ 796.238814][T28535] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11105'. [ 796.245792][T28505] XFS (loop3): Mounting V5 Filesystem [ 796.378007][T28541] loop4: detected capacity change from 0 to 256 [ 796.460971][T28505] XFS (loop3): Ending clean mount [ 796.503555][ T9105] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 796.530675][ T9105] mxuport: probe of 6-1:254.0 failed with error -5 [ 796.571097][ T9105] usb 6-1: USB disconnect, device number 17 [ 796.685770][ T4280] XFS (loop3): Unmounting Filesystem [ 797.059648][T28554] xt_time: unknown flags 0xc [ 797.192946][T28525] loop0: detected capacity change from 0 to 32768 [ 797.241097][T28525] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.11101 (28525) [ 797.330635][T28525] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 797.381521][T28525] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 797.423342][T28525] BTRFS info (device loop0): enabling ssd optimizations [ 797.448171][T28525] BTRFS info (device loop0): not using ssd optimizations [ 797.475623][T28525] BTRFS info (device loop0): turning off barriers [ 797.516821][T28525] BTRFS info (device loop0): use no compression [ 797.526879][T28568] netlink: 'syz.4.11116': attribute type 24 has an invalid length. [ 797.533275][T28525] BTRFS info (device loop0): using free space tree [ 798.049480][ T4281] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 798.099110][T28598] loop4: detected capacity change from 0 to 2048 [ 798.156121][T28598] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 798.214556][T28598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 798.954172][T28622] netlink: 'syz.5.11131': attribute type 27 has an invalid length. [ 798.983325][ T4319] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 799.107953][T28629] Zero length message leads to an empty skb [ 799.180875][ T4319] usb 1-1: Using ep0 maxpacket: 8 [ 799.212383][ T4319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 799.253012][ T4319] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 799.287560][T28633] No such timeout policy "syz1" [ 799.298688][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.310743][ T4319] usb 1-1: Product: syz [ 799.314962][ T4319] usb 1-1: Manufacturer: syz [ 799.339946][ T4319] usb 1-1: SerialNumber: syz [ 799.357651][ T4319] usb 1-1: config 0 descriptor?? [ 799.385094][ T4319] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 799.483623][ T27] audit: type=1326 audit(799.409:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.583567][ T27] audit: type=1326 audit(799.409:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.615738][ T4319] usb 1-1: USB disconnect, device number 64 [ 799.660147][ T27] audit: type=1326 audit(799.429:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.759019][ T27] audit: type=1326 audit(799.429:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.789930][ T27] audit: type=1326 audit(799.439:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.817992][ T27] audit: type=1326 audit(799.439:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.842241][ T27] audit: type=1326 audit(799.439:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.866985][ T27] audit: type=1326 audit(799.439:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.893402][ T27] audit: type=1326 audit(799.439:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28641 comm="syz.5.11140" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 799.960854][ T4314] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 800.049673][ T27] audit: type=1326 audit(799.969:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28657 comm="syz.5.11149" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x0 [ 800.178100][ T4314] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.196223][ T4314] usb 5-1: not running at top speed; connect to a high speed hub [ 800.233555][ T4314] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40 [ 800.283611][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.309803][ T4314] usb 5-1: Product: syz [ 800.323833][ T4314] usb 5-1: Manufacturer: syz [ 800.328569][ T4314] usb 5-1: SerialNumber: syz [ 800.338034][T28668] netlink: 'syz.2.11153': attribute type 3 has an invalid length. [ 800.596886][ T4314] usb 5-1: USB disconnect, device number 49 [ 800.831408][ T4396] udevd[4396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.013779][T28682] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11161'. [ 801.047119][T28680] loop3: detected capacity change from 0 to 2048 [ 801.063957][T17679] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 801.272589][T17679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 801.306897][T17679] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 801.346386][T17679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 801.386887][T17679] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 801.422076][T17679] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 801.440409][T17679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.481687][T17679] usb 1-1: config 0 descriptor?? [ 801.695813][T17679] hdpvr 1-1:0.0: firmware version 0x8 dated [ 801.770773][ T4319] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 801.803493][T28702] loop5: detected capacity change from 0 to 4096 [ 801.903690][T17679] hdpvr 1-1:0.0: device init failed [ 801.909636][T17679] hdpvr: probe of 1-1:0.0 failed with error -12 [ 801.949682][T17679] usb 1-1: USB disconnect, device number 65 [ 801.962759][ T4319] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 801.995880][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.047942][ T4319] usb 4-1: config 0 descriptor?? [ 802.079774][ T4319] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 802.179807][T28702] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 802.235199][T28702] ntfs3: loop5: Failed to load $Extend. [ 802.484421][ T4319] gp8psk: usb out operation failed. [ 802.495754][ T4319] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 802.561592][ T4319] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 802.588766][ T4319] usb 4-1: USB disconnect, device number 46 [ 802.640006][T28714] loop2: detected capacity change from 0 to 512 [ 802.733986][T28714] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 802.863319][T28714] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 802.919776][T28714] EXT4-fs (loop2): Remounting filesystem read-only [ 803.051609][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 804.043738][T28758] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 804.239932][T28751] infiniband syz0: set active [ 804.248989][T28751] infiniband syz0: added bond_slave_0 [ 804.303042][ T5607] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 804.350199][T28751] RDS/IB: syz0: added [ 804.401023][T28751] smc: adding ib device syz0 with port count 1 [ 804.421854][T28751] smc: ib device syz0 port 1 has pnetid [ 804.490640][ T5607] usb 1-1: Using ep0 maxpacket: 8 [ 804.522553][ T5607] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 804.540488][ T5607] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.571006][ T5607] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 804.592478][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.624245][ T5607] usb 1-1: Product: syz [ 804.640578][ T5607] usb 1-1: Manufacturer: syz [ 804.655464][ T5607] usb 1-1: SerialNumber: syz [ 804.682757][ T5607] usb 1-1: config 0 descriptor?? [ 804.699753][ T5607] powermate: probe of 1-1:0.0 failed with error -5 [ 804.907086][ T5607] usb 1-1: USB disconnect, device number 66 [ 805.127174][T28783] loop4: detected capacity change from 0 to 8 [ 805.169300][T28783] SQUASHFS error: Failed to read block 0x26067d: -5 [ 805.184058][T28783] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 805.214912][T28783] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 805.650703][ T5607] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 805.840807][ T5607] usb 5-1: Using ep0 maxpacket: 32 [ 805.852700][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.879619][ T5607] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.904108][ T5607] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 805.936190][ T5607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.980028][ T5607] usb 5-1: config 0 descriptor?? [ 805.999013][ T5607] hub 5-1:0.0: USB hub found [ 806.204459][ T5607] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 806.257241][T28805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11219'. [ 806.318982][T28805] netlink: 'syz.0.11219': attribute type 1 has an invalid length. [ 806.360951][T28808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11221'. [ 806.414765][ T5607] usbhid 5-1:0.0: can't add hid device: -71 [ 806.422513][ T5607] usbhid: probe of 5-1:0.0 failed with error -71 [ 806.500013][ T5607] usb 5-1: USB disconnect, device number 50 [ 