last executing test programs: 2m4.143677004s ago: executing program 3 (id=604): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x13a03}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @loopback}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) 2m3.649032431s ago: executing program 3 (id=613): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0x6) 2m3.438951343s ago: executing program 3 (id=618): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x9, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}, @generic='c']}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2m3.316113559s ago: executing program 3 (id=622): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x1545, &(0x7f0000001a00)="$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") mount(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x11, 0x0) 2m2.302335689s ago: executing program 3 (id=626): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) ioctl$SIOCAX25GETINFOOLD(r0, 0x8915, 0x0) 1m59.215733892s ago: executing program 3 (id=663): syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000000000000000000aa89010000000000003100c204"], 0x0) 1m58.87195552s ago: executing program 32 (id=663): syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b8192300100000fe8000000000000000000000000000aafe8000000000000000000000000000aa89010000000000003100c204"], 0x0) 1m4.424242067s ago: executing program 4 (id=1016): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000440)=@multiplanar_overlay={0x80000000, 0x8, 0x4, 0x4000, 0x8, {0x77359400}, {0x0, 0x8, 0x6, 0xef, 0x2, 0xd3, "af8f703a"}, 0x4, 0x3, {0x0}, 0x2}) 1m4.138939624s ago: executing program 4 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x80}}, 0x0) 1m3.895480491s ago: executing program 4 (id=1025): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20100) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) 1m3.694686265s ago: executing program 4 (id=1027): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$eJzs3c1vHGcdB/Df7JtfSlOrh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSAgL11EFjP48znq69dt3dWXs+H8mZ+e0z430m35198czsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHP75QRMT1X6UbViI+F/2IXsRSVa9GxNLqSl5+EBHPx1ZzPBcRw4WIav2tf56JeC0iPjwV8ejx/bXq5osH7Mf3//yPP/zkqR/9/U/Dc//7y93+63std+/eb//71wdH22YAAADomrIsyyJ9zD+dPt/32u4UADAT+fW/TPLt6rmrN+asP2q1Wq0+hnVdOd6DehERG/V1qvcMDscDwDGzER+13QVaJP9OG0TEU213AphrRdsdYCoePb6/VqR8i/rrwep2ez4XZFf+G8XO9R17TSdpnmMyq8fXZvTj2T36szSjPsyTnH+vmf/17fZRWm7a+c/KXvmPti996pycf7+Zf8PJyb83Nv+uyvkPDpV/X/4AAAAAADDH8t//V1o+/rtw9E05kP2O/67OqA8AAAAAAAAA8Fk76vh/O4z/BwAAAHOr+qxe+d2pJ7ft9V1s1e3XioinG8sDHZMullluux8AAAAAAAAAAAAA0CWD7XN4rxURw4h4enm5LMvqp65ZH9ZR1z/uur790GVtP8kDAMC2D081ruUvIhYj4lr6rr/h8vJyWS4uLZfL5dJCfj87Wlgsl2qfa/O0um1hdIA3xINRWf2yxdp6dZM+L09qb/6+6r5GZf8AHZuNFgMHgIjYfjV65BXphCnLZ6LtdzkcD/b/k8f+z0G0/TgFAAAApq8sy7JIX+d9Oh3z77XdKQBgJvLrf/O4gFqtVqvV6pNX15XjPagXEbFRX6d6z2A4fgA4Zjbio7a7QIvk32mDiHi+7U4Ac61ouwNMxaPH99eKlG9Rfz1I47vnc0F25b9RbK2X1x83naR5jsmsHl+b0Y9n9+jPczPqwzzJ+fea+V/fbh+l5aad/6zslX+1nSst9KdtOf9+M/+Gk5N/b2z+XZXzHxwq/778AQAAAABgjuW//6/M1fHf0afdnIn2O/67OrV7BQAAAAAAAIDpevT4/lq+7jUf///CmOVc/3ky5fwL+XdSzr/XyP+rjeX6tfmHbz7J/9+P76/98e6/Pp+nB81/Ic8U6ZFVpEdEke6pGKTpUbbukzaH/VF1T8Oi1x+kc37K4dtxM27FepzftWwv/X88ab+wq73q6XCrvexvt1/c1T7Yac/rX9rVPkxnOpVLuf1srMXP41a8tdVetS1M2P7FCe3lhPacfz/+s9Nn+3935PwHtZ8q/+XUXjSmlYcf9D6x39en4+7n6s0v/ub89Ddnos3o72xbXbV9L7bQn63/k6dG8cs767fP3rtx9+7tC5Emu269GGnyGcv5D9PPzvP/S9vt+Xm/vr8+/GB06PznxWYM9sz/pdp8tb0vz7hvbcj5j9JPzv+t1D5+/z+W+VcP7333/1dm3ycAAAAAAAAAAAAAAADYV1mWW5eIXo2Iy+n6n7auzQQAZutq+sqNMsm3z6ruz/j+1OpjXhdz1p+Z1h+X89Uftfo41nXleG/Ui4j4W32dyxHx63G/DACYZx9HxD/b7gStkX+H5e/7q6Zn2u4MMFN33nv/pzdu3Vq/faftngAAAAAAAAAAn1Ye/3O1Nv73mbIsHzSW2zX+65uxetTxPwd5ZmeA0T0Gqu4ffpv2s9kb9Xu14cZfiL3G/x7uzO03/vegeQeNL08YTujPaEL7woT2xQntYy/0qMn5v1Ab7/xMRJxuDL9+AsZ/3bLf+K/NMe+7IOf/Yu3xXOX/lcZy9fzL3x/n/Hu78j93991fnLvz3vuv3nz3xjvr76z/7NKFC+cvXb585cqVc2/fvLV+fvvfFns8XTn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X061/Lsl5/+1VMu/W3L+r6Ra/t2S8/96quXfLTn/V1Mt/27J+Z9Ntfy7Jed/LtUHzH9p2v1iNnL++QiX/b9bcv75zAb5d0vO/2Kq5d8tOf9LqZZ/t+T8X0u1/Lsl5/+NVMu/W3L+l1Mt/27J+X8z1fLvlpz/lVTLv1ty/t9Ktfy7Jef/7VQfKv+V6fWL2cj5v55q+3+35Py/k2r5d0vO/7upln+35Py/l2r5d0vO/41Uy79bnnz/vxkzZszkmbafmQAAAAAAAAAAAACAplmcTtz2NgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4tRq67vgP42avXzs1ASJ3UwNoxxjib7PoSX2hdTICQJlyaGyUtje16186Cb/HaJUkj2VGgRMKoUUXb8NAWUNTmpcKq8kCrgPKAWlWqRNoH+oKoUHmIqoASpEptFbLVnPn//zszOzuz6x2vZ875fKT45505M+fMmTNn97vOdwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGpt+PDUl/uyLKv8l/+xNsuurvx99eja/LIPXOktBAAAAJbrl/mfr1+XLti/iBvVLPNP7/7Bi7Ozs7PZZwb+dOhrs7PpitEsG1qVZfl10cWfPNRXu0zwdDbS11/zdX+b1Q+0uX6wzfVDba4fbnP9qjbXjzS5bHXN3+ftgCZL96U725T/dW11l2bXZ0P5dZua3OrpvlX9/fF3Obm+/DazQ0ey6exYNpVN1C1fXbYvX/6lDZV13ZXFdfXXrGt95Qh548nDcRv6wj7eVLeuufuMfvahbPQXbzx5+K/PvHZjs9l2N9TdX3U7t2ysbOcXwyXVbe3LVqV9Erezv2Y71zd5TgbqtrMvv13l743b+foit3NgbjNXVONzPpL1539/Jd9Pg7W/1kv7aX247H9uzrLs/NxmNy4zb11Zf7am7pL+uednpHpEVu6jcii9PRtc0nG6YRHHaWVObqo/ThtfE/H53xBuN7jANtQ+TT97