last executing test programs: 3.679508222s ago: executing program 3 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 3.540208956s ago: executing program 3 (id=718): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="81c81b9a7c56271506e47a7ba4d3ffd35c67618cf50c18d261057edfe333b366e3a6116b3a4e4ec6ae8a048c39a9dfbfacb72bf4652aa87a08ad4f10f1b1acd3008c6a71e53b2d379bc317d60254f062", 0x50}, {&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07f81ec6", 0x27}, {&(0x7f0000000500)="575ea382b9a16bc9825441aaf07ef1c0428f4b7b69ddf489403dd2a1eba568986ae9bb1160dcfdf064408fa4b5e882c56396e0d1f126cd3faa5a56c5f2e9a15e9b5d7e67a29ce48383c2675c98f746d25479b15ea110c9095d8a0359da286382b01e", 0x62}, {&(0x7f0000002280)="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", 0x1000}], 0x4, &(0x7f0000000740)=[@hopopts={{0xc8, 0x29, 0x36, {0x2f, 0x15, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x5, [0x7f, 0x9, 0x8000000000000001, 0x6, 0x2, 0x7, 0x8, 0x6]}}, @ra={0x5, 0x2, 0xf}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @generic={0x80, 0x49, "fa143e1a106b19c70ea0542d6d63da3d5e395944f9b3a32d7d56f9ac88221c36e046c8dd1b3bbdbc12f0ebac42dabfe74668b9390e9dfe93f026f5442cd566c77fb6b13abd0a8ad082"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0xe0}}], 0x1, 0x80) 3.380290301s ago: executing program 3 (id=722): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.962295935s ago: executing program 3 (id=724): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.087867773s ago: executing program 2 (id=731): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/7, &(0x7f0000000080)=0xffffffffffffffb3) 1.975167966s ago: executing program 2 (id=733): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f"], 0x58}}, 0x0) 1.914274698s ago: executing program 4 (id=734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x2}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 1.813651822s ago: executing program 2 (id=735): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1b, r1, 0x1, 0xff, 0x6, @multicast}, 0x14) 1.649557587s ago: executing program 1 (id=737): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00!', 0x2}], 0x1, 0xee, 0x1) 1.636031748s ago: executing program 2 (id=738): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x10000, 0x1, 0x0, 0x4}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) 1.55242968s ago: executing program 4 (id=739): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.520860401s ago: executing program 2 (id=740): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000140)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@discard_size={'discard', 0x3d, 0x6}}, {@discard}, {}, {@quota}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000240)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) 1.475312052s ago: executing program 1 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000300)={{0xe566c797b7515b9, 0x9000, 0x0, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0x1}, {0xd000, 0xeeef0000, 0x10, 0x3, 0x1, 0x7, 0x6, 0x6, 0x3, 0x6, 0xfa, 0x5}, {0x33221000, 0x80a0000, 0x4, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x12, 0x2}, {0x58000, 0xf000, 0xe, 0x3, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xeeee8000, 0x2000, 0x8, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x48}, {0x25000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x5, 0x5, 0x1, 0xc, 0x6, 0x9f}, {0x10000, 0x10000, 0xb, 0x9, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xe, 0xdc, 0x6}, {0x1, 0xf7f2a002, 0xd, 0xe, 0x13, 0x40, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0xbde65b1aa8579024, 0x5}, {0x80a0000, 0x1ff}, 0xc004000b, 0x0, 0x200000000000000, 0x240431, 0x5, 0xa178114b5295dda7, 0x8000000, 0x0, [0x4, 0x2, 0x3, 0x3]}) 1.395233645s ago: executing program 4 (id=742): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x8}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 1.263794999s ago: executing program 0 (id=744): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0xfffffd5f) 1.25556347s ago: executing program 1 (id=745): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r0, 0x2030}], 0x1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 1.149310753s ago: executing program 4 (id=746): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.142550623s ago: executing program 0 (id=747): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) unshare(0x2a020400) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400df0325010ebc000000000000008000f0fffeffe809035300fff5dd0000001000020008000140040000006da2898e", 0x58}], 0x1) 1.057829106s ago: executing program 1 (id=748): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x46, r1, 0xeeeeeeee}) 1.004863368s ago: executing program 0 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 935.35601ms ago: executing program 1 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x7, 0x7f, 0x8, 0x0, 0x1000, 0xe, 0x7, 0xf3, 0xb, 0x9, 0x7, 0x0, 0x0, 0x6, 0x10, 0xa, 0x4, 0x7f, 0x9f, '\x00', 0x6b}) 901.088671ms ago: executing program 4 (id=751): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x16, 0x60, 0x6, 0xfffffffd}]}) write$ppp(r0, &(0x7f0000000000)='\x00\x00', 0x2) 716.867657ms ago: executing program 1 (id=752): syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nogc_merge}, {@noflush_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@disable_roll_forward}, {@nobarrier}, {@background_gc_off}, {@fsync_mode_posix}, {@user_xattr}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 638.455339ms ago: executing program 0 (id=753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000001580)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 588.306631ms ago: executing program 4 (id=754): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x4, 0xad7, &(0x7f0000001900)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x320c401, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 249.558582ms ago: executing program 0 (id=755): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8, 0xc5fb, @name="df484387f2a038fc2882282b8aa0924f6a9bb9c0850cc35791d427755cf17eec"}) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc", 0x11, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 194.345724ms ago: executing program 3 (id=756): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x280080) 8.24295ms ago: executing program 2 (id=757): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) socket$packet(0x11, 0x3, 0x300) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x29000, 0x3) 8.05807ms ago: executing program 0 (id=758): socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f00000021c0)='./file0/file0\x00', 0x2900, 0x88c, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=759): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) clock_nanosleep(0x1, 0xca9a3b, &(0x7f00000001c0)={0x77359400}, 0x0) setuid(0xee01) kernel console output (not intermixed with test programs): 90942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.200263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.207794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.216333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.226256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.234772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.243651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.252479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.260525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.270474][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.281501][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.293737][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.302416][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.309734][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.321313][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.336861][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.357787][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.376314][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.395786][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.434830][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.445232][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.455234][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.462362][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.471888][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.501355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.515728][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.532905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.550112][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.559340][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.566437][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.574194][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.584316][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.593048][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.600147][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.607841][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.617592][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.625401][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.653049][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.662346][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.672121][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.681942][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.690480][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 60.694440][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.696753][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 60.705952][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 60.712979][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 60.717720][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.732176][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 60.748642][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.767209][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.776991][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.785697][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.794888][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.803996][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.822120][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.835634][ T4191] device veth0_vlan entered promiscuous mode [ 60.869751][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.882043][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.891052][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.899567][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.907108][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.916602][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.926130][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.934847][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.943458][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.952316][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.960221][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.973708][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.995473][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.008528][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.031849][ T4191] device veth1_vlan entered promiscuous mode [ 61.045489][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.057961][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.067521][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.077488][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.087156][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.097572][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.106877][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.152746][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.169392][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.207489][ T4191] device veth0_macvtap entered promiscuous mode [ 61.228984][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.237616][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.249686][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.258143][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.277378][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.286814][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.295307][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.304336][ T4184] device veth0_vlan entered promiscuous mode [ 61.314077][ T4191] device veth1_macvtap entered promiscuous mode [ 61.329793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.349479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.357098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.382162][ T4184] device veth1_vlan entered promiscuous mode [ 61.395979][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.457301][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.470132][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.479989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.489107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.497632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.509827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.519654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.535783][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.550196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.561128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.586348][ T4184] device veth0_macvtap entered promiscuous mode [ 61.602597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.613031][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.621964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.629897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.637352][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.652730][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.663081][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.672197][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.681742][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.694447][ T4184] device veth1_macvtap entered promiscuous mode [ 