last executing test programs: 58.882569749s ago: executing program 1 (id=951): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x84, @local, 0x4}, {0xa, 0x0, 0x3, @mcast1}, 0x0, {[0x2, 0x8, 0xa, 0x0, 0x0, 0x0, 0x7ff, 0x4]}}, 0x5c) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102}) 58.671164708s ago: executing program 1 (id=952): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x604, &(0x7f0000001280)={[{0x131, 0x4e00, "4b26ded45a9b9dbacc78be13835b74cb26e16011d098a3ee28662006333214d01a667d92ee1a7ecb609a6c95f584065174fa1ecb8a27ea00fac1bd2880cdb28cc67f9f748bdd3584902cd377ce3161383bf0b3df015a6875555da2113093a2146f270d4fafe5562676e3a0514d0c003224e387d6ea312138f885ac7253cfac406f31d756614db45fb0d34c0fc13feea03b00790bb0f74673f69847d0b199d789fff8b41018b821eb16192950030703d03427a5201db7823a594c7b51fd90d050a952ee88acd18cb75f8c490df95596ec1823ad4814ef4567c351bdffd27aeac437ed6514e1da6845a2fa9e4291d6633d103a2d2431e4ca0332041e43951f61d8b0a2b10f3fee81d1d67f2884366f1e78e939fc845289171f8c3c65482d830b1871fe00"/305}, {0x395, 0x4e00, "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"}, {0x121, 0x4e00, "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"}, {0x2, 0x4e00, "0efd"}]}) 55.02227058s ago: executing program 1 (id=978): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 51.963392965s ago: executing program 1 (id=1003): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001cc0)={[{@discard}, {@gid}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@errors_continue}, {@gid}, {@discard}, {@utf8}, {@errors_remount}, {@errors_remount}]}, 0x1, 0x152d, &(0x7f0000000780)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x320c85c, &(0x7f00000004c0)=ANY=[]) 51.462272888s ago: executing program 1 (id=1008): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x33, &(0x7f0000000e80)=[{&(0x7f0000000100)="00fffe00", 0x4}], 0x1}}], 0x1, 0x0) 50.18697348s ago: executing program 1 (id=1021): unshare(0x26020480) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, 0x0) 49.761350528s ago: executing program 32 (id=1021): unshare(0x26020480) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, 0x0) 8.329802938s ago: executing program 4 (id=1399): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, 0x0) 8.088229371s ago: executing program 4 (id=1401): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0x3c}}, 0x0) 7.903640895s ago: executing program 4 (id=1403): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000001400), 0x1, 0x7a0, &(0x7f0000000280)="$eJzs3c9rXEUcAPDv2yRNmlYbQbD10py0ULppa2wVBCMeRLBQ0LNt2GxDzCZbspvShBwsIggiaPEg6MWzP+rNq+jZv8GLiLRUTYsVD7Ly9keyzeZnm822zecDL5l5Oy8z351982bzht0Adq3B9Ecm4lBEfJxEHKjvTyKip5rqjhiplbuzuJBLtyQqlTf/TKplbi8u5KLpmNS+euZgRPz4fsTRTGu9pbn5ydFCIT9Tzw+Vpy4Olebmj01MjY7nx/PTp04MD588/fzpU9sX698/z++/8clrz3478u97T1376KckRmJ//bHmOLbLYAzWn5Oe9Cm8y6vbXVmHJZ1uAPckPTW7amd5HIoD0VVNAQCPsvT6XwEAdpnE9R8AdpnG/wFuLy7kGltn/yOxs26+EhF9tfgb9zdrj3TX79n1Ve+D9t9Oojt6l47brvtdgxHxxfdvf51u0ab7kACrefdKRJwfGGwd/5OWNQtbdXwTZQZX5I1/sHN+SOc/L6w2/8sszX9iaf6zrHeVc/deDEbsac63nv+Z66se+PI2VF6f/71UW9uWBto0/1tatDbQVc89lmYOR8REIZ+ObY9HxJHo6b0wUcifWKeOI7f+u7XWY83zv7+uvvNVWn/6e7lE5np3793HjI2WR+8n5mY3r0Q83b28tu9Oy/jfV53rruz/dN/Z9f7w4eXk6y9+8PlaxdL403gbW2v87VX5MuKZWD3+hmTd9YlDafcfr/1cvY7vfv2sv55sWVzV3P/pltbfeC+wE9L+718//oGkeb1maXvr3zj+1V//e5K3qunG4HF5tFyeORGxJ3mjdf/J5WMb+Ub5NP5apCvjz6z7+k/fE57fZIzdN/745t7jb680/rEt9f8mE2kH1PdcuzPZtVb9m+v/4WrqSH3PZsa/zbb0fp47AAAAAAAAAAAAAAAAAAAAAAAAANisTETsjySTXUpnMtls7Tu8n4z+TKFYKh+9UJydHovqd2UPRE+m8VGXB2r5pPH5pwNN+ZMr8s9FxBMR8Wnv3mo+mysWxjodPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vvj+/9Tv/d2unUAQNv0bVjiVv6ubKVSqbSxPQBA+218/QcAHjXrXP/37mQ7AICd4/0/AOw+rv8AsPu4/gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBmZ8+cSbfKP4sLuTQ/dmludrJ46dhYvjSZnZrNZXPFmYvZ8WJxvJDP5opTG/29QrF4cTimZy8PlfOl8lBpbv7cVHF2unxuYmp0PH8u37MjUQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA1pTm5idHC4X8zCOR+DAiHoBmtCORxAPRjG1J9GzxqN+O/XJwvTJXN3gZj3Q+5Icv0emRCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODh8H8AAAD//xeAI6Y=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) 7.830776061s ago: executing program 5 (id=1404): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4.398725974s ago: executing program 5 (id=1406): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.398490844s ago: executing program 4 (id=1409): write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x2e, "4e158a1996b808261153b615030f333ba893c3127826585e849c0977d2ce968a0c672f83130bb56e23bb86000000"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4) 4.238999183s ago: executing program 5 (id=1411): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4f22, @rand_addr=0x64010100}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) 4.115304839s ago: executing program 5 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x400000b1, 0x0, 0x80000000}]}) 3.645959758s ago: executing program 5 (id=1415): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2.143134236s ago: executing program 4 (id=1427): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000180)={{@host, 0x3db3}, @local, 0x0, 0x200, 0x6, 0x800052e, 0x0, 0x1000, 0xe278}) 2.135893275s ago: executing program 3 (id=1428): openat$kvm(0x0, 0x0, 0x0, 0x0) setfsgid(0xee00) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000000240)={[{@nodots}, {@dots}, {@dots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@fat=@check_normal}, {@nodots}, {}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x9}}, {@fat=@showexec}, {@nodots}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@umask={'umask', 0x3d, 0x7da5}}, {@fat=@usefree}, {@fat=@nocase}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x206, &(0x7f0000000480)="$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") utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000008c0)={{0x77359400}, {0x77359400}}) 1.963360741s ago: executing program 4 (id=1429): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 1.748735509s ago: executing program 3 (id=1431): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x389280, 0x62) 1.636864988s ago: executing program 2 (id=1432): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00'], 0x44}, 0x1, 0x0, 0x0, 0x484d1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 1.464461494s ago: executing program 3 (id=1434): r0 = semget$private(0x0, 0x4000000009, 0x42a) semop(r0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 1.464330654s ago: executing program 2 (id=1435): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) brk(0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x8000, 0x0) getdents64(r0, &(0x7f0000001f00)=""/4093, 0xffd) 1.23823156s ago: executing program 2 (id=1437): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.23789642s ago: executing program 3 (id=1438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='hybla', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.107379255s ago: executing program 3 (id=1440): r0 = io_uring_setup(0x5bec, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) 977.419689ms ago: executing program 2 (id=1441): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESDEC=0x0], 0x2b) 899.431704ms ago: executing program 3 (id=1442): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@errors_remount}, {}, {@discard}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}]}, 0x24, 0x6316, &(0x7f0000004fc0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4CfXe+u1w5JDITUSQ1sHBNCssmu7cQftCkmfDZ8lUAo9APb9a7NUsc2XrsEGsmmgRIJo6KKtuGiLSDU5qYiF7mgFaBcoFZIraC9oL1AIFouoiogg1SJVpCt5pz3fXdmdnZm1zvePXPO7yfZj+fMmTnvnHnnzDy7/s8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDZLa+b/eRQlmWNP/lf27LsBY1/b5nYli979UaPEAAAAFirX+R/X74+LTi0ghs1rfNPL/vW0wsLCwvZezf92ehnFxbSFRNZNro5y/Lroqd+8L6h5nWCx7LxoeGmy8M9Nr+px/UjPa4f7XH9WI/rN/e4frzH9Ut2wBJbip/H5He2K//ntmKXZjdko/l1uzrc6rGhzcPD8Wc5uaH8Ngujx7O57GQ2m023rF+sO5Sv/9VbGtt6cxa3Ndy0rR2NGfKTR4/FMQyFfbyrZVuL9xn96LXZxE9/8uixvzn33E2das/d0HJ/xThv39kY58fDkmKsQ9nmtE/iOIebxrmjw3OyqWWcQ/ntGv9uH+flFY5z0+Iw11X7cz6eDef//na+n0aaf6yX9tOOsOxnt2ZZdnFx2O3rLNlWNpxtbVkyvPj8jBczsnEfjan0omxkVfP0lhXM00ad2dU6T9tfE/H5vyXcbmSZMTQ/TT/62FjT8/7zhSuZp1HjUS/3Wmmfg/1+rZRlDsZ58e38QT/ecQ7uCo//0duWn4Md506HOZged9Mc3NlrDg6PbcrHnJ6Eofw2i3Nwd8v6m/ItDeX12du6z8Gpcw+fmZr/yEfvmnv46InZE7On9u7ePb13374DBw5MHZ87OTtd/H2Fe7v8tmbD6TWwM+y7+Bp4Zdu6zVN14QtjS46/V/o6HO/yOtzWtm6/X4cj7Q9uaH1ekEvndPHaeHdjp49fGs6WeY3lz88da38dpsfd9DocaXoddnxP6fA6HFnB67Cxzpk7VvaZZaTpT6cxLP9esLY5uK1pDrZ/Hmmfg/3+PFKWOTge5sV371j+vWBHGO/jk6v9PLJpyRxMDzccexpL0uf98QN56TQvb25ccc1Ydn5+9uzdjxw9d+7s7iyUdfHiprnSPl+3Nj2mbMl8HV71fD0097LHb+6wfFvYV+N3Nf4aX/a5aqxzz93dn6v83a3z/mxZuicLpc/We392ejdv7M+xLPvcNz724Nce/dzrlt2fjX7z41Nr/yye+tKm4+/oMsff2Pc/X2wv3dVjm0ZHitfvprR3RluOx61P1Uh+7BrKt315amXH49HwZ72Pxzd0OR5vb1u338fj0fYHF4/HQ71+2rE27c/neJgnJ6e7H48b62zfs9o5OdL1eHxrqENh/78qdAqpL2qaO8vN27StkZHR8LhG4hZa5+nelvVHQ2/W2NaTe8KHwjTKlc3T228t1t/UdLtovebpRNu6/Z6n6Wdfy83ToV4/fbsy7c/neJgXN+ztPk8b6zxzz9qPnVviP5uOnWO95uDoprHGmEfTJMyP99nCljgH786OZaezk9lMfu1YPp+G8m1N3ruyY+VY+LPex8rtXebg7W3r9nsOpvex5ebe0MjSB98H7c/neJgXT9zbfQ421nn9/v5+dr29WLL4o+imz67tP19b7mdeN7ftpqs1VxojaTyWb+zv/rPZxjonD6y2z+y+n+4MS67psJ/aX7/LvaZmsvXZT9vDOJ87sPx+aoynsc5nD65wPh3KsuzCh+7Pf94bfr9y4fx3nm75vUun3+lc+ND9P772+D+uZvwADL7ni7K1eK9r+s3USn7/DwAAAAyE2PcPh5ro/wEAAKAyYt8f/1d4ov8HAACAyoh9/0ioSRX6/z/qvcr21z839/yFLCXzF4J4fdoNDxTrxYzrdLg8sbCosfz+L83+zz9cWNnwhrMs+/kDf9hx/e0PxHEVJsI4n3pD6/Ilnr5rRds+8tCFtN3m/Prnw/3Hx7PSadApgjudZdlXr/90vp2J913K6zMPHMnrgxcff6yxzuWDxeV4+2dfXKz/lyH8e+j40ZbbPxv2ww9DnX5L5/0Rb/flS6/asf89i9uLtxvaeV3+sJ94f3G/8XtyPvNYsX7cz8uN/2ufevLLjfUfeUXn8V8Y7jz+J8P9finU/31psX7zc9C4HG/3iTD+uL14u7u/+PWO43/qk8X6Z95YrHck1Lj928PlXW98bq55fz0ydLTlcWVvKtaL25/+zp/k18f7i/ffPv7xw5da9kf7/Hjm34r7mWpbPy6P24n+vm37jftpnp9x+0/+8ZGW/dxr+089+OxLG/fbvv0729Y786E78u0v3l/rNzb91Sc+3XF7cTyH/u5My+M59M7wOg7bf+L9YT6G6//vqeL+2r9d4cg7W48/cf3Pb7vQ8niiN/+02P5TrzmR183jW7Ze84Jrr7v48sa+y7Jvby7ur9f2T/z16Zbxf+HGYn/E62NGv337y4nbP/vhyVOn58/PzaS9+uj1+XfnvLUYTxzv9eHY2n758OlzH5g9OzE9MZ1lE9X9Cr0r9sVQf1yUi93XXlhyBL3jofB83vwXX916279+Ki7/93cXyy+9pXjfemVY7zNh+bbw/K1u+0s9ccuN+et76JkwwoWl3xe8Fjt2/feBXt/vmwuPv/1zQZzvZ17ygXw/NK7L3zfi63qN4//eTHE/Xwn7dSF8M/POGxe317x+/G6ES+8qXu9r3n/hMBef178Nz/fbfljcfxxXfLzfC59jvr699XgX58dXLgy333/+LR4Xw/Eku1hcH9eK+/vS5Rs7Di9+D0l28ab88p+m+7lpVQ9zOfMfmZ86OXfq/CNT52bnz03Nf+Sjhx8+ff7UucP5d3ke/mCv2y8en7bmx6eZ2X33ZPnR6nRRrrKNHv+Zh47N7J++bWb2+NHzx889dGb27Ilj8/PHZmfmbzt6/Pjsh3vdfm7mvt17Du7dv2fyxNzMfQcOHtx7cHLu1OnGMIpB9bBv+vcnT509nN9k/r57Du6+9957picfPj0ze9/+6enJ871un783TTZu/QeTZ2dPHj039/Ds5PzcR2fv231w3749Pb8N8OEzx+cnps6ePzV1fn727FTxWCbO5Ysb7329bk81zX+/+Dzbbqj4Ir7sHXfuS9/P2vCljy17V8UqbV8g+lz4LppvvvDMgZVcjn3/aKhJFfp/AAAAIBf7/rFQE/0/AAAAVEbs+zeHmuj/AQAAoDJi3z8eavovATXp/yuX/99+YUXbl/+X/2/eX/L/Ncv/v6ts+f/ieCH/3x9rzd/XIf+/ohXl/+X/5f/l/+X/6YOy5f9j378ly/z+HwAAACoq9v1bQ030/wAAAFAZse+/JtRE/w8AAACVEfv+F4Sa1KT/l/+X/5f/l/+X/++8ffn/wST/313J8v/j7Qvk/zc+/5/VK/9/sZ/j34D8/5bmC/L/lFHZ8v+x77821KQm/T8AAADUQez7rws10f8DAABAZcS+//pQE/0/AAAAVEbs+7eFmtSk/5f/X1P+P2WuBjf/X2xZ/l/+X/5f/r8q5P+7K1n+fwn5/43P/zv//0Dl/1vI/1NGZcv/x77/haEmNen/AQAAoA5i3/+iUBP9PwAAAJTPyJXdLPb9Lw41WdL/X+EGAAAAgA0X+/4bsrYgeE1+/y//7/z/pT3//6j8v/x/ofz5/02Z/H95yP93J//fQz/y/xfl/+X/5f/l/4nKlv/P+/5sPHtJqElN+n8AAACog9j33xhqov8HAACAyoh9/y+Fmuj/AQAAoDJi37891KQm/b/8f2Xy/z9rfuoqkf93/n/5/6D8+X/n/y8T+f/u5P97cP5/+X/5f/l/+mq+Y6e0cfn/2PffFGpSk/4fAAAA6iD2/TeHmuj/AQAAoDJi3//LoSb6fwAAAKiM2PfvCDWpSf8v/1/y/H9Mjtbx/P/y//L/QZnz/+Py/6Uj/9+d/H8P8v/y//L/8v/01fz3i8+z7TYq/x/7/peGmtSk/wcAAIA6iH3/y0JN9P8AAABQGbHvf3moif4fAAAAKiP2/ROhJjXp/1eT/x+6KP+/nKt8/v+xFZz/v4X8/4bk/0fk/wt1yv9n8v+lI//fnfx/D/L/8v/y//L/9FXZ8v+x778l1KQm/T8AAADUQez7d4aa6P8BAACgMmLff2uoif4fAAAAKiP2/btCTWrS/zv//0Dk/zP5/4HI/zv/fyD/35n8//qQ/+9O/r8H+X/5f/l/+X/6qmz5/9j3vyLUpCb9PwAAANRB7PtvCzXR/wMAAEBlxL7/laEm+n8AAACojNj33x5qUpP+X/5f/l/+X/5f/r/z9tc9/39R/r8f5P+7k//vQf5f/l/+X/6fvipb/j/2/a8KNalJ/w8AAAB1EPv+O0JN9P8AAABQGbHvvzPURP8PAAAAlRH7/slQk5r0//L/8v/VzP//h/x/l+3L/5c0/+/8/30h/9+d/H8P8v/y//3I/4+GBfL/8v9seP4/fl6Ll2Pff1eoSU36fwAAAKiD2PffHWqi/wcAAIDKiH3/VKiJ/h8AAAAqI/b906EmNen/S53///LiZfl/+f/M+f/Lkf9/+eL9yv8X5P/LRf6/O/n/HvqZ/98s/1/b/P+azv8/Kv9PpWx0/r/9cuz7d4ea1KT/BwAAgDqIff+eUBP9PwAAAFRG7Pv3hpro/wEAAKAyYt9/T6hJTfr/Uuf/nf9f/l/+v3z5/yby/wX5/3KR/++u//n/+BDl/53/X/6/P/l/5/+nWsqW/499/72hJjXp/wEAAKAOYt+/L9RE/w8AAACVEfv+/aEm+n8AAACojNj3Hwg1qUn/L/8v/y//L/8v/995+/L/g0n+vzvn/+9B/l/+f4Dz/425Jf9P2ZQt/x/7/oOhJjXp/wEAAKAOYt//6lAT/T8AAABURuz7fyXURP8PAAAAJTR2RbeKff+vhprUpP+X/5f/l/+X/9/g/P9or/z/mPy//P8qyP93J//fg/y//P8A5/+XOf//teFq+X82RNny/7Hvvy/UpCb9PwAAANRB7Pt/LdRE/w8AAACVEfv+14Sa6P8BAACgMmLffyjUpCb9v/z/OuX/48LS5v9jkln+P18g/+/8//L/A0v+vzv5/x7k/+X/q5f/7/f5/9vfphP5fzopW/4/9v2vDTWpSf8PAAAAdRD7/vtDTfT/AAAAUBmx739dqIn+HwAAACoj9v2vDzWpSf8v/+/8/xt//v/RlrHL/y/eTv6/IP8v/78a8v/dyf/3IP8v/y//7/z/9FXZ8v+x739DqElN+n8AAACog9j3vzHURP8PAAAAlRH7/jeFmuj/AQAAoDJi3//mUJOa9P/y//L/G5//d/5/+f+C/L/8fz/I/3cn/9+D/L/8v/y//D99Vbb8f+z7fz3UpCb9PwAAANRB7PsfCDXR/wMAAEBlxL7/LaEm+n8AAACojNj3vzXUpCb9v/y//L/8v/y//H/n7cv/Dyb5/+4GLP//i+vCcvn/gvz/xo7/P9/Q/farzf+PtF2+Kvn/HyyX/1/Y3H57+X+uhrLl/2Pf/7ZQk5r0/wAAAFAHse9/e6iJ/h8AAAAqI/b97wg10f8DAABAZcS+/zdCTWrS/8v/N8axmF6W/5f/zxfI/8v/y/8PLPn/7lL+/3Knd64m5cj/O/9/G/n/co/f+f/l/1mqbPn/2Pe/M9SkJv0/AAAA1EHs+x8MNdH/AwAAQGXEvv9doSb6fwAAAKiM2Pe/O9SkJv2//L/z/8v/y//L/3fevvz/YJL/727Azv8v/99G/r/c478q+f//kv9nsJUt/x/7/odCTWrS/wMAAEAdxL7/PaEm+n8AAACojNj3/2aoif4fAAAAKiP2/e8NNalJ/y//Pyj5/wn5/1Xm/8fCMvl/+X/5/3qR/+9O/r8H+X/5/7Ll/53/nwFXtvx/7PvfF2qy8v5/fMVrAgAAAFdT+6+Tktj3/1aoSU1+/w8AAAB1EPv+3w410f8DAABAZcS+/3dCTWrS/8v/D0r+3/n/M+f/l/9vezzy//L/naxf/j8eeVaV/9/ca/vy//L/8v+DO375f/l/lipb/j/2/b8balKT/h8AAADqIPb97w810f8DAADAQOj0f7Lbxb7/cKiJ/h8AAAAqI/b9R0JNatL/y//L/9c2/3/vlrTNUub//3znP3/3W28/srvE+f+n5f9z8v/lsq7n/2+8+J3/X/5f/j+R/5f/l/+nXdny/7HvPxpqstj4vdUJ/gEAAGCwxb7/90JNavL7fwAAAKiD2PcfCzXR/wMAAEBlxL5/JtSkJv2//P8G5v9HsiyT/3f+/wqe/z/uj0HK/09uHqD8fzzoyv93tK75//cs5sTl/1eb/x/ruLQ9/z8k/99C/n/V4/9mlmXrNv4L/yL/L/9Pu7Ll/2PfPxtqUpP+HwAAAOog9P3Dx4u6eIX+HwAAACoj9v0nQk30/wAAAFAZse//QKhJU/8/vO6jWj/y/87/L/8v/9/v/L/z/3fm/P/rQ/6/u/Lk/ztz/n/5/0Eev/P/y/+zVNny/7Hvnws18ft/AAAAqIzY938w1ET/DwD8P3t38mVpXd9x/BYU6e7DSU52WWSR7LPKJhsWYZVF8gdkwYZNzklCQgYyTzSZJ3GeB/SoiAMOoIioKM6CE4o4ouIM4oQTotIeur7fb9Wteuq5Vd236j7393u9FnybguJeONDNp4s3DwDQjNz9V8Qt9j8AAAA0I3f/n8Qtnex//b/+v8n+/4T+f+z19f/6/5bN9/e/pP/fRf+/gP5f/6//1/+zVFPr/3P3/2nc0sn+BwAAgB7k7r8ybrH/AQAAoBm5+/8sbrH/AQAAoBm5+/88bulk/+v/9f9N9v+/89AfPfbb+v/9Xl//r/9vmef/j9P/L6D/1//r//X/LNXU+v/c/X8Rt3Sy/wEAAKAHufv/Mm6x/wEAAKAZufuvilvsfwAAAGhG7v6/ils62f+7+v+NWZ/9f2a8+v+W+n/P/9/39fX/+v+WHW//f83j3/Pp//X/+v+g/9f/6//ZbWr9f+7+v45bOtn/AAAA0IPc/X8Tt9j/AAAA0Izc/X8bt9j/AAAA0Izc/X8Xt3Sy/z3/3/P/9f/6f/3/8Ovr/9eT5/+P66n/v+qei698+JZfvfUwr6//1//r//X/LNfU+v/c/X8ft3Sy/wEAAKAHufv/IW6x/wEAAKAZufv/MW6x/wEAAGANnRr8aO7+f4pbOtn/+n/9v/4/+v+T+n/9v/6/Bfr/cavu/4d+vNzJ8//b7/+vWMo7Xd37H6P/1/+z19T6/9z9/xy3dLL/AQAAoAe5+/8lbrH/AQAAYLoW/Ydlu+Tuvzpusf8BAACgGbn7T8ctnex//f/R9/8/0/+vR//v+f/6f/1/E/T/41bd/y+i/2+//z9Kq37/+n/9P3tNrf/P3X9N3NLJ/gcAAIAe5O7/17jF/gcAAIBm5O7/t7jF/gcAAIBm5O7/97ilk/2v//f8f/2//v/4+/+t72z1/9t/VfX/y6P/H6f/X0D/f779/EX6f/2//p+dDtn/Pzry3fZS+v/c/f8Rt3Sy/wEAAKAHufv/M26x/wEAAKAZufv/K26x/wEAAKAZufv/O27pZP/r//X/+n/9/zn3/3v/1jvL8/+H6f+Ph/5/3GT6/43NwQ/r/9e+//f8f/2//p85U3v+f+7+/4lbOtn/AAAA0IPc/f8bt4zs/0P/ZD4AAACwUrn7/y9u8fV/AAAAWHtZneXu//+4pZP9r//X/+v/9f/H//z/9e//b93x/vT/06L/HzeZ/n8f+n/9/zq/f/2//p+9ptb/5+5/QtzSyf4HAACAHuTuvzZuOdj+H/qyLwAAADAxufufGLf4+j8AAAA0I3f/k+KWTvb/cP+//dsn3f/vjoRn+v+k/2+7/88/ov5/tP+/1PP/+6T/H6f/X0D/r//X/+/X/59a9Pn6f4ZMrf/P3f/kuKWT/Q8AAAA9yN3/lLjF/gcAAIBm5O5/atxi/wMAAEAzcvc/LW7pZP97/r/+X/+/fv2/5/9vWeXz/2fH3v9v6v8PaLX9/8Zj+SOo/v/c3r/+X/+/zu+/yf7/otn88/9H/i8A+n+GTK3/z93/9Lilk/0PAAAAPcjd/4y4xf4HAACA9bDzvx0YelbcbFa7/5lxi/0PAAAAzcjd/6y4pZ39P/qsTv2//l//f/bT9f/6/4H+f3M2nf7f8/8PyvP/x+n/F9D/H0U/v9lY/3/dfp8/hf7/6qN7/v9vLvp8/T9D5vr/27c/vqr+P3f/s+OWdvY/AAAAdC93/3PiFvsfAAAAmpG7/7lxi/0PAAAAzcjd/7y4pZP9f+T9/8j/fUD/r/+fSP/v+f/6/8HXn9bz//X/B6X/H6f/X0D/7/n/nv+v/+f87fhXxrn+f4dV9f+5+58ft3Sy/wEAAKAHuftfELfY/wAAANCM3P3XxS32PwAAADQjd/8L45ZO9r/n/+v/9f/6f/3/8Ovr/9fTefX3F6yq/9/+Z0v/r//X/6/v+9f/6//Za2r9//zu72//AwAAQA9edPaXJ+Pn6+1/AAAAaFHu/hfHLfY/AAAANCN3/0vilk72v/7/aPv//Lj+X/8/0//r//X/x6Lb5/9vDP1ItNc+/f9df3j69+Y/ov/X/+v/9f/6fw7ol0d+2yT6/zPb/3aZu/+lcUsn+x8AAAB6kLv/+rjF/gcAAIBm5O5/Wdxi/wMAAEAzcvffELcccv+PNQ9Tpv/3/H/9v/5f/z/8+vr/9dRt/39Anv+/gP5f/6//1/+zVJPo/3f8eu7+l8ctvv4PAAAAzcjd/4q4xf4HAACAZuTuf2XcYv8DAABAM3L3vypu6WT/6//1//p//b/+f/j19f/rSf8/Tv+/wDr1/zecR/+/OfzhVffz52vV71//r/9nr6n1/7n7b4xbOtn/AAAA0IPc/a+OW+x/AAAAaEbu/tfELfY/AAAANCN3/2vjlk72v/5f/6//1//r/4dfX/+/nvT/4/T/s9nsppE3MNT/nzkxzf7f8/8n9/71//p/9ppa/5+7/3VxSyf7HwAAAHqQu/+muMX+BwAAgGbk7r85brH/AQAAoBm5+18ft3Sy//X/+n/9v/5f/z/8+vr/9aT/H6f/X2Cdnv+v/5/c+9f/6//Za2r9f+7+N8Qtnex/AAAA6EHu/lviFvsfAAAAmpG7/41xi/0PAAAAzcjdf2vc0sn+1//r//X/+v+B/v/sP+r6f/3/Ojq6/n+m/9f/6/8X0P/r//X/7Da1/j93/5vilk72PwAAAPQgd/9tcYv9DwAAAM3I3f/muMX+BwAAgGbk7n9L3NLJ/tf/6//1//p/z/8ffn39/3ry/P9x+v8F9P/6f/2//p+lGu7/r15Z/5+7/61xSyf7HwAAAHqQu//2uMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bulk/+v/9f/z/f9spv/X/+v/twz0//c+cv0v1q8vof8/OdP/L53+f5z+fwH9f5v9/wWzhvr/U/t+vv6fKZra8/9z998Rt3Sy/wEAAKAHufvfEbfY/wAAANCM3P3vjFvsfwAAAGhG7v53xS2d7H/9v/5/yc//f/Dygfeh/9+i/1/7/t/z/9eA/n+c/n8B/X+b/b/n/+v/WZmp9f+5+98dt3Sy/wEAAKAHufvfE7fY/wAAANCM3P3vjVvsfwAAAGhG7v73xS2d7H/9v/5/yf2/5//r//X/+9D/Hw/9/zj9/wL6/+b6//y3e/2//p/VmFr/n7v//XFLJ/sfAAAAepC7/864xf4HAACAZuTuvytusf8BAACgGbn7PxC3dLL/9f/6f/3/evb/J+f6/wtn+v/t31//37ep9P+XXPK7d+v/9f/6/9X3/57/r/9ntabW/+fu/2Dc0sn+BwAAgB7k7v9Q3GL/AwAAQDNy9384brH/AQAAoBm5+z8St3Sy//f2/xfNtgrVLUP9fzRq+v8d9P/z71//P/z3h+f/6//1/0dvKv2/5/+f2/vX/+v/1/n9H6r///W9n6//p0VT6/9z998dt3Sy/wEAAKAHufs/GrfY/wAAANCM3P0fi1vsfwAAAGhG7v574pZO9r/n/+v/9f/6/6X3/7c9sPUN/f8c/f/xOMf+/rfuiG/o/4P+X/+v/+/3+f8X6v9Znqn1/7n7Px63dLL/AQAAoAe5+++NW+x/AAAAaEbu/k/ELfY/AAAANCN3/yfjlk72f2P9/+0b+v+5z9P/6/+HXt/z//X/LfP8/3H6/7L7T21LP/3/yaEPrrqfP1+rfv/N9P+e/88STa3/z93/qbilk/0PAAAAPcjd/+m4xf4HAACAZuTu/0zcYv8DAABAM3L3fzZu6WT/N9b/e/7/bP7z9P+P38v1/7teX/+v/2+Z/j9/RB+m/1+gn/5/0Kr7+XV///p//T97Ta3/z91/X9zSyf4HAACAHuTu/1zcYv8DAABAM3L3fz5usf8BAACgGbn7vxC3dLL/9f999f8bsx77f8//1//r/3ui/x+n/19A/6//1//r/1mqqfX/ufvv39jscv8DAADAuvr93/jj+w76+95/9pcnZ1+MWy6dnTngl7EBAACAiXt8929szmZfOvtrvv4PAAAALcrd/+W4pZP9r//vq//v8/n/+n/9v/6/J0P9/dD30fvR/wf9v/5f/6//1/+zBFPr/3P3fyVu2TH8Ng/9ZwkAAABMSe7+r8YtnXz9HwAAAHqQu/9rccue/e9/BwgAAADrKnf/1+OWTr7+r/+feP8/O6L+P34//f8W/b/+f+j19f/ryfP/x51n/39mQ/+v/x+h/9f/6//ZbWr9f+7+B+KWTvY/AAAANGruZxRy9z8Yt9j/AAAA0Izc/d+IW+x/AAAAaEbu/ofilk72v/7/2Pv/TNWP8Pn/p+pbnv/fef9/7cnB19f/6/9bpv8f5/n/C+j/W+n/T+j/j7X//4WZ/p99TK3/z93/zbilk/0PAAAAPcjd/624xf4HAACAZuTu/3bcYv8DAABAM3L3fydu6WT/6/8n/vz/c+r/D/D8f/1/H/3/Pq/fTv//KxefvvOyP7j5Rv0/246z/8+/F465/z9x2D/mTvr/BfT/rfT/nv/v+f9MxPL7/825Dx62/8/d/924pZP9DwAAAD3I3f9w3GL/AwAAQDNy938vbrH/AQAAoBm5+78ft3Sy//X/+v+p9P/513oF/f/pc+7/T81ms5X0/9kU997/e/6//n8vz/8fp/9fQP+v/9f/6/9ZquX3//MfPGz/n7v/B3FLJ/sfAAAAepC7/4dxS+7/jUP/1D0AAAAwMbn7fxS3+Po/AAAANCN3/yNxSyf7X/+v/59K/588/3/789p6/v9lFaf22f//Wn1L/3+09P/j9P8L6P/1//p//T9LNbX+P3f/j+OWTvY/AAAA9CB3/6Nxi/0PAAAAzcjd/5O4xf4HAACAZuTu/2nc0sn+1/+32v9nEa//1/9Ppf/3/H/P/z8e+v9x+v8F9P/6f/2//p+lmlr/n7v/5wEAAP//6cZemg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 