arjmeX9z9lKO06jyqBd6rTQeg51+rXTLMRiPi1fyB/1M02NwU3j8T25e+Bhseuw0OQbT4645Bje2Owb7hwfybU5PQl9+m7ljcFvd8gP5mvry+erm1sfg+Jnjp8ZnHn/i1unjh45OHZ06sWPbtokdu3bt2bNn/Mj0samJ6p+XuLe735qsP70GNoZ9F18D72tYtvZQnf3m8Lzz76W+DkdavA7XNizb6dfhYOOD61uZF+T8Y7r62nigstNHLvRnC7zG8udn6/Jfh+lx17wOB2teh02/pzR5HQ4u4nVYWebU1sX9zDJY81+zbVj4e8HyjsG1Ncdg488jjcdgp38e6ZZjcCQcFz/auvD3gvVhe58ZW+rPIwPzjsH0cMO5p3JJ+nl/ZE8+mh2XN1WuuGo4Ozszdfq2xw6dOXN6WxbGinhHzbHSeLyuqXlM2bzjtX/Jx+v+6Xc/c1OTy9eGfTVya+WPkQWfq8oyO29r/Vzl392a78+6S7dnYXTYSu/PZt/NK/tzOMu+/v2n7vvuk1//8IL7s5I3vzi+/J/FUy6tOf8OLXD+jbn/rer60l09PTA0WH39DqS9M1R3Pq5/qgbzc1dfvu7Xxxd3Ph4K/630+fj6FufjdQ3Ldvp8PNT44OL5uK/dbzuWp/H5HAnHybGJ1ufjyjLrti/1mBxseT6+Ocy+sP/fH5JCykU1x85Cx21a1+DgUHhcg3EN9cfpjrrlh0I2q6zrhe2Xdpxuubl6XwPp0c1ZqeN0tGHZTh+n6XdfCx2nfe1++3ZpGp/PkXBcXL+j9XFaWeblncs/d6bfz9WcO4fbHYNDA8OVbR5KB2F+vs9mV8dj8LbscHYyO5ZN5tcO58dTX76usdsXdwwOh/9W+ly5rsUxuKVh2U4fg+n72ELHXt/g/AffAY3P50g4Lp67vfUxWFnmI7s7+7PrlnBJWqbmZ9fG368t9Duvmxp20+U6VgbDdn5/d+vfzVaWObZnqTmz9X66JVxyVZP91Pj6Xeg1NZmtzH5aF7bztT0L76fK9lSW+dreRR5P+7MsO/foHfnve8O/r/zd2R++WPfvLs3+Tefco3f8/Joj/7iU7Qeg971VHWuq3+tq/mVqMf/+DwAAAPSEmPv7w0zkfwAAACiMmPvj/xWeyP8AAABQGDH3D4aZlCT/r/vIa9NvnctSM382iNen3XB3dbnYcZ0IX4/OzqlcfsfzU//9D+cWt+7+LMvevPsPmy6/7u64XVWjYTsvfrT+8nlevHVR6z744Lm03tr++jfC/cfHs9jDoFkFdyLLspeu+2q+ntGHLuTz5bsP5vO+8888XVnm9b3Vr+PtX31Hdfm/COXf/UcO1d3+1bAffhrmxD3N90e83bcvvH/97k/PrS/erm/jtfnDfu7h6v3G98l59unq8nE/L7T93/3KC9+uLP/Ye5tv/7n+5tv/Qrjf58P833dVl699Dipfx9t9KWx/XF+83W3f+l7T7b/45eryp+6sLncwzLj+LeHrTXe+Nl27vx7rO1T3uLKPVZeL65/44R/n18f7i/ffuP0jBy7U7Y/G4+Plf6vez3jD8vHyuJ7o7xvWX7mf2uMzrv+FPzpYt5/brf/ifa++q3K/jeu/pWG5U49uzdc/d3/179j0l1/6atP1xe3Z/7en6h7P/nvD6zis/7mHw/EYrv+/i9X7a3x3hYP31p9/4vLfWHuu7vFEd/2iuv6LHzyaz1Ujq9dcdfU1155/T2XfZdkrq6r31279R//qZN32f/OG6v6I18eOfuP6FxLXf/oLYydOzpydnkx79cnr8vfO+Xh1e+L2XhfOrY1fHzh55pGp06MToxNZNlrct9C7ZN8K8+fVcb710rPzzqBbHwzP501//tKazf/6lXj5vz9QvfzCPdXvW+8Lyz0bLl8bnr+lrX++5zbckL+++14OWzg7//2Cl2P9pv/as6gFw+Nv/LkgHu+n3vlIvh8q1+XfN+Lrepnb/+PJ6v18J+zX2fDOzBtvmFtf7fLxvREu3F99vS97/4XTXHxe/yY835/4afX+43bFx/vj8HPM99bVn+/i8fGdc/2N95+/i8f5cD7Jzlevj0vF/X3h9Ruabl58H5Ls/I3513+S7ufGJT3Mhcw8PjN+bPrE2cfGz0zNnBmfefyJA8dPnj1x5kD+Xp4HPtfu9nPnpzX5+WlyatfOLD9bnayOy+xKb/+pBw9P7p7YPDl15NDZI2cePDV1+ujhmZnDU5Mzmw8dOTL1hXa3n57ct2373h27t48dnZ7ct2fv3h17x6ZPnKxsRnWj2tg18fmxE6cP5DeZ2bdz77bbb985MXb85OTUvt0TE2Nn290+/940Vrn1H4ydnjp26Mz08amxmeknpvZt27tr1/a27wZ4/NSRmdHx02dPjJ+dmTo9Xn0so2fyiyvf+9rdnmKa+Y/qz7ON+qpvxJd96pZd6f1ZK55/asG7qi7S8Aair4X3ovnnt53as5ivY+4fCjMpSf4HAACAMoi5fzjMRP4HAACAwoi5f1WYifwPAAAAhRFz/0iYSUnyf+H6/+vOLWr9+v/6/7X7S/+/ZP3/+7ut/189X+j/d8Zy+/f6/4H+v/6//r/+v/4/HdBt/f+Y+1dn2dLyf3+b6wEAAICuEXP/mjCTkvz7PwAAAJRBzP1XhZnI/wAAAFAYMfdfHWZSkvyv/6//r/+v/6//33z9+v+9Sf+/Nf3/NvT/x7Ny9f/Pd3L79f/1/5mv2/r/MfdfE2ZSkvwPAAAAZRBz/7VhJvI/AAAAFEbM/deFmcj/AAAA0JtWz78o5v61YSYlyf/6//r/+v/6//r/zdev/9+b9P9b0/9vQ//f5//r/+v/01Hd1v+Puf9tYSYlyf8AAABQBjH3vz3MRP4HAACA7jN4aTeLuf8dYSbz8v8lrgAAAAC44mLuvz5rKIKX5N//9f/1//X/9f/1/5uvf/H9/4FM/7976P+3pv/fhv6//r/+v/4/HdVt/f8892cj2TvDTEqS/wEAAKAMYu6/IcxE/gcAAIDuNrL4RWPu/5XGG8r/AAAAUBgx968LMylJ/tf/1//X/9f/1/9vvn6f/9+b9P9b0/9vo9v6/w1HkP5/d2+//r/+P/N1W/8/5v4bw0xKkv8BAACgDGLuvynMRP4HAACAwoi5/1fDTOR/AAAAKIyY+9eHmZQk/+v/d3n/P/b+9P/1//X/9f/1/xdF/781/f82uq3/30D/v7u3X/9f/5/5uq3/H3P/u8JMSpL/AQAAoAxi7n93mIn8DwAAAIURc/97wkzkfwAAACiMmPtHw0xKkv/1/7u8/+/z//X/9f/1//X/l0T/vzX9/zb0//X/9f/1/+mobuv/x9y/IcykJPkfAAAAyiDm/o1hJvI/AAAAFEbM/TeHmcj/AAAAUBgx928KMylJ/tf/1//X/9f/1/9vvn79/96k/9/aYvr/+TlN/1//X/9f/1//nw7otv5/zP3vDTMpSf4HAACAMoi5f3OYifwPAAAAhRFz//vCTOR/AAAAKIyY+7eEmZQk/+v/6/+Xtf+/qmad+v/6/83Wr//fm/T/W/P5/23o/+v/6//r/9NR3db/j7n//WEmJcn/AAAAUAYx928NM5H/AQAAoDBi7r8lzET+BwAAgMKIuX8szKQk+f/K9P/fyP/U/9f/9/n/+v/6//r/nVaG/v9nl3qnNfT/29D/1//X/9f/p6O6rf8fc/+tYSYlyf8AAABQBjH33xZmIv8DAABAYcTcPx5mIv8DAABAYcTcPxFmUpL87/P/9f/1//X/l9T/f8/c/er/V+n/d5cy9P+XQ/+/Df1//f8r3v8f0v+nULqt/x9z/7Ywk5LkfwAAACiDmPu3h5nI/wAAAFAYMffvCDOR/wEAAKAwYu7fGWZSkvyv/6//r/+v/+/z/5uvX/+/N+n/t9b5/n98iPr/+v/6/z7/X/+f+bqt/x9z/+1hJiXJ/wAAAFAGMffvCjOR/wEAAKAwYu7fHWYi/wMAAEBhxNy/J8ykJPlf/78D/f/B5hfr/+v/R/r/4XjQ/9f/XwH6/635/P829P/1//X/9f/pqG7r/8fcvzfMpCT5HwAAAMog5v4PhJnI/wAAAFAYMff/WpiJ/A8AAACFEXP/r4eZlCT/6//7/H/9f/1//f/m69f/7036/63p/7eh/6//r/+v/09HdVv/P+b+fWEmJcn/AAAAUAYx9/9GmIn8DwAAAIURc/8Hw0zkfwAAACiMmPv3h5mUJP/r/+v/6//r/+v/N1+//n9v0v9vTf+/Df1//X/9f/1/Oqrb+v8x938ozKQk+R8AAADKIOb+O8JM5H8AAAAojJj7PxxmIv8DAABAYcTc/5Ewk5Lkf/1//X/9f/1//f/m69f/7036/63p/7eh/6//r/+v/09HdVv/P+b+j4aZlCT/AwAAQBnE3H9nmIn8DwAAAIURc//HwkzkfwAAACiMmPvvCjMpSf7X/9f/1//X/9f/b75+/f/epP/fmv5/G/r/Bev/j16j/6//z+XSLAHNd2n9/6vfXHCFy+z/x9z/m2EmJcn/AAAAUAYx998dZiL/AwAAQGHE3H9PmIn8DwAAAIURc//Hw0xKkv/1//X/9f/1//X/m69f/7836f+31mP9/19eGy7X/6/S/+/u7e/K/v9PFur/z65qvL3+P5fDpfX/m+pI/z/m/k+EmZQk/wMAAEAZxNz/yTAT+R8AAAAKI+b+T4WZyP8AAABQGDH3/1aYSUnyv/5/ZTvm2sv6//r/+QX6//r/+v89S/+/tR7r//v8/wb6/929/V3Z//f5/1xh3db/j7n/3jCTkuR/AAAAKIOY++8LM5H/AQAAoDBi7r8/zET+BwAAgMKIuf+BMJOS5H/9f5//r/+v/6//33z9+v+9Sf+/Nf3/NvT/9f+7rf//n/r/9LZu6//H3P9gmElJ8j8AAACUQcz9nw4zkf8BAACgMGLu/+0wE/kfAAAACiPm/s+EmZQk/+v/90r/f3RF+v+Z/r/+v/6//n+P0/9vTf+/Df1//f9u6//7/H96XLf1/2PufyjMZPH5