806.633925][T28817] loop5: detected capacity change from 0 to 8 [ 807.712229][T28856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11243'. [ 808.904094][T28901] SET target dimension over the limit! [ 809.202774][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.941234][T28934] netlink: 'syz.3.11281': attribute type 1 has an invalid length. [ 810.316558][T28942] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.11285'. [ 810.326623][T28942] netlink: 3648 bytes leftover after parsing attributes in process `syz.5.11285'. [ 810.517401][T28946] loop3: detected capacity change from 0 to 256 [ 810.742435][T28952] loop5: detected capacity change from 0 to 64 [ 811.010917][T28959] loop4: detected capacity change from 0 to 512 [ 811.086198][T28959] EXT4-fs (loop4): bad s_min_extra_isize: 1824 [ 811.447904][T28969] loop4: detected capacity change from 0 to 764 [ 812.190660][ T4319] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 812.237374][T28965] loop3: detected capacity change from 0 to 32768 [ 812.275365][T28965] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.11296 (28965) [ 812.330947][T28965] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 812.350135][T28965] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 812.369392][T28965] BTRFS info (device loop3): enabling ssd optimizations [ 812.408174][T28965] BTRFS info (device loop3): not using ssd optimizations [ 812.417953][ T4319] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 812.426353][T28965] BTRFS info (device loop3): turning off barriers [ 812.426380][T28965] BTRFS info (device loop3): use no compression [ 812.460178][ T4319] usb 1-1: config 0 has no interface number 0 [ 812.466551][T28965] BTRFS info (device loop3): using free space tree [ 812.540857][ T4319] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 812.586570][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.640667][ T4319] usb 1-1: Product: syz [ 812.644923][ T4319] usb 1-1: Manufacturer: syz [ 812.644943][T29009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 812.649524][ T4319] usb 1-1: SerialNumber: syz [ 812.663621][ T4319] usb 1-1: config 0 descriptor?? [ 813.012271][ T4280] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 813.084876][ T4319] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 813.104188][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 813.104205][ T27] audit: type=1326 audit(813.029:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.2.11316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 813.110159][ T4319] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 813.110361][ T27] audit: type=1326 audit(813.029:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.2.11316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 813.231699][ T4319] asix: probe of 1-1:0.251 failed with error -5 [ 813.336405][ T4319] usb 1-1: USB disconnect, device number 67 [ 813.430628][ T27] audit: type=1326 audit(813.099:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.2.11316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 813.567490][ T27] audit: type=1326 audit(813.099:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.2.11316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 813.750830][ T27] audit: type=1326 audit(813.099:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29026 comm="syz.2.11316" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x7ffc0000 [ 814.004180][T29046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11325'. [ 814.050963][T29046] netlink: 288 bytes leftover after parsing attributes in process `syz.4.11325'. [ 814.950840][ T4316] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 814.988542][T29085] loop2: detected capacity change from 0 to 2048 [ 815.037829][T29085] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 815.171292][ T4316] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 815.207323][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.225760][ T4316] usb 5-1: Product: syz [ 815.236455][ T4316] usb 5-1: Manufacturer: syz [ 815.249231][ T4316] usb 5-1: SerialNumber: syz [ 815.291952][ T4316] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 815.353903][T17679] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 815.599473][T29075] random: crng reseeded on system resumption [ 815.676544][ T4316] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 815.818370][T29113] x_tables: unsorted underflow at hook 2 [ 815.843695][T29114] loop5: detected capacity change from 0 to 1024 [ 815.889144][T29114] EXT4-fs: Ignoring removed orlov option [ 815.900911][ T4316] usb 4-1: Using ep0 maxpacket: 16 [ 815.918841][ T4316] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 815.938155][T29114] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 815.947824][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.947851][ T4316] usb 4-1: config 0 has no interface number 0 [ 815.954521][ T4316] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 816.016865][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.019585][T29114] EXT4-fs (loop5): invalid journal inode [ 816.052630][ T4316] usb 4-1: Product: syz [ 816.056920][ T4316] usb 4-1: Manufacturer: syz [ 816.064135][T29114] EXT4-fs (loop5): can't get journal size [ 816.074830][ T4316] usb 4-1: SerialNumber: syz [ 816.092019][T29114] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 816.102691][ T4316] usb 4-1: config 0 descriptor?? [ 816.177202][ T4316] usb 4-1: Found UVC 0.00 device syz (046d:08d3) [ 816.234458][ T4316] usb 4-1: No valid video chain found. [ 816.291170][T29116] loop2: detected capacity change from 0 to 4096 [ 816.351907][ T4319] usb 5-1: USB disconnect, device number 51 [ 816.389155][T22228] EXT4-fs (loop5): unmounting filesystem. [ 816.413487][T17679] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 816.423688][T17679] ath9k_htc: Failed to initialize the device [ 816.434673][ T4319] usb 5-1: ath9k_htc: USB layer deinitialized [ 816.486124][ T4316] usb 4-1: USB disconnect, device number 47 [ 816.823084][T29125] loop2: detected capacity change from 0 to 4096 [ 816.846313][T29125] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 817.309336][T29137] loop4: detected capacity change from 0 to 1024 [ 817.391204][T29137] hfsplus: type requires a 4 character value [ 817.397256][T29137] hfsplus: unable to parse mount options [ 817.450367][T29121] loop0: detected capacity change from 0 to 32768 [ 817.562501][T29121] jfs_strtoUCS: char2uni returned -22. [ 817.595064][T29121] charset = cp936, char = 0xd4 [ 817.957246][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11379'. [ 818.160115][T29157] loop2: detected capacity change from 0 to 4096 [ 818.222157][T29157] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 818.349932][T29157] ntfs: volume version 3.1. [ 818.819608][T29181] netlink: 'syz.5.11391': attribute type 7 has an invalid length. [ 819.017994][T29187] loop3: detected capacity change from 0 to 512 [ 819.047689][T29187] EXT4-fs: Ignoring removed i_version option [ 819.088759][T29187] EXT4-fs: Ignoring removed bh option [ 819.178189][T29187] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 819.421518][ T27] audit: type=1326 audit(819.349:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.4.11402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 819.491414][ T27] audit: type=1326 audit(819.349:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.4.11402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 819.579048][ T27] audit: type=1326 audit(819.449:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.4.11402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 819.603118][T10320] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 819.625047][ T27] audit: type=1326 audit(819.449:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.4.11402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 819.763823][ T27] audit: type=1326 audit(819.449:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29206 comm="syz.4.11402" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 819.783749][T29218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11406'. [ 819.787420][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.820820][T10320] usb 4-1: Using ep0 maxpacket: 8 [ 819.828299][T10320] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 819.879475][T10320] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 819.904446][T10320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.921031][ T27] audit: type=1400 audit(819.849:494): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=29221 comm="syz.0.11409" [ 819.963279][T10320] usb 4-1: config 0 descriptor?? [ 819.981059][T10320] usb 4-1: bad CDC descriptors [ 819.987195][T10320] usb 4-1: bad CDC descriptors [ 820.000105][T10320] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 820.013037][T10320] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 