844.525424ms ago: executing program 5 (id=1443): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 831.883101ms ago: executing program 0 (id=1444): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{}, {@local}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000000000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b8defe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff}) 772.0214ms ago: executing program 2 (id=1445): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x48}, 0x40040) 700.036626ms ago: executing program 0 (id=1446): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) 688.985204ms ago: executing program 2 (id=1447): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodatacow}, {@flushoncommit}]}, 0x11, 0x5109, &(0x7f000000f400)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1400, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 539.991045ms ago: executing program 0 (id=1448): r0 = msgget$private(0x0, 0x23) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000040)={0x0, ""/219}, 0xe3, 0x0, 0x800) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000240)=""/38) 514.86896ms ago: executing program 0 (id=1449): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0x6, 0x1c, 0x1, 0xb5d, 0x1a, "0300000001000000000000000000be00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 322.463092ms ago: executing program 0 (id=1450): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x9}, 0x8) 0s ago: executing program 0 (id=1451): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0xfffffff7}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0xe}]}}]}, 0x48}, 0x1, 0x7a00}, 0x4000000) kernel console output (not intermixed with test programs): 89.669153][ T5082] lo speed is unknown, defaulting to 1000 [ 89.706679][ T5082] lo speed is unknown, defaulting to 1000 [ 89.728248][ T5082] lo speed is unknown, defaulting to 1000 [ 89.751355][ T5082] lo speed is unknown, defaulting to 1000 [ 89.762786][ T5082] lo speed is unknown, defaulting to 1000 [ 89.924425][ T1110] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 89.945373][ T1110] usb 4-1: config 0 has no interface number 0 [ 89.947001][ T5097] tipc: Started in network mode [ 89.997273][ T5097] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 90.016328][ T5097] tipc: Enabled bearer , priority 10 [ 90.115293][ T1110] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 90.135169][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.158974][ T1110] usb 4-1: Product: syz [ 90.163426][ T1110] usb 4-1: Manufacturer: syz [ 90.178702][ T1110] usb 4-1: SerialNumber: syz [ 90.198159][ T1110] usb 4-1: config 0 descriptor?? [ 90.478257][ T5105] loop2: detected capacity change from 0 to 32768 [ 90.482303][ T1110] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 90.502639][ T1110] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 90.543832][ T1110] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 90.583297][ T1110] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 90.593150][ T5105] XFS (loop2): Mounting V5 Filesystem [ 90.686524][ T1110] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 90.878457][ T5105] XFS (loop2): Ending clean mount [ 90.889371][ T5122] loop4: detected capacity change from 0 to 32768 [ 90.913284][ T5105] XFS (loop2): Quotacheck needed: Please wait. [ 91.006224][ T5105] XFS (loop2): Quotacheck: Done. [ 91.016152][ T13] tipc: Node number set to 4269801488 [ 91.071247][ T5137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 91.080905][ T5122] XFS (loop4): Mounting V5 Filesystem [ 91.101283][ T4191] XFS (loop2): Unmounting Filesystem [ 91.209419][ T5143] loop1: detected capacity change from 0 to 512 [ 91.215678][ T5122] XFS (loop4): Ending clean mount [ 91.316621][ T5143] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.391: inode has both inline data and extents flags [ 91.373304][ T4195] XFS (loop4): Unmounting Filesystem [ 91.378450][ T5143] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.391: couldn't read orphan inode 15 (err -117) [ 91.393534][ T5143] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.459162][ T1110] usb 4-1: USB disconnect, device number 3 [ 91.489548][ T1110] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 91.502162][ T1110] keyspan 4-1:0.133: device disconnected [ 91.902954][ T5161] loop2: detected capacity change from 0 to 256 [ 91.949848][ T5165] loop4: detected capacity change from 0 to 1024 [ 91.982088][ T5161] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 92.191795][ T5169] loop1: detected capacity change from 0 to 2048 [ 92.300263][ T5169] Alternate GPT is invalid, using primary GPT. [ 92.320647][ T5169] loop1: p1 p2 p3 [ 92.638145][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 92.657484][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 92.669170][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 92.753580][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 92.775810][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 92.795929][ T4397] udevd[4397]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 93.036272][ T5210] tipc: Enabling of bearer rejected, failed to enable media [ 93.148336][ T5215] SQUASHFS error: xz decompression failed, data probably corrupt [ 93.185148][ T5215] SQUASHFS error: Failed to read block 0x108: -5 [ 93.191562][ T5215] SQUASHFS error: Unable to read metadata cache entry [106] [ 93.222229][ T5222] device ipvlan2 entered promiscuous mode [ 93.230480][ T5215] SQUASHFS error: Unable to read inode 0x11f [ 93.245503][ T5222] bridge0: port 3(ipvlan2) entered blocking state [ 93.274146][ T5222] bridge0: port 3(ipvlan2) entered disabled state [ 94.051729][ T5250] set_capacity_and_notify: 2 callbacks suppressed [ 94.051746][ T5250] loop2: detected capacity change from 0 to 8192 [ 94.196786][ T5250] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 94.219283][ T5250] REISERFS (device loop2): using ordered data mode [ 94.234190][ T5250] reiserfs: using flush barriers [ 94.289483][ T5250] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.390695][ T5250] REISERFS (device loop2): checking transaction log (loop2) [ 94.431982][ T5250] REISERFS (device loop2): Using r5 hash to sort names [ 94.453185][ T5250] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 94.458386][ T5252] loop3: detected capacity change from 0 to 32768 [ 94.498315][ T5250] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 94.685308][ T5252] XFS (loop3): Mounting V5 Filesystem [ 94.926542][ T5252] XFS (loop3): Ending clean mount [ 94.946299][ T5252] XFS (loop3): Quotacheck needed: Please wait. [ 95.087034][ T5252] XFS (loop3): Quotacheck: Done. [ 95.133687][ T5266] loop4: detected capacity change from 0 to 32768 [ 95.163290][ T26] audit: type=1800 audit(1772208312.777:6): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.441" name="file2" dev="loop3" ino=9287 res=0 errno=0 [ 95.255649][ T4188] XFS (loop3): Unmounting Filesystem [ 95.480206][ T5287] loop4: detected capacity change from 0 to 2048 [ 95.614852][ T5287] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 95.673831][ T5287] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 95.703719][ T5279] loop2: detected capacity change from 0 to 32768 [ 95.746593][ T5287] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 95.755427][ T5287] UDF-fs: Scanning with blocksize 512 failed [ 95.797605][ T5287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.822274][ T26] audit: type=1800 audit(1772208313.437:7): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.448" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 96.197938][ C1] sd 0:0:1:0: tag#9948 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 96.207897][ C1] sd 0:0:1:0: tag#9948 CDB: Read(6) 08 00 00 00 00 00 00 00 98 18 00 00 [ 96.623210][ T5331] loop1: detected capacity change from 0 to 512 [ 96.714394][ T5341] loop2: detected capacity change from 0 to 128 [ 96.738745][ T5331] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 96.770968][ T5331] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 96.825682][ T5331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 96.871645][ T5331] System zones: 1-12 [ 96.937694][ T5331] EXT4-fs (loop1): orphan cleanup on readonly fs [ 96.960872][ T5331] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.474: bg 0: block 361: padding at end of block bitmap is not set [ 97.069340][ T5331] EXT4-fs (loop1): Remounting filesystem read-only [ 97.096825][ T5356] loop4: detected capacity change from 0 to 1024 [ 97.144131][ T5331] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 97.173982][ T5331] EXT4-fs (loop1): Remounting filesystem read-only [ 97.213459][ T5331] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.474: attempt to clear invalid blocks 33619980 len 1 [ 97.270808][ T5363] loop0: detected capacity change from 0 to 2048 [ 97.284719][ T5331] EXT4-fs (loop1): Remounting filesystem read-only [ 97.325560][ T5331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.474: invalid indirect mapped block 1811939328 (level 0) [ 97.437425][ T5331] EXT4-fs (loop1): Remounting filesystem read-only [ 97.448566][ T5331] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.474: invalid indirect mapped block 2 (level 2) [ 97.483679][ T5331] EXT4-fs (loop1): Remounting filesystem read-only [ 97.502976][ T5331] EXT4-fs (loop1): 1 truncate cleaned up [ 97.514510][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv1,init_itable=0x0000000000000005,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 97.611864][ T144] hfsplus: b-tree write err: -5, ino 4 [ 97.728477][ T5331] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 5: comm syz.1.474: lblock 0 mapped to illegal pblock 5 (length 1) [ 97.843995][ T5331] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.474: error -117 reading directory block [ 97.869598][ T5385] loop2: detected capacity change from 0 to 512 [ 97.971035][ T5385] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 98.100498][ T5385] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 98.159074][ T5394] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 98.174218][ T5358] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.485 (5358) [ 98.206112][ T5394] System zones: 0-2, 18-18, 34-34 [ 98.226593][ T5385] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.494: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 98.370375][ T5358] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.386252][ T5394] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.498: bg 0: block 248: padding at end of block bitmap is not set [ 98.440299][ T5358] BTRFS info (device loop3): force zlib compression, level 3 [ 98.483626][ T4191] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 98.505294][ T5358] BTRFS info (device loop3): force clearing of disk cache [ 98.512728][ T5394] Quota error (device loop4): write_blk: dquota write failed [ 98.556525][ T5358] BTRFS info (device loop3): setting nodatasum [ 98.562840][ T5358] BTRFS info (device loop3): allowing degraded mounts [ 98.577564][ T5394] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 98.648409][ T5358] BTRFS info (device loop3): enabling disk space caching [ 98.660116][ T5394] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.498: Failed to acquire dquot type 1 [ 98.677105][ T5417] device veth1_macvtap left promiscuous mode [ 98.683376][ T5358] BTRFS info (device loop3): disk space caching is enabled [ 98.739442][ T5394] EXT4-fs (loop4): 1 truncate cleaned up [ 98.753613][ T5417] device macsec0 entered promiscuous mode [ 98.762426][ T5358] BTRFS info (device loop3): has skinny extents [ 98.770609][ T5394] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue. Quota mode: writeback. [ 98.841130][ T5419] device veth1_macvtap entered promiscuous mode [ 98.853572][ T5394] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.875227][ T5419] device macsec0 left promiscuous mode [ 98.901176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.125674][ T5358] BTRFS info (device loop3): clearing free space tree [ 99.133943][ T5358] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.157297][ T5394] syz.4.498 (5394) used greatest stack depth: 19152 bytes left [ 99.214128][ T4222] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.242795][ T5358] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.417890][ T5435] set_capacity_and_notify: 2 callbacks suppressed [ 99.417904][ T5435] loop0: detected capacity change from 0 to 32768 [ 99.463790][ T5435] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.506 (5435) [ 99.531187][ T5435] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.544904][ T5358] BTRFS info (device loop3): balance: start -s [ 99.550622][ T5435] BTRFS info (device loop0): setting nodatacow, compression disabled [ 99.562150][ T5449] loop1: detected capacity change from 0 to 8192 [ 99.568920][ T5435] BTRFS info (device loop0): turning on flush-on-commit [ 99.610984][ T5435] BTRFS info (device loop0): using free space tree [ 99.622203][ T4222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.636559][ T5449] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.649628][ T5358] BTRFS info (device loop3): relocating block group 1048576 flags system [ 99.658628][ T5435] BTRFS info (device loop0): has skinny extents [ 99.665450][ T4222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.692413][ T4222] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 99.721484][ T4222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.781934][ T4222] usb 3-1: config 0 descriptor?? [ 99.897544][ T5473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 99.969171][ T5358] BTRFS info (device loop3): balance: ended with status: 0 [ 100.031548][ T5435] BTRFS info (device loop0): enabling ssd optimizations [ 100.162629][ T26] audit: type=1800 audit(1772208317.777:8): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.506" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 100.199361][ T5485] loop4: detected capacity change from 0 to 4096 [ 100.268050][ T4222] konepure 0003:1E7D:2DB4.0001: item fetching failed at offset 0/1 [ 100.298036][ T4222] konepure 0003:1E7D:2DB4.0001: parse failed [ 100.305533][ T4222] konepure: probe of 0003:1E7D:2DB4.0001 failed with error -22 [ 100.507311][ T5492] hugetlbfs: Bad value ':' for mount option 'size' [ 100.507311][ T5492] [ 100.676524][ T5499] usb 3-1: USB disconnect, device number 3 [ 101.068849][ T5521] loop0: detected capacity change from 0 to 2048 [ 101.192546][ T5521] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 101.246185][ T5521] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 101.287299][ T5521] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 101.318883][ T5521] UDF-fs: Scanning with blocksize 512 failed [ 101.354047][ T5514] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.374067][ T5521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.434852][ T5540] raw_sendmsg: syz.4.527 forgot to set AF_INET. Fix it! [ 101.479954][ T5542] loop3: detected capacity change from 0 to 256 [ 101.610488][ T5542] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104fe, chksum : 0x11d9e676, utbl_chksum : 0xe619d30d) [ 101.623217][ T5514] usb 2-1: Using ep0 maxpacket: 32 [ 101.665331][ T5542] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005) [ 101.719575][ T5542] exFAT-fs (loop3): Filesystem has been set read-only [ 101.747330][ T5514] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 101.770752][ T5542] exFAT-fs (loop3): failed to initialize root inode [ 101.787807][ T5514] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.837041][ T5514] usb 2-1: config 0 has no interface number 0 [ 101.883818][ T5514] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.094336][ T5514] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 102.110888][ T5565] loop3: detected capacity change from 0 to 512 [ 102.124033][ T5514] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.148362][ T5514] usb 2-1: Product: syz [ 102.161030][ T5514] usb 2-1: Manufacturer: syz [ 102.182498][ T5514] usb 2-1: SerialNumber: syz [ 102.211905][ T5514] usb 2-1: config 0 descriptor?? [ 102.271273][ T5570] loop2: detected capacity change from 0 to 512 [ 102.280136][ T5514] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 102.304066][ T5514] radio-si470x: probe of 2-1:0.35 failed with error -5 [ 102.371236][ T5570] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.434716][ T5570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 102.442777][ T5570] System zones: 1-12 [ 102.494192][ T5514] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 102.518008][ T5570] EXT4-fs (loop2): 1 truncate cleaned up [ 102.584423][ T5570] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 102.625331][ T5578] loop0: detected capacity change from 0 to 1024 [ 102.685608][ T5578] EXT4-fs (loop0): Ignoring removed orlov option [ 102.704175][ T5514] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 102.722008][ T5573] loop3: detected capacity change from 0 to 32768 [ 102.739040][ T5514] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 102.740095][ T5578] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,errors=remount-ro,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,nodelalloc,noauto_da_alloc,stripe=0x0000000000000085,orlov,. Quota mode: writeback. [ 102.763801][ T5514] usb 2-1: USB disconnect, device number 3 [ 102.777225][ T5514] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 102.924878][ T5578] EXT4-fs error (device loop0): ext4_check_all_de:667: inode #12: block 7: comm syz.0.545: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 102.966441][ T5573] JBD2: Ignoring recovery information on journal [ 103.048704][ T5578] EXT4-fs (loop0): Remounting filesystem read-only [ 103.093435][ T5567] loop4: detected capacity change from 0 to 32768 [ 103.230585][ T5573] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.247123][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'. [ 103.256488][ T5594] block nbd1: Unsupported socket: shutdown callout must be supported. [ 103.329154][ T5567] XFS (loop4): Mounting V5 Filesystem [ 103.390265][ T5567] XFS (loop4): Ending clean mount [ 103.470897][ T5567] XFS (loop4): Quotacheck needed: Please wait. [ 103.606370][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 103.619660][ T5567] XFS (loop4): Quotacheck: Done. [ 103.664782][ T5610] netlink: 'syz.2.554': attribute type 2 has an invalid length. [ 103.906191][ T4195] XFS (loop4): Unmounting Filesystem [ 104.155319][ T5624] FAT-fs (loop3): Directory bread(block 64) failed [ 104.162011][ T5624] FAT-fs (loop3): Directory bread(block 65) failed [ 104.241109][ T5624] FAT-fs (loop3): Directory bread(block 66) failed [ 104.271287][ T5624] FAT-fs (loop3): Directory bread(block 67) failed [ 104.305839][ T5624] FAT-fs (loop3): Directory bread(block 68) failed [ 104.345147][ T5624] FAT-fs (loop3): Directory bread(block 69) failed [ 104.381666][ T5637] Major/Minor mismatch, older Squashfs 2.0 filesystems are unsupported [ 104.398203][ T5624] FAT-fs (loop3): Directory bread(block 70) failed [ 104.437792][ T5624] FAT-fs (loop3): Directory bread(block 71) failed [ 104.466421][ T5624] FAT-fs (loop3): Directory bread(block 72) failed [ 104.484771][ T5624] FAT-fs (loop3): Directory bread(block 73) failed [ 104.566659][ T5637] set_capacity_and_notify: 3 callbacks suppressed [ 104.566674][ T5637] loop2: detected capacity change from 0 to 1024 [ 104.614308][ T5637] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 104.676781][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 104.698376][ T5637] hfsplus: filesystem is marked journaled, leaving read-only. [ 105.049083][ T5659] loop3: detected capacity change from 0 to 1024 [ 105.277133][ T5675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.586'. [ 105.317755][ T5677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.587'. [ 105.490716][ T5673] loop4: detected capacity change from 0 to 4096 [ 105.594893][ T5693] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.233142][ T5708] process 'syz.3.602' launched './file0' with NULL argv: empty string added [ 106.391247][ T5689] loop0: detected capacity change from 0 to 32768 [ 106.458370][ T5689] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 106.458370][ T5689] [ 106.536442][ T5697] loop2: detected capacity change from 0 to 32768 [ 106.554658][ T5689] ERROR: (device loop0): remounting filesystem as read-only [ 106.624182][ T5697] XFS (loop2): Mounting V5 Filesystem [ 106.726983][ T5699] loop1: detected capacity change from 0 to 32768 [ 106.848228][ T5697] XFS (loop2): Ending clean mount [ 106.936816][ T5697] XFS (loop2): Quotacheck needed: Please wait. [ 107.024333][ T5697] XFS (loop2): Quotacheck: Done. [ 107.106530][ T4191] XFS (loop2): Unmounting Filesystem [ 107.133349][ T5726] loop3: detected capacity change from 0 to 8192 [ 107.638571][ T5710] loop4: detected capacity change from 0 to 40427 [ 107.791447][ T5710] F2FS-fs (loop4): invalid crc value [ 107.871329][ T5710] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.042738][ T5730] loop1: detected capacity change from 0 to 32768 [ 108.049395][ T5710] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.198623][ T5735] loop0: detected capacity change from 0 to 32768 [ 108.224525][ T4195] attempt to access beyond end of device [ 108.224525][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 108.313365][ T5739] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.613 (5739) [ 108.374149][ T5735] XFS (loop0): Mounting V5 Filesystem [ 108.380821][ T5739] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 108.429431][ T5739] BTRFS info (device loop3): setting nodatacow, compression disabled [ 108.451800][ T5739] BTRFS info (device loop3): turning on flush-on-commit [ 108.471271][ T5739] BTRFS info (device loop3): using free space tree [ 108.493419][ T5739] BTRFS info (device loop3): has skinny extents [ 108.542332][ T5735] XFS (loop0): Ending clean mount [ 108.552433][ T5735] XFS (loop0): Quotacheck needed: Please wait. [ 108.680056][ T5739] BTRFS info (device loop3): enabling ssd optimizations [ 108.693048][ T5735] XFS (loop0): Quotacheck: Done. [ 108.848032][ T26] audit: type=1800 audit(1772208326.467:9): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.613" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 108.876891][ T5780] netlink: 536 bytes leftover after parsing attributes in process `syz.4.618'. [ 109.053518][ T4190] XFS (loop0): Unmounting Filesystem [ 109.440234][ T5789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.619'. [ 109.595468][ T5754] XFS (loop2): Mounting V5 Filesystem [ 109.696429][ T5804] set_capacity_and_notify: 3 callbacks suppressed [ 109.696445][ T5804] loop3: detected capacity change from 0 to 256 [ 109.775029][ T5804] exfat: Deprecated parameter 'utf8' [ 109.775056][ T5804] exfat: Deprecated parameter 'namecase' [ 109.889202][ T5804] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 109.895816][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 109.936699][ T5754] XFS (loop2): Ending clean mount [ 109.986463][ T4184] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 110.019666][ T5808] loop0: detected capacity change from 0 to 1024 [ 110.029139][ T4191] XFS (loop2): Unmounting Filesystem [ 110.111978][ T5810] loop3: detected capacity change from 0 to 512 [ 110.229876][ T5810] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.244206][ T5810] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.280141][ T9] hfsplus: b-tree write err: -5, ino 4 [ 110.782714][ T5839] netlink: 'syz.1.636': attribute type 49 has an invalid length. [ 110.826140][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'. [ 110.851575][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 110.870136][ T5837] netlink: 'syz.0.637': attribute type 19 has an invalid length. [ 110.924133][ T5837] netlink: 'syz.0.637': attribute type 20 has an invalid length. [ 111.113243][ T5850] loop4: detected capacity change from 0 to 2048 [ 111.170236][ T5850] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 111.250958][ T5850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.558604][ T5830] loop3: detected capacity change from 0 to 32768 [ 111.781664][ T5830] XFS (loop3): Mounting V5 Filesystem [ 111.811757][ T5842] loop2: detected capacity change from 0 to 32768 [ 111.942245][ T5830] XFS (loop3): Ending clean mount [ 111.950393][ T5830] XFS (loop3): Quotacheck needed: Please wait. [ 112.027375][ T5877] loop4: detected capacity change from 0 to 4096 [ 112.107385][ T5830] XFS (loop3): Quotacheck: Done. [ 112.146431][ T5877] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 112.198090][ T5877] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 112.234024][ T5877] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 112.262378][ T5858] loop0: detected capacity change from 0 to 32768 [ 112.286554][ T5877] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 112.338243][ T4188] XFS (loop3): Unmounting Filesystem [ 112.403155][ T5858] JBD2: Ignoring recovery information on journal [ 112.431021][ T5891] netlink: 'syz.2.659': attribute type 3 has an invalid length. [ 112.459537][ T5877] ntfs: volume version 3.1. [ 112.494266][ T5893] netlink: 'syz.2.661': attribute type 9 has an invalid length. [ 112.576752][ T5858] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.608175][ T5877] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 112.636240][ T5895] loop1: detected capacity change from 0 to 256 [ 112.643377][ T5877] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 112.687568][ T5877] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp850. You might want to try to use the mount option nls=utf8. [ 112.726983][ T5877] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x45. [ 112.823134][ T5900] loop2: detected capacity change from 0 to 1024 [ 112.843960][ T4190] ocfs2: Unmounting device (7,0) on (node local) [ 113.021248][ T5900] hfsplus: trying to free free bnode 0(1) [ 113.254979][ T144] hfsplus: b-tree write err: -5, ino 4 [ 113.324124][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'. [ 113.411556][ T5908] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.419735][ T5916] FAT-fs (loop4): Directory bread(block 64) failed [ 113.433571][ T5916] FAT-fs (loop4): Directory bread(block 65) failed [ 113.464376][ T5908] ntfs3: loop1: Failed to load $Extend. [ 113.479773][ T5916] FAT-fs (loop4): Directory bread(block 66) failed [ 113.540278][ T5916] FAT-fs (loop4): Directory bread(block 67) failed [ 113.564146][ T5916] FAT-fs (loop4): Directory bread(block 68) failed [ 113.594039][ T5916] FAT-fs (loop4): Directory bread(block 69) failed [ 113.635166][ T5916] FAT-fs (loop4): Directory bread(block 70) failed [ 113.691054][ T5916] FAT-fs (loop4): Directory bread(block 71) failed [ 113.733386][ T5916] FAT-fs (loop4): Directory bread(block 72) failed [ 113.743980][ T5506] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.768272][ T5916] FAT-fs (loop4): Directory bread(block 73) failed [ 114.099686][ T5936] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 114.128555][ T5506] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.176066][ T5943] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.324483][ T5506] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.333598][ T5506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.395750][ T5506] usb 3-1: Product: syz [ 114.411803][ T5506] usb 3-1: Manufacturer: syz [ 114.433073][ T5506] usb 3-1: SerialNumber: syz [ 114.522976][ T5957] exfat: Deprecated parameter 'utf8' [ 114.576508][ T5957] exfat: Deprecated parameter 'utf8' [ 114.645723][ T5957] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 114.799081][ T5506] cdc_ncm 3-1:1.0: bind() failure [ 114.804922][ T5957] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 114.827383][ T5506] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 114.854021][ T5506] cdc_ncm 3-1:1.1: bind() failure [ 114.889638][ T5506] usb 3-1: USB disconnect, device number 4 [ 114.903364][ T5965] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 115.076795][ T5976] rdma_op ffff888076e9a1f0 conn xmit_rdma 0000000000000000 [ 115.322032][ T5992] set_capacity_and_notify: 7 callbacks suppressed [ 115.322049][ T5992] loop1: detected capacity change from 0 to 512 [ 115.416768][ T5992] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 115.444181][ T5998] device bridge0 entered promiscuous mode [ 115.476484][ T5998] device macvlan2 entered promiscuous mode [ 115.483569][ T5992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 115.525643][ T5992] EXT4-fs (loop1): orphan cleanup on readonly fs [ 115.578575][ T5992] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.704: bg 0: block 361: padding at end of block bitmap is not set [ 115.671329][ T5992] EXT4-fs (loop1): Remounting filesystem read-only [ 115.734987][ T5992] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 115.753474][ T5992] EXT4-fs (loop1): Remounting filesystem read-only [ 115.760996][ T5992] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.704: attempt to clear invalid blocks 33619980 len 1 [ 115.813752][ T5992] EXT4-fs (loop1): Remounting filesystem read-only [ 115.887901][ T5992] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.704: invalid indirect mapped block 1811939328 (level 0) [ 115.941476][ T5992] EXT4-fs (loop1): Remounting filesystem read-only [ 115.975092][ T5992] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.704: invalid indirect mapped block 2185560079 (level 1) [ 116.023204][ T5992] EXT4-fs (loop1): Remounting filesystem read-only [ 116.036478][ T5992] EXT4-fs (loop1): 1 truncate cleaned up [ 116.042245][ T5992] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 116.084160][ T4225] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.191826][ T6032] loop2: detected capacity change from 0 to 64 [ 116.243314][ T6034] loop3: detected capacity change from 0 to 4096 [ 116.349172][ T6037] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.360356][ T4225] usb 5-1: Using ep0 maxpacket: 8 [ 116.484210][ T4225] usb 5-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.517996][ T4225] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.553996][ T4225] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 116.563080][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.581826][ T4225] usb 5-1: config 0 descriptor?? [ 116.628180][ T6043] loop2: detected capacity change from 0 to 512 [ 116.720555][ T6043] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 116.771326][ T6043] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.105085][ T4225] itetech 0003:06CB:73F5.0002: hidraw0: USB HID v0.09 Device [HID 06cb:73f5] on usb-dummy_hcd.4-1/input0 [ 117.190283][ T26] audit: type=1326 audit(1772208334.807:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.2.735" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e6fe70799 code=0x0 [ 117.298371][ T4225] usb 5-1: USB disconnect, device number 2 [ 117.346222][ T6049] loop1: detected capacity change from 0 to 32768 [ 117.374489][ T6064] CUSE: DEVNAME unspecified [ 117.387610][ T6049] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.730 (6049) [ 117.409479][ T6059] fido_id[6059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 117.439632][ T6049] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.462423][ T6050] loop3: detected capacity change from 0 to 32768 [ 117.487217][ T6049] BTRFS info (device loop1): force zlib compression, level 3 [ 117.512002][ T6066] loop0: detected capacity change from 0 to 256 [ 117.512567][ T6049] BTRFS info (device loop1): force clearing of disk cache [ 117.536660][ T6049] BTRFS info (device loop1): setting nodatasum [ 117.543084][ T6049] BTRFS info (device loop1): allowing degraded mounts [ 117.552151][ T6049] BTRFS info (device loop1): enabling disk space caching [ 117.559742][ T6049] BTRFS info (device loop1): disk space caching is enabled [ 117.567410][ T6049] BTRFS info (device loop1): has skinny extents [ 117.583038][ T6050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.731 (6050) [ 117.665985][ T6050] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.679230][ T6050] BTRFS info (device loop3): setting nodatacow, compression disabled [ 117.689912][ T6050] BTRFS info (device loop3): force clearing of disk cache [ 117.697572][ T6050] BTRFS info (device loop3): enabling ssd optimizations [ 117.705441][ T6050] BTRFS info (device loop3): using spread ssd allocation scheme [ 117.713431][ T6050] BTRFS info (device loop3): turning off barriers [ 117.720895][ T6050] BTRFS info (device loop3): disabling free space tree [ 117.728349][ T6050] BTRFS info (device loop3): not using ssd optimizations [ 117.737164][ T6050] BTRFS info (device loop3): not using spread ssd allocation scheme [ 117.747090][ T6050] BTRFS info (device loop3): has skinny extents [ 117.791413][ T6089] netlink: 'syz.0.739': attribute type 3 has an invalid length. [ 117.829798][ T6049] BTRFS info (device loop1): clearing free space tree [ 117.839094][ T6049] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 