61.709399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.717883][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.727074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.739487][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.790343][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.800321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.809166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.817371][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.827247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.835271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.843917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.852193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.861593][ T4183] device veth0_vlan entered promiscuous mode [ 61.895744][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.907438][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.923156][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.932675][ T4192] device veth0_vlan entered promiscuous mode [ 61.945383][ T4183] device veth1_vlan entered promiscuous mode [ 61.962492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.972934][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.982798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.991648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.003038][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.013637][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.025381][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.045226][ T4192] device veth1_vlan entered promiscuous mode [ 62.070426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.079286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.094784][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.103730][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.112860][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.121922][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.167053][ T4188] device veth0_vlan entered promiscuous mode [ 62.177992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.186869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.233277][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.240946][ T4188] device veth1_vlan entered promiscuous mode [ 62.247536][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.255341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.264914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.273405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.282646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.292820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.301943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.314168][ T4183] device veth0_macvtap entered promiscuous mode [ 62.323234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.347089][ T4183] device veth1_macvtap entered promiscuous mode [ 62.391129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.400564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.409291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.417697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.426798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.435611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.454468][ T4192] device veth0_macvtap entered promiscuous mode [ 62.463080][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.471539][ T4188] device veth0_macvtap entered promiscuous mode [ 62.480722][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.491104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.500711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.510429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.527346][ T4192] device veth1_macvtap entered promiscuous mode [ 62.537090][ T4188] device veth1_macvtap entered promiscuous mode [ 62.550974][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.556325][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.571939][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.573979][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.581914][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.581932][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.583283][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.634256][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.645785][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.658827][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.669510][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.680459][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.690214][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.698406][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.706428][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.714597][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.724109][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.733513][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.742199][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.754571][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.766371][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.776907][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.777031][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 62.793830][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 62.795159][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.800091][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 62.800173][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 62.814672][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.816048][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 62.823946][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.851390][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.880529][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.897763][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.909143][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.917885][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.934061][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.943458][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.957219][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.969746][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.981379][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.992044][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.002618][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.014172][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.026413][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.036133][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.047257][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.057305][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.068001][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.077846][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.090142][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.100123][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.111735][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.123612][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.132286][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.141495][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.159487][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.168127][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.221938][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.238763][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.265083][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.274105][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.289628][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.318287][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.334012][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.356931][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.366935][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.375805][ T4268] loop2: detected capacity change from 0 to 512 [ 63.377528][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.393991][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.404664][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.415115][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.425773][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.436843][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.461328][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.470147][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.481152][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.529659][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.545092][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.563934][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.572038][ T4268] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,max_batch_time=0x0000000000000001,quota,,errors=continue. Quota mode: writeback. [ 63.574257][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.611764][ T4268] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.642778][ T4268] EXT4-fs (loop2): shut down requested (0) [ 63.859926][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.867898][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.888651][ T4278] Zero length message leads to an empty skb [ 63.909812][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.917663][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.934868][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.961596][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.999467][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.022754][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.053380][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.117674][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.118472][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.144538][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.164099][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.164149][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.217768][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.222059][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.245780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.273833][ T4280] loop0: detected capacity change from 0 to 4096 [ 64.281795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.445500][ T4284] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.527225][ T26] audit: type=1800 audit(1774956223.838:2): pid=4280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 64.537752][ T4288] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 64.850082][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 64.879412][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 64.905156][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 64.924804][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 64.974215][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 65.124772][ T4300] loop3: detected capacity change from 0 to 8192 [ 65.336286][ T4300] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 65.372218][ T4300] REISERFS (device loop3): using ordered data mode [ 65.428385][ T4300] reiserfs: using flush barriers [ 65.491336][ T4300] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 65.562956][ T4300] REISERFS (device loop3): checking transaction log (loop3) [ 65.617553][ T4300] REISERFS (device loop3): Using r5 hash to sort names [ 65.656644][ T4300] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 65.965876][ T4323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.094154][ T4310] loop2: detected capacity change from 0 to 131072 [ 66.108317][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.175939][ T4310] F2FS-fs (loop2): invalid crc value [ 66.278602][ T4310] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.328305][ T4336] capability: warning: `syz.0.25' uses 32-bit capabilities (legacy support in use) [ 66.341776][ T4310] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 66.393725][ T4336] program syz.0.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.489917][ T1108] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 66.522704][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.534021][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 66.581421][ T1108] usb 5-1: config 0 descriptor?? [ 66.581862][ T4342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 66.651841][ T1108] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 66.723982][ T4347] loop1: detected capacity change from 0 to 1024 [ 66.757267][ T4349] loop0: detected capacity change from 0 to 8 [ 66.796307][ T4347] EXT4-fs (loop1): Ignoring removed orlov option [ 66.818983][ T4349] ======================================================= [ 66.818983][ T4349] WARNING: The mand mount option has been deprecated and [ 66.818983][ T4349] and is ignored by this kernel. Remove the mand [ 66.818983][ T4349] option from the mount to silence this warning. [ 66.818983][ T4349] ======================================================= [ 66.863327][ T4349] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 66.874285][ T4177] udevd[4177]: incorrect cramfs checksum on /dev/loop0 [ 66.915189][ T4347] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 67.073212][ T4361] loop3: detected capacity change from 0 to 128 [ 67.220548][ T4361] FAT-fs (loop3): bogus number of reserved sectors [ 67.238027][ T4361] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 67.273553][ T4365] loop0: detected capacity change from 0 to 512 [ 67.288464][ T4361] FAT-fs (loop3): Can't find a valid FAT filesystem [ 67.318538][ T1108] gspca_cpia1: usb_control_msg 01, error -71 [ 67.325302][ T1108] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 67.332112][ T4365] EXT4-fs (loop0): Ignoring removed oldalloc option [ 67.384599][ T4365] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.395864][ T1108] usb 5-1: USB disconnect, device number 2 [ 67.415961][ T4361] 9p: Unknown Cache mode readè÷)ahead [ 67.421537][ T4361] 9p: Unknown Cache mode IcÉŽ#?Èÿ·°®çÞ3çÌK–G£ÑöïwVK+UノÊašòËóÍW?Ì?ûÊý]©Ùé…LV©°ˆ\ºñ`âimô¿Ç_?IÈÖøåíìÛ­¤ˆì/\“°*VUYk­ÕR¥R ÙÁËÅjÉPê_«`VC^e:ýæ’UP+Vem­®ÌòòØÈÚz¡ZUf¹®J…ºªUTm½®Ì«f±¬ ÃPc#‡ÖüEo·Â=}î*Næïïj-;öJ4EkêÓl5bÞã¾>yÅ8'º¶ß±=;Gd˜•á4ìêh{ûÇlÿNÚ3Äâ0t»Ú>ˆ_ßuÿÆY—ƒS6ÿÿâßÓ¹ÜÌœRI‘ÕÛù¼ûèö¿•¢XR͹_÷Žz­%dÿœý+73¥ãòÓjËoläÝ?Ó+^|FÒöë_¼´â3 wñ1ñÇg%-ßÇg•/a_|\~þÑoHZ^\‘ŠX²ì<{ÄßÌ(õç?