820.066259][T10320] cdc_acm: probe of 4-1:0.0 failed with error -22 [ 820.142402][T29230] binder: Bad value for 'stats' [ 820.180990][T10320] usb 4-1: USB disconnect, device number 48 [ 820.300269][T29235] loop5: detected capacity change from 0 to 736 [ 820.805970][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 820.898760][T29247] device team0 entered promiscuous mode [ 820.928502][T29247] device team_slave_0 entered promiscuous mode [ 820.952317][T29247] device team_slave_1 entered promiscuous mode [ 820.990825][T29247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 821.638544][T29279] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 822.164496][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11446'. [ 822.176303][T29297] ALSA: mixer_oss: invalid OSS volume 'u' [ 822.436939][T29308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11449'. [ 823.213956][T29340] device team0 entered promiscuous mode [ 823.219591][T29340] device team_slave_0 entered promiscuous mode [ 823.316151][T29340] device team_slave_1 entered promiscuous mode [ 823.337426][T29340] device vlan0 entered promiscuous mode [ 823.378113][T29340] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 823.598025][T29350] loop2: detected capacity change from 0 to 4096 [ 823.745817][T29350] ntfs: volume version 3.1. [ 823.999254][ T27] audit: type=1326 audit(823.919:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29367 comm="syz.4.11474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 824.084087][ T27] audit: type=1326 audit(823.919:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29367 comm="syz.4.11474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 824.190793][ T27] audit: type=1326 audit(823.919:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29367 comm="syz.4.11474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 824.221070][T17679] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 824.250833][T10320] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 824.296904][ T27] audit: type=1326 audit(823.919:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29367 comm="syz.4.11474" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b62f9de99 code=0x7ffc0000 [ 824.341646][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.445329][T10320] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 824.452279][T17679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 824.470598][T10320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.492970][T17679] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 824.500683][T10320] usb 4-1: Product: syz [ 824.517765][T17679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 824.529487][T10320] usb 4-1: Manufacturer: syz [ 824.544764][T10320] usb 4-1: SerialNumber: syz [ 824.579819][T17679] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 824.581080][T10320] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 824.633316][T17679] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 824.677425][T10320] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 824.683881][T17679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.687492][T29387] loop5: detected capacity change from 0 to 8 [ 824.741571][T17679] usb 1-1: Product: syz [ 824.745801][T17679] usb 1-1: Manufacturer: syz [ 824.750429][T17679] usb 1-1: SerialNumber: syz [ 824.837267][T17679] usb 1-1: config 0 descriptor?? [ 824.845096][T29387] SQUASHFS error: zlib decompression failed, data probably corrupt [ 824.890939][T29387] SQUASHFS error: Failed to read block 0x13e: -5 [ 824.892865][T17679] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 824.938392][T29387] SQUASHFS error: Unable to read metadata cache entry [13c] [ 824.970699][T29387] SQUASHFS error: Unable to read directory block [13c:26] [ 825.155244][T17679] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 825.262146][ T5607] usb 4-1: USB disconnect, device number 49 [ 825.388578][ T4314] usb 1-1: USB disconnect, device number 68 [ 825.760699][T10320] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 825.772139][T10320] ath9k_htc: Failed to initialize the device [ 825.801301][ T5607] usb 4-1: ath9k_htc: USB layer deinitialized [ 825.934140][T29423] overlayfs: missing 'lowerdir' [ 825.987898][T29425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11495'. [ 826.044693][T29425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11495'. [ 826.187348][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11496'. [ 826.666023][T29444] netlink: 'syz.3.11502': attribute type 2 has an invalid length. [ 826.748079][T29444] device .*! entered promiscuous mode [ 826.883332][T29452] ieee802154 phy1 wpan1: encryption failed: -22 [ 827.012702][T29457] syz.3.11507: attempt to access beyond end of device [ 827.012702][T29457] mtdblock0: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=256 [ 827.097914][T29461] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.210656][ T4315] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 827.358056][T29470] ieee802154 phy1 wpan1: encryption failed: -90 [ 827.410861][ T4315] usb 6-1: Using ep0 maxpacket: 8 [ 827.418693][ T4315] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 827.451355][ T4315] usb 6-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5 [ 827.496969][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.529655][ T4315] usb 6-1: config 0 descriptor?? [ 827.766762][ T4315] usb 6-1: USB disconnect, device number 18 [ 827.828406][T29490] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 828.108170][T29501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11522'. [ 829.105496][T29539] loop0: detected capacity change from 0 to 256 [ 829.151368][T29539] FAT-fs (loop0): Directory bread(block 1285) failed [ 829.180933][T29539] FAT-fs (loop0): Directory bread(block 1286) failed [ 829.187703][T29539] FAT-fs (loop0): Directory bread(block 1287) failed [ 829.224150][T29539] FAT-fs (loop0): Directory bread(block 1288) failed [ 829.303254][T29539] FAT-fs (loop0): Directory bread(block 1285) failed [ 829.340076][T29539] FAT-fs (loop0): Directory bread(block 1286) failed [ 829.367700][T29539] FAT-fs (loop0): Directory bread(block 1287) failed [ 829.396105][T29539] FAT-fs (loop0): Directory bread(block 1288) failed [ 829.416401][T29539] FAT-fs (loop0): Directory bread(block 1285) failed [ 829.440755][ T27] audit: type=1326 audit(829.359:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.2.11546" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43bcf9de99 code=0x0 [ 829.450615][T29539] FAT-fs (loop0): Directory bread(block 1286) failed [ 829.484959][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11547'. [ 830.281147][T29579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11562'. [ 830.323411][T29579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11562'. [ 830.728299][T29593] block device autoloading is deprecated and will be removed. [ 830.747135][T29593] syz.2.11568: attempt to access beyond end of device [ 830.747135][T29593] ram201: rw=2048, sector=288230376151715400, nr_sectors = 8 limit=8192 [ 831.180658][ T4314] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 831.213028][T29613] CIFS: VFS: Malformed UNC in devname [ 831.370646][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 831.377805][ T4314] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 831.426960][ T4314] usb 1-1: config 0 has no interface number 0 [ 831.443371][ T4314] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 831.464220][ T4314] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.493866][ T4314] usb 1-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.527037][ T4314] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 831.552788][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.580647][ T4314] usb 1-1: Product: syz [ 831.585061][ T4314] usb 1-1: Manufacturer: syz [ 831.589704][ T4314] usb 1-1: SerialNumber: syz [ 831.640093][ T4314] usb 1-1: config 0 descriptor?? [ 831.658898][T29604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 831.796255][T29628] loop4: detected capacity change from 0 to 1024 [ 831.904633][ T4314] usb-storage 1-1:0.20: USB Mass Storage device detected [ 831.952397][ T4314] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 832.064434][ T4314] scsi host1: usb-storage 1-1:0.20 [ 832.123606][ T4314] usb 1-1: USB disconnect, device number 69 [ 832.180225][T29641] loop3: detected capacity change from 0 to 2048 [ 832.249015][T29641] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 832.287156][T29641] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 832.355647][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.401767][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.431197][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.469992][T29651] netlink: 'syz.4.11596': attribute type 2 has an invalid length. [ 832.488546][T29651] netlink: 