f2TRSwIAAABXRMz9vxNmUpJ//wcAAIAyiLn/d8NM5H8AAAAojJj7PxtmUpL8f3n6/83a8PPp//v8f/1//X/9f/3/Tlu5/n888+j/6//r/0f6/4vr/882fqML9P8pom7r/8fc/3thJiXJ/wAAAFAGMfc/HGYi/wMAAEBPWMz/hR5z/4EwE/kfAAAACiPm/oNhJiXJ/z7/X/9f/79L+/9/tvFffvSDTx7cdmX6//nU/9f/70WXtf8fTzbx8/8rL36f/6//r/+f6P/7/H/9fxp1W/8/5v5DYSYlyf8AAABQBjH3/36YifwPAAAAhRFz/+EwE/kfAAAACiPm/skwk5Lkf/1//X/9/y7t//fw5//H/aH/X69j/f940tX/b2rlPv+/+vWz+v+X2P8fbnqp/r/+fy9vv/6//j/zXZb+/+yqdOFS+/8x90+FmZQk/wMAAEAZhNzff6Q6566Q/wEAAKAwYu4/GmYi/wMAAEBhxNz/SJhJSfK//r/+v/6//n+n+/8+/785n/+/MvT/W+ue/n9z+v/6/1dq+4fC1P/X/6ezuu3z/2Punw4zKUn+BwAAgDKIuf9zYSbyPwAAABRGzP2fDzOR/wEAAKAwYu4/FmZSkvyv/6//r/+v/6//33z9+v+9Sf+/Nf3/NvT/S9v/78T26//r/zNft/X/Y+4/HmZSkvwPAAAAZRBz//+zdx/PltdlHsdP9zQ13cUfMIvZUDXL2c+Gxcx65g+YhRs3VlmWBSrmRGOOmHPAnDGAIiZUFAOYUMxizoIBM2q1Jf08T9++99zfud2ee+/vfJ/Xa/PMtNOeo0MBH7rf9b0kbrH/AQAAYBi5+y+NW+x/AAAAGEbu/gfELU32v/5f/z9s///f+v/dPl//r/8fmf5/2uH2/7tHnUn/r//f5O+v/9f/s9Pc+v/c/Q+MW5rsfwAAAOggd/+D4hb7HwAAAIaRu/+yuMX+BwAAgGHk7n9w3NJk/2/r/48sevb/mfHq//ez/z/q/X/9v/5f/7//Drb/v+Iff+bT/3v/X/8f9P/6f/0/282t/8/d/5C4pcn+BwAAgA5y9z80brH/AQAAYBi5+x8Wt9j/AAAAMIzc/Q+PW5rsf+//e/9/2Pf/9f+7fr7+X/8/Mu//T+vU/19224WX3HXdv19/Lp+v/+/Q/9+0b99f/6//Z6e59f+5+x8RtzTZ/wAAANBB7v5Hxi32PwAAAAwjd/+j4hb7HwAAAIaRu//RcUuT/a//1//r//X/+v/ln6//30z6/2md+v/z+Xz9f4f+f/++v/5f/89Oc+v/c/c/Jm5psv8BAACgg9z9j41b7H8AAAAYRu7+y+MW+x8AAACGkbv/ZNzSZP/r//e///+b/l//H1f/r//X/+8//f80/f8K+n/9v/5f/89aza3/z91/RdzSZP8DAABAB7n7Hxe32P8AAAAwjNz9j49b7H8AAAAYRu7+J8QtTfa//t/7//p//b/+f/nn6/83k/5/2sH3/8v+Crk7/f/G9/8X6P/1//p/tjrH/v/uiT9tr6X/z93/xLilyf4HAACADnL3Pylusf8BAABgGLn7nxy32P8AAAAwjNz9T4lbmux//b/+f0/9f/z/+HL9v/5/C/3/afr/edH/T5vN+/9Hji39Yf3/xvf/3v/X/+v/Ocvc3v/P3f/UuCWG36X/dV7/MQEAAIAZyd3/tLilya//AwAAQAe5+58et9j/AAAAMIzc/c+IW5rsf/2//t/7//p//f/yz5/q/6/f8v30//Oi/582m/5/F/p//f8mf3/9v/6fnebW/+fuf2bc0mT/AwAAQAe5+6+MW+x/AAAAGEbu/mfFLfY/AAAADCN3/7Pjlib7f3n/f+Zf1//vjf7/7O+v/1/+x8e6+v/8d9T/T/b//+P9/570/9P0/yvo//X/+v/d+v8Tq36+/p9l5tb/5+5/TtzSZP8DAABAB7n7nxu32P8AAAAwjNz9z4tb7H8AAAAYRu7+58ctTfa/9//1//r/zev/vf9/2mG+/7848P7/mP5/j/T/0/T/K+j/9f/6f+//s1Zz6/9z978gbmmy/wEAAKCD3P0vjFvsfwAAANgMW3/vwPbfUBpy978obrH/AQAAYBi5+18ctzTZ//p//b/+X//fu/8/viH9v/f/90r/P03/v8Lh9v9HBu3/jw3W/1+128+fQ/9/uf6fmTmr/7/hzI8fVv+fu/8lcUuT/Q8AAAAd5O5/adxi/wMAAMAwcve/LG6x/wEAAGAYuftfHrc02f/73v+f2P2z9f/6f/2//v/w+/9Nef9f/79X+v9p+v8VvP/v/X/v/+v/Wauz+v8tDqv/z93/irj1jwCa7H8AAADoIHf/K+MW+x8AAACGkbv/qrjF/gcAAIBh5O5/VdzSZP97/1//r//X/+v/l3++/n8z6f+n6f9X0P/r//X/+n/Wam79f+7+V8ctTfY/AAAAdJC7/zVxi/0PAAAAw8jd/9q4xf4HAACAYeTuf13c0mT/6//3t//PH9f/6/8X+n/9v/7