¹®ü¾WU [ 67.476591][ T4365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.496815][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.535828][ T4368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 67.551552][ T4365] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.596430][ T4365] EXT4-fs (loop0): 1 truncate cleaned up [ 67.608797][ T4365] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none. [ 67.714761][ T4365] fscrypt (loop0, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 67.978723][ T4385] loop3: detected capacity change from 0 to 512 [ 68.015528][ T4389] loop1: detected capacity change from 0 to 16 [ 68.055809][ T4389] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.185678][ T4397] program syz.4.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.224151][ T4399] program syz.1.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.258337][ T4195] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.261602][ T4394] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000e8a2, chksum : 0xd7c774f0, utbl_chksum : 0xe619d30d) [ 68.538508][ T4195] usb 3-1: Using ep0 maxpacket: 32 [ 68.658504][ T4195] usb 3-1: unable to get BOS descriptor or descriptor too short [ 68.778373][ T4195] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 68.786842][ T4195] usb 3-1: can't read configurations, error -71 [ 68.790386][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.800774][ T4413] set_capacity_and_notify: 1 callbacks suppressed [ 68.800791][ T4413] loop0: detected capacity change from 0 to 40427 [ 68.823279][ T4413] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 68.830359][ T4413] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 68.861460][ T4420] loop4: detected capacity change from 0 to 256 [ 68.902615][ T4420] exfat: Deprecated parameter 'utf8' [ 68.908036][ T4420] exfat: Deprecated parameter 'utf8' [ 68.962336][ T4423] netlink: 168 bytes leftover after parsing attributes in process `syz.1.61'. [ 68.974571][ T4420] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 69.079758][ T26] audit: type=1800 audit(1774956228.398:3): pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.60" name="bus" dev="loop4" ino=1048592 res=0 errno=0 [ 69.206190][ T4426] loop1: detected capacity change from 0 to 4096 [ 69.212761][ T4428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.64'. [ 69.407991][ T4426] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 69.429154][ T4230] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 69.461028][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.508268][ T4230] usb 4-1: Product: syz [ 69.528302][ T4230] usb 4-1: Manufacturer: syz [ 69.537924][ T4230] usb 4-1: SerialNumber: syz [ 69.565929][ T4230] usb 4-1: config 0 descriptor?? [ 69.650240][ T4230] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 69.717103][ T4442] ntfs3: loop1: ino=21, "memory.swap.current" mmap(write) compressed not supported [ 69.730181][ T4441] loop4: detected capacity change from 0 to 2048 [ 69.822711][ T4443] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 69.904060][ T4188] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 70.099997][ T4230] (null): failure reading functionality [ 70.167458][ T4230] i2c i2c-1: connected i2c-tiny-usb device [ 70.213644][ T4430] loop2: detected capacity change from 0 to 32768 [ 70.320140][ T4451] netlink: 80 bytes leftover after parsing attributes in process `syz.1.74'. [ 70.404304][ T4430] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 70.404304][ T4430] [ 70.428791][ T23] usb 4-1: USB disconnect, device number 2 [ 70.474316][ T4430] ERROR: (device loop2): remounting filesystem as read-only [ 70.502498][ T4430] jfs_rename: dtInsert returned -EIO [ 71.059587][ T4470] loop1: detected capacity change from 0 to 4096 [ 71.173426][ T4482] netlink: 104 bytes leftover after parsing attributes in process `syz.3.88'. [ 71.285089][ T4470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.287444][ T4484] loop2: detected capacity change from 0 to 1024 [ 71.340659][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.347288][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.470543][ T4496] loop4: detected capacity change from 0 to 128 [ 71.531925][ T4500] loop0: detected capacity change from 0 to 256 [ 71.572619][ T4496] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.123571][ T4506] loop2: detected capacity change from 0 to 4096 [ 72.172288][ T4506] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 72.373787][ T4510] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 72.406902][ T4510] REISERFS (device loop0): using ordered data mode [ 72.420282][ T4510] reiserfs: using flush barriers [ 72.447323][ T4510] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 72.486305][ T4510] REISERFS (device loop0): checking transaction log (loop0) [ 72.514819][ T4510] REISERFS (device loop0): Using r5 hash to sort names [ 72.525293][ T4510] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 72.765996][ T4504] F2FS-fs (loop3): invalid crc value [ 72.796499][ T4504] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.858289][ T1108] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.888976][ T4504] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 72.914023][ T4504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 73.231663][ T1108] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 73.255523][ T1108] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 73.318852][ T1108] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 73.365704][ T1108] usb 2-1: config 220 has no interface number 2 [ 73.399176][ T1108] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 73.465815][ T1108] usb 2-1: config 220 interface 0 has no altsetting 0 [ 73.484575][ T1108] usb 2-1: config 220 interface 76 has no altsetting 0 [ 73.504873][ T1108] usb 2-1: config 220 interface 1 has no altsetting 0 [ 73.678566][ T1108] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 73.695862][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.717655][ T1108] usb 2-1: Product: syz [ 73.732206][ T1108] usb 2-1: Manufacturer: syz [ 73.769179][ T1108] usb 2-1: SerialNumber: syz [ 74.107959][ T4560] tipc: Started in network mode [ 74.143008][ T4560] tipc: Node identity ac14140f, cluster identity 4711 [ 74.159781][ T4529] set_capacity_and_notify: 3 callbacks suppressed [ 74.159798][ T4529] loop0: detected capacity change from 0 to 32768 [ 74.169325][ T1108] usb 2-1: selecting invalid altsetting 0 [ 74.180606][ T4560] tipc: New replicast peer: 255.255.255.255 [ 74.188053][ T4560] tipc: Enabled bearer , priority 10 [ 74.199975][ T1108] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 74.210924][ T1108] usb 2-1: No valid video chain found. [ 74.239125][ T4562] tap0: tun_chr_ioctl cmd 1074025677 [ 74.245543][ T4562] tap0: linktype set to 804 [ 74.255764][ T4529] (syz.0.105,4529,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "" or missing value [ 74.307178][ T4529] (syz.0.105,4529,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 74.309412][ T1108] usb 2-1: selecting invalid altsetting 0 [ 74.338296][ T1108] usbtest: probe of 2-1:220.1 failed with error -22 [ 74.379863][ T1108] usb 2-1: USB disconnect, device number 2 [ 74.974759][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.123'. [ 75.210265][ T4230] tipc: Node number set to 2886997007 [ 75.261512][ T4600] loop1: detected capacity change from 0 to 164 [ 75.708635][ T4614] netlink: 'syz.4.134': attribute type 1 has an invalid length. [ 75.746517][ T4619] loop3: detected capacity change from 0 to 8 [ 75.969065][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 76.137678][ T4622] loop3: detected capacity change from 0 to 8192 [ 76.196788][ T4594] loop0: detected capacity change from 0 to 40427 [ 76.218544][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 76.234199][ T4622] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 76.263424][ T4622] REISERFS (device loop3): using ordered data mode [ 76.266133][ T4594] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 76.270346][ T4622] reiserfs: using flush barriers [ 76.283496][ T4622] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 76.300397][ T4622] REISERFS (device loop3): checking transaction log (loop3) [ 76.309774][ T4594] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 76.338667][ T1108] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 76.361023][ T4594] F2FS-fs (loop0): invalid crc value [ 76.398873][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 76.459984][ T4594] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.465445][ T1108] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.497089][ T4622] REISERFS (device loop3): Using tea hash to sort names [ 76.512816][ T4622] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 76.513097][ T1108] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.591734][ T1108] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.621537][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.627559][ T4611] loop2: detected capacity change from 0 to 32768 [ 76.681552][ T4594] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 76.691988][ T4611] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.135 (4611) [ 76.718948][ T4594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.822497][ T4611] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 76.859422][ T4634] loop4: detected capacity change from 0 to 128 [ 76.903669][ T4611] BTRFS info (device loop2): setting nodatasum [ 76.916150][ T4634] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 76.928586][ T1108] usb 2-1: GET_CAPABILITIES returned 0 [ 76.934148][ T1108] usbtmc 2-1:16.0: can't read capabilities [ 76.945280][ T4611] BTRFS info (device loop2): force zlib compression, level 3 [ 76.988512][ T4611] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 77.049075][ T4611] BTRFS info (device loop2): use lzo compression, level 0 [ 77.086840][ T4611] BTRFS info (device loop2): turning on flush-on-commit [ 77.096169][ T4634] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,nomblk_io_submit,delalloc,,errors=continue. Quota mode: none. [ 77.113270][ T4611] BTRFS info (device loop2): enabling auto defrag [ 77.128371][ T4611] BTRFS info (device loop2): max_inline at 4096 [ 77.134826][ T4611] BTRFS info (device loop2): using free space tree [ 77.179376][ T4634] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.188432][ T4611] BTRFS info (device loop2): has skinny extents [ 77.258337][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 77.269788][ T4617] usbtmc 2-1:16.0: Unable to send data, error -71 [ 77.282688][ T7] usb 2-1: USB disconnect, device number 3 [ 77.460337][ T4654] loop0: detected capacity change from 0 to 512 [ 77.510796][ T4654] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.145: inode has both inline data and extents flags [ 77.525580][ T4654] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.145: couldn't read orphan inode 15 (err -117) [ 77.594525][ T4611] BTRFS info (device loop2): enabling ssd optimizations [ 77.608547][ T4654] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.790823][ T4654] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.145: directory missing '.' [ 77.805110][ T4668] loop4: detected capacity change from 0 to 4096 [ 77.812285][ T4670] loop3: detected capacity change from 0 to 256 [ 77.909944][ T4670] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 77.915116][ T26] audit: type=1800 audit(1774956237.228:4): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.135" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 78.016767][ T4668] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 78.063764][ T4674] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.071837][ T4670] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 78.074541][ T26] audit: type=1800 audit(1774956237.388:5): pid=4670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.150" name="file1" dev="loop3" ino=1048594 res=0 errno=0 [ 78.204536][ T4670] exFAT-fs (loop3): error, failed to bmap (inode : ffff8880605507e0 iblock : 8, err : -5) [ 78.228325][ T26] audit: type=1326 audit(1774956237.488:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664c05c819 code=0x7ffc0000 [ 78.295059][ T4670] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 78.308321][ T4670] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 78.332477][ T26] audit: type=1326 audit(1774956237.518:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f664c05c819 code=0x7ffc0000 [ 78.439715][ T26] audit: type=1326 audit(1774956237.528:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664c05c819 code=0x7ffc0000 [ 78.464705][ T4668] ntfs3: loop4: ntfs_sync_inode r=1e failed, -22. [ 78.584369][ T4668] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 78.616734][ T26] audit: type=1326 audit(1774956237.568:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f664c05c819 code=0x7ffc0000 [ 78.720390][ T26] audit: type=1326 audit(1774956237.568:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664c05c819 code=0x50000 [ 78.779528][ T4680] ntfs3: loop4: ntfs_sync_inode r=1e failed, -22. [ 78.802984][ T26] audit: type=1326 audit(1774956237.568:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664c05c819 code=0x50000 [ 78.888360][ T26] audit: type=1326 audit(1774956237.588:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f664c01d04e code=0x50000 [ 78.923723][ T26] audit: type=1326 audit(1774956237.588:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4675 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664c05c819 code=0x50000 [ 78.969546][ T145] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 79.058351][ T4192] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 79.108615][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.508569][ T7] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 79.515482][ T4716] set_capacity_and_notify: 1 callbacks suppressed [ 79.515496][ T4716] loop2: detected capacity change from 0 to 4096 [ 79.527465][ T7] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 79.538366][ T1111] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 79.553450][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.577673][ T4722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.167'. [ 79.634610][ T7] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 79.998511][ T1111] usb 2-1: config 246 has an invalid interface number: 166 but max is 0 [ 79.999021][ T4716] loop2: detected capacity change from 0 to 32768 [ 80.010458][ T1111] usb 2-1: config 246 has an invalid