'syz.4.11596': attribute type 4 has an invalid length. [ 832.508195][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.526698][T29641] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 832.556014][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.556912][T29651] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11596'. [ 832.577216][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.630887][T10320] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 832.641033][T29641] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 832.653065][T29655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11598'. [ 832.669067][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.676036][T29655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11598'. [ 832.704519][T29641] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 832.724467][T29655] netlink: 5 bytes leftover after parsing attributes in process `syz.5.11598'. [ 832.728616][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.760123][T29641] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 832.772343][T29641] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 832.842589][T10320] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 832.854431][T29659] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.873666][T10320] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 832.899417][T10320] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 832.905802][T29659] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.916347][T10320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.935895][T10320] usb 3-1: Product: syz [ 832.945776][T10320] usb 3-1: Manufacturer: syz [ 832.950778][T29659] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.969905][T29659] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 832.979105][T10320] usb 3-1: SerialNumber: syz [ 832.992675][T10320] usb 3-1: config 0 descriptor?? [ 833.000980][T29659] device geneve6 entered promiscuous mode [ 833.019972][T29647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.040962][T29647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.248228][T29669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11604'. [ 833.264677][T29669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11604'. [ 833.270429][T29647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.273873][T29669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11604'. [ 833.320123][T29647] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 833.548918][T10320] Error reading MAC address [ 833.564169][T10320] usb 3-1: USB disconnect, device number 62 [ 834.150881][T10320] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 834.350943][T10320] usb 1-1: Using ep0 maxpacket: 16 [ 834.357964][T10320] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.399891][T10320] usb 1-1: config 0 has no interface number 0 [ 834.417965][T10320] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 834.446670][T10320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.480133][T10320] usb 1-1: Product: syz [ 834.485300][T10320] usb 1-1: Manufacturer: syz [ 834.489936][T10320] usb 1-1: SerialNumber: syz [ 834.531900][T10320] usb 1-1: config 0 descriptor?? [ 834.539765][T29712] loop4: detected capacity change from 0 to 512 [ 834.568989][T29713] loop3: detected capacity change from 0 to 764 [ 834.581140][T29713] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 834.602858][T29713] Symlink component flag not implemented [ 834.608867][T29713] Symlink component flag not implemented (7) [ 834.611639][T29712] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.11626: bad orphan inode 13 [ 834.641169][T29713] Symlink component flag not implemented (7) [ 834.689411][T29715] xt_CT: No such helper "snmp" [ 834.700626][T29712] ext4_test_bit(bit=12, block=4) = 1 [ 834.705973][T29712] is_bad_inode(inode)=0 [ 834.710322][T29712] NEXT_ORPHAN(inode)=0 [ 834.714541][T29712] max_ino=32 [ 834.717770][T29712] i_nlink=1 [ 834.721375][T29712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 834.744385][T29712] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.11626: Hash code is SIPHASH, but hash not in dirent [ 834.761748][T29712] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.11626: Corrupt directory, running e2fsck is recommended [ 834.763794][T10320] usb 1-1: selecting invalid altsetting 1 [ 834.777050][T29712] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.11626: Hash code is SIPHASH, but hash not in dirent [ 834.790593][ T4315] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 834.818110][T29712] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.11626: Corrupt directory, running e2fsck is recommended [ 834.843112][T10320] speedtch 1-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 834.877139][T10320] speedtch 1-1:0.1: usbatm_usb_probe: bind failed: -22! [ 834.921121][T10320] speedtch: probe of 1-1:0.1 failed with error -22 [ 834.966327][T10320] usb 1-1: USB disconnect, device number 70 [ 835.020782][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 835.046228][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 835.053916][ T4315] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 835.078950][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.108209][ T4315] usb 3-1: Product: syz [ 835.115599][ T4315] usb 3-1: Manufacturer: syz [ 835.134480][ T4315] usb 3-1: SerialNumber: syz [ 835.170429][ T4315] usb 3-1: config 0 descriptor?? [ 835.612378][ T4315] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 835.619618][ T4315] airspy 3-1:0.0: Could not detect board [ 835.646492][ T4315] airspy: probe of 3-1:0.0 failed with error -71 [ 835.662009][ T4315] usb 3-1: USB disconnect, device number 63 [ 836.200837][ T4315] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 836.410799][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 836.427670][ T4315] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 836.460652][ T4315] usb 1-1: config 0 has no interface number 0 [ 836.466871][ T4315] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 836.500762][ T4315] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 836.520601][ T4315] usb 1-1: config 0 interface 41 has no altsetting 0 [ 836.577385][ T4315] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 836.596976][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.615572][ T4315] usb 1-1: Product: syz [ 836.619847][ T4315] usb 1-1: Manufacturer: syz [ 836.630888][ T4315] usb 1-1: SerialNumber: syz [ 836.671748][ T4315] usb 1-1: config 0 descriptor?? [ 836.681713][T29753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 836.700796][T29753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 836.767986][T29782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11660'. [ 836.945528][T29753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 837.019090][T29753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 837.281714][ T4315] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 837.310437][ T4315] usb 1-1: USB disconnect, device number 71 [ 837.344911][T29802] nftables ruleset with unbound chain [ 837.499061][T29806] device netdevsim0 entered promiscuous mode [ 837.890393][T29820] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 837.970833][T29824] netlink: 6 bytes leftover after parsing attributes in process `syz.4.11681'. [ 838.332487][T29839] loop4: detected capacity change from 0 to 1024 [ 838.381559][T29839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 838.460548][T29839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 838.468832][T29839] System zones: 0-1, 3-12 [ 838.514095][T29848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11690'. [ 838.525321][T29848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11690'. [ 838.534666][T29848] netlink: 'syz.2.11690': attribute type 6 has an invalid length. [ 838.571532][T29839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 838.648642][T29839] EXT4-fs error (device loop4): __ext4_remount:6650: comm syz.4.11689: Abort forced by user [ 838.738428][T29839] EXT4-fs (loop4): Remounting filesystem read-only [ 838.774657][T29839] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 838.893797][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 838.911439][T29858] netlink: del zone limit has 8 unknown bytes [ 839.630783][ T4314] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 839.725450][T29891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 839.820744][ T4314] usb 1-1: Using ep0 maxpacket: 16 [ 839.828504][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.869420][ T4314] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.903263][ T4314] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 839.936159][T29897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11717'. [ 839.945342][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.980465][ T4314] usb 1-1: Product: syz [ 