/QLTt/48s+yvRTrv0/7fc9+T/nf0j+n/9v/5f/6//Zw1m0f+fOvN3l7n7Xx+3NNn/AAAA0EHu/jfELfY/AAAADCN3/xvjFvsfAAAAhpG7/01xyz37f3uFunmOr/jX9f/e/9f/6//1/8s/X/+/mdr2/3vk/f8V9P/6f/2//p+1mkX/v+V/z93/5rjFr/8DAADAMHL3vyVusf8BAABgGLn73xq32P8AAAAwjNz9b4tbmux//b/+X/+v/9f/L/98/f9m0v9P0/+voP/X/6+l/79//Ij+X//P3Pr/3P1Xxy1N9j8AAAB0kLv/7XGL/Q8AAADDyN3/jrjF/gcAAIBh5O5/Z9zSZP/r//X/+n/9v/5/+efr/zeT/n+a/n+xWFwz8QWW9f+n/lX/r//3/r/+n/M0t/4/d/+74pYm+x8AAAA6yN1/Tdxi/wMAAMAwcvdfG7fY/wAAADCM3P3vjlua7H/9v/5f/6//b9T/H9H/j0//P03/v4L3//X/+n/9P2s1t/4/d/974pYm+x8AAAA6yN1/Xdxi/wMAAMAwcve/N26x/wEAAGAYufuvj1t23f9HD+BbHRz9v/5f/6//b9T/D/j+//HVH9zM/vX/C/2//l//v4L+X/+v/2e7ufX/ufvfF7f49X8AAAAYRu7+98ct9j8AAAAMI3f/B+IW+x8AAACGkbv/g3FLk/2v/9f/6//1//r/5Z+/Gf3/6s/txvv/0/T/K+j/9f/6f/0/azW3/j93/4filib7HwAAADrI3X9D3GL/AwAAwDBy9384brH/AQAAYBi5+z8StzTZ/4fR/x/dcvX/c+v/Fwv9v/5f/3/aAfT/xxf6/7XT/0/T/6+g/x+z/z+6GKj/P7Hrz9f/M0dz6/9z9380bmmy/wEAAKCD3P03xi32PwAAAAwjd//H4hb7HwAAAIaRu//jcUuT/e/9f/3/xr7/f0H8BP2//n9z+//6b1X/vz76/2n6/xX0//vV/9+xli94eN9/Rv3/7vT/zNHc+v/c/TfFLU32PwAAAHSQu/8TcYv9DwAAAMPI3f/JuMX+BwAAgGHk7v9U3NJk/+v/9f8b2/97/1//r//X/y+h/5+m/19B/z/m+//6f/0/h2Zu/X/u/k/HLU32PwAAAHSQu//muMX+BwAAgGHk7r8lbrH/AQAAYBi5+z8TtzTZ//p//b/+fzP7/+P6f/2//n+pufT/F1/8v7fq//X/+n/9v/5f/9/d3Pr/3P2fjVua7H8AAADoIHf/5+IW+x8AAACGkbv/83GL/Q8AAADDyN3/hbilyf7f2f9fsDhdqJ62rP+PRk3/v4X+/+zvr/9f/seH9//1//r//TeX/t/7/+f3/fX/+v9N/v7n1P9ftPPn6/8Z0dz6/9z9t8YtTfY/AAAAdJC7/4txi/0PAAAAw8jd/6W4xf4HAACAYeTuvy1uabL/vf+v/9f/6//1/8s/X/+/mdbb/5/Q/+v/9f/6/37v//+L/p/1mVv/n7v/y3FLk/0PAAAAHeTu/0rcYv8DAADAMHL3fzVusf8BAABgGLn7vxa3NNn/+n/9v/5f/6//X/75+v/N5P3/afr/FWba/+ffoer/5/39h+n/vf/PGq21/9/+F6Xz6P9z9389bmmy/wEAAKCD3P3fiFvsfwAAABhG7v5vxi32PwAAAAwjd/+34pYm+3/9/f9F+v+g/59L/39v/f+2z9f/6/9Hpv/Pv6Ivp/9f4Z4/zR2bXf+f9P/z/v76f/0/O621/1/s+NvRc+7/c/ffHrc02f8AAADQQe7+b8ct9j8AAAAMI3f/d+IW+x8AAACGkbv/u3FLk/3v/f9e/f+RRcf+3/v/+n/9fyf6/2n6/xVm+v5/0v/P+/vr//X/7DS3/j93//filib7HwAAADbV///n/W7f6/9t7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+HcUuT/a//79X/93z/X/+v/9f/d6L/n6b/X0H/r//X/+v/Wau59f+5+38Ut2wZfsfO+T8lAAAAMCe5+38ctzT59X8AAADoIHf/T+KWHfv/1B5/VzsAAAAwN7n7fxq37OHX//9j377VwdH/z7z/X4zf/9+50P/r/0/T/+v/10H/P+2f7P9PHdH/6/8n6P/1//p/tptb/5+7/2dxi9//DwAAAJvsrH+ikLv/53GL/Q8AAADDyN3/i7jF/gcAAIBh5O6/I25psv/1/zPv/8/r/f8T9T9tQv/v/f997P+vPL708/X/+v+R6f+nef9/Bf2//l//r/9nrebW/+fuvzNuabL/AQAAoIPc/b+MW+x/AAAAGEbu/l/FLfY/AAAADCN3/6/jlib7X/8/Yv+/We//6/+9/3/+/f+/XXjy5nvd59qr9f+csfb+P/7WYFn/n38s6P8PpP+/cdm/n/5f/z+n76//1/+z09z6/9z9v4lbmux/AAAA6CB3/11xi/0PAAAAw8jd/9u4xf4HAACAYeTu/13c0mT/6//1/3Pp//O/60Po/09uXv+fTXH3/t/7//r/nbz/P22D+3/v/+v/Z//99f/6f3aaW/+fu//3cUuT/Q8AAAAd5O7/Q9xi/wMAAMAwcvf/MW6x/wEAAGAYufv/FLc02f/6f/3/XPr/5P3/Mz/P+/+n6f/1/+dC/z9N/7+C/l//r//X/7NWc+v/c/f/OW5psv8BAACgg9z9d8ct9j8AAAAMI3f/X+IW+x8AAACGkbv/r3FLk/2v/9f/6//1//r/5Z+v/99M+v9p+v8V9P/6f/2//p+1mlv/n7v/7wEAAP//TYN26A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 