descriptor of length 187, skipping remainder of the config [ 80.026139][ T1111] usb 2-1: config 246 has no interface number 0 [ 80.032610][ T1111] usb 2-1: config 246 interface 166 altsetting 118 endpoint 0xB has invalid maxpacket 5592, setting to 64 [ 80.044941][ T1111] usb 2-1: config 246 interface 166 altsetting 118 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 80.058958][ T1111] usb 2-1: config 246 interface 166 has no altsetting 0 [ 80.175431][ T4716] XFS (loop2): Mounting V5 Filesystem [ 80.219065][ T1111] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 80.255808][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.313717][ T1111] usb 2-1: Product: syz [ 80.331783][ T1111] usb 2-1: Manufacturer: syz [ 80.346653][ T1111] usb 2-1: SerialNumber: syz [ 80.389411][ T4716] XFS (loop2): Ending clean mount [ 80.494067][ T4191] XFS (loop2): Unmounting Filesystem [ 80.599453][ T4741] loop3: detected capacity change from 0 to 512 [ 80.808490][ T7] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 80.819036][ T7] stv0680 1-1:4.0: last error: 2, command = 0x5 [ 81.015252][ T4699] usb 1-1: USB disconnect, device number 2 [ 81.081209][ T4748] loop2: detected capacity change from 0 to 256 [ 81.105599][ T1111] usb 2-1: Limiting number of CPorts to U8_MAX [ 81.114915][ T1111] usb 2-1: Not enough endpoints found in device, aborting! [ 81.328495][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.356834][ T4699] usb 2-1: USB disconnect, device number 4 [ 81.362898][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.581544][ T21] cfg80211: failed to load regulatory.db [ 81.595554][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 81.621188][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 81.738547][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 81.746609][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.753852][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.789533][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.802248][ T7] usb 4-1: config 0 has no interface number 0 [ 81.808612][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 81.810537][ T7] usb 4-1: config 0 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 81.828346][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.865564][ T7] usb 4-1: config 0 interface 1 has no altsetting 0 [ 81.870207][ T23] usb 5-1: config 0 descriptor?? [ 81.884939][ T4750] loop2: detected capacity change from 0 to 40427 [ 81.888318][ T7] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 81.935904][ T23] hub 5-1:0.0: USB hub found [ 81.938314][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.991239][ T7] usb 4-1: config 0 descriptor?? [ 81.991912][ T4750] F2FS-fs (loop2): invalid crc value [ 82.010989][ T4758] device erspan0 entered promiscuous mode [ 82.047806][ T4750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.058580][ T7] hso 4-1:0.1: Failed to find BULK IN ep [ 82.209346][ T4750] F2FS-fs (loop2): Start checkpoint disabled! [ 82.218704][ T23] hub 5-1:0.0: 6 ports detected [ 82.248520][ T23] hub 5-1:0.0: insufficient power available to use all downstream ports [ 82.268718][ T4750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 82.468500][ T23] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 82.475293][ T23] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 82.618588][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 82.631915][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 82.679395][ T4532] attempt to access beyond end of device [ 82.679395][ T4532] loop2: rw=2049, want=40976, limit=40427 [ 82.710937][ T23] usb 5-1: USB disconnect, device number 3 [ 83.388652][ T4793] loop4: detected capacity change from 0 to 1024 [ 83.395559][ T4774] loop0: detected capacity change from 0 to 32768 [ 83.415697][ T4795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.508423][ T4774] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.185 (4774) [ 83.589680][ T4774] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 83.624983][ T4798] loop1: detected capacity change from 0 to 64 [ 83.635914][ T4774] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 83.668998][ T4774] BTRFS info (device loop0): use zstd compression, level 3 [ 83.698298][ T4774] BTRFS info (device loop0): using free space tree [ 83.715156][ T4774] BTRFS info (device loop0): has skinny extents [ 83.916623][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 83.960413][ T7] usb 4-1: USB disconnect, device number 3 [ 84.007282][ T4817] netlink: 'syz.1.198': attribute type 11 has an invalid length. [ 84.070321][ T4821] loop4: detected capacity change from 0 to 65 [ 84.102230][ T4829] loop1: detected capacity change from 0 to 64 [ 84.128533][ T4774] BTRFS info (device loop0): enabling ssd optimizations [ 84.214560][ T4821] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 85.315433][ T4854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.214'. [ 85.505645][ T4861] netlink: 'syz.3.217': attribute type 2 has an invalid length. [ 85.548751][ T4851] set_capacity_and_notify: 1 callbacks suppressed [ 85.548767][ T4851] loop4: detected capacity change from 0 to 4096 [ 85.643104][ T4863] tap0: tun_chr_ioctl cmd 1074025681 [ 85.817701][ T4866] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.939809][ T4693] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.474779][ T4876] loop1: detected capacity change from 0 to 32768 [ 86.638543][ T4693] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.669301][ T4693] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.788723][ T4693] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.818311][ T4693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.859065][ T4693] usb 4-1: SerialNumber: syz [ 86.959558][ T4887] loop2: detected capacity change from 0 to 512 [ 86.998213][ C1] sched: RT throttling activated [ 87.024372][ T4876] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 87.039040][ T4876] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 87.160031][ T4876] gfs2: fsid=__а"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9.s: no journals! [ 87.184232][ T4693] usb 4-1: 0:2 : does not exist [ 87.231460][ T4887] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 87.278884][ T4887] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.356070][ T4693] usb 4-1: USB disconnect, device number 4 [ 87.467538][ T4887] FAT-fs (loop2): FAT read failed (blocknr 128) [ 87.494567][ T4899] loop0: detected capacity change from 0 to 512 [ 87.541538][ T4899] EXT4-fs (loop0): Ignoring removed nobh option [ 87.604838][ T4899] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 87.645090][ T4899] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 87.708398][ T4899] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #13: comm syz.0.235: inode has both inline data and extents flags [ 87.728676][ T4899] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.235: couldn't read orphan inode 13 (err -117) [ 87.736075][ T4903] loop4: detected capacity change from 0 to 1764 [ 87.799181][ T4899] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 87.859560][ T4906] loop3: detected capacity change from 0 to 256 [ 88.137382][ T4910] loop0: detected capacity change from 0 to 16 [ 88.239954][ T4910] erofs: (device loop0): mounted with root inode @ nid 36. [ 88.278436][ T4693] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.335343][ T4910] erofs: (device loop0): erofs_fill_dentries: bogus dirent @ nid 36 [ 88.518376][ T4693] usb 4-1: Using ep0 maxpacket: 16 [ 88.593695][ T4913] loop1: detected capacity change from 0 to 1024 [ 88.639926][ T4693] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.686015][ T4913] EXT4-fs (loop1): Ignoring removed bh option [ 88.689834][ T4693] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.739618][ T4913] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,nolazytime,commit=0x0000000000000000,usrquota,bh,,errors=continue. Quota mode: writeback. [ 88.795740][ T4693] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 88.878709][ T4913] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.926892][ T4693] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.968552][ T4693] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 88.996731][ T4907] loop2: detected capacity change from 0 to 32768 [ 89.014406][ T4693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.041676][ T4693] usb 4-1: config 0 descriptor?? [ 89.191935][ T4907] JBD2: Ignoring recovery information on journal [ 89.394969][ T4933] loop6: detected capacity change from 0 to 7 [ 89.451903][ T4933] Dev loop6: unable to read RDB block 7 [ 89.459975][ T4907] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 89.476126][ T4933] loop6: unable to read partition table [ 89.505146][ T4933] loop6: partition table beyond EOD, truncated [ 89.525659][ T4693] hid (null): unknown global tag 0xd [ 89.537135][ T4933] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 89.558311][ T4693] hid (null): unknown global tag 0xe [ 89.598743][ T4418] udevd[4418]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.604115][ T4940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 89.827405][ T4693] usb 4-1: USB disconnect, device number 5 [ 89.966907][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 90.138475][ T4232] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 90.325237][ T4956] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.374842][ T4956] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 90.413315][ T4960] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.478252][ T4956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 90.508870][ T4232] usb 2-1: config 0 has no interfaces? [ 90.514548][ T4232] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 90.534839][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.586515][ T4232] usb 2-1: config 0 descriptor?? [ 90.791029][ T4970] set_capacity_and_notify: 3 callbacks suppressed [ 90.791046][ T4970] loop3: detected capacity change from 0 to 1024 [ 90.866437][ T4947] udc-core: couldn't find an available UDC or it's busy [ 90.913525][ T4947] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.955070][ T4970] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 91.041496][ T4232] usb 2-1: USB disconnect, device number 5 [ 91.155452][ T4970] overlayfs: missing 'lowerdir' [ 91.207114][ T4970] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #11: comm syz.3.264: directory missing '..' [ 91.234600][ T4985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 91.291594][ T4987] loop0: detected capacity change from 0 to 256 [ 91.349422][ T4987] exfat: Deprecated parameter 'namecase' [ 91.419848][ T4987] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 91.638409][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 91.926205][ T5006] loop0: detected capacity change from 0 to 4096 [ 91.996391][ T5006] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 92.003943][ T4232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.026463][ T4232] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 92.038982][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.072792][ T5011] loop2: detected capacity change from 0 to 64 [ 92.080525][ T4232] usb 2-1: config 0 descriptor?? [ 92.129564][ T4200] Bluetooth: hci5: urb ffff88801ecb7900 submission failed (2) [ 92.214064][ T5006] overlayfs: upper fs does not support tmpfile. [ 92.244732][ T5006] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.255978][ T5006] overlayfs: failed to resolve './cgroup': -2 [ 92.258153][ T5011] hfs: hfs: Invalid key length: 94 [ 92.360764][ T23] usb 2-1: USB disconnect, device number 6 [ 92.558076][ T5016] loop0: detected capacity change from 0 to 256 [ 92.650096][ T5016] exfat: Deprecated parameter 'utf8' [ 92.666021][ T5016] exfat: Deprecated parameter 'utf8' [ 92.726531][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 92.768651][ T5016] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22bddf5f, utbl_chksum : 0xe619d30d) [ 92.877844][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 92.877861][ T26] audit: type=1800 audit(1774956252.188:73): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.283" name="bus" dev="loop0" ino=1048600 res=0 errno=0 [ 93.103861][ T5037] loop3: detected capacity change from 0 to 164 [ 93.357174][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.403574][ T5039] loop2: detected capacity change from 0 to 40427 [ 93.456627][ T5039] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 93.463726][ T5039] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.153607][ T5069] loop0: detected capacity change from 0 to 4096 [ 94.287022][ T5069] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 94.681981][ T5090] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 94.698022][ T5053] loop1: detected capacity change from 0 to 32768 [ 94.729388][ T5092] loop3: detected capacity change from 0 to 1024 [ 94.738426][ T4686] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.838940][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.896158][ T5090] device veth0_vlan left promiscuous mode [ 95.015215][ T5053] XFS (loop1): Mounting V5 Filesystem [ 95.033457][ T5090] device veth0_vlan entered promiscuous mode [ 95.088074][ T5053] XFS (loop1): Ending clean mount [ 95.117115][ T5090] team0: Device veth0_vlan failed to register rx_handler [ 95.228816][ T23] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 95.250107][ T5092] hfsplus: b-tree write err: -5, ino 3 [ 95.258502][ T4686] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 95.270491][ T23] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 95.277811][ T4686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.290468][ T4686] usb 3-1: Product: syz [ 95.296033][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.303621][ T4686] usb 3-1: Manufacturer: syz [ 95.314433][ T4686] usb 3-1: SerialNumber: syz [ 95.336756][ T4686] usb 3-1: config 0 descriptor?? [ 95.390210][ T4686] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 004 [ 95.400399][ T23] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 95.418125][ T3070] hfsplus: bad catalog file entry [ 95.450876][ T4188] XFS (loop1): Unmounting Filesystem [ 95.655469][ T5090] syz.0.316 (5090) used greatest stack depth: 19832 bytes left [ 95.710363][ T5107] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 