839.985143][ T4314] usb 1-1: Manufacturer: syz [ 840.011409][ T4314] usb 1-1: SerialNumber: syz [ 840.038532][ T4314] r8152-cfgselector 1-1: config 0 descriptor?? [ 840.265244][ T4314] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 840.386321][T29913] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 840.482354][ T4314] usb 1-1: USB disconnect, device number 72 [ 840.842210][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 840.861302][T29932] infiniband syz2: set active [ 840.866351][T29932] infiniband syz2: set active [ 840.939090][T29932] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 840.979463][T29932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 841.060810][T29932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 841.092024][T29932] infiniband syz0: set active [ 841.157822][T29932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 841.231216][ T4314] lo speed is unknown, defaulting to 1000 [ 841.237049][ T4316] lo speed is unknown, defaulting to 1000 [ 841.376558][T29949] SET target dimension over the limit! [ 841.461153][T29953] tmpfs: Bad value for 'mpol' [ 841.880693][T29972] loop0: detected capacity change from 0 to 64 [ 841.904898][T29970] loop5: detected capacity change from 0 to 164 [ 842.197792][ T4316] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 842.392881][ T4316] usb 3-1: unable to get BOS descriptor or descriptor too short [ 842.421790][ T4316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.450649][ T4316] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 842.483503][ T4316] usb 3-1: config 1 interface 1 altsetting 2 endpoint 0x1 has invalid maxpacket 9325, setting to 1024 [ 842.525098][ T4316] usb 3-1: config 1 interface 1 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 842.558533][ T4316] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 842.588568][ T4316] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 842.608451][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.686856][ T4316] usb 3-1: Product: syz [ 842.691526][ T4316] usb 3-1: Manufacturer: syz [ 842.701179][T29997] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 842.728538][ T4316] usb 3-1: SerialNumber: syz [ 842.954896][ T4316] usb 3-1: 1:2 : no or invalid class specific endpoint descriptor [ 842.974317][ T4316] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 843.004479][ T4316] usb 3-1: unit 2 not found! [ 843.019208][ T4316] usb 3-1: unit 8 not found! [ 843.083691][ T4316] usb 3-1: USB disconnect, device number 64 [ 843.266264][T30013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11771'. [ 843.308289][T30013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11771'. [ 843.325507][T30013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11771'. [ 843.348646][T30015] loop3: detected capacity change from 0 to 1764 [ 843.398370][T30015] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 843.453024][ T4394] udevd[4394]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.496628][T30057] loop3: detected capacity change from 0 to 64 [ 844.816097][T30063] loop0: detected capacity change from 0 to 4096 [ 844.921750][T30063] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 844.928675][T30072] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11800'. [ 845.046063][T30074] device veth1 entered promiscuous mode [ 845.100153][T30074] netlink: 'syz.5.11801': attribute type 1 has an invalid length. [ 845.150733][T30074] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11801'. [ 845.167562][ T4281] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 845.462100][T30078] loop4: detected capacity change from 0 to 4096 [ 845.485414][T30078] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 845.838562][ T4270] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 845.848265][ T4270] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 845.890705][ T4270] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 846.285861][T30109] siw: device registration error -23 [ 846.859263][T30096] loop0: detected capacity change from 0 to 32768 [ 846.893702][T30096] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 847.009603][T30132] 9pnet: Could not find request transport: fӃciXrr26qW5IeC2%ҿq[(z8ӓ [ 847.037909][T30133] delete_channel: no stack [ 847.471293][T30147] loop3: detected capacity change from 0 to 164 [ 847.537582][T30147] Unsupported NM flag settings (240) [ 847.853547][ T27] audit: type=1107 audit(847.769:500): pid=30157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 848.810788][T30198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11862'. [ 848.819986][T30198] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11862'. [ 848.868215][T30202] netlink: 220 bytes leftover after parsing attributes in process `syz.2.11863'. [ 848.905528][T30198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11862'. [ 848.915702][T30206] delete_channel: no stack [ 848.945525][T30198] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11862'. [ 848.985286][T30198] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11862'. [ 849.117991][T30210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 849.665488][T30232] loop4: detected capacity change from 0 to 164 [ 849.709946][T30234] loop2: detected capacity change from 0 to 8 [ 849.764571][T30236] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 849.780069][T30232] ISOFS: unable to read i-node block [ 849.787342][T30234] SQUASHFS error: Unable to read inode 0x0 [ 849.809682][T30232] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 849.871804][T30236] overlayfs: overlapping lowerdir path [ 849.915825][T30232] ISOFS: unable to read i-node block [ 850.531145][T30261] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 850.789029][T30272] x_tables: duplicate entry at hook 3 [ 851.634063][T30299] loop4: detected capacity change from 0 to 2048 [ 851.678935][T30299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 852.085025][T30316] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 852.350802][T10320] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 852.468091][ T4316] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 852.552606][T10320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 852.569917][T10320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 852.593225][T10320] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 852.608948][T10320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.609925][T30325] loop4: detected capacity change from 0 to 32768 [ 852.617245][T10320] usb 4-1: Product: syz [ 852.628178][T10320] usb 4-1: Manufacturer: syz [ 852.641844][T10320] usb 4-1: SerialNumber: syz [ 852.653726][T30325] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 852.653726][T30325] [ 852.673117][T30325] ialloc: diAlloc returned -5! [ 852.684820][ T4316] usb 6-1: Using ep0 maxpacket: 16 [ 852.693921][ T4314] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 852.707013][ T4316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.734892][ T4316] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 852.749068][ T4316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.760042][ T4316] usb 6-1: Product: syz [ 852.769666][ T4316] usb 6-1: Manufacturer: syz [ 852.777131][ T4316] usb 6-1: SerialNumber: syz [ 852.789172][ T4316] usb 6-1: config 0 descriptor?? [ 852.799824][ T4316] asix: probe of 6-1:0.0 failed with error -22 [ 852.800622][ T4315] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 852.879685][T10320] usb 4-1: unit 4 not found! [ 852.910972][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 852.929544][ T4314] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.931318][T10320] usb 4-1: USB disconnect, device number 50 [ 852.973825][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 853.009367][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.022878][ T4314] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 853.038785][ T4315] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.060686][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 853.079005][ T5607] usb 6-1: USB disconnect, device number 19 [ 853.079054][ T4314] usb 3-1: Product: syz [ 853.091334][ T4315] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 853.099699][ T4314] usb 3-1: Manufacturer: syz [ 853.120029][ T4314] usb 3-1: SerialNumber: syz [ 853.127301][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 853.147368][ T4315] usb 1-1: SerialNumber: syz [ 853.156291][ T4314] usb 3-1: config 0 descriptor?? [ 853.179742][ T4314] imon_raw 3-1:0.0: IR endpoint missing [ 853.185148][T30341] xt_TCPMSS: Only works on TCP SYN packets [ 853.207774][ T4394] udevd[4394]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.363743][ T4315] usb 1-1: 0:2 : does not exist [ 853.369298][ T4315] usb 1-1: unit 48 not found! [ 853.387874][ T4315] usb 1-1: USB disconnect, device number 73 [ 853.417982][ T5607] usb 3-1: USB disconnect, device number 65 [ 853.570822][T10320] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 853.602517][ T9565] udevd[9565]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 853.760819][T10320] usb 5-1: Using ep0 maxpacket: 32 [ 853.768153][T10320] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 853.777413][T10320] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 853.792160][T10320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 853.796980][ T4316] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 853.818044][T10320] usb 5-1: config 1 has no interface number 0 [ 853.824679][T10320] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 853.836280][T10320] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 853.855688][T10320] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 853.864812][T10320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.880996][T10320] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 853.980723][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 854.020628][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.035619][T30355] device netdevsim0 entered promiscuous mode [ 854.052717][ T4316] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 854.068080][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.079031][ T4316] usb 4-1: Product: syz [ 854.089185][ T4316] usb 4-1: Manufacturer: syz [ 854.092974][T10320] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 854.093953][ T4316] usb 4-1: SerialNumber: syz [ 854.116864][ T4316] usb 4-1: config 0 descriptor?? [ 854.152522][ T4316] cdc_ether 4-1:0.0: skipping garbage [ 854.157969][ T4316] cdc_ether 4-1:0.0: skipping garbage [ 854.200576][ T4316] cdc_ether 4-1:0.0: invalid descriptor buffer length [ 854.207442][ T4316] usb 4-1: bad CDC descriptors [ 854.221920][ T4316] usb 4-1: unsupported MDLM descriptors [ 854.227874][ T4316] cdc_acm 4-1:0.0: skipping garbage [ 854.249259][ T4316] cdc_acm 4-1:0.0: skipping garbage [ 854.260885][ T4316] cdc_acm 4-1:0.0: invalid descriptor buffer length [ 854.310097][ T4316] usb 5-1: USB disconnect, device number 52 [ 854.331496][ T4316] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 854.388383][T30362] netlink: 6 bytes leftover after parsing attributes in process `syz.2.11943'. [ 854.398005][T30363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11942'. [ 854.421428][T30363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11942'. [ 854.431033][ T4314] usb 4-1: USB disconnect, device number 51 [ 855.020340][T30383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11952'. [ 855.275335][T30393] raw_sendmsg: syz.2.11958 forgot to set AF_INET. Fix it! [ 855.472965][ T4314] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 855.497996][T30403] netlink: 'syz.5.11963': attribute type 21 has an invalid length. [ 855.689748][ T4314] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 855.731083][ T4314] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 855.770280][ T4314] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 855.842536][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.873885][T30387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 855.981388][T30418] (unnamed net_device) (uninitialized): up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 856.041920][T30418] (unnamed net_device) (uninitialized): down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 856.212857][T17679] usb 1-1: USB disconnect, device number 74 [ 856.390689][ T4314] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 856.582474][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 856.605358][ T4314] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 856.623028][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.640563][ T4314] usb 5-1: Product: syz [ 856.655074][ T4314] usb 5-1: Manufacturer: syz [ 856.659721][ T4314] usb 5-1: SerialNumber: syz [ 856.681567][ T4314] usb 5-1: config 0 descriptor?? [ 856.906996][ T4314] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 053 [ 857.141341][ T4314] usb 5-1: USB disconnect, device number 53 [ 857.250840][T10320] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 857.276500][T30462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11992'. [ 857.440813][T10320] usb 1-1: Using ep0 maxpacket: 32 [ 857.448270][T10320] usb 1-1: unable to get BOS descriptor or descriptor too short [ 857.484421][T10320] usb 1-1: New USB device found, idVendor=0e41, idProduct=3000, bcdDevice= 0.40 [ 857.494029][T10320] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.502743][T10320] usb 1-1: Product: syz [ 857.507101][T10320] usb 1-1: Manufacturer: syz [ 857.518447][T10320] usb 1-1: SerialNumber: syz [ 857.665559][ T4314] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 857.764106][T10320] usb 1-1: 4:0: failed to get current value for ch 0 (-71) [ 857.787373][T10320] usb 1-1: 4:0: failed to get current value for ch 0 (-71) [ 857.808336][T10320] usb 1-1: unit 7 not found! [ 857.853855][T10320] usb 1-1: USB disconnect, device number 75 [ 857.880763][ T4314] usb 3-1: Using ep0 maxpacket: 32 [ 857.886734][ T4314] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 857.906675][T30481] cgroup: No subsys list or none specified [ 857.921886][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 857.952645][ T4314] usb 3-1: config 0 has no interface number 0 [ 857.973668][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.010606][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.048970][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.067934][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.092983][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.113198][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.139406][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.159434][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.176175][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.190950][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.227938][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.258596][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.271724][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.300318][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.330018][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.360821][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.387349][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.413335][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.478375][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.500862][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.551396][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.570432][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.589853][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.655885][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.666008][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.693186][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.733643][ T4314] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 858.747303][T30512] loop3: detected capacity change from 0 to 8 [ 858.753522][ T4314] usb 3-1: config 0 has no interface number 0 [ 858.760471][ T4314] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.792156][ T4314] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.804453][T30512] SQUASHFS error: lzo decompression failed, data probably corrupt [ 858.815996][T30512] SQUASHFS error: Failed to read block 0x82: -5 [ 858.823506][T30512] SQUASHFS error: Unable to read metadata cache entry [80] [ 858.833303][T30512] SQUASHFS error: Unable to read inode 0x11f [ 858.847124][ T4314] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 858.873050][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.917973][ T4314] usb 3-1: Product: syz [ 858.937642][ T4314] usb 3-1: Manufacturer: syz [ 858.967736][ T4314] usb 3-1: SerialNumber: syz [ 859.002928][ T4314] usb 3-1: config 0 descriptor?? [ 859.030864][ T4314] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 859.264994][ T4314] etas_es58x 3-1:0.2: Product info: [ 859.452411][T30530] netlink: 392 bytes leftover after parsing attributes in process `syz.5.12025'. [ 859.589088][ T4314] usb 3-1: USB disconnect, device number 66 [ 859.601597][ T4314] etas_es58x 3-1:0.2: Disconnecting syz syz [ 859.658982][T30534] x_tables: duplicate underflow at hook 3 [ 860.420762][T30556] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12035'. [ 860.869496][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12039'. [ 861.021177][T30576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12042'. [ 861.137664][T30581] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 861.373833][T30587] netlink: 'syz.5.12046': attribute type 2 has an invalid length. [ 861.416859][T30587] netlink: 'syz.5.12046': attribute type 1 has an invalid length. [ 861.426917][T30587] netlink: 'syz.5.12046': attribute