1m0.525431477s ago: executing program 4 (id=1052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@migrate={0xec, 0x21, 0x409, 0x70bd2d, 0x25dfdbfd, {{@in=@empty, @in=@loopback, 0x4e22, 0x0, 0x4e21, 0xb, 0xa, 0x0, 0x0, 0x32}, 0x6e6bb0, 0x2}, [@migrate={0x9c, 0x11, [{@in=@empty, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x6c, 0x1, 0x0, 0x3506, 0xa, 0x2}, {@in6=@empty, @in=@multicast2, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x6c, 0x1, 0x0, 0x0, 0xb, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x94) 56.551154042s ago: executing program 4 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x1020) 55.859117511s ago: executing program 33 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x1020) 3.599316673s ago: executing program 0 (id=1548): r0 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f00000002c0), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 3.413796056s ago: executing program 2 (id=1550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 3.290733233s ago: executing program 0 (id=1553): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zN6+dm4GQv5O/gbVjjHE22fUlvtC6mHBtuJVAUtJLbNe7dhZ8i9cuSRrJjgIlEkZFFW3Di7aAojZvKqwqL2gVUF6gVpUqkfYFfYOoUHkRVQEFpEptFbLVnHmeZ2dmZ2d2veP1zDmfj5T84pkzc86ceWZ2v+t8dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAepveO/3FSpZl1X/yf63Psuur/712bH1+2buu9RECAAAAK/XL/N+v3pQuOLiEG9Vt849v/f7zc3Nzc9mnB/9k+Ktzc+mKsSwbXpNl+XXR5R8/WKnfJngqG60M1P15oMPuBztcP9Th+uEO1490uH5Nh+tHO1y/4AQssLb285j8zrbk/7m+dkqzm7Ph/LotLW71VGXNwED8WU6ukt9mbvhYNpOdyKazyYbta9tW8u1f2FTd14eyuK+Bun1trK6Qnz9xNB5DJZzjLQ37mr/P6KfvycZ+8fMnjv7VuVdubTU7noaG+6sd57bN1eP8fLikdqyVbE06J/E4B+qOc2OL52Sw4Tgr+e2q/918nK8u8TgH5w9zVTU/56PZQP7fL+Xnaaj+x3rpPG0Ml/337VmWXZw/7OZtFuwrG8jWNVwyMP/8jNZWZPU+qkvpjdnQstbppiWs0+qc2tK4TptfE/H53xRuN7TIMdQ/TT99cqTueX9t7krWaVR91Iu9VprXYLdfK72yBuO6eCl/0E+3XINbwuN/Yuvia7Dl2mmxBtPjrluDmzutwYGRwfyY05NQyW8zvwZ3NGw/mO+pks+Xt7ZfgxPnTp6ZmH3s8TtnTh45Pn18+tSuHTsmd+3Zs2/fvoljMyemJ2v/vsKz3fvWZQPpNbA5nLv4GnhH07b1S3XuGyML3n+v9HU42uZ1uL5p226/DoeaH1xldV6QC9d07bXxqepJH700kC3yGsufn+0rfx2mx133Ohyqex22/JrS4nU4tITXYXWbM9uX9j3LUN0/rY5h8a8FK1uD6+vWYPP3I81rsNvfj/TKGhwN6+KH2xf/WrAxHO/T48v9fmRwwRpMDze891