95.772081][ T5107] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback. [ 95.828342][ T4686] (null): failure reading functionality [ 95.880137][ T4686] i2c i2c-1: connected i2c-tiny-usb device [ 95.928398][ T5107] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.3.321: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0 [ 96.107584][ T4686] usb 3-1: USB disconnect, device number 4 [ 96.581394][ T5140] set_capacity_and_notify: 1 callbacks suppressed [ 96.581408][ T5140] loop0: detected capacity change from 0 to 2048 [ 96.595026][ T23] stv0680 5-1:4.0: Could not get descriptor 0200 [ 96.668748][ T5140] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 96.723281][ T4418] udevd[4418]: incorrect nilfs2 checksum on /dev/loop0 [ 96.777992][ T5145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.808389][ T23] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 96.816875][ T23] stv0680 5-1:4.0: last error: 2, command = 0x5 [ 96.869500][ T23] usb 5-1: USB disconnect, device number 4 [ 97.004208][ T5149] loop2: detected capacity change from 0 to 1024 [ 97.103264][ T5149] EXT4-fs (loop2): inline encryption not supported [ 97.164009][ T5149] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.374255][ T5149] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,delalloc,errors=remount-ro,grpquota,minixdf,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,. Quota mode: writeback. [ 97.944479][ T5151] loop0: detected capacity change from 0 to 131072 [ 97.981218][ T5143] loop1: detected capacity change from 0 to 32768 [ 98.079494][ T5151] F2FS-fs (loop0): invalid crc value [ 98.118124][ T5151] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.167432][ T5143] XFS (loop1): Mounting V5 Filesystem [ 98.208760][ T5151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.352957][ T5143] XFS (loop1): Ending clean mount [ 98.412653][ T5143] XFS (loop1): Quotacheck needed: Please wait. [ 98.513204][ T5190] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.590145][ T5143] XFS (loop1): Quotacheck: Done. [ 98.837003][ T4188] XFS (loop1): Unmounting Filesystem [ 99.301375][ T5212] loop4: detected capacity change from 0 to 16 [ 99.420501][ T5212] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 99.796903][ T5227] loop1: detected capacity change from 0 to 512 [ 99.992991][ T4686] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 100.124773][ T5233] loop0: detected capacity change from 0 to 256 [ 100.159857][ T5235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.365'. [ 100.185170][ T5235] netlink: 'syz.2.365': attribute type 6 has an invalid length. [ 100.196828][ T5235] netlink: 'syz.2.365': attribute type 5 has an invalid length. [ 100.235906][ T5235] netlink: 'syz.2.365': attribute type 4 has an invalid length. [ 100.333987][ T5241] loop3: detected capacity change from 0 to 16 [ 100.336402][ T5240] netlink: 'syz.1.367': attribute type 11 has an invalid length. [ 100.399061][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 100.399891][ T5244] loop2: detected capacity change from 0 to 256 [ 100.428637][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.450305][ T4686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.475098][ T5244] exfat: Deprecated parameter 'utf8' [ 100.480701][ T5241] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.488120][ T5244] exfat: Deprecated parameter 'utf8' [ 100.488401][ T4686] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 100.546175][ T4686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.555574][ T5244] exfat: Deprecated parameter 'utf8' [ 100.587328][ T4686] usb 5-1: config 0 descriptor?? [ 100.647967][ T5244] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 100.837689][ T5257] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.845964][ T5257] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.016774][ T5263] loop2: detected capacity change from 0 to 128 [ 101.200870][ T5225] udc-core: couldn't find an available UDC or it's busy [ 101.244426][ T5225] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 101.334020][ T4686] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 101.413020][ T4686] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 101.518502][ T4686] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected [ 101.552333][ T4686] hid-steam 0003:28DE:1142.0002: No HID_FEATURE_REPORT submitted - nothing to read [ 101.630977][ T4686] usb 5-1: USB disconnect, device number 5 [ 101.677130][ T4686] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected [ 101.880892][ T5290] fido_id[5290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 101.928852][ T5291] loop2: detected capacity change from 0 to 4096 [ 101.962383][ T5291] EXT4-fs (loop2): inline encryption not supported [ 102.050873][ T5299] loop3: detected capacity change from 0 to 128 [ 102.236471][ T5272] loop0: detected capacity change from 0 to 32768 [ 102.306387][ T5291] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.361948][ T5291] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 102.419112][ T5291] System zones: 0-5 [ 102.428620][ T5272] JBD2: Ignoring recovery information on journal [ 102.472458][ T5291] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 102.671515][ T5272] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.750933][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.400'. [ 102.943051][ T5325] loop2: detected capacity change from 0 to 256 [ 102.977392][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 103.036654][ T5325] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 103.208347][ T4232] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.468336][ T4232] usb 5-1: Using ep0 maxpacket: 8 [ 103.522611][ T5336] loop2: detected capacity change from 0 to 4096 [ 103.556650][ T5308] loop3: detected capacity change from 0 to 32768 [ 103.567680][ T5336] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.570545][ T5308] XFS: attr2 mount option is deprecated. [ 103.608402][ T4232] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.635054][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.646360][ T5336] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 103.658342][ T4686] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 103.665993][ T4232] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.685455][ T5340] loop0: detected capacity change from 0 to 2048 [ 103.702824][ T4232] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.713118][ T4418] udevd[4418]: incorrect nilfs2 checksum on /dev/loop2 [ 103.726809][ T4232] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.734045][ T5308] XFS (loop3): Mounting V5 Filesystem [ 103.746744][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.778982][ T5346] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.833019][ T5340] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,,errors=continue. Quota mode: writeback. [ 103.933746][ T5340] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.966922][ T5308] XFS (loop3): Ending clean mount [ 104.002217][ T5308] XFS (loop3): Quotacheck needed: Please wait. [ 104.071797][ T4686] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.116752][ T5308] XFS (loop3): Quotacheck: Done. [ 104.168890][ T4232] usb 5-1: GET_CAPABILITIES returned 0 [ 104.174788][ T4686] usb 2-1: config 6 has an invalid interface number: 1 but max is 0 [ 104.183084][ T4232] usbtmc 5-1:16.0: can't read capabilities [ 104.205281][ T4686] usb 2-1: config 6 has no interface number 0 [ 104.253578][ T4686] usb 2-1: config 6 interface 1 has no altsetting 0 [ 104.352279][ T4183] XFS (loop3): Unmounting Filesystem [ 104.394562][ T4232] usb 5-1: USB disconnect, device number 6 [ 104.406692][ T5356] loop2: detected capacity change from 0 to 64 [ 104.528498][ T4686] usb 2-1: string descriptor 0 read error: -22 [ 104.549501][ T4686] usb 2-1: New USB device found, idVendor=058b, idProduct=0043, bcdDevice=3c.4e [ 104.575968][ T5358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.412'. [ 104.603771][ T4686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.675586][ T4686] ftdi_sio 2-1:6.1: FTDI USB Serial Device converter detected [ 104.734859][ T4686] usb 2-1: Detected FT-X [ 104.879419][ T4686] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 104.899085][ T4686] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 104.924976][ T5362] loop2: detected capacity change from 0 to 4096 [ 104.931865][ T4686] ftdi_sio 2-1:6.1: GPIO initialisation failed: -71 [ 104.950633][ T4686] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.985919][ T5362] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 105.033219][ T4686] usb 2-1: USB disconnect, device number 7 [ 105.076021][ T4686] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 105.082654][ T5364] loop3: detected capacity change from 0 to 1024 [ 105.095120][ T4686] ftdi_sio 2-1:6.1: device disconnected [ 105.177881][ T5362] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 105.179090][ T5366] device ipvlan0 entered promiscuous mode [ 105.217962][ T5362] ntfs3: loop2: Failed to load $Extend. [ 105.278887][ T5366] device ipvlan0 left promiscuous mode [ 105.613388][ T5360] mmap: syz.0.416 (5360) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 105.824617][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.858529][ T5379] EXT4-fs (loop3): Ignoring removed nobh option [ 105.909264][ T5379] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 105.917160][ T5379] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 106.001411][ T5379] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #13: comm syz.3.423: inode has both inline data and extents flags [ 106.077413][ T5379] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.423: couldn't read orphan inode 13 (err -117) [ 106.103592][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 106.143267][ T5379] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 106.231147][ T5379] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 106.249690][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.269848][ T4693] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.276962][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.307941][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.338259][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.374474][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.393901][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.508362][ T4693] usb 3-1: Using ep0 maxpacket: 16 [ 106.557687][ T5391] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 106.629410][ T5391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.668687][ T4693] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.709497][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 106.715038][ T23] usbtmc 2-1:16.0: can't read capabilities [ 106.741963][ T5391] overlayfs: upper fs needs to support d_type. [ 106.789328][ T5391] overlayfs: upper fs does not support tmpfile. [ 106.913966][ T5399] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 106.988360][ T4693] usb 3-1: string descriptor 0 read error: -22 [ 106.996148][ T4693] usb 3-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 107.017123][ T4693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.018857][ T5399] EXT4-fs (loop4): mount failed [ 107.038325][ T5375] usb 2-1: usbtmc_ioctl_clear_out_halt returned -32 [ 107.122989][ T4693] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 107.127808][ T23] usb 2-1: USB disconnect, device number 8 [ 107.164747][ T5410] set_capacity_and_notify: 3 callbacks suppressed [ 107.164762][ T5410] loop3: detected capacity change from 0 to 512 [ 107.314226][ T5410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.436: bg 0: block 473: padding at end of block bitmap is not set [ 107.318470][ T4693] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 107.374697][ T4693] usb 3-1: USB disconnect, device number 5 [ 107.437980][ T5410] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 107.490615][ T5410] EXT4-fs (loop3): 1 orphan inode deleted [ 107.496722][ T5410] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.514783][ T5410] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.604066][ T5399] autofs4:pid:5399:autofs_fill_super: could not open pipe file descriptor [ 107.669841][ T4418] udevd[4418]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.030158][ T5424] loop1: detected capacity change from 0 to 4096 [ 108.040489][ T5429] loop2: detected capacity change from 0 to 1024 [ 108.091176][ T5429] EXT4-fs (loop2): inline encryption not supported [ 108.113392][ T5424] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 108.204647][ T5429] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none. [ 108.259940][ T26] audit: type=1800 audit(1774956267.578:74): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.441" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 108.344118][ T5429] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.366461][ T5415] loop0: detected capacity change from 0 to 32768 [ 108.497962][ T5437] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.444: bg 0: block 112: padding at end of block bitmap is not set [ 108.518195][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.705751][ T4452] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 3: comm kworker/u4:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 108.838146][ T4452] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 108.851017][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.880316][ T4452] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.880316][ T4452] [ 108.900198][ T4452] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 2) [ 108.950794][ T4452] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 2 with error 117 [ 108.989822][ T4452] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.989822][ T4452] [ 109.043576][ T5451] loop3: detected capacity change from 0 to 512 [ 109.125211][ T5451] EXT4-fs (loop3): Ignoring removed nobh option [ 109.144300][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 109.154763][ T5451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.224288][ T5451] EXT4-fs (loop3): 1 truncate cleaned up [ 109.273412][ T5451] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 109.303049][ T23] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.316745][ T23] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.328022][ T23] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.345585][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 109.352605][ T23] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 109.353167][ T5462] loop0: detected capacity change from 0 to 256 [ 109.361940][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.378384][ T23] usb 2-1: config 0 descriptor?? [ 109.439635][ T5451] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.454: corrupted xattr block 33 [ 109.466525][ T5462] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 109.476161][ T5451] EXT4-fs (loop3): Remounting filesystem read-only [ 109.486138][ T5451] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2757: inode #15: comm syz.3.454: corrupted xattr block 33 [ 109.518274][ T5451] EXT4-fs (loop3): Remounting filesystem read-only [ 109.568832][ T5422] loop4: detected capacity change from 0 to 32768 [ 109.852079][ T23] hid (null): invalid report_count 12610 [ 109.863084][ T23] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 109.877938][ T5422] XFS (loop4): Mounting V5 Filesystem [ 109.878561][ T23] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 109.903497][ T23] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 109.914158][ T23] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 109.928270][ T23] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 109.935461][ T23] uclogic 0003:5543:0003.0004: unknown main item tag 0x0 [ 109.943670][ T23] uclogic 0003:5543:0003.0004: invalid report_count 12610 [ 109.951455][ T23] uclogic 0003:5543:0003.0004: item 0 2 1 9 parsing failed [ 109.959578][ T23] uclogic 0003:5543:0003.0004: parse failed [ 109.965532][ T23] uclogic: probe of 0003:5543:0003.0004 failed with error -22 [ 110.030395][ T5422] XFS (loop4): Ending clean mount [ 110.091251][ T4693] usb 2-1: USB disconnect, device number 9 [ 110.271135][ T4192] XFS (loop4): Unmounting Filesystem [ 110.547729][ T5477] loop0: detected capacity change from 0 to 32768 [ 110.607415][ T5474] loop3: detected capacity change from 0 to 40427 [ 110.685495][ T5474] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 110.699920][ T5474] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 110.712890][ T5474] F2FS-fs (loop3): invalid crc value [ 110.855477][ T5477] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 110.900789][ T5474] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.269104][ T5474] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.518047][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 111.657776][ T5485] loop1: detected capacity change from 0 to 131072 [ 111.675303][ T26] audit: type=1800 audit(1774956270.958:75): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.462" name="file0" dev="loop3" ino=14 res=0 errno=0 [ 111.729250][ T4183] attempt to access beyond end of device [ 111.729250][ T4183] loop3: rw=2049, want=45112, limit=40427 [ 111.765603][ T5485] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 111.775178][ T5485] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 111.788156][ T5485] F2FS-fs (loop1): invalid crc value [ 111.840400][ T5485] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.925761][ T5485] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 111.933213][ T5485] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 112.039806][ T4686] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.087447][ T5485] F2FS-fs (loop1): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 112.298487][ T4686] usb 3-1: Using ep0 maxpacket: 16 [ 112.396796][ T5518] loop1: detected capacity change from 0 to 256 [ 112.418772][ T4686] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 112.458101][ T4686] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 112.488745][ T4686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.496896][ T5520] loop3: detected capacity change from 0 to 256 [ 112.543378][ T4686] usb 3-1: config 0 descriptor?? [ 112.568294][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.040573][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 113.043083][ T4230] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.055695][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 113.064545][ T4230] usb 1-1: config 0 has no interface number 0 [ 113.073167][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 113.108411][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 113.122735][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 113.141466][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 113.156417][ T4686] kone 0003:1E7D:2CED.0005: unknown main item tag 0x7 [ 113.172789][ T4686] kone 0003:1E7D:2CED.0005: invalid report_size 24940 [ 113.188297][ T4686] kone 0003:1E7D:2CED.0005: item 0 2 1 7 parsing failed [ 113.206087][ T4686] kone 0003:1E7D:2CED.0005: parse failed [ 113.223873][ T4686] kone: probe of 0003:1E7D:2CED.0005 failed with error -22 [ 113.262282][ T4230] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 113.262588][ T4686] usb 3-1: USB disconnect, device number 6 [ 113.279269][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.303318][ T4230] usb 1-1: Product: syz [ 113.312419][ T4230] usb 1-1: Manufacturer: syz [ 113.330135][ T4230] usb 1-1: SerialNumber: syz [ 113.359477][ T4230] usb 1-1: config 0 descriptor?? [ 113.481480][ T5517] loop4: detected capacity change from 0 to 32768 [ 113.527572][ T5517] XFS (loop4): Mounting V5 Filesystem [ 113.628412][ T4230] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 113.667142][ T4230] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.678326][ T4699] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 113.698907][ T4230] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 113.725033][ T4230] usb 1-1: media controller created [ 113.767670][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.867613][ T5517] XFS (loop4): Ending clean mount [ 113.929948][ T5517] XFS (loop4): Quotacheck needed: Please wait. [ 113.938446][ T4699] usb 2-1: Using ep0 maxpacket: 32 [ 113.938544][ T4230] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 113.955532][ T5545] loop3: detected capacity change from 0 to 32768 [ 113.981665][ T5545] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.485 (5545) [ 114.059772][ T4699] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.072266][ T5517] XFS (loop4): Quotacheck: Done. [ 114.085914][ T4230] usb 1-1: USB disconnect, device number 3 [ 114.114602][ T4699] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.196687][ T5545] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 114.237638][ T5545] BTRFS info (device loop3): using free space tree [ 114.258939][ T5545] BTRFS info (device loop3): has skinny extents [ 114.304382][ T4699] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.345243][ T4699] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 114.395437][ T4699] usb 2-1: Product: syz [ 114.424401][ T4699] usb 2-1: Manufacturer: syz [ 114.491567][ T4192] XFS (loop4): Unmounting Filesystem [ 114.511424][ T4699] hub 2-1:4.0: USB hub found [ 114.640842][ T5545] BTRFS info (device loop3): enabling ssd optimizations [ 114.768899][ T4699] hub 2-1:4.0: 3 ports detected [ 114.787765][ T26] audit: type=1800 audit(1774956274.098:76): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 115.009769][ T4699] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 115.016182][ T4699] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 115.110048][ T4699] usb 2-1: USB disconnect, device number 10 [ 115.671960][ T5601] netlink: 'syz.3.496': attribute type 2 has an invalid length. [ 115.709910][ T5603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.747600][ T5604] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.966747][ T5616] loop4: detected capacity change from 0 to 128 [ 116.087597][ T5614] loop3: detected capacity change from 0 to 8192 [ 116.189493][ T5616] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 116.277645][ T5616] hpfs: filesystem error: improperly stopped [ 116.343987][ T5616] hpfs: You really don't want any checks? You are crazy... [ 116.443492][ T5616] hpfs: hpfs_map_sector(): read error [ 116.443535][ T5616] hpfs: code page support is disabled [ 116.444124][ T5616] hpfs: hpfs_map_4sectors(): unaligned read [ 116.444273][ T5616] hpfs: hpfs_map_4sectors(): unaligned read [ 116.444283][ T5616] hpfs: filesystem error: unable to find root dir [ 116.972705][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 117.012650][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 117.013717][ T5599] loop1: detected capacity change from 0 to 40427 [ 117.026501][ T5613] loop0: detected capacity change from 0 to 32768 [ 117.037015][ T5631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.514'. [ 117.110109][ T5639] syz.2.519 uses obsolete (PF_INET,SOCK_PACKET) [ 117.134715][ T5599] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 117.152535][ T5599] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff [ 117.152733][ T5613] (syz.0.506,5613,1):ocfs2_find_slot:468 ERROR: no free slots available! [ 117.191928][ T5599] F2FS-fs (loop1): invalid crc value [ 117.220629][ T5599] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.265120][ T5645] loop3: detected capacity change from 0 to 8192 [ 117.272023][ T5613] (syz.0.506,5613,0):ocfs2_mount_volume:1811 ERROR: status = -22 [ 117.296376][ T5613] (syz.0.506,5613,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 117.361995][ T5645] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.398815][ T5645] REISERFS (device loop3): using ordered data mode [ 117.405469][ T5645] reiserfs: using flush barriers [ 117.443011][ T5648] loop2: detected capacity change from 0 to 1024 [ 117.473975][ T5645] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.485724][ T5599] F2FS-fs (loop1): Start checkpoint disabled! [ 117.517057][ T5645] REISERFS (device loop3): checking transaction log (loop3) [ 117.525169][ T26] audit: type=1800 audit(1774956276.838:77): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.522" name="file1" dev="loop2" ino=2 res=0 errno=0 [ 117.608624][ T5599] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 117.790199][ T5654] loop4: detected capacity change from 0 to 256 [ 117.851416][ T5599] attempt to access beyond end of device [ 117.851416][ T5599] loop1: rw=2049, want=45104, limit=40427 [ 117.855534][ T5656] loop0: detected capacity change from 0 to 8 [ 117.951519][ T5654] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00007372) [ 118.029473][ T5645] REISERFS (device loop3): Using tea hash to sort names [ 118.037323][ T5645] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 118.247839][ T9] attempt to access beyond end of device [ 118.247839][ T9] loop1: rw=2049, want=40976, limit=40427 [ 118.525564][ T5665] loop2: detected capacity change from 0 to 4096 [ 118.712156][ T5665] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 119.285552][ T1108] kernel write not supported for file /vcsa (pid: 1108 comm: kworker/0:2) [ 119.918325][ T5596] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.081058][ T5690] loop1: detected capacity change from 0 to 32768 [ 120.182874][ T5596] usb 4-1: Using ep0 maxpacket: 32 [ 120.187085][ T5715] loop2: detected capacity change from 0 to 128 [ 120.301840][ T5596] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 120.321028][ T5596] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.387306][ T5596] usb 4-1: config 0 descriptor?? [ 120.441159][ T5596] gspca_main: sunplus-2.14.0 probing 041e:400b [ 120.466367][ T5715] attempt to access beyond end of device [ 120.466367][ T5715] loop2: rw=1, want=140, limit=128 [ 120.567540][ T5675] loop4: detected capacity change from 0 to 32768 [ 120.595650][ T5720] loop1: detected capacity change from 0 to 256 [ 120.619046][ T5675] XFS: ikeep mount option is deprecated. [ 120.659855][ T5720] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 120.804100][ T5727] ALSA: mixer_oss: invalid OSS volume 'l80211' [ 120.879896][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.559'. [ 120.908505][ T5675] XFS (loop4): Mounting V5 Filesystem [ 120.921777][ T5731] device bond0 entered promiscuous mode [ 120.927547][ T5731] device bond_slave_0 entered promiscuous mode [ 120.940615][ T5731] device bond_slave_1 entered promiscuous mode [ 120.956050][ T5731] device bond0 left promiscuous mode [ 120.962532][ T5731] device bond_slave_0 left promiscuous mode [ 120.977527][ T5731] device bond_slave_1 left promiscuous mode [ 121.001443][ T5735] loop1: detected capacity change from 0 to 256 [ 121.070485][ T26] audit: type=1800 audit(1774956280.388:78): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.557" name="file1" dev="loop1" ino=1048616 res=0 errno=0 [ 121.163331][ T5675] XFS (loop4): Ending clean mount [ 121.256809][ T5740] program syz.1.