type 1 has an invalid length. [ 862.686570][T30631] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 863.350626][ T4316] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 863.544620][ T4316] usb 4-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 863.568301][ T4316] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 863.588553][ T4316] usb 4-1: Product: syz [ 863.599490][ T4316] usb 4-1: Manufacturer: syz [ 863.620636][ T4316] usb 4-1: SerialNumber: syz [ 863.660146][ T4316] usb 4-1: config 0 descriptor?? [ 863.800894][ T4314] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 863.896786][ T4316] peak_usb 4-1:0.0: PEAK-System PCAN-Chip USB v29 fw v73.0.0 (1 channels) [ 863.988286][T30667] ip6t_srh: unknown srh match flags 4000 [ 864.001878][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 864.012333][ T4314] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.024109][T30516] syz.0.12019 (30516): drop_caches: 3 [ 864.059373][ T4314] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 864.089815][ T4314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.108169][ T4316] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 864.120046][ T4314] usb 3-1: Product: syz [ 864.124631][ T4316] peak_usb 4-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 864.137212][ T4314] usb 3-1: Manufacturer: syz [ 864.150760][ T4314] usb 3-1: SerialNumber: syz [ 864.181642][ T4314] usb-storage 3-1:1.0: USB Mass Storage device detected [ 864.211277][ T4316] peak_usb: probe of 4-1:0.0 failed with error -71 [ 864.241695][ T4314] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 864.272186][ T4316] usb 4-1: USB disconnect, device number 52 [ 864.426663][T30680] nft_compat: unsupported protocol 5 [ 864.427228][ T5607] usb 3-1: USB disconnect, device number 67 [ 864.805281][T30693] loop3: detected capacity change from 0 to 64 [ 864.811839][T10320] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 864.829857][T30695] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12092'. [ 864.997875][T30699] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 865.000597][T10320] usb 6-1: Using ep0 maxpacket: 16 [ 865.052577][T10320] usb 6-1: config 0 has no interfaces? [ 865.068219][T10320] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 865.100690][T10320] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.130304][T30702] loop3: detected capacity change from 0 to 1024 [ 865.140589][T10320] usb 6-1: Product: syz [ 865.144808][T10320] usb 6-1: Manufacturer: syz [ 865.157981][T30702] EXT4-fs: Ignoring removed nomblk_io_submit option [ 865.167066][T10320] usb 6-1: SerialNumber: syz [ 865.209213][T30702] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 865.212124][T10320] r8152-cfgselector 6-1: config 0 descriptor?? [ 865.294701][T30702] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 865.326616][T30702] System zones: 0-1, 3-36 [ 865.334012][T30712] netlink: 'syz.0.12100': attribute type 1 has an invalid length. [ 865.392768][T30702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 865.460011][T10320] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 865.534589][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 865.539108][T30720] loop0: detected capacity change from 0 to 256 [ 865.619335][T30720] FAT-fs (loop0): Directory bread(block 64) failed [ 865.630924][T30720] FAT-fs (loop0): Directory bread(block 65) failed [ 865.657964][T30720] FAT-fs (loop0): Directory bread(block 66) failed [ 865.703931][T30720] FAT-fs (loop0): Directory bread(block 67) failed [ 865.754707][T17679] usb 6-1: USB disconnect, device number 20 [ 865.761143][T30720] FAT-fs (loop0): Directory bread(block 68) failed [ 865.792554][T30720] FAT-fs (loop0): Directory bread(block 69) failed [ 865.799252][T30720] FAT-fs (loop0): Directory bread(block 70) failed [ 865.840767][T30720] FAT-fs (loop0): Directory bread(block 71) failed [ 865.880721][T30720] FAT-fs (loop0): Directory bread(block 72) failed [ 865.887321][T30720] FAT-fs (loop0): Directory bread(block 73) failed [ 865.951678][T30730] netlink: 'syz.3.12108': attribute type 2 has an invalid length. [ 865.961709][T30720] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 866.517446][T30747] openvswitch: netlink: Key type 316 is out of range max 32 [ 867.032567][T30771] CIFS mount error: No usable UNC path provided in device string! [ 867.032567][T30771] [ 867.070799][T30771] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 868.234434][T30818] loop4: detected capacity change from 0 to 512 [ 868.250064][T30819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12152'. [ 868.279954][T30818] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 868.401226][T30818] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 868.764191][T30837] netlink: 'syz.3.12162': attribute type 24 has an invalid length. [ 869.254401][T30858] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12171'. [ 869.314670][T30858] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12171'. [ 869.509388][T30868] loop3: detected capacity change from 0 to 64 [ 869.586081][T30872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12179'. [ 870.060389][T30883] loop0: detected capacity change from 0 to 4096 [ 870.078320][T30883] ntfs3: loop0: ino=3, Correct links count -> 2. [ 870.091096][T30888] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 870.161510][T30893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 870.643411][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.672834][T30909] netlink: 'syz.5.12195': attribute type 2 has an invalid length. [ 870.892271][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12200'. [ 870.981791][ T27] audit: type=1326 audit(870.909:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.090656][ T27] audit: type=1326 audit(870.909:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.216757][ T27] audit: type=1326 audit(870.909:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.304217][ T27] audit: type=1326 audit(870.909:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.348633][ T27] audit: type=1326 audit(870.909:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.386687][ T27] audit: type=1326 audit(870.909:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.443324][ T27] audit: type=1326 audit(870.909:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.524625][ T27] audit: type=1326 audit(870.909:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30919 comm="syz.5.12202" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f541db9de99 code=0x7ffc0000 [ 871.893574][T30950] IPv6: sit1: Disabled Multicast RS [ 872.034440][T30922] loop0: detected capacity change from 0 to 32768 [ 872.137444][T30929] loop3: detected capacity change from 0 to 32768 [ 872.165209][T30922] JBD2: Ignoring recovery information on journal [ 872.207587][T30922] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 872.216188][T30922] JBD2: bad block at offset 32 [ 872.265876][T30922] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 872.288257][T30922] (syz.0.12203,30922,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 872.304393][T30922] (syz.0.12203,30922,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 872.327471][T30922] (syz.0.12203,30922,1):ocfs2_mknod:298 ERROR: status = -2 [ 872.349557][T30922] (syz.0.12203,30922,1):ocfs2_mknod:502 ERROR: status = -2 [ 872.508019][ T4281] ocfs2: Unmounting device (7,0) on (node local) [ 872.533194][ T4394] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 873.468386][T30998] ================================================================== [ 873.468403][T30998] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x56a/0xc30 [ 873.468512][T30998] Read of size 1 at addr ffff888055721d3e by task syz.2.12236/30998 [ 873.468531][T30998] [ 873.468537][T30998] CPU: 1 PID: 30998 Comm: syz.2.12236 Not tainted syzkaller #0 [ 873.468558][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 873.468569][T30998] Call Trace: [ 873.468585][T30998] [ 873.468594][T30998] dump_stack_lvl+0x188/0x24e [ 873.468622][T30998] ? __lock_acquire+0x7c40/0x7c40 [ 873.468662][T30998] ? show_regs_print_info+0x12/0x12 [ 873.468688][T30998] ? load_image+0x410/0x410 [ 873.468713][T30998] ? __virt_addr_valid+0x467/0x540 [ 873.468776][T30998] ? soft_cursor+0x56a/0xc30 [ 873.468801][T30998] print_report+0xa8/0x210 [ 873.468833][T30998] kasan_report+0x10b/0x140 [ 873.468903][T30998] ? soft_cursor+0x56a/0xc30 [ 873.468932][T30998] soft_cursor+0x56a/0xc30 [ 873.468964][T30998] bit_cursor+0x1699/0x1f00 [ 873.468998][T30998] ? bit_clear_margins+0x550/0x550 [ 873.469024][T30998] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 873.469052][T30998] ? bit_clear_margins+0x550/0x550 [ 873.469079][T30998] ? add_softcursor+0x8c/0x440 [ 873.469128][T30998] con_flush_chars+0x1f6/0x270 [ 873.469150][T30998] con_write+0x29/0x40 [ 873.469171][T30998] n_tty_write+0xd61/0x11e0 [ 873.469223][T30998] ? n_tty_read+0x1360/0x1360 [ 873.469246][T30998] ? wait_woken+0x1c0/0x1c0 [ 873.469295][T30998] ? __virt_addr_valid+0x467/0x540 [ 873.469322][T30998] ? __check_object_size+0x4f6/0xa70 [ 873.469366][T30998] file_tty_write+0x4c7/0x840 [ 873.469387][T30998] ? n_tty_read+0x1360/0x1360 [ 873.469409][T30998] vfs_write+0x482/0x9a0 [ 873.469436][T30998] ? file_end_write+0x250/0x250 [ 873.469463][T30998] ? __fget_files+0x3fc/0x460 [ 873.469515][T30998] ? __fdget_pos+0x1d4/0x360 [ 873.469541][T30998] ? ksys_write+0x70/0x260 [ 873.469568][T30998] ksys_write+0x14d/0x260 [ 873.469605][T30998] ? __ia32_sys_read+0x80/0x80 [ 873.469631][T30998] ? lockdep_hardirqs_on+0x94/0x140 [ 873.469651][T30998] do_syscall_64+0x4c/0xa0 [ 873.469673][T30998] ? clear_bhb_loop+0x60/0xb0 [ 873.469695][T30998] ? clear_bhb_loop+0x60/0xb0 [ 873.469720][T30998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.469743][T30998] RIP: 0033:0x7f43bcf9de99 [ 873.469761][T30998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.469778][T30998] RSP: 002b:00007f43bde0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.469802][T30998] RAX: ffffffffffffffda RBX: 00007f43bd225fa0 RCX: 00007f43bcf9de99 [ 873.469818][T30998] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 873.469831][T30998] RBP: 00007f43bd033eaf R08: 0000000000000000 R09: 0000000000000000 [ 873.469844][T30998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.469857][T30998] R13: 00007f43bd226038 R14: 00007f43bd225fa0 R15: 00007ffea5f4a688 [ 873.469878][T30998] [ 873.469885][T30998] [ 873.469889][T30998] Allocated by task 12686: [ 873.469899][T30998] kasan_set_track+0x4b/0x70 [ 873.469921][T30998] __kasan_kmalloc+0x8e/0xa0 [ 873.469942][T30998] __kmalloc+0xb3/0x240 [ 873.470000][T30998] fbcon_set_font+0x581/0x1030 [ 873.470025][T30998] con_font_op+0xac1/0xdb0 [ 873.470041][T30998] vt_ioctl+0x1635/0x1cc0 [ 873.470061][T30998] tty_ioctl+0x7e6/0xba0 [ 873.470077][T30998] __se_sys_ioctl+0xfa/0x170 [ 873.470097][T30998] do_syscall_64+0x4c/0xa0 [ 873.470117][T30998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.470138][T30998] [ 873.470143][T30998] Last potentially related work creation: [ 873.470150][T30998] kasan_save_stack+0x3a/0x60 [ 873.470170][T30998] __kasan_record_aux_stack+0xb2/0xc0 [ 873.470187][T30998] kvfree_call_rcu+0x103/0x890 [ 873.470213][T30998] neigh_periodic_work+0x3f2/0xd70 [ 873.470260][T30998] process_one_work+0x8ab/0x1160 [ 873.470301][T30998] worker_thread+0xaf5/0x12a0 [ 873.470320][T30998] kthread+0x29d/0x330 [ 873.470356][T30998] ret_from_fork+0x1f/0x30 [ 873.470385][T30998] [ 873.470391][T30998] The buggy address belongs to the object at ffff888055721800 [ 873.470391][T30998] which belongs to the cache kmalloc-1k of size 1024 [ 873.470408][T30998] The buggy address is located 318 bytes to the right of [ 873.470408][T30998] 1024-byte region [ffff888055721800, ffff888055721c00) [ 873.470426][T30998] [ 873.470430][T30998] The buggy address belongs to the physical page: [ 873.470439][T30998] page:ffffea000155c800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888055724800 pfn:0x55720 [ 873.470461][T30998] head:ffffea000155c800 order:3 compound_mapcount:0 compound_pincount:0 [ 873.470480][T30998] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 873.470507][T30998] raw: 00fff00000010200 ffffea0000be8e08 ffffea0000769208 ffff888017441dc0 [ 873.470524][T30998] raw: ffff888055724800 0000000000100003 00000001ffffffff 0000000000000000 [ 873.470533][T30998] page dumped because: kasan: bad access detected [ 873.470541][T30998] page_owner tracks the page as allocated [ 873.470548][T30998] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4271, tgid 4271 (syz-executor), ts 82507315715, free_ts 25203853131 [ 873.470591][T30998] post_alloc_hook+0x173/0x1a0 [ 873.470614][T30998] get_page_from_freelist+0x206b/0x2180 [ 873.470638][T30998] __alloc_pages+0x1ec/0x4f0 [ 873.470660][T30998] alloc_slab_page+0x5d/0x180 [ 873.470680][T30998] new_slab+0x87/0x2d0 [ 873.470698][T30998] ___slab_alloc+0xbc5/0x1240 [ 873.470716][T30998] __kmem_cache_alloc_node+0x126/0x270 [ 873.470734][T30998] __kmalloc_node_track_caller+0xa0/0x240 [ 873.470760][T30998] __alloc_skb+0x226/0x7d0 [ 873.470814][T30998] rtmsg_fib+0xd7/0x440 [ 873.470841][T30998] fib_table_insert+0xd4e/0x1af0 [ 873.470861][T30998] fib_magic+0x2ca/0x3b0 [ 873.470879][T30998] fib_add_ifaddr+0x372/0x5c0 [ 873.470896][T30998] fib_netdev_event+0x361/0x470 [ 873.470914][T30998] raw_notifier_call_chain+0xcb/0x160 [ 873.470934][T30998] __dev_notify_flags+0x1a7/0x310 [ 873.470980][T30998] page last free stack trace: [ 873.470986][T30998] free_unref_page_prepare+0x8e5/0x9e0 [ 873.471010][T30998] free_unref_page+0x2e/0x3f0 [ 873.471032][T30998] free_contig_range+0x9d/0x150 [ 873.471048][T30998] destroy_args+0xef/0xa0e [ 873.471119][T30998] debug_vm_pgtable+0x33c/0x38e [ 873.471140][T30998] do_one_initcall+0x257/0x800 [ 873.471162][T30998] do_initcall_level+0x13d/0x1ed [ 873.471186][T30998] do_initcalls+0x4b/0x8a [ 873.471200][T30998] kernel_init_freeable+0x401/0x5ab [ 873.471217][T30998] kernel_init+0x19/0x1b0 [ 873.471234][T30998] ret_from_fork+0x1f/0x30 [ 873.471256][T30998] [ 873.471260][T30998] Memory state around the buggy address: [ 873.471271][T30998] ffff888055721c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 873.471283][T30998] ffff888055721c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 873.471296][T30998] >ffff888055721d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 873.471305][T30998] ^ [ 873.471315][T30998] ffff888055721d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 873.471328][T30998] ffff888055721e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 873.471338][T30998] ================================================================== [ 873.491124][T30998] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 873.491140][T30998] CPU: 1 PID: 30998 Comm: syz.2.12236 Not tainted syzkaller #0 [ 873.491162][T30998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 873.491173][T30998] Call Trace: [ 873.491181][T30998] [ 873.491188][T30998] dump_stack_lvl+0x188/0x24e [ 873.491219][T30998] ? memcpy+0x3c/0x60 [ 873.491238][T30998] ? show_regs_print_info+0x12/0x12 [ 873.491265][T30998] ? load_image+0x410/0x410 [ 873.491291][T30998] panic+0x2d3/0x710 [ 873.491312][T30998] ? bpf_jit_dump+0xd0/0xd0 [ 873.491332][T30998] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 873.491355][T30998] ? _raw_spin_unlock+0x40/0x40 [ 873.491374][T30998] ? print_memory_metadata+0x314/0x400 [ 873.491400][T30998] check_panic_on_warn+0x80/0xa0 [ 873.491503][T30998] ? soft_cursor+0x56a/0xc30 [ 873.491531][T30998] end_report+0x66/0x110 [ 873.491557][T30998] kasan_report+0x118/0x140 [ 873.491605][T30998] ? soft_cursor+0x56a/0xc30 [ 873.491635][T30998] soft_cursor+0x56a/0xc30 [ 873.491666][T30998] bit_cursor+0x1699/0x1f00 [ 873.491700][T30998] ? bit_clear_margins+0x550/0x550 [ 873.491725][T30998] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 873.491748][T30998] ? bit_clear_margins+0x550/0x550 [ 873.491775][T30998] ? add_softcursor+0x8c/0x440 [ 873.491795][T30998] con_flush_chars+0x1f6/0x270 [ 873.491817][T30998] con_write+0x29/0x40 [ 873.491836][T30998] n_tty_write+0xd61/0x11e0 [ 873.491867][T30998] ? n_tty_read+0x1360/0x1360 [ 873.491889][T30998] ? wait_woken+0x1c0/0x1c0 [ 873.491915][T30998] ? __virt_addr_valid+0x467/0x540 [ 873.491942][T30998] ? __check_object_size+0x4f6/0xa70 [ 873.491966][T30998] file_tty_write+0x4c7/0x840 [ 873.491987][T30998] ? n_tty_read+0x1360/0x1360 [ 873.492010][T30998] vfs_write+0x482/0x9a0 [ 873.492040][T30998] ? file_end_write+0x250/0x250 [ 873.492069][T30998] ? __fget_files+0x3fc/0x460 [ 873.492094][T30998] ? __fdget_pos+0x1d4/0x360 [ 873.492116][T30998] ? ksys_write+0x70/0x260 [ 873.492144][T30998] ksys_write+0x14d/0x260 [ 873.492173][T30998] ? __ia32_sys_read+0x80/0x80 [ 873.492201][T30998] ? lockdep_hardirqs_on+0x94/0x140 [ 873.492222][T30998] do_syscall_64+0x4c/0xa0 [ 873.492247][T30998] ? clear_bhb_loop+0x60/0xb0 [ 873.492272][T30998] ? clear_bhb_loop+0x60/0xb0 [ 873.492298][T30998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 873.492323][T30998] RIP: 0033:0x7f43bcf9de99 [ 873.492341][T30998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.492356][T30998] RSP: 002b:00007f43bde0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 873.492379][T30998] RAX: ffffffffffffffda RBX: 00007f43bd225fa0 RCX: 00007f43bcf9de99 [ 873.492395][T30998] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 873.492409][T30998] RBP: 00007f43bd033eaf R08: 0000000000000000 R09: 0000000000000000 [ 873.492422][T30998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 873.492435][T30998] R13: 00007f43bd226038 R14: 00007f43bd225fa0 R15: 00007ffea5f4a688 [ 873.492458][T30998] [ 873.492711][T30998] Kernel Offset: disabled [ 874.504109][T30998] Rebooting in 86400 seconds..