QvSd/vj+7LR6t1eVv1iutGsvOz02fvevTIuXNnd2RhrIo31a2V5vW6ru4xZQvW68Cy1+vBmbc+fVuLy9eHczV6Z/Vfo4s+V9Vtdt/V/rnKv7q1Pp8Nl+7Mwuiy1T6frb6aV8/nSJZ97XtP3vedJ7723kXPZzVvfn5i5d+Lp1xa9/47vMj7b8z9r9f2l+7qqcHhodrrdzCdneGG9+PGp2oof++q5Pt+dWJp78fD4Z/Vfj++uc378Yambbv9fjzc/ODi+3Gl0087Vqb5+RwN6+TEZPv34+o2G3Yud00OtX0/vj3MSjj/7wxJIeWiurWz2LpN+xoaGg6PayjuoXGd7mrYfjhks+q+ntt5Zet02+21+xpMj27eaq3TsaZtu71O08++FlunlU4/fbsyzc/naFgXN+9qv06r27y4e+XvnWvjf9a9d450WoPDgyPVYx5OizB/v8/m1sY1eFd2NDudncim8mtH8vVUyfc1fvfS1uBI+Ge13ys3tFmD25q27fYaTF/HFlt7laGFD74Lmp/P0bAunrm7/RqsbvO+vd393nVbuCRtU/e9a/PP1xb7mddtTafpaq2VoXCc39vb/mez1W1O7Ftuzmx/nu4Il1zX4jw1v34Xe01NZatznjaE43xl3+LnqXo81W2+un+J6+lglmUXHrkn/3lv+PuVvz3/g+cb/t6l1d/pXHjknp/dcOwflnP8APS/12tjXe1rXd3fTC3l7/8BAACAvhBz/0CYifwPAAAAhRFzf/y/whP5HwAAAAoj5v6hMJOS5P8N73tl5vULWWrmzwXx+nQa7q1tFzuuk+HPY3Pzqpff8+z0f/39haXteyDLstfu/YOW22+4Nx5XzVg4zsvvb7x8gefvXNK+D99/Ie23vr/+9XD/8fEsdRm0quBOZln2wk1fzvcz9uClfL547+F83nfx6aeq27y6v/bnePuX31Tb/s9D+ffgsSMNt385nIefhDn54dbnI97uW5feuXHvA/P7i7erbL4xf9jPPFS73/h7cr7yVG37eJ4XO/7vfOm5b1W3f/TtrY//wkDr438u3O+zYf7PW2rb1z8H1T/H230hHH/cX7zdXd/8bsvjv/zF2vZnPlDb7nCYcf/bwp+3fOCVmfrz9WjlSMPjyj5Y2y7uf/IHf5RfH+8v3n/z8Y8eutRwPprXx4v/Wrufiabt4+VxP9HfNe2/ej/16zPu/7k/PNxwnjvt//J9L7+ler/N+7+jabszj2zP9z9/f42/sekvvvDllvuLx3Pwb840PJ6Dnwiv47D/Zx4K6zFc/7+Xa/fX/NsVDn+i8f0nbv/19RcaHk/0oV/U9n/53cfzuWZ07brrrr/hxotvq567LHtpTe3+Ou3/+F+ebjj+b9xSOx/x+tjRb97/YuL+z35u/NTp2fMzU+msPnFT/rtzPlI7nni8N4X31uY/Hzp97uHps2OTY5NZNlbcX6F3xb4Z5s9q42L7recWvINuvz88n7f92Qvrtv7Ll+Ll//ap2uWXPlz7uvWOsN1XwuXrw/O3vP0v9MymW/LXd+XFcIRzC39f8Eps3PKf+5a0YXj8zd8XxPV+5s0P5+ehel3+dSO+rld4/D+aqt3Pt8N5nQu/mXnzLfP7q98+/m6ES5+svd5XfP7C21x8Xv86PN8f/Unt/uNxxcf7o/B9zHc3NL7fxfXx7QsDzfef/xaPi+H9JLtYuz5uFc/3pVdvaXl48feQZBdvzf/8x+l+bl3Ww1zM7GOzEydmTp1/dOLc9Oy5idnHHj908vT5U+cO5b/L89BnOt1+/v1pXf7+NDW9Z3eWv1udro2r7Fof/5n7j07tndw6NX3syPlj5+4/M332+NHZ2aPTU7Nbjxw7Nv25TrefmTqwY+f+XXt3jh+fmTqwb//+XfvHZ06drh5G7aA62DP52fFTZw/lN5k9sHv/jrvv3j05fvL01PSBvZOT4+c73T7/2jRevfXvj5+dPnHk3MzJ6fHZmcenD+zYv2fPzo6/DfDkmWOzYxNnz5+aOD87fXai9ljGzuUXV7/2dbo9xTT777XvZ5tVar+IL/v4HXvS72etevbJRe+qtknTLxB9Jfwumn96w5l9S/lzzP3DYSYlyf8AAABQBjH3j4SZyP8AAABQGDH3rwkzkf8BAACgMGLuHw0zKUn+L1z/f8OFJe1f/1//v/586f+XrP//yV7r/9feL/T/u2Ol/Xv9/0D/X/9f/1//X/+fLui1/n/M/WuzrJT5HwAAAMog5v51YSbyPwAAABRGzP3XhZnI/wAAAFAYMfdfH2ZSkvyv/3+1+/+D+v/6//r/cV3q/+v/rwL9//b0/zvQ/5/IytX/v9jN49f/1/9noV7r/8fcf0OYSUnyPwAAAJRBzP03hpnI/wAAAFAYMfffFGYi/wMAAEBhxNy/PsykJPlf/9/n/+v/6//r/7fev/5/f9L/b0//vwP9f5//r/+v/09X9Vr/P+b+N4SZlCT/AwAAQBnE3P/GMBP5HwAAAHrP0JXdLOb+N4WZLMj/V7