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.328585][ T5596] gspca_sunplus: reg_w_riv err -71 [ 121.333846][ T5596] sunplus: probe of 4-1:0.0 failed with error -71 [ 121.376947][ T5596] usb 4-1: USB disconnect, device number 6 [ 121.598087][ T4192] XFS (loop4): Unmounting Filesystem [ 122.369145][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.574950][ T5738] loop2: detected capacity change from 0 to 40427 [ 122.645310][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 122.655415][ T5738] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 122.695864][ T5738] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 122.757265][ T5738] F2FS-fs (loop2): invalid crc value [ 122.798747][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.842924][ T5738] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.858236][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.896505][ T5760] loop3: detected capacity change from 0 to 131072 [ 122.936754][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.965927][ T5760] F2FS-fs (loop3): Test dummy encryption mode enabled [ 123.000294][ T5760] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.009684][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.057794][ T5760] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 123.079301][ T23] usb 1-1: config 0 descriptor?? [ 123.119657][ T23] hub 1-1:0.0: USB hub found [ 123.152657][ T5760] fscrypt (loop3, inode 3): Unsupported encryption flags (0x10) [ 123.154574][ T5738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.338610][ T23] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 123.382143][ T5775] tun0: tun_chr_ioctl cmd 1074025677 [ 123.394752][ T5738] attempt to access beyond end of device [ 123.394752][ T5738] loop2: rw=10241, want=45104, limit=40427 [ 123.408453][ T5775] tun0: linktype set to 774 [ 123.467875][ T4191] attempt to access beyond end of device [ 123.467875][ T4191] loop2: rw=2049, want=45112, limit=40427 [ 123.604221][ T5764] loop1: detected capacity change from 0 to 40427 [ 123.732762][ T5764] F2FS-fs (loop1): invalid crc value [ 123.772498][ T23] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 123.789261][ T23] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22 [ 123.818422][ T5764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.046878][ T5764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.108767][ T23] usb 1-1: USB disconnect, device number 4 [ 124.299093][ T4188] attempt to access beyond end of device [ 124.299093][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 124.640885][ T5778] loop3: detected capacity change from 0 to 32768 [ 124.743953][ T5778] XFS (loop3): Mounting V5 Filesystem [ 124.910803][ T5778] XFS (loop3): Ending clean mount [ 124.977008][ T5778] XFS (loop3): Quotacheck needed: Please wait. [ 125.098954][ T5812] loop2: detected capacity change from 0 to 8192 [ 125.156582][ T5812] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 125.166227][ T5778] XFS (loop3): Quotacheck: Done. [ 125.191220][ T5812] REISERFS (device loop2): using ordered data mode [ 125.241294][ T5812] reiserfs: using flush barriers [ 125.260463][ T4183] XFS (loop3): Unmounting Filesystem [ 125.284327][ T5812] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 125.393866][ T5812] REISERFS (device loop2): checking transaction log (loop2) [ 125.601936][ T5825] loop1: detected capacity change from 0 to 8192 [ 125.845582][ T5812] REISERFS (device loop2): Using tea hash to sort names [ 125.864425][ T5812] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 125.944476][ T5812] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 126.264904][ T26] audit: type=1800 audit(1774956285.578:79): pid=5812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.587" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 126.562257][ T4230] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.689878][ T5854] program syz.4.603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.842255][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 126.965024][ T5839] loop1: detected capacity change from 0 to 32768 [ 126.983278][ T4230] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 126.998307][ T4230] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.009585][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 127.036552][ T4230] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.056055][ T5839] JBD2: Ignoring recovery information on journal [ 127.056208][ T4230] usb 1-1: config 1 has no interface number 0 [ 127.069493][ T4230] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.080505][ T4230] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.082713][ T5863] loop3: detected capacity change from 0 to 4096 [ 127.093551][ T4230] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 127.093592][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.117863][ T1108] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.146985][ T5839] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 127.169876][ T4230] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 127.271196][ T5863] NILFS (loop3): invalid segment: Checksum error in segment payload [ 127.295122][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 127.301709][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 127.301725][ T5863] NILFS (loop3): trying rollback from an earlier position [ 127.372471][ T5863] NILFS (loop3): recovery complete [ 127.378390][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 127.379306][ T4230] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 127.438498][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 127.449724][ T5866] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.478423][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.504703][ T1108] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 127.524668][ T1108] usb 5-1: config 179 has no interface number 0 [ 127.536510][ T1108] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 127.551106][ T23] pvrusb2: Hardware description: Terratec Grabster AV400 [ 127.558166][ T23] pvrusb2: ********** [ 127.594583][ T23] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 127.604932][ T1108] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 127.615398][ T23] pvrusb2: Important functionality might not be entirely working. [ 127.634060][ T23] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 127.645659][ T1108] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.667823][ T23] pvrusb2: ********** [ 127.671229][ T5841] loop0: detected capacity change from 0 to 256 [ 127.710801][ T5841] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.724108][ T1108] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 127.800384][ T2420] pvrusb2: Invalid write control endpoint [ 127.812114][ T5841] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.847668][ T1108] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 127.918679][ T1108] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 127.929405][ T5875] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 127.929405][ T5875] The task syz.3.609 (5875) triggered the difference, watch for misbehavior. [ 127.956215][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.969391][ T2420] pvrusb2: Invalid write control endpoint [ 127.983105][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 127.999726][ T5859] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 128.041357][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 128.058066][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 128.072121][ T2420] pvrusb2: Device being rendered inoperable [ 128.090680][ T23] usb 3-1: USB disconnect, device number 7 [ 128.101541][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 128.114754][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 128.139600][ T2420] pvrusb2: Attached sub-driver cx25840 [ 128.159290][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 128.179612][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 128.237437][ T5882] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 128.254992][ T5881] IPVS: stopping backup sync thread 5882 ... [ 128.328981][ T1108] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 128.415685][ T4203] usb 1-1: USB disconnect, device number 5 [ 128.431035][ T4203] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 128.509311][ T23] usb 5-1: USB disconnect, device number 7 [ 128.518286][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 128.523321][ T5886] loop1: detected capacity change from 0 to 256 [ 128.527075][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 128.542029][ T23] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 128.785864][ T5892] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.887965][ T5896] loop3: detected capacity change from 0 to 256 [ 128.955573][ T5898] loop2: detected capacity change from 0 to 128 [ 129.062020][ T5896] FAT-fs (loop3): Directory bread(block 64) failed [ 129.112638][ T5898] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.128658][ T5896] FAT-fs (loop3): Directory bread(block 65) failed [ 129.135354][ T5896] FAT-fs (loop3): Directory bread(block 66) failed [ 129.202230][ T5898] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.238354][ T5896] FAT-fs (loop3): Directory bread(block 67) failed [ 129.245072][ T5896] FAT-fs (loop3): Directory bread(block 68) failed [ 129.268450][ T5896] FAT-fs (loop3): Directory bread(block 69) failed [ 129.275181][ T5896] FAT-fs (loop3): Directory bread(block 70) failed [ 129.308345][ T5896] FAT-fs (loop3): Directory bread(block 71) failed [ 129.327437][ T5896] FAT-fs (loop3): Directory bread(block 72) failed [ 129.363756][ T5898] fscrypt (loop2, inode 12): Mutually exclusive encryption flags (0x0c) [ 129.375444][ T5896] FAT-fs (loop3): Directory bread(block 73) failed [ 129.556846][ T5890] loop1: detected capacity change from 0 to 32768 [ 129.634685][ T5890] XFS: ikeep mount option is deprecated. [ 129.776287][ T5890] XFS (loop1): Mounting V5 Filesystem [ 129.815061][ T5918] netlink: 56 bytes leftover after parsing attributes in process `syz.3.627'. [ 129.833852][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 129.838776][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 129.894490][ T5890] XFS (loop1): Ending clean mount [ 129.978620][ T5924] loop4: detected capacity change from 0 to 4096 [ 130.067968][ T5924] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 130.121588][ T5924] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 130.191699][ T4188] XFS (loop1): Unmounting Filesystem [ 130.195391][ T5924] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 130.297520][ T5924] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 130.380103][ T5924] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 130.488052][ T5924] ntfs: volume version 3.1. [ 130.551154][ T5924] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 130.582492][ T5904] loop0: detected capacity change from 0 to 40427 [ 130.625387][ T5924] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 130.659984][ T5924] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 130.675033][ T5904] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 130.707372][ T5934] loop3: detected capacity change from 0 to 4096 [ 130.714001][ T5904] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 130.745257][ T5904] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 130.765535][ T5904] F2FS-fs (loop0): invalid crc value [ 130.772649][ T5924] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 130.801587][ T5904] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 130.855565][ T5937] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.128526][ T5904] F2FS-fs (loop0): Start checkpoint disabled! [ 131.177044][ T5904] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.194358][ T5904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 131.342136][ T5904] attempt to access beyond end of device [ 131.342136][ T5904] loop0: rw=2049, want=45192, limit=40427 [ 131.434089][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.469518][ T155] attempt to access beyond end of device [ 131.469518][ T155] loop0: rw=2049, want=45200, limit=40427 [ 131.618342][ T21] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.858727][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.878477][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.888657][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 131.918488][ T23] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 131.937971][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.963012][ T23] usb 3-1: config 0 descriptor?? [ 132.038357][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.138558][ T21] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 132.146269][ T21] usb 4-1: can't read configurations, error -71 [ 132.250788][ T5959] loop1: detected capacity change from 0 to 32768 [ 132.251447][ T5969] loop0: detected capacity change from 0 to 128 [ 132.309729][ T5969] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.332894][ T5969] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.440537][ T5947] udc-core: couldn't find an available UDC or it's busy [ 132.495864][ T5947] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.585415][ T23] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 132.592144][ T4532] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.605831][ T5972] input: syz1 as /devices/virtual/input/input6 [ 132.656026][ T23] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 132.744062][ T5955] JBD2: Ignoring recovery information on journal [ 132.768730][ T23] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected [ 132.770510][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.780540][ T23] hid-steam 0003:28DE:1142.0007: No HID_FEATURE_REPORT submitted - nothing to read [ 132.783785][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.823730][ T23] usb 3-1: USB disconnect, device number 8 [ 132.853050][ T5976] set_capacity_and_notify: 1 callbacks suppressed [ 132.853068][ T5976] loop0: detected capacity change from 0 to 128 [ 132.898377][ T23] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected [ 132.949425][ T5977] fido_id[5977]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 133.006879][ T5955] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.327741][ T4192] ocfs2: Unmounting device (7,4) on (node local) [ 133.954172][ T5999] loop2: detected capacity change from 0 to 4096 [ 134.028430][ T5999] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 134.124752][ T5984] loop3: detected capacity change from 0 to 32768 [ 134.164604][ T6014] loop1: detected capacity change from 0 to 2048 [ 134.180298][ T6015] loop4: detected capacity change from 0 to 256 [ 134.229904][ T5984] JBD2: Ignoring recovery information on journal [ 134.241811][ T6014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.345461][ T5984] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 134.369159][ T6015] exfat: Deprecated parameter 'utf8' [ 134.374710][ T6015] exfat: Deprecated parameter 'namecase' [ 134.630189][ T6015] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 134.651707][ T6021] loop2: detected capacity change from 0 to 256 [ 134.707893][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 134.793822][ T6015] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 136) [ 135.053443][ T6032] loop2: detected capacity change from 0 to 1024 [ 135.102337][ T6032] EXT4-fs (loop2): Ignoring removed bh option [ 135.148450][ T5596] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 135.212929][ T6032] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,usrquota,bh,,errors=continue. Quota mode: writeback. [ 135.317223][ T6042] loop3: detected capacity change from 0 to 512 [ 135.328873][ T6042] EXT4-fs (loop3): Test dummy encryption mode enabled [ 135.334147][ T6032] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.336369][ T6042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.367508][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 135.367525][ T26] audit: type=1800 audit(1774956294.678:80): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.673" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 135.470276][ T6042] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.678: bad orphan inode 131083 [ 135.506000][ T6045] loop4: detected capacity change from 0 to 512 [ 135.534383][ T6042] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 135.538512][ T5596] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.576881][ T5596] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 135.598972][ T5596] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.612261][ T5596] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.619136][ T5596] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 135.628441][ T5596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.652977][ T6045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.663943][ T5596] usb 1-1: config 0 descriptor?? [ 135.688658][ T6028] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 135.816523][ T6045] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.675: invalid indirect mapped block 9 (level 0) [ 135.943730][ T6045] EXT4-fs (loop4): 1 truncate cleaned up [ 135.963801][ T6045] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none. [ 136.042230][ T6045] EXT4-fs (loop4): shut down requested (1) [ 136.149096][ T5596] hid (null): unknown global tag 0xe [ 136.155228][ T5596] hid (null): unknown global tag 0xe [ 136.162762][ T6056] loop2: detected capacity change from 0 to 8192 [ 136.172194][ T5596] uclogic 0003:5543:0004.0009: unknown global tag 0xe [ 136.194925][ T5596] uclogic 0003:5543:0004.0009: item 0 1 1 14 parsing failed [ 136.228925][ T5596] uclogic 0003:5543:0004.0009: parse failed [ 136.235989][ T5596] uclogic: probe of 0003:5543:0004.0009 failed with error -22 [ 136.293277][ T6056] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 136.336949][ T6056] REISERFS (device loop2): using ordered data mode [ 136.418466][ T6056] reiserfs: using flush barriers [ 136.430492][ T6056] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.460414][ T6056] REISERFS (device loop2): checking transaction log (loop2) [ 136.557039][ T6038] XFS (loop1): Mounting V5 Filesystem [ 136.557679][ T4230] usb 1-1: USB disconnect, device number 6 [ 136.659774][ T6056] REISERFS (device loop2): Using tea hash to sort names [ 136.668551][ T6056] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 136.752822][ T6038] XFS (loop1): Ending clean mount [ 136.837496][ T6038] XFS (loop1): Quotacheck needed: Please wait. [ 136.932964][ T6038] XFS (loop1): Quotacheck: Done. [ 137.078982][ T4188] XFS (loop1): Unmounting Filesystem [ 137.383219][ T6060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.685 (6060) [ 137.471197][ T6060] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 137.488671][ T6060] BTRFS info (device loop3): using free space tree [ 137.505071][ T6060] BTRFS info (device loop3): has skinny extents [ 137.787652][ T6103] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 137.813225][ T6107] hfsplus: b-tree write err: -5, ino 22 [ 137.832175][ T6060] BTRFS info (device loop3): enabling ssd optimizations [ 137.903219][ T6084] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 138.000638][ T6084] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 138.100122][ T4188] sysv_free_block: trying to free block not in datazone [ 138.148837][ T4188] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 138.261892][ T4452] hfsplus: b-tree write err: -5, ino 25 [ 138.276949][ T4452] hfsplus: b-tree write err: -5, ino 4 [ 138.320252][ T4452] hfsplus: b-tree write err: -5, ino 2 [ 138.326903][ T4452] hfsplus: b-tree write err: -5, ino 23 [ 138.375650][ T4452] hfsplus: b-tree write err: -5, ino 22 [ 139.464873][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.711'. [ 139.603917][ T6130] set_capacity_and_notify: 4 callbacks suppressed [ 139.603934][ T6130] loop2: detected capacity change from 0 to 32768 [ 139.633427][ T6152] loop3: detected capacity change from 0 to 128 [ 139.722085][ T6152] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.827398][ T6130] JBD2: Ignoring recovery information on journal [ 139.882624][ T6152] hpfs: filesystem error: improperly stopped [ 139.913752][ T6152] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.948293][ T6152] hpfs: You really don't want any checks? You are crazy... [ 139.976772][ T6152] hpfs: hpfs_map_sector(): read error [ 139.983685][ T6130] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.995075][ T6152] hpfs: code page support is disabled [ 140.007109][ T6127] loop1: detected capacity change from 0 to 40427 [ 140.016988][ T145] (kworker/u4:2,145,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 140.026749][ T6152] hpfs: hpfs_map_4sectors(): unaligned read [ 140.084352][ T6152] hpfs: hpfs_map_4sectors(): unaligned read [ 140.100910][ T6152] hpfs: filesystem error: unable to find root dir [ 140.183763][ T6127] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.276043][ T6130] (syz.2.700,6130,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 140.341052][ T6127] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.394178][ T6130] (syz.2.700,6130,0):ocfs2_orphan_del:2379 ERROR: status = -117 [ 140.418414][ T6130] (syz.2.700,6130,0):ocfs2_orphan_del:2401 ERROR: status = -117 [ 140.435080][ T6130] (syz.2.700,6130,0):ocfs2_remove_inode:676 ERROR: status = -117 [ 140.464621][ T6130] (syz.2.700,6130,0):ocfs2_wipe_inode:821 ERROR: status = -117 [ 140.505664][ T26] audit: type=1804 audit(1774956299.818:81): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.703" name="/newroot/137/file0/file0" dev="loop1" ino=10 res=1 errno=0 [ 140.533284][ T6130] (syz.2.700,6130,1):ocfs2_delete_inode:1082 ERROR: status = -117 [ 140.625271][ T4188] attempt to access beyond end of device [ 140.625271][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 140.642675][ T4191] ocfs2: Unmounting device (7,2) on (node local) [ 140.978481][ T4695] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.228405][ T4695] usb 1-1: Using ep0 maxpacket: 32 [ 141.348382][ T4695] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.376186][ T4695] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.419260][ T6200] loop1: detected capacity change from 0 to 1024 [ 141.474321][ T21] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 141.497869][ T6202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.728'. [ 141.519435][ T4695] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 141.544107][ T6200] EXT4-fs (loop1): Invalid default hash set in the superblock [ 141.547943][ T6202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.728'. [ 141.555807][ T4695] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 141.602789][ T4695] usb 1-1: Product: syz [ 141.607002][ T4695] usb 1-1: Manufacturer: syz [ 141.659994][ T4695] hub 1-1:4.0: USB hub found [ 141.744138][ T6207] loop1: detected capacity change from 0 to 1024 [ 141.751001][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 141.828106][ T6205] loop4: detected capacity change from 0 to 8192 [ 141.868370][ T4695] hub 1-1:4.0: 3 ports detected [ 141.878529][ T6205] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.890044][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.906098][ T6207] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,jqfmt=vfsv0,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 141.923963][ T6207] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.942157][ T26] audit: type=1800 audit(1774956301.258:82): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.729" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 142.078549][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 142.091735][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.128338][ T4695] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 142.134750][ T4695] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 142.135406][ T21] usb 4-1: Product: syz [ 142.187490][ T21] usb 4-1: Manufacturer: syz [ 142.219167][ T4695] usb 1-1: USB disconnect, device number 7 [ 142.224692][ T21] usb 4-1: SerialNumber: syz [ 142.257675][ T21] usb 4-1: config 0 descriptor?? [ 142.320366][ T21] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 142.368224][ T21] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 142.958464][ T21] em28xx 4-1:0.0: chip ID is em2874 [ 143.328496][ T21] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 143.354978][ T21] em28xx 4-1:0.0: board has no eeprom [ 143.455666][ T6230] loop2: detected capacity change from 0 to 32768 [ 143.500551][ T6260] loop0: detected capacity change from 0 to 256 [ 143.533826][ T6261] loop4: detected capacity change from 0 to 2048 [ 143.537496][ T21] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 143.572783][ T21] em28xx 4-1:0.0: dvb set to bulk mode. [ 143.597107][ T6230] read_mapping_page failed! [ 143.605634][ T21] usb 4-1: USB disconnect, device number 9 [ 143.629506][ T6260] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 143.648613][ T6230] ERROR: (device loop2): txCommit: [ 143.648613][ T6230] [ 143.652775][ T21] em28xx 4-1:0.0: Disconnecting em28xx [ 143.727172][ T4230] em28xx 4-1:0.0: Binding DVB extension [ 143.731599][ T6230] ERROR: (device loop2): remounting filesystem as read-only [ 143.818730][ T6264] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.935730][ T4230] em28xx 4-1:0.0: Registering input extension [ 143.961237][ T6261] NILFS (loop4): failed to count free inodes: err=-34 [ 144.051707][ T276] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0) [ 144.085009][ T276] ------------[ cut here ]------------ [ 144.135513][ T276] kernel BUG at fs/jfs/jfs_txnmgr.c:932! [ 144.153442][ T276] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 144.159567][ T276] CPU: 0 PID: 276 Comm: jfsCommit Not tainted syzkaller #0 [ 144.166879][ T276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.177230][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 144.182211][ T276] Code: 4f b4 de 06 0f 0b e8 88 13 a6 fe 48 c7 c7 40 6c 62 8a 48 c7 c6 39 68 62 8a ba a4 03 00 00 48 c7 c1 00 77 62 8a e8 29 b4 de 06 <0f> 0b e8 62 13 a6 fe 48 c7 c7 40 6c 62 8a 48 c7 c6 39 68 62 8a ba [ 144.201920][ T276] RSP: 0018:ffffc9000265fd28 EFLAGS: 00010246 [ 144.208112][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 14425b3810a26c00 [ 144.210369][ T4230] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 144.216098][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 144.216115][ T276] RBP: ffffc90002882048 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 144.216129][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888056a180f8 [ 144.235788][ T4230] Registered IR keymap rc-empty [ 144.238708][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002661110 [ 144.238727][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 144.238744][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.238758][ T276] CR2: 0000001b32421ff8 CR3: 000000007d586000 CR4: 00000000003506f0 [ 144.270757][ T4230] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 144.275467][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.275483][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.275497][ T276] Call Trace: [ 144.275503][ T276] [ 144.309690][ T4230] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 144.312750][ T276] ? preempt_schedule_thunk+0x16/0x18 [ 144.330308][ T4230] em28xx 4-1:0.0: Input extension successfully initialized [ 144.331778][ T276] jfs_lazycommit+0x581/0xb40 [ 144.331806][ T276] ? txFreelock+0x5a0/0x5a0 [ 144.348166][ T276] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 144.354104][ T276] ? sched_dynamic_update+0x210/0x210 [ 144.355581][ T21] em28xx 4-1:0.0: Closing input extension [ 144.359591][ T276] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 144.359619][ T276] ? __kthread_parkme+0x157/0x1b0 [ 144.359640][ T276] kthread+0x436/0x520 [ 144.359657][ T276] ? txFreelock+0x5a0/0x5a0 [ 144.359672][ T276] ? kthread_blkcg+0xd0/0xd0 [ 144.359691][ T276] ret_from_fork+0x1f/0x30 [ 144.359715][ T276] [ 144.359722][ T276] Modules linked in: [ 144.381882][ T276] ---[ end trace f5acb6cc67081d2d ]--- [ 144.412142][ T4192] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 144.421085][ T276] RIP: 0010:txUnlock+0xc87/0xcb0 [ 144.421791][ T6257] loop1: detected capacity change from 0 to 40427 [ 144.426049][ T276] Code: 4f b4 de 06 0f 0b e8 88 13 a6 fe 48 c7 c7 40 6c 62 8a 48 c7 c6 39 68 62 8a ba a4 03 00 00 48 c7 c1 00 77 62 8a e8 29 b4 de 06 <0f> 0b e8 62 13 a6 fe 48 c7 c7 40 6c 62 8a 48 c7 c6 39 68 62 8a ba [ 144.426071][ T276] RSP: 0018:ffffc9000265fd28 EFLAGS: 00010246 [ 144.426091][ T276] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 14425b3810a26c00 [ 144.463071][ T6257] F2FS-fs (loop1): invalid crc value [ 144.468957][ T4192] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16) [ 144.482501][ T276] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 144.486936][ T21] em28xx 4-1:0.0: Freeing device [ 144.490994][ T276] RBP: ffffc90002882048 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 144.503995][ T4192] Remounting filesystem read-only [ 144.509362][ T4192] NILFS (loop4): error -5 truncating bmap (ino=16) [ 144.517910][ T276] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff888056a180f8 [ 144.529510][ T276] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002661110 [ 144.537732][ T276] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 144.548550][ T276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.552865][ T6257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.555656][ T4192] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 144.571513][ T276] CR2: 0000555566aeaaa8 CR3: 00000000629e2000 CR4: 00000000003506f0 [ 144.581108][ T276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.590732][ T276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.601913][ T276] Kernel panic - not syncing: Fatal exception [ 144.608085][ T276] Kernel Offset: disabled [ 144.612471][ T276] Rebooting in 86400 seconds..