117.850262][ T6049] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.966379][ T6049] BTRFS info (device loop1): balance: start -s [ 117.980485][ T6108] team0: Device ipip0 is of different type [ 118.015872][ T6050] BTRFS info (device loop3): clearing free space tree [ 118.017390][ T6049] BTRFS info (device loop1): relocating block group 1048576 flags system [ 118.028314][ T6050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 118.084125][ T6050] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 118.095836][ T6049] BTRFS info (device loop1): balance: ended with status: 0 [ 118.338868][ T6119] loop0: detected capacity change from 0 to 256 [ 118.491518][ T26] audit: type=1800 audit(1772208336.107:11): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.745" name=AB558DD927B972A7B6E39F9435C9CE7FF7 dev="loop0" ino=1048663 res=0 errno=0 [ 118.777017][ T6131] loop4: detected capacity change from 0 to 256 [ 118.830106][ T6131] exfat: Deprecated parameter 'namecase' [ 118.850454][ T6131] exfat: Deprecated parameter 'namecase' [ 118.910707][ T4174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4174) [ 118.941210][ T6131] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 118.963470][ T6116] loop2: detected capacity change from 0 to 40427 [ 119.033982][ T6116] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 119.070184][ T6116] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.108113][ T6131] attempt to access beyond end of device [ 119.108113][ T6131] loop4: rw=0, want=34225520825, limit=256 [ 119.192069][ T6116] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.404683][ T6116] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.458653][ T6116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.590193][ T26] audit: type=1800 audit(1772208337.207:12): pid=6116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.742" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 119.781747][ T6116] attempt to access beyond end of device [ 119.781747][ T6116] loop2: rw=2049, want=80096, limit=40427 [ 119.865527][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.762'. [ 119.878599][ T6116] attempt to access beyond end of device [ 119.878599][ T6116] loop2: rw=2049, want=53264, limit=40427 [ 119.955745][ T6116] attempt to access beyond end of device [ 119.955745][ T6116] loop2: rw=2049, want=80376, limit=40427 [ 120.231740][ T4191] attempt to access beyond end of device [ 120.231740][ T4191] loop2: rw=2049, want=45104, limit=40427 [ 120.353455][ T6187] set_capacity_and_notify: 1 callbacks suppressed [ 120.353470][ T6187] loop1: detected capacity change from 0 to 2048 [ 120.418388][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 120.469097][ T6187] UDF-fs: error (device loop1): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0) [ 120.524789][ T6187] UDF-fs: Scanning with blocksize 512 failed [ 120.571217][ T6187] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.594462][ T6187] UDF-fs: Scanning with blocksize 1024 failed [ 120.642908][ T6187] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 120.722290][ T6187] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.746565][ T6187] UDF-fs: Scanning with blocksize 2048 failed [ 120.784799][ T6187] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 120.823792][ T6187] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 120.857098][ T6187] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 120.884096][ T6187] UDF-fs: Scanning with blocksize 4096 failed [ 120.900507][ T6187] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 121.293756][ T6189] loop0: detected capacity change from 0 to 32768 [ 121.791589][ T6242] loop4: detected capacity change from 0 to 64 [ 121.820105][ T6244] loop0: detected capacity change from 0 to 1024 [ 121.874309][ T5513] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 121.889349][ T6246] loop1: detected capacity change from 0 to 1024 [ 121.984511][ T6246] hfsplus: bad catalog entry type [ 122.002228][ T6244] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,data_err=ignore,,errors=continue. Quota mode: none. [ 122.104053][ T144] hfsplus: b-tree write err: -5, ino 4 [ 122.199989][ T6258] loop1: detected capacity change from 0 to 1024 [ 122.234174][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.241395][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.807'. [ 122.272609][ T5513] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.327177][ T6258] hfsplus: bad catalog file entry [ 122.344049][ T5513] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.354546][ T6258] hfsplus: failed to load root directory [ 122.379757][ T5513] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 122.390276][ T5513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.423412][ T5513] usb 4-1: config 0 descriptor?? [ 122.465882][ T6269] xt_socket: unknown flags 0xe4 [ 122.532137][ T6258] overlayfs: unrecognized mount option "verity=on" or missing value [ 122.663512][ T6275] loop2: detected capacity change from 0 to 512 [ 122.880829][ T6275] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.912419][ T5513] hid-multitouch 0003:0EEF:72D0.0003: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0 [ 122.939232][ T6275] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.137182][ T5513] usb 4-1: USB disconnect, device number 4 [ 123.252245][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.824'. [ 123.279311][ T6273] loop4: detected capacity change from 0 to 32768 [ 123.370904][ T6273] XFS (loop4): Mounting V5 Filesystem [ 123.550401][ T6273] XFS (loop4): Ending clean mount [ 123.558189][ T6273] XFS (loop4): Quotacheck needed: Please wait. [ 123.637272][ T6311] loop1: detected capacity change from 0 to 32768 [ 123.672909][ T6273] XFS (loop4): Quotacheck: Done. [ 123.704850][ T6311] XFS (loop1): Mounting V5 Filesystem [ 123.802682][ T6328] loop3: detected capacity change from 0 to 512 [ 123.847447][ T6328] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 123.866535][ T6324] EXT4-fs (loop2): Test dummy encryption mode enabled [ 123.876857][ T6311] XFS (loop1): Ending clean mount [ 123.954628][ T6324] EXT4-fs (loop2): Test dummy encryption mode enabled [ 123.978521][ T6311] XFS (loop1): Quotacheck needed: Please wait. [ 124.018532][ T6328] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 124.028028][ T6328] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.830: attempt to clear invalid blocks 2 len 1 [ 124.042922][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback. [ 124.108066][ T6311] XFS (loop1): Quotacheck: Done. [ 124.130299][ T6328] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 124.132156][ T4195] XFS (loop4): Unmounting Filesystem [ 124.156274][ T6328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.830: invalid indirect mapped block 1819239214 (level 0) [ 124.173364][ T6328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.830: invalid indirect mapped block 1819239214 (level 1) [ 124.195848][ T6328] EXT4-fs (loop3): 1 truncate cleaned up [ 124.201670][ T6328] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 124.282821][ T6328] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 124.375750][ T4184] XFS (loop1): Unmounting Filesystem [ 125.153715][ T26] audit: type=1800 audit(1772208342.767:13): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.833" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 125.173941][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.488066][ T6366] set_capacity_and_notify: 4 callbacks suppressed [ 125.488090][ T6366] loop2: detected capacity change from 0 to 512 [ 125.506092][ T5787] kernel write not supported for file /snd/seq (pid: 5787 comm: kworker/0:20) [ 125.638053][ T6366] EXT4-fs (loop2): Ignoring removed bh option [ 125.674255][ T6366] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.711164][ T6368] loop0: detected capacity change from 0 to 4096 [ 125.733962][ T6366] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.780871][ T6366] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.847: Invalid block bitmap block 0 in block_group 0 [ 125.809323][ T6366] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 125.834824][ T6366] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.847: attempt to clear invalid blocks 983261 len 1 [ 125.854888][ T6366] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 125.905853][ T6368] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 125.936575][ T6368] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 125.957033][ T6368] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 125.969284][ T6366] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 125.979093][ T6368] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 125.999940][ T6368] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 126.008118][ T6366] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 126.045818][ T6368] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 126.059002][ T6366] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 126.084800][ T6368] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 126.104040][ T6366] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 126.119523][ T6346] loop3: detected capacity change from 0 to 40427 [ 126.127951][ T6366] EXT4-fs error (device loop2): ext4_truncate:4279: inode #11: comm syz.2.847: mark_inode_dirty error [ 126.140042][ T6368] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 126.171528][ T6346] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 126.186959][ T6366] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 126.204824][ T6354] loop1: detected capacity change from 0 to 32768 [ 126.207488][ T6346] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 126.219716][ T6368] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 126.258968][ T6366] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.847: Invalid inode table block 0 in block_group 0 [ 126.309019][ T6346] F2FS-fs (loop3): invalid crc value [ 126.344035][ T6368] ntfs: volume version 3.1. [ 126.386169][ T6346] F2FS-fs (loop3): Found nat_bits in checkpoint [ 126.395089][ T6366] EXT4-fs (loop2): 1 truncate cleaned up [ 126.400767][ T6366] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,grpquota,bh,noblock_validity,,errors=continue. Quota mode: writeback. [ 126.449266][ T6382] loop4: detected capacity change from 0 to 128 [ 126.639442][ T6346] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 126.642204][ T6386] loop1: detected capacity change from 0 to 512 [ 126.770206][ T6391] loop4: detected capacity change from 0 to 128 [ 126.820331][ T6386] attempt to access beyond end of device [ 126.820331][ T6386] loop1: rw=2051, want=28736, limit=512 [ 126.890934][ T6391] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 126.926733][ T6394] FAT-fs (loop1): FAT read failed (blocknr 128) [ 126.955362][ T4188] attempt to access beyond end of device [ 126.955362][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 126.980566][ T6391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.366134][ T6408] program syz.2.866 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.464235][ T6414] capability: warning: `syz.4.868' uses 32-bit capabilities (legacy support in use) [ 128.328137][ T6451] loop2: detected capacity change from 0 to 512 [ 128.464470][ T6451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ec01c, mo2=0003] [ 128.504388][ T5507] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.530648][ T6403] loop0: detected capacity change from 0 to 40427 [ 128.556915][ T6451] System zones: 1-2, 4-12, 8-8 [ 128.598573][ T6451] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.879: iget: bad i_size value: 38620345925642 [ 128.676914][ T6403] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 128.728591][ T6451] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.879: couldn't read orphan inode 15 (err -117) [ 128.758617][ T6403] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 128.825112][ T6451] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,delalloc,data_err=ignore,debug,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 128.859263][ T5507] usb 5-1: Using ep0 maxpacket: 16 [ 128.943574][ T6403] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.048614][ T5507] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.069742][ T5507] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.111467][ T6476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.885'. [ 129.123942][ T5507] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.156312][ T5507] usb 5-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 129.199869][ T5507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.229256][ T5507] usb 5-1: config 0 descriptor?? [ 129.238845][ T6403] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.248698][ T6403] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.369827][ T6484] loop3: detected capacity change from 0 to 128 [ 129.748953][ T5507] wacom 0003:056A:010D.0004: hidraw0: USB HID v0.00 Device [HID 056a:010d] on usb-dummy_hcd.4-1/input0 [ 129.978757][ T5507] usb 5-1: USB disconnect, device number 3 [ 130.000615][ T6500] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.014184][ T6493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 130.050593][ T6493] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.554828][ T6509] fido_id[6509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.921514][ T6504] set_capacity_and_notify: 3 callbacks suppressed [ 130.921530][ T6504] loop0: detected capacity change from 0 to 32768 [ 131.140365][ T4225] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.469816][ T4225] usb 5-1: Using ep0 maxpacket: 16 [ 131.536588][ T6547] tipc: Enabling of bearer rejected, failed to enable media [ 131.662648][ T4225] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.686947][ T4225] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 131.702338][ T1107] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 131.720845][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.763197][ T4225] usb 5-1: config 0 descriptor?? [ 132.182380][ T1107] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 132.214576][ T1107] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.239789][ T1107] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 132.265933][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.303211][ T4225] hid (null): invalid report_count 15316 [ 132.309946][ T4225] hid (null): invalid report_count 33591 [ 132.320269][ T1107] usb 2-1: config 0 descriptor?? [ 132.344061][ T4225] hid (null): unknown global tag 0xd [ 132.349408][ T4225] hid (null): report_id 0 is invalid [ 132.392047][ T6542] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 132.537916][ T4225] usb 5-1: USB disconnect, device number 4 [ 132.571274][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.579014][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.852538][ T1107] logitech-djreceiver 0003:046D:C52F.0006: unknown main item tag 0x0 [ 132.874421][ T1107] logitech-djreceiver 0003:046D:C52F.0006: item fetching failed at offset 3/5 [ 132.895370][ T1107] logitech-djreceiver 0003:046D:C52F.0006: logi_dj_probe: parse failed [ 132.903668][ T1107] logitech-djreceiver: probe of 0003:046D:C52F.0006 failed with error -22 [ 133.035434][ T6591] loop3: detected capacity change from 0 to 64 [ 133.141686][ T5507] usb 2-1: USB disconnect, device number 4 [ 133.159679][ T6593] device bridge_slave_0 left promiscuous mode [ 133.210255][ T6593] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.345051][ T6598] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4083) [ 133.372592][ T6598] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 133.835453][ T6616] netlink: 'syz.1.945': attribute type 29 has an invalid length. [ 133.889099][ T6616] netlink: 'syz.1.945': attribute type 29 has an invalid length. [ 133.913020][ T6619] netlink: 'syz.1.945': attribute type 29 has an invalid length. [ 134.182918][ T6611] loop4: detected capacity change from 0 to 32768 [ 134.805699][ T6626] loop2: detected capacity change from 0 to 2048 [ 134.821141][ T6618] loop3: detected capacity change from 0 to 40427 [ 134.883571][ T6628] loop4: detected capacity change from 0 to 2048 [ 134.934609][ T6626] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 134.970907][ T6618] F2FS-fs (loop3): invalid crc value [ 135.015318][ T6628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.040599][ T6618] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 135.121989][ T6626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.246577][ T6618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.448819][ T4188] attempt to access beyond end of device [ 135.448819][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 135.465441][ T5513] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.714086][ T5513] usb 2-1: Using ep0 maxpacket: 32 [ 135.765221][ T5513] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 135.864166][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 135.887507][ T5513] usb 2-1: config 0 has no interface number 0 [ 135.987554][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.008590][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.108097][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.130455][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.214216][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.224673][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.314281][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.333441][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.417243][ T5509] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 136.426179][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.465703][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.503669][ T6644] loop0: detected capacity change from 0 to 32768 [ 136.544204][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.577401][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.598780][ T6658] loop2: detected capacity change from 0 to 512 [ 136.678596][ T6652] loop3: detected capacity change from 0 to 32768 [ 136.685448][ T5513] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 136.693486][ T5513] usb 2-1: config 0 has no interface number 0 [ 136.707786][ T6644] XFS (loop0): Mounting V5 Filesystem [ 136.724397][ T6658] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,. Quota mode: writeback. [ 136.737795][ T6658] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.779196][ T6658] EXT4-fs error (device loop2): ext4_xattr_block_find:1855: inode #15: comm syz.2.963: corrupted xattr block 33 [ 136.802352][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 136.815408][ T6658] EXT4-fs error (device loop2): ext4_xattr_block_list:713: inode #15: comm syz.2.963: corrupted xattr block 33 [ 136.829069][ T5509] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 136.838466][ T5509] usb 5-1: config 0 has no interface number 0 [ 136.844852][ T5509] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 136.854607][ T5513] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 136.867138][ T5509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.875394][ T6658] EXT4-fs (loop2): Remounting filesystem read-only [ 136.923779][ T5513] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.974949][ T5509] usb 5-1: config 0 descriptor?? [ 136.986080][ T5513] usb 2-1: Product: syz [ 136.990300][ T5513] usb 2-1: Manufacturer: syz [ 137.017604][ T5509] usb 5-1: selecting invalid altsetting 1 [ 137.042214][ T5509] dvb_ttusb_budget: ttusb_init_controller: error [ 137.054013][ T5513] usb 2-1: SerialNumber: syz [ 137.067486][ T5509] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 137.077666][ T5513] usb 2-1: config 0 descriptor?? [ 137.116087][ T5513] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) driver version 1.00 [ 137.128903][ T6652] XFS (loop3): Mounting V5 Filesystem [ 137.174461][ T5509] DVB: Unable to find symbol cx22700_attach() [ 137.174953][ T6644] XFS (loop0): Ending clean mount [ 137.259787][ T5509] DVB: Unable to find symbol tda10046_attach() [ 137.274036][ T5509] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 137.294727][ T5509] usb 5-1: USB disconnect, device number 5 [ 137.304285][ T4190] XFS (loop0): Unmounting Filesystem [ 137.374081][ T5513] etas_es58x 2-1:0.2: Product info: 424242424242 [ 137.598870][ T6652] XFS (loop3): Ending clean mount [ 137.648028][ T6652] XFS (loop3): Quotacheck needed: Please wait. [ 137.854921][ T6652] XFS (loop3): Quotacheck: Done. [ 138.104961][ T4188] XFS (loop3): Unmounting Filesystem [ 138.580711][ T6711] device macsec1 entered promiscuous mode [ 138.624001][ T6711] device virt_wifi0 entered promiscuous mode [ 138.683519][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 138.760142][ T6136] usb 2-1: USB disconnect, device number 5 [ 138.768356][ T6136] etas_es58x 2-1:0.2: Disconnecting syz syz [ 140.272921][ T6733] loop0: detected capacity change from 0 to 32768 [ 140.438437][ T5506] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 140.769278][ T4225] kernel write not supported for file /comedi4 (pid: 4225 comm: kworker/0:6) [ 140.834111][ T6136] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.946108][ T6775] loop3: detected capacity change from 0 to 40427 [ 140.964550][ T5506] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 140.973627][ T5506] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.991923][ T5506] usb 5-1: Product: syz [ 141.006491][ T5506] usb 5-1: Manufacturer: syz [ 141.011125][ T5506] usb 5-1: SerialNumber: syz [ 141.039587][ T6775] F2FS-fs (loop3): invalid crc value [ 141.049656][ T5506] usb 5-1: config 0 descriptor?? [ 141.071250][ T6775] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.099001][ T5506] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 141.107921][ T6136] usb 2-1: Using ep0 maxpacket: 32 [ 141.119714][ T5506] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.154289][ T5506] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 141.189222][ T5506] usb 5-1: media controller created [ 141.224147][ T6136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.264679][ T6136] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.283648][ T6775] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.293090][ T6733] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.293090][ T6733] [ 141.316396][ T5506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.343103][ T6136] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.358063][ T6733] ERROR: (device loop0): remounting filesystem as read-only [ 141.366521][ T6814] loop2: detected capacity change from 0 to 8 [ 141.389861][ T6136] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.409491][ T6733] xtLookup: xtSearch returned -5 [ 141.424459][ T6733] add_index: get/read_metapage failed! [ 141.442486][ T6803] attempt to access beyond end of device [ 141.442486][ T6803] loop3: rw=2049, want=45104, limit=40427 [ 141.464002][ T6733] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.464002][ T6733] [ 141.474694][ T6136] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.481342][ T6136] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 141.502236][ T5506] DVB: Unable to find symbol mt352_attach() [ 141.521238][ T6733] xtLookup: xtSearch returned -5 [ 141.526392][ T6733] free_index: error reading directory table [ 141.532153][ T6136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.532301][ T6733] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.532301][ T6733] [ 141.573833][ T6136] usb 2-1: config 0 descriptor?? [ 141.586760][ T6733] xtLookup: xtSearch returned -5 [ 141.613614][ T6733] free_index: error reading directory table [ 141.626570][ T6733] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.626570][ T6733] [ 141.644066][ T5506] DVB: Unable to find symbol nxt6000_attach() [ 141.654676][ T6733] xtLookup: xtSearch returned -5 [ 141.659643][ T6733] free_index: error reading directory table [ 141.663224][ T5506] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 141.678114][ T6733] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.678114][ T6733] [ 141.701045][ T6733] xtLookup: xtSearch returned -5 [ 141.726372][ T6733] free_index: error reading directory table [ 141.743731][ T6733] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 141.743731][ T6733] [ 141.755485][ T5506] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 141.774025][ T6733] xtLookup: xtSearch returned -5 [ 141.787958][ T5506] dvb-usb: schedule remote query interval to 1000 msecs. [ 141.806541][ T6733] free_index: error reading directory table [ 141.854942][ T5506] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 141.882030][ T6823] loop1: detected capacity change from 0 to 256 [ 141.929553][ T5506] dvb-usb: bulk message failed: -22 (7/0) [ 141.936232][ T6136] usbhid 2-1:0.0: can't add hid device: -71 [ 141.942338][ T6136] usbhid: probe of 2-1:0.0 failed with error -71 [ 141.955594][ T5506] dvb-usb: bulk message failed: -22 (7/0) [ 141.979536][ T6136] usb 2-1: USB disconnect, device number 6 [ 141.993220][ T5506] usb 5-1: USB disconnect, device number 6 [ 142.016683][ T6823] exfat: Deprecated parameter 'utf8' [ 142.049306][ T6823] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 142.100011][ T5506] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 142.513031][ T6828] loop4: detected capacity change from 0 to 8192 [ 142.564939][ T6832] IPVS: ip_vs_edit_dest(): server weight less than zero [ 142.992768][ T6843] loop0: detected capacity change from 0 to 256 [ 143.371932][ T6854] loop2: detected capacity change from 0 to 2048 [ 143.409542][ T6830] loop3: detected capacity change from 0 to 40427 [ 143.458937][ T6830] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 143.487134][ T6830] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 143.518630][ T6854] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 143.551137][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 143.551151][ T26] audit: type=1326 audit(1772208361.167:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6858 comm="syz.4.1020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe8890e7799 code=0x0 [ 143.649219][ T6830] F2FS-fs (loop3): Found nat_bits in checkpoint [ 143.791316][ T4314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.965511][ T6830] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.003272][ T6830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.156443][ T4314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.215794][ T26] audit: type=1800 audit(1772208361.837:16): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1002" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 144.300878][ T6874] loop0: detected capacity change from 0 to 512 [ 144.374952][ T6830] attempt to access beyond end of device [ 144.374952][ T6830] loop3: rw=2049, want=79872, limit=40427 [ 144.400876][ T4314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.465687][ T6874] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 144.490397][ T6874] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.506366][ T6830] attempt to access beyond end of device [ 144.506366][ T6830] loop3: rw=2049, want=53264, limit=40427 [ 144.517850][ T6830] attempt to access beyond end of device [ 144.517850][ T6830] loop3: rw=2049, want=80376, limit=40427 [ 144.641378][ T4314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.664433][ T4188] attempt to access beyond end of device [ 144.664433][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 145.115024][ T6884] lo speed is unknown, defaulting to 1000 [ 145.481008][ T6902] netlink: 'syz.4.1038': attribute type 10 has an invalid length. [ 145.523194][ T6902] batman_adv: batadv0: Adding interface: team0 [ 145.597098][ T6908] usb usb1: check_ctrlrecip: process 6908 (syz.2.1039) requesting ep 01 but needs 81 [ 145.624848][ T6902] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.656883][ T6906] loop0: detected capacity change from 0 to 8192 [ 145.722529][ T6906] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 145.739485][ T6902] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 145.752956][ T6906] REISERFS (device loop0): using ordered data mode [ 145.767334][ T4314] tipc: Disabling bearer [ 145.811509][ T6907] netlink: 'syz.4.1038': attribute type 10 has an invalid length. [ 145.821358][ T4314] tipc: Left network mode [ 145.856276][ T6906] reiserfs: using flush barriers [ 145.863930][ T6907] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1038'. [ 145.878341][ T6916] loop3: detected capacity change from 0 to 2048 [ 145.890259][ T6907] device team0 entered promiscuous mode [ 145.896901][ T6907] device team_slave_0 entered promiscuous mode [ 145.903435][ T6907] device team_slave_1 entered promiscuous mode [ 145.914570][ T6907] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.931761][ T6907] batman_adv: batadv0: Interface activated: team0 [ 145.984248][ T6907] batman_adv: batadv0: Interface deactivated: team0 [ 145.988570][ T6906] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 146.008632][ T6907] batman_adv: batadv0: Removing interface: team0 [ 146.022246][ T6906] REISERFS (device loop0): checking transaction log (loop0) [ 146.039950][ T6916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.075982][ T6907] bridge0: port 1(team0) entered blocking state [ 146.076403][ T6906] REISERFS (device loop0): Using r5 hash to sort names [ 146.082488][ T6907] bridge0: port 1(team0) entered disabled state [ 146.099915][ T6907] bridge0: port 1(team0) entered blocking state [ 146.107345][ T6907] bridge0: port 1(team0) entered forwarding state [ 146.115108][ T6916] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.132668][ T6906] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 146.208454][ T6906] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 146.308338][ T6884] chnl_net:caif_netlink_parms(): no params data found [ 146.687626][ T6941] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1044'. [ 146.697294][ T6884] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.723026][ T6884] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.757297][ T6884] device bridge_slave_0 entered promiscuous mode [ 146.774940][ T6939] loop3: detected capacity change from 0 to 4096 [ 146.810437][ T6884] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.828147][ T5506] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.829727][ T6884] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.898058][ T6884] device bridge_slave_1 entered promiscuous mode [ 146.968456][ T4225] Bluetooth: hci0: command 0x0409 tx timeout [ 147.068163][ T6884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.104003][ T5506] usb 3-1: Using ep0 maxpacket: 8 [ 147.194781][ T6884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.224241][ T5506] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.241526][ T5506] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 147.273974][ T5506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.320913][ T6884] team0: Port device team_slave_0 added [ 147.343775][ T5506] usb 3-1: config 0 descriptor?? [ 147.385426][ T6884] team0: Port device team_slave_1 added [ 147.466717][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.493945][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.548452][ T6928] loop4: detected capacity change from 0 to 40427 [ 147.581747][ T6884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.593280][ T6928] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 147.603607][ T6928] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 147.654022][ T6884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.664397][ T6884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.714904][ T6928] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.764000][ T6884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.857065][ T5506] hid-alps 0003:044E:120B.0007: hidraw0: USB HID v4.0a Device [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 147.913084][ T6928] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 147.963619][ T6928] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.982989][ T6950] loop3: detected capacity change from 0 to 32768 [ 148.050059][ T6884] device hsr_slave_0 entered promiscuous mode [ 148.051618][ T5506] usb 3-1: USB disconnect, device number 5 [ 148.071115][ T6884] device hsr_slave_1 entered promiscuous mode [ 148.082047][ T6950] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1050 (6950) [ 148.124133][ T6884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.140770][ T26] audit: type=1800 audit(1772208365.757:17): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1042" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 148.165409][ T6884] Cannot create hsr debugfs directory [ 148.176922][ T6950] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 148.236129][ T6950] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 148.292390][ T6975] loop0: detected capacity change from 0 to 512 [ 148.299992][ T6950] BTRFS info (device loop3): use lzo compression, level 0 [ 148.310441][ T6928] attempt to access beyond end of device [ 148.310441][ T6928] loop4: rw=2049, want=80136, limit=40427 [ 148.342340][ T6950] BTRFS info (device loop3): max_inline at 0 [ 148.367613][ T6975] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 148.371898][ T6950] BTRFS info (device loop3): using free space tree [ 148.386753][ T6950] BTRFS info (device loop3): has skinny extents [ 148.396364][ T6928] attempt to access beyond end of device [ 148.396364][ T6928] loop4: rw=2049, want=53264, limit=40427 [ 148.453841][ T6975] System zones: 1-12 [ 148.458853][ T6928] attempt to access beyond end of device [ 148.458853][ T6928] loop4: rw=2049, want=80376, limit=40427 [ 148.477578][ T6975] EXT4-fs error (device loop0): ext4_iget_extra_inode:4566: inode #15: comm syz.0.1056: corrupted in-inode xattr [ 148.502758][ T6975] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1056: couldn't read orphan inode 15 (err -117) [ 148.516523][ T4195] attempt to access beyond end of device [ 148.516523][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 148.530705][ T6975] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 148.699737][ T6950] BTRFS info (device loop3): enabling ssd optimizations [ 149.001810][ T7006] loop2: detected capacity change from 0 to 4096 [ 149.204536][ T4174] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (4174) [ 149.346482][ T5498] Bluetooth: hci0: command 0x041b tx timeout [ 149.420509][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 149.495067][ T7013] overlayfs: upper fs does not support tmpfile. [ 149.583651][ T4314] device hsr_slave_0 left promiscuous mode [ 149.616892][ T7013] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.636474][ T4314] device hsr_slave_1 left promiscuous mode [ 149.657036][ T7024] loop0: detected capacity change from 0 to 128 [ 149.665826][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.673333][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.733076][ T7024] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 149.761298][ T7024] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 149.772747][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.792269][ T7024] hpfs: You really don't want any checks? You are crazy... [ 149.802708][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.818344][ T7024] hpfs: hpfs_map_sector(): read error [ 149.832429][ T4314] device bridge_slave_1 left promiscuous mode [ 149.856014][ T7024] hpfs: code page support is disabled [ 149.863424][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.888701][ T7024] hpfs: hpfs_map_4sectors(): unaligned read [ 149.908088][ T7024] hpfs: hpfs_map_4sectors(): unaligned read [ 149.928113][ T7024] hpfs: filesystem error: unable to find root dir [ 149.952561][ T4314] device bridge_slave_0 left promiscuous mode [ 149.981803][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.081810][ T7039] loop4: detected capacity change from 0 to 256 [ 150.138637][ T4314] device veth1_macvtap left promiscuous mode [ 150.138654][ T7039] exfat: Deprecated parameter 'utf8' [ 150.180586][ T4314] device veth0_macvtap left promiscuous mode [ 150.187208][ T7039] exfat: Deprecated parameter 'utf8' [ 150.221999][ T4314] device veth1_vlan left promiscuous mode [ 150.250230][ T5787] hid-generic 0000:0000:0000.0008: item fetching failed at offset 0/1 [ 150.270662][ T7039] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb14608cb, utbl_chksum : 0xe619d30d) [ 150.283667][ T5787] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 [ 150.299351][ T4314] device veth0_vlan left promiscuous mode [ 150.371325][ T5787] kernel write not supported for file /audio (pid: 5787 comm: kworker/0:20) [ 150.515866][ T7059] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1077'. [ 150.638690][ T7061] loop0: detected capacity change from 0 to 4096 [ 150.731820][ T7068] loop2: detected capacity change from 0 to 2048 [ 150.831137][ T7068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.854273][ T7066] loop4: detected capacity change from 0 to 32768 [ 150.895863][ T7066] XFS (loop4): Invalid device [./file0/file0], error=-2 [ 151.133650][ T7056] loop3: detected capacity change from 0 to 32768 [ 151.178801][ T7056] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1075 (7056) [ 151.267386][ T7056] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 151.304001][ T7056] BTRFS info (device loop3): force zlib compression, level 3 [ 151.311535][ T7056] BTRFS info (device loop3): force clearing of disk cache [ 151.332358][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 151.340017][ T7056] BTRFS info (device loop3): setting nodatasum [ 151.360542][ T7056] BTRFS info (device loop3): allowing degraded mounts [ 151.367658][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 151.387628][ T7056] BTRFS info (device loop3): enabling disk space caching [ 151.404069][ T7056] BTRFS info (device loop3): disk space caching is enabled [ 151.411405][ T7056] BTRFS info (device loop3): has skinny extents [ 151.420700][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 151.480484][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.504834][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.532959][ T7056] BTRFS info (device loop3): clearing free space tree [ 151.542683][ T7056] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.554167][ T7056] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.646716][ T7056] BTRFS info (device loop3): balance: start -susage=281474976710656,vrange=1024..13,limit=5 [ 151.684350][ T7056] BTRFS info (device loop3): balance: ended with status: 0 [ 151.745676][ T4314] bond0 (unregistering): Released all slaves [ 151.859849][ T7070] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 151.895619][ T7070] F2FS-fs (loop2): invalid crc value [ 151.977032][ T7070] F2FS-fs (loop2): Found nat_bits in checkpoint [ 152.043099][ T6884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.119301][ T6884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.162954][ T7070] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.175324][ T6884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.226843][ T6884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.255231][ T7111] netlink: 'syz.0.1091': attribute type 3 has an invalid length. [ 152.263138][ T7111] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1091'. [ 152.286080][ T5497] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.502286][ T6884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.546792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.574329][ T5497] usb 5-1: Using ep0 maxpacket: 16 [ 152.587079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.633274][ T6884] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.669299][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.688554][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.704652][ T5497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.744272][ T5497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.778853][ T4240] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.786093][ T4240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.804027][ T5497] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 152.814244][ T5497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.835908][ T5497] usb 5-1: config 0 descriptor?? [ 152.934930][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.954403][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.000423][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.029424][ T4240] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.036694][ T4240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.104379][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.144201][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.167813][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.197626][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.272087][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.293099][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.299398][ T7150] set_capacity_and_notify: 3 callbacks suppressed [ 153.299437][ T7150] loop3: detected capacity change from 0 to 256 [ 153.325635][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.337642][ T5497] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 153.364896][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.394115][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.415293][ T7150] exfat: Deprecated parameter 'namecase' [ 153.421241][ T7150] exfat: Deprecated parameter 'utf8' [ 153.426255][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.450835][ T7150] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 153.454368][ T5497] Bluetooth: hci0: command 0x0419 tx timeout [ 153.474597][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.499199][ T6884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 153.543833][ T5500] usb 5-1: USB disconnect, device number 7 [ 153.655541][ T7158] loop2: detected capacity change from 0 to 1024 [ 153.724908][ T7161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1106'. [ 153.789206][ T7158] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 153.934663][ T7170] tipc: Started in network mode [ 153.956004][ T7170] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 154.002298][ T7170] tipc: Enabled bearer , priority 12 [ 154.073405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.101618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.155534][ T6884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.342949][ T7180] loop0: detected capacity change from 0 to 4096 [ 154.476034][ T7184] loop3: detected capacity change from 0 to 8192 [ 154.541495][ T7184] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 154.554274][ T7184] REISERFS (device loop3): using ordered data mode [ 154.560955][ T7184] reiserfs: using flush barriers [ 154.673816][ T7184] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 154.694660][ T7184] REISERFS (device loop3): checking transaction log (loop3) [ 154.865607][ T7199] overlayfs: upper fs does not support tmpfile. [ 154.940406][ T7199] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 155.110643][ T7200] fido_id[7200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.132049][ T6136] tipc: Node number set to 15444650 [ 155.317262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.357864][ T7184] REISERFS (device loop3): Using tea hash to sort names [ 155.365833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.438318][ T7184] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 155.499917][ T6884] device veth0_vlan entered promiscuous mode [ 155.556588][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.571311][ T7177] loop2: detected capacity change from 0 to 32768 [ 155.587436][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.645789][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.672013][ T7177] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1119 (7177) [ 155.706740][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.744384][ T6884] device veth1_vlan entered promiscuous mode [ 155.817474][ T7177] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 155.896461][ T7177] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 155.915004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.923341][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.971740][ T7177] BTRFS info (device loop2): force zstd compression, level 3 [ 155.982457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.022892][ T7177] BTRFS info (device loop2): turning on sync discard [ 156.045436][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.075767][ T7177] BTRFS info (device loop2): force clearing of disk cache [ 156.090385][ T6884] device veth0_macvtap entered promiscuous mode [ 156.107954][ T7177] BTRFS info (device loop2): enabling disk space caching [ 156.123975][ T6884] device veth1_macvtap entered promiscuous mode [ 156.161041][ T7177] BTRFS info (device loop2): turning off discard [ 156.193909][ T7177] BTRFS info (device loop2): disk space caching is enabled [ 156.233557][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.274024][ T7177] BTRFS info (device loop2): has skinny extents [ 156.318523][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.374875][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.426853][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.442045][ T7224] loop0: detected capacity change from 0 to 8192 [ 156.544250][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.611251][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.675744][ T7177] BTRFS info (device loop2): enabling ssd optimizations [ 156.689032][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.702450][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.713821][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.723075][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.732468][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.740893][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.749848][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.758442][ T7177] BTRFS info (device loop2): clearing free space tree [ 156.767681][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.782937][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.808154][ T7177] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.829129][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.854131][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.873910][ T7177] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.909090][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.947837][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.993925][ T6884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.024937][ T6884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.066867][ T6884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.117687][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.137947][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.188559][ T6884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.210668][ T6884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.252142][ T6884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.311967][ T6884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.442784][ T7217] loop4: detected capacity change from 0 to 40427 [ 157.562941][ T7217] F2FS-fs (loop4): invalid crc value [ 157.645441][ T7217] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.829071][ T4176] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4176) [ 157.875546][ T7217] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 157.932656][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.952895][ T7217] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.973440][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.030254][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.144353][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.162602][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.200470][ T4195] attempt to access beyond end of device [ 158.200470][ T4195] loop4: rw=2049, want=45104, limit=40427 [ 158.213353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.253999][ T7265] loop3: detected capacity change from 0 to 32768 [ 158.335788][ T7265] ERROR: (device loop3): diRead: i_ino != di_number [ 158.335788][ T7265] [ 159.410208][ T7322] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 159.726854][ T7300] loop3: detected capacity change from 0 to 40427 [ 159.750524][ T7300] F2FS-fs (loop3): invalid crc value [ 159.797649][ T7300] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.904159][ T5500] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.916375][ T7300] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 160.095487][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1150'. [ 160.125338][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1150'. [ 160.199614][ T4188] attempt to access beyond end of device [ 160.199614][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 160.283519][ T7360] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 160.314564][ T5500] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.343999][ T5500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 160.350755][ T5500] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 160.373932][ T5500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.430771][ T5500] usb 3-1: config 0 descriptor?? [ 160.519400][ T7331] loop4: detected capacity change from 0 to 32768 [ 160.947242][ T5500] uclogic 0003:5543:0522.000A: item fetching failed at offset 0/3 [ 160.965167][ T7383] tipc: Started in network mode [ 160.970075][ T7383] tipc: Node identity ac14140f, cluster identity 4711 [ 161.000280][ T5500] uclogic 0003:5543:0522.000A: parse failed [ 161.037433][ T5500] uclogic: probe of 0003:5543:0522.000A failed with error -22 [ 161.052511][ T7383] tipc: Enabled bearer , priority 10 [ 161.082847][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1162'. [ 161.122379][ T7385] loop0: detected capacity change from 0 to 4096 [ 161.150160][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.202341][ T4173] usb 3-1: USB disconnect, device number 6 [ 161.224372][ T7387] device bridge_slave_1 left promiscuous mode [ 161.236436][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.270267][ T7387] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 161.312863][ T7385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 161.330560][ T7385] EXT4-fs (loop0): Can't change test_dummy_encryption on remount [ 161.927863][ T7406] loop0: detected capacity change from 0 to 4096 [ 161.954955][ T7418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1174'. [ 161.968111][ T7420] loop5: detected capacity change from 0 to 1024 [ 161.998767][ T7406] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 162.019187][ T7418] netlink: 'syz.3.1174': attribute type 2 has an invalid length. [ 162.044096][ T7423] loop2: detected capacity change from 0 to 256 [ 162.140033][ T7423] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.163979][ T4173] tipc: Node number set to 2886997007 [ 162.182504][ T154] hfsplus: b-tree write err: -5, ino 4 [ 162.193383][ T7423] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 162.279011][ T7423] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 162.493527][ T5498] kernel write not supported for file /477/loginuid (pid: 5498 comm: kworker/0:15) [ 162.681187][ T7456] loop4: detected capacity change from 0 to 2048 [ 162.721923][ T7461] loop5: detected capacity change from 0 to 1024 [ 162.736542][ T7463] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1195'. [ 162.790137][ T7456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.849819][ T7469] loop0: detected capacity change from 0 to 512 [ 163.033316][ T7475] loop2: detected capacity change from 0 to 256 [ 163.073271][ T7469] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 163.101624][ T7469] System zones: 0-2, 18-18, 34-35 [ 163.216270][ T7469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.304686][ T7469] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.437115][ T4240] hfsplus: b-tree write err: -5, ino 4 [ 163.644414][ T7504] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1209'. [ 163.901833][ T7514] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 164.018269][ T7514] exFAT-fs (loop0): hint_cluster is invalid (17) [ 164.048208][ T7514] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 164.059962][ T7523] hfsplus: request for non-existent node 62977 in B*Tree [ 164.074888][ T7514] exFAT-fs (loop0): Filesystem has been set read-only [ 164.093907][ T7523] hfsplus: request for non-existent node 62977 in B*Tree [ 164.137633][ T7524] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 164.148603][ T7498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1207 (7498) [ 164.233337][ T4314] hfsplus: b-tree write err: -5, ino 3 [ 164.263663][ T7498] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 164.341728][ T7498] BTRFS info (device loop4): allowing degraded mounts [ 164.397802][ T7498] BTRFS info (device loop4): metadata ratio 4 [ 164.469063][ T7498] BTRFS info (device loop4): turning on sync discard [ 164.496235][ T7498] BTRFS info (device loop4): turning off discard [ 164.502638][ T7498] BTRFS info (device loop4): turning on sync discard [ 164.627848][ T7498] BTRFS info (device loop4): disabling tree log [ 164.679981][ T7498] BTRFS info (device loop4): using free space tree [ 164.733386][ T7498] BTRFS info (device loop4): has skinny extents [ 164.817694][ T7543] set_capacity_and_notify: 5 callbacks suppressed [ 164.817715][ T7543] loop2: detected capacity change from 0 to 256 [ 164.967456][ T7543] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d) [ 165.134682][ T7533] loop0: detected capacity change from 0 to 40427 [ 165.158792][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1225'. [ 165.176437][ T7533] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 165.214120][ T7533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.259187][ T7522] loop3: detected capacity change from 0 to 32768 [ 165.295901][ T7498] BTRFS info (device loop4): enabling ssd optimizations [ 165.331402][ T7522] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1216 (7522) [ 165.371346][ T7533] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.448647][ T7522] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 165.484021][ T7522] BTRFS info (device loop3): force zlib compression, level 3 [ 165.491467][ T7522] BTRFS info (device loop3): force clearing of disk cache [ 165.594452][ T7522] BTRFS info (device loop3): setting nodatasum [ 165.600667][ T7522] BTRFS info (device loop3): allowing degraded mounts [ 165.677258][ T7582] loop2: detected capacity change from 0 to 128 [ 165.703925][ T7522] BTRFS info (device loop3): enabling disk space caching [ 165.713082][ T7522] BTRFS info (device loop3): disk space caching is enabled [ 165.742442][ T7533] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.770101][ T7522] BTRFS info (device loop3): has skinny extents [ 165.778930][ T7533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.994425][ T6839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (6839) [ 166.234616][ T4190] attempt to access beyond end of device [ 166.234616][ T4190] loop0: rw=2049, want=45104, limit=40427 [ 166.376882][ T7522] BTRFS info (device loop3): clearing free space tree [ 166.383736][ T7522] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.447220][ T7522] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.506237][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1232'. [ 166.583354][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.626013][ T7616] device bridge_slave_1 left promiscuous mode [ 166.644134][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.696111][ T7616] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 166.902304][ T7627] loop4: detected capacity change from 0 to 1024 [ 167.025354][ T7627] EXT4-fs (loop4): Ignoring removed orlov option [ 167.100013][ T7634] loop5: detected capacity change from 0 to 8 [ 167.236514][ T7627] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 167.295666][ T7634] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.304119][ T7634] SQUASHFS error: Failed to read block 0xa8: -5 [ 167.317147][ T7634] SQUASHFS error: xz decompression failed, data probably corrupt [ 167.365258][ T7634] SQUASHFS error: Failed to read block 0xa8: -5 [ 167.402343][ T26] audit: type=1800 audit(1772208385.017:18): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1239" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 167.628359][ T7645] loop4: detected capacity change from 0 to 512 [ 167.680908][ T7645] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.809235][ T7645] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 167.893038][ T7645] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1241: bg 0: block 248: padding at end of block bitmap is not set [ 167.932438][ T7645] Quota error (device loop4): write_blk: dquota write failed [ 167.976399][ T7645] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 167.986726][ T7645] EXT4-fs error (device loop4): ext4_acquire_dquot:6234: comm syz.4.1241: Failed to acquire dquot type 1 [ 167.999817][ T7645] EXT4-fs (loop4): 1 truncate cleaned up [ 168.005608][ T7645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 168.461858][ T7687] loop5: detected capacity change from 0 to 2048 [ 168.610286][ T7694] loop4: detected capacity change from 0 to 512 [ 168.662422][ T7696] loop0: detected capacity change from 0 to 64 [ 168.692056][ T7694] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 168.739112][ T26] audit: type=1800 audit(1772208386.347:19): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1260" name="file2" dev="loop0" ino=21 res=0 errno=0 [ 168.911674][ T7687] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv0,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 169.559432][ T7717] tap0: tun_chr_ioctl cmd 1074025677 [ 169.568494][ T7717] tap0: linktype set to 768 [ 169.600623][ T7682] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 169.645985][ T7682] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x2 [ 169.709525][ T7682] F2FS-fs (loop3): invalid crc value [ 169.759326][ T7682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 169.796394][ T7726] input: syz0 as /devices/virtual/input/input10 [ 169.913618][ T7682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 169.982302][ T7730] set_capacity_and_notify: 3 callbacks suppressed [ 169.982317][ T7730] loop5: detected capacity change from 0 to 1024 [ 170.008811][ T7682] attempt to access beyond end of device [ 170.008811][ T7682] loop3: rw=10241, want=45104, limit=40427 [ 170.114077][ T7722] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 170.208354][ T4188] attempt to access beyond end of device [ 170.208354][ T4188] loop3: rw=2049, want=45112, limit=40427 [ 170.296086][ T7730] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 170.462890][ T7730] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 170.510617][ T7745] loop4: detected capacity change from 0 to 512 [ 170.592196][ T7719] loop0: detected capacity change from 0 to 40427 [ 170.644690][ T7719] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 170.652461][ T7719] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.679850][ T7745] EXT4-fs (loop4): Ignoring removed oldalloc option [ 170.704471][ T7745] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.830559][ T7745] EXT4-fs (loop4): 1 truncate cleaned up [ 170.846012][ T7719] F2FS-fs (loop0): Found nat_bits in checkpoint [ 170.865138][ T7745] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 170.885039][ T7753] loop5: detected capacity change from 0 to 256 [ 170.997660][ T7753] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 171.170020][ T7719] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 171.199532][ T7719] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.340005][ T7766] loop5: detected capacity change from 0 to 256 [ 171.388781][ T7766] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.418107][ T7766] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 171.615096][ T7766] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 172.293391][ T7785] loop3: detected capacity change from 0 to 8192 [ 172.485982][ T7812] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.004061][ T7831] loop0: detected capacity change from 0 to 4096 [ 173.021870][ T7834] loop4: detected capacity change from 0 to 4096 [ 173.141839][ T7834] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 173.335858][ T7834] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 173.830689][ T7831] ntfs3: loop0: ino=5, "/" directory corrupted [ 173.874612][ T7831] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 174.714194][ T7910] loop2: detected capacity change from 0 to 512 [ 174.908974][ T7856] loop3: detected capacity change from 0 to 32768 [ 174.922451][ T7910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 174.934131][ T7910] System zones: 1-12 [ 174.957591][ T7910] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1327: Directory hole found for htree index block 0 [ 175.053954][ T7910] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 175.062325][ T7910] EXT4-fs error (device loop2): dx_probe:823: inode #2: comm syz.2.1327: Directory hole found for htree index block 0 [ 175.079192][ T7929] program syz.0.1334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.146967][ T7910] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 175.183906][ T7910] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback. [ 175.374886][ T7940] loop4: detected capacity change from 0 to 128 [ 175.463133][ T7946] program syz.2.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.592983][ T7951] program syz.2.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.686250][ T7856] xfs: Unknown parameter 'smackfstransmute' [ 175.938886][ T7943] loop5: detected capacity change from 0 to 40427 [ 175.982978][ T7955] loop2: detected capacity change from 0 to 40427 [ 176.043513][ T7943] F2FS-fs (loop5): invalid crc value [ 176.083702][ T7940] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 176.121740][ T7940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.124206][ T7943] F2FS-fs (loop5): Found nat_bits in checkpoint [ 176.239023][ T7962] loop0: detected capacity change from 0 to 512 [ 176.269383][ T7955] F2FS-fs (loop2): build fault injection attr: rate: 684, type: 0x1ffff [ 176.277809][ T7955] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 176.289552][ T7955] F2FS-fs (loop2): invalid crc value [ 176.334354][ T7955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 176.351184][ T7943] F2FS-fs (loop5): Start checkpoint disabled! [ 176.387283][ T7955] F2FS-fs (loop2): Start checkpoint disabled! [ 176.451562][ T7955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 176.466380][ T7943] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 176.621449][ T7962] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1343: bg 0: block 248: padding at end of block bitmap is not set [ 176.739435][ T9] attempt to access beyond end of device [ 176.739435][ T9] loop2: rw=2049, want=40976, limit=40427 [ 176.761306][ T7962] Quota error (device loop0): write_blk: dquota write failed [ 176.778881][ T7962] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 176.824026][ T7962] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.1343: Failed to acquire dquot type 1 [ 176.886154][ T154] attempt to access beyond end of device [ 176.886154][ T154] loop5: rw=2049, want=40984, limit=40427 [ 177.011208][ T7962] EXT4-fs (loop0): 1 truncate cleaned up [ 177.022119][ T7962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.109147][ T7962] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.296972][ T7962] lo speed is unknown, defaulting to 1000 [ 178.000495][ T7974] loop4: detected capacity change from 0 to 32768 [ 178.028112][ T7977] loop3: detected capacity change from 0 to 40427 [ 178.189482][ T8003] syz.2.1351 uses obsolete (PF_INET,SOCK_PACKET) [ 178.463032][ T7977] F2FS-fs (loop3): invalid crc value [ 178.510726][ T7989] loop5: detected capacity change from 0 to 40427 [ 178.595247][ T7974] XFS (loop4): Mounting V5 Filesystem [ 178.617487][ T7989] F2FS-fs (loop5): invalid crc value [ 178.674942][ T7977] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.775051][ T4230] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 178.797850][ T7989] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.831210][ T7977] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 178.911685][ T4230] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.916657][ T7977] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 179.016555][ T8033] lo speed is unknown, defaulting to 1000 [ 179.031568][ T7974] XFS (loop4): Ending clean mount [ 179.058445][ T7974] XFS (loop4): Quotacheck needed: Please wait. [ 179.140561][ T4188] attempt to access beyond end of device [ 179.140561][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 179.167472][ T7989] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 179.337304][ T6884] attempt to access beyond end of device [ 179.337304][ T6884] loop5: rw=2049, want=45104, limit=40427 [ 179.413598][ T7974] XFS (loop4): Quotacheck: Done. [ 179.691660][ T4195] XFS (loop4): Unmounting Filesystem [ 180.240082][ T8008] loop0: detected capacity change from 0 to 40427 [ 180.316210][ T8008] F2FS-fs (loop0): invalid crc value [ 180.353247][ T8056] loop5: detected capacity change from 0 to 512 [ 180.366241][ T8008] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.433395][ T8059] loop3: detected capacity change from 0 to 256 [ 180.545987][ T8056] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.578531][ T8008] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 180.606087][ T8008] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 180.626172][ T8008] F2FS-fs (loop0): Start checkpoint disabled! [ 180.699913][ T8059] exfat: Bad value for 'uid' [ 180.717749][ T8008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 180.727728][ T8056] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 180.855351][ T8056] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 180.883280][ T8047] loop2: detected capacity change from 0 to 32768 [ 180.918556][ T8008] F2FS-fs (loop0): disabling checkpoint not compatible with read-only [ 180.958747][ T8064] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 180.985142][ T8059] loop3: detected capacity change from 0 to 4096 [ 180.992641][ T8067] program syz.4.1358 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.105428][ T8047] (syz.2.1357,8047,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.119509][ T8059] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 181.222837][ T8047] (syz.2.1357,8047,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 181.759516][ T8088] device bridge0 entered promiscuous mode [ 181.771472][ T8047] JBD2: Ignoring recovery information on journal [ 181.845299][ T8087] device bridge0 left promiscuous mode [ 181.935497][ T8093] loop3: detected capacity change from 0 to 256 [ 182.038991][ T8047] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 182.458550][ T8104] loop5: detected capacity change from 0 to 4096 [ 182.588141][ T8104] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 182.748487][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 183.334229][ T8122] input: syz0 as /devices/virtual/input/input11 [ 183.378684][ T8124] loop3: detected capacity change from 0 to 128 [ 183.681332][ T8115] loop0: detected capacity change from 0 to 40427 [ 183.721297][ T8118] loop4: detected capacity change from 0 to 32768 [ 183.823802][ T8115] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 183.848979][ T8118] read_mapping_page failed! [ 183.869192][ T8115] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 183.878456][ T8118] ERROR: (device loop4): txCommit: [ 183.878456][ T8118] [ 183.911429][ T8115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.018157][ T8138] loop5: detected capacity change from 0 to 256 [ 184.103563][ T8115] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 184.144924][ T8115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 184.155392][ T8138] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.223478][ T26] audit: type=1800 audit(1772208401.837:20): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1385" name="file1" dev="loop5" ino=1048697 res=0 errno=0 [ 184.231991][ T8138] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 184.299515][ T26] audit: type=1800 audit(1772208401.917:21): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1378" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 184.336996][ T8138] FAT-fs (loop5): Filesystem has been set read-only [ 184.665502][ T8115] attempt to access beyond end of device [ 184.665502][ T8115] loop0: rw=2049, want=79912, limit=40427 [ 184.828016][ T8115] attempt to access beyond end of device [ 184.828016][ T8115] loop0: rw=2049, want=53264, limit=40427 [ 184.893743][ T8115] attempt to access beyond end of device [ 184.893743][ T8115] loop0: rw=2049, want=80376, limit=40427 [ 185.126251][ T4190] attempt to access beyond end of device [ 185.126251][ T4190] loop0: rw=2049, want=45104, limit=40427 [ 185.223936][ T5498] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 185.404965][ T8160] netlink: 'syz.2.1398': attribute type 15 has an invalid length. [ 185.513110][ T8162] loop5: detected capacity change from 0 to 128 [ 185.645907][ T5498] usb 4-1: Using ep0 maxpacket: 8 [ 185.830110][ T8172] loop2: detected capacity change from 0 to 512 [ 185.844592][ T6136] Bluetooth: hci1: command 0x0406 tx timeout [ 185.854091][ T6136] Bluetooth: hci2: command 0x0406 tx timeout [ 185.855764][ T5498] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 185.861045][ T6136] Bluetooth: hci3: command 0x0406 tx timeout [ 185.922126][ T5498] usb 4-1: config 179 has no interface number 0 [ 185.961674][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 185.999799][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.033405][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.053585][ T8174] loop4: detected capacity change from 0 to 2048 [ 186.064814][ T8172] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 186.064917][ T8172] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.094941][ T5498] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 186.118062][ T5498] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.149613][ T5498] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.165348][ T5498] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.175993][ T8174] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.235005][ T8147] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 186.269262][ T8174] EXT4-fs (loop4): shut down requested (1) [ 186.501012][ T5507] usb 4-1: USB disconnect, device number 5 [ 186.513176][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 187.082593][ T8183] loop5: detected capacity change from 0 to 40427 [ 187.143019][ T8183] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 187.153135][ T8183] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 187.172355][ T8183] F2FS-fs (loop5): Found nat_bits in checkpoint [ 187.241227][ T8183] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 187.253439][ T8183] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 187.390713][ T26] audit: type=1800 audit(1772208405.007:22): pid=8183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1404" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 187.481376][ T8183] attempt to access beyond end of device [ 187.481376][ T8183] loop5: rw=2049, want=79888, limit=40427 [ 187.505021][ T8183] attempt to access beyond end of device [ 187.505021][ T8183] loop5: rw=2049, want=53264, limit=40427 [ 187.523154][ T8183] attempt to access beyond end of device [ 187.523154][ T8183] loop5: rw=2049, want=80376, limit=40427 [ 187.642864][ T6884] attempt to access beyond end of device [ 187.642864][ T6884] loop5: rw=2049, want=45104, limit=40427 [ 189.578606][ T8198] loop2: detected capacity change from 0 to 2048 [ 189.793981][ T5507] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.816760][ T8198] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.827552][ T8208] loop0: detected capacity change from 0 to 512 [ 189.893823][ T8198] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.990847][ T8194] loop3: detected capacity change from 0 to 32768 [ 190.045727][ T8208] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.090916][ T8208] fs-verity: sha512 using implementation "sha512-avx2" [ 190.110692][ T8208] EXT4-fs warning (device loop0): ext4_begin_enable_verity:136: inode #13: comm syz.0.1413: verity is only allowed on extent-based files [ 190.143530][ T8194] JBD2: Ignoring recovery information on journal [ 190.357258][ T5507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 190.393903][ T5507] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 190.424183][ T8216] loop0: detected capacity change from 0 to 128 [ 190.433344][ T5507] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 190.442493][ T8194] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 190.491579][ T5507] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 190.515434][ T5507] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 190.537278][ T5507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.590510][ T5507] usb 5-1: config 0 descriptor?? [ 190.645261][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 190.850525][ T8221] loop2: detected capacity change from 0 to 1024 [ 190.893528][ T5507] hdpvr 5-1:0.0: firmware version 0x15 dated Š–¸&S¶3;¨“Ãx&X^„œ wÒΖŠ g/ƒ µn#»† [ 191.024477][ T4239] hfsplus: b-tree write err: -5, ino 4 [ 191.071543][ T8223] netlink: 'syz.0.1420': attribute type 8 has an invalid length. [ 191.109545][ T5507] hdpvr 5-1:0.0: device init failed [ 191.114914][ T5507] hdpvr: probe of 5-1:0.0 failed with error -12 [ 191.133174][ T8225] loop3: detected capacity change from 0 to 164 [ 191.150497][ T5507] usb 5-1: USB disconnect, device number 8 [ 191.275454][ T8225] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 191.609420][ T8212] loop5: detected capacity change from 0 to 40427 [ 191.713093][ T8212] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 191.725956][ T8212] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 191.749148][ T8243] loop3: detected capacity change from 0 to 256 [ 191.853423][ T8212] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.068765][ T8248] Falling back ldisc for ptm0. [ 192.078153][ T8212] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 192.097439][ T8212] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.405736][ T26] audit: type=1800 audit(1772208410.027:23): pid=8212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1415" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 192.530674][ T8212] attempt to access beyond end of device [ 192.530674][ T8212] loop5: rw=2049, want=80104, limit=40427 [ 192.622191][ T8212] attempt to access beyond end of device [ 192.622191][ T8212] loop5: rw=2049, want=53264, limit=40427 [ 192.804293][ T8212] attempt to access beyond end of device [ 192.804293][ T8212] loop5: rw=2049, want=80376, limit=40427 [ 192.922755][ T8249] loop4: detected capacity change from 0 to 32768 [ 192.952576][ T6884] attempt to access beyond end of device [ 192.952576][ T6884] loop5: rw=2049, want=45104, limit=40427 [ 193.372141][ T8249] JBD2: Ignoring recovery information on journal [ 193.551098][ T8291] sctp: [Deprecated]: syz.0.1450 (pid 8291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.551098][ T8291] Use struct sctp_sack_info instead [ 193.625122][ T8249] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 193.761093][ T8249] [ 193.763482][ T8249] ====================================================== [ 193.770518][ T8249] WARNING: possible circular locking dependency detected [ 193.777566][ T8249] syzkaller #0 Not tainted [ 193.782007][ T8249] ------------------------------------------------------ [ 193.789039][ T8249] syz.4.1429/8249 is trying to acquire lock: [ 193.795060][ T8249] ffff888057038660 (&oi->ip_alloc_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 193.805716][ T8249] [ 193.805716][ T8249] but task is already holding lock: [ 193.813116][ T8249] ffff8880570386f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 193.823914][ T8249] [ 193.823914][ T8249] which lock already depends on the new lock. [ 193.823914][ T8249] [ 193.834421][ T8249] [ 193.834421][ T8249] the existing dependency chain (in reverse order) is: [ 193.843450][ T8249] [ 193.843450][ T8249] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 193.851305][ T8249] down_read+0x44/0x2e0 [ 193.856022][ T8249] ocfs2_init_acl+0x307/0x770 [ 193.861265][ T8249] ocfs2_mknod+0x15cb/0x2510 [ 193.866404][ T8249] ocfs2_create+0x192/0x420 [ 193.871465][ T8249] path_openat+0x11db/0x2fa0 [ 193.876610][ T8249] do_filp_open+0x1e2/0x410 [ 193.881664][ T8249] do_sys_openat2+0x150/0x4b0 [ 193.886888][ T8249] __x64_sys_openat+0x135/0x160 [ 193.892289][ T8249] do_syscall_64+0x4c/0xa0 [ 193.897259][ T8249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.903705][ T8249] [ 193.903705][ T8249] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 193.912259][ T8249] down_read+0x44/0x2e0 [ 193.916992][ T8249] ocfs2_start_trans+0x3a6/0x6f0 [ 193.922487][ T8249] ocfs2_modify_bh+0xe0/0x4c0 [ 193.927725][ T8249] ocfs2_local_read_info+0x13c8/0x1750 [ 193.933861][ T8249] dquot_load_quota_sb+0x756/0xac0 [ 193.939532][ T8249] dquot_load_quota_inode+0x2d8/0x5d0 [ 193.945692][ T8249] ocfs2_enable_quotas+0x1c5/0x490 [ 193.951418][ T8249] ocfs2_fill_super+0x3cd2/0x50f0 [ 193.956994][ T8249] mount_bdev+0x287/0x3c0 [ 193.962047][ T8249] legacy_get_tree+0xe6/0x180 [ 193.967303][ T8249] vfs_get_tree+0x88/0x270 [ 193.972297][ T8249] do_new_mount+0x24a/0xa40 [ 193.977354][ T8249] __se_sys_mount+0x2e3/0x3d0 [ 193.982582][ T8249] do_syscall_64+0x4c/0xa0 [ 193.987556][ T8249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 193.994001][ T8249] [ 193.994001][ T8249] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 194.001524][ T8249] ocfs2_start_trans+0x2a7/0x6f0 [ 194.007019][ T8249] ocfs2_write_begin_nolock+0x2049/0x4400 [ 194.013342][ T8249] ocfs2_write_begin+0x1b9/0x310 [ 194.018837][ T8249] generic_perform_write+0x2b6/0x550 [ 194.024674][ T8249] __generic_file_write_iter+0x25f/0x4e0 [ 194.030962][ T8249] ocfs2_file_write_iter+0x1670/0x1e70 [ 194.036978][ T8249] vfs_write+0x745/0xd60 [ 194.041762][ T8249] ksys_write+0x152/0x260 [ 194.046638][ T8249] do_syscall_64+0x4c/0xa0 [ 194.051599][ T8249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.058039][ T8249] [ 194.058039][ T8249] -> #0 (&oi->ip_alloc_sem){++++}-{3:3}: [ 194.065990][ T8249] __lock_acquire+0x2c42/0x7d10 [ 194.071385][ T8249] lock_acquire+0x19e/0x400 [ 194.076437][ T8249] down_write+0x38/0x60 [ 194.081144][ T8249] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 194.087667][ T8249] ocfs2_truncate_file+0xe03/0x1460 [ 194.093585][ T8249] ocfs2_setattr+0x14dd/0x1ad0 [ 194.098898][ T8249] notify_change+0xbcd/0xee0 [ 194.104131][ T8249] do_truncate+0x1ac/0x240 [ 194.104865][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.109094][ T8249] path_openat+0x2922/0x2fa0 [ 194.109122][ T8249] do_filp_open+0x1e2/0x410 [ 194.115911][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.120489][ T8249] do_sys_openat2+0x150/0x4b0 [ 194.120510][ T8249] __x64_sys_openat+0x135/0x160 [ 194.142594][ T8249] do_syscall_64+0x4c/0xa0 [ 194.147563][ T8249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.154014][ T8249] [ 194.154014][ T8249] other info that might help us debug this: [ 194.154014][ T8249] [ 194.164261][ T8249] Chain exists of: [ 194.164261][ T8249] &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 194.164261][ T8249] [ 194.178729][ T8249] Possible unsafe locking scenario: [ 194.178729][ T8249] [ 194.186198][ T8249] CPU0 CPU1 [ 194.191579][ T8249] ---- ---- [ 194.196957][ T8249] lock(&oi->ip_xattr_sem); [ 194.201570][ T8249] lock(&journal->j_trans_barrier); [ 194.209398][ T8249] lock(&oi->ip_xattr_sem); [ 194.216529][ T8249] lock(&oi->ip_alloc_sem); [ 194.221143][ T8249] [ 194.221143][ T8249] *** DEADLOCK *** [ 194.221143][ T8249] [ 194.229309][ T8249] 3 locks held by syz.4.1429/8249: [ 194.234436][ T8249] #0: ffff888025cea460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 194.243696][ T8249] #1: ffff8880570389c8 (&sb->s_type->i_mutex_key#24){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 194.254087][ T8249] #2: ffff8880570386f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x340 [ 194.265194][ T8249] [ 194.265194][ T8249] stack backtrace: [ 194.271122][ T8249] CPU: 1 PID: 8249 Comm: syz.4.1429 Not tainted syzkaller #0 [ 194.278526][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.288633][ T8249] Call Trace: [ 194.291928][ T8249] [ 194.294884][ T8249] dump_stack_lvl+0x188/0x250 [ 194.299620][ T8249] ? load_image+0x400/0x400 [ 194.304156][ T8249] ? show_regs_print_info+0x20/0x20 [ 194.309389][ T8249] ? print_circular_bug+0x12b/0x1a0 [ 194.314617][ T8249] check_noncircular+0x296/0x330 [ 194.319580][ T8249] ? add_chain_block+0x940/0x940 [ 194.324530][ T8249] ? lockdep_lock+0xf1/0x1f0 [ 194.329277][ T8249] ? lockdep_unlock+0x143/0x2e0 [ 194.334272][ T8249] ? mark_lock+0x94/0x320 [ 194.338633][ T8249] __lock_acquire+0x2c42/0x7d10 [ 194.343612][ T8249] ? verify_lock_unused+0x140/0x140 [ 194.348861][ T8249] lock_acquire+0x19e/0x400 [ 194.353395][ T8249] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 194.359596][ T8249] ? __might_sleep+0xf0/0xf0 [ 194.364238][ T8249] ? read_lock_is_recursive+0x10/0x10 [ 194.369726][ T8249] ? rwsem_write_trylock+0x135/0x1c0 [ 194.375142][ T8249] ? clear_nonspinnable+0x60/0x60 [ 194.380198][ T8249] ? ocfs2_truncate_file+0x690/0x1460 [ 194.385599][ T8249] down_write+0x38/0x60 [ 194.389776][ T8249] ? ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 194.395968][ T8249] ocfs2_try_remove_refcount_tree+0xb3/0x340 [ 194.402079][ T8249] ? ocfs2_remove_refcount_tree+0xe40/0xe40 [ 194.408064][ T8249] ? up_write+0x1bb/0x420 [ 194.412418][ T8249] ocfs2_truncate_file+0xe03/0x1460 [ 194.417651][ T8249] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 194.423407][ T8249] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 194.429154][ T8249] ? do_raw_spin_unlock+0x11d/0x230 [ 194.434401][ T8249] ? _raw_spin_unlock+0x24/0x40 [ 194.439391][ T8249] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 194.445140][ T8249] ? ocfs2_inode_lock_atime+0x530/0x530 [ 194.450712][ T8249] ? ocfs2_rw_lock+0x134/0x250 [ 194.455587][ T8249] ? dquot_initialize+0x20/0x20 [ 194.460472][ T8249] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 194.466562][ T8249] ? mark_lock+0x94/0x320 [ 194.470918][ T8249] ? jbd2_journal_begin_ordered_truncate+0xb7/0x150 [ 194.477554][ T8249] ocfs2_setattr+0x14dd/0x1ad0 [ 194.482349][ T8249] ? ocfs2_extend_allocation+0x1830/0x1830 [ 194.488275][ T8249] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 194.494108][ T8249] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 194.500414][ T8249] ? ocfs2_xattr_get+0x149/0x260 [ 194.505397][ T8249] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 194.511404][ T8249] ? current_time+0x1ad/0x2c0 [ 194.516115][ T8249] ? atime_needs_update+0x780/0x780 [ 194.521362][ T8249] ? bpf_lsm_inode_setattr+0x5/0x10 [ 194.526584][ T8249] ? try_break_deleg+0x79/0x120 [ 194.531547][ T8249] ? ocfs2_extend_allocation+0x1830/0x1830 [ 194.537388][ T8249] notify_change+0xbcd/0xee0 [ 194.542041][ T8249] do_truncate+0x1ac/0x240 [ 194.546494][ T8249] ? rcu_lock_release+0x20/0x20 [ 194.551385][ T8249] ? ima_bprm_check+0x200/0x200 [ 194.556289][ T8249] ? bpf_lsm_path_truncate+0x5/0x10 [ 194.561725][ T8249] path_openat+0x2922/0x2fa0 [ 194.566358][ T8249] ? verify_lock_unused+0x140/0x140 [ 194.571596][ T8249] ? slab_post_alloc_hook+0x4c/0x380 [ 194.576917][ T8249] ? do_filp_open+0x410/0x410 [ 194.581635][ T8249] do_filp_open+0x1e2/0x410 [ 194.586175][ T8249] ? vfs_tmpfile+0x300/0x300 [ 194.590801][ T8249] ? _raw_spin_unlock+0x24/0x40 [ 194.595678][ T8249] ? alloc_fd+0x598/0x630 [ 194.600067][ T8249] do_sys_openat2+0x150/0x4b0 [ 194.604770][ T8249] ? __lock_acquire+0x7d10/0x7d10 [ 194.609834][ T8249] ? do_sys_open+0xe0/0xe0 [ 194.614284][ T8249] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 194.620306][ T8249] ? lock_chain_count+0x20/0x20 [ 194.625190][ T8249] ? vtime_user_exit+0x2c8/0x3e0 [ 194.630416][ T8249] __x64_sys_openat+0x135/0x160 [ 194.635429][ T8249] do_syscall_64+0x4c/0xa0 [ 194.639882][ T8249] ? clear_bhb_loop+0x30/0x80 [ 194.644595][ T8249] ? clear_bhb_loop+0x30/0x80 [ 194.649304][ T8249] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 194.655240][ T8249] RIP: 0033:0x7fe8890e7799 [ 194.659685][ T8249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.679422][ T8249] RSP: 002b:00007fe887341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.687870][ T8249] RAX: ffffffffffffffda RBX: 00007fe889360fa0 RCX: 00007fe8890e7799 [ 194.695963][ T8249] RDX: 000000000000275a RSI: 0000200000000140 RDI: ffffffffffffff9c [ 194.703956][ T8249] RBP: 00007fe88917dbd9 R08: 0000000000000000 R09: 0000000000000000 [ 194.711950][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.719962][ T8249] R13: 00007fe889361038 R14: 00007fe889360fa0 R15: 00007fff8b593818 [ 194.727965][ T8249] [ 194.771711][ T6136] kernel write not supported for file /164/loginuid (pid: 6136 comm: kworker/1:27) [ 194.840137][ T8276] loop3: detected capacity change from 0 to 32768 [ 194.898115][ T8284] loop2: detected capacity change from 0 to 32768 [ 194.924901][ T8284] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1447 (8284) [ 194.942332][ T4195] ocfs2: Unmounting device (7,4) on (node local) [ 194.985309][ T8284] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 195.012732][ T8284] BTRFS info (device loop2): setting nodatacow, compression disabled [ 195.031066][ T8284] BTRFS info (device loop2): turning on flush-on-commit [ 195.049536][ T8284] BTRFS info (device loop2): using free space tree [ 195.065520][ T8284] BTRFS info (device loop2): has skinny extents [ 195.231377][ T8284] BTRFS info (device loop2): enabling ssd optimizations [ 195.251282][ T26] audit: type=1800 audit(1772208412.867:24): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1447" name="bus" dev="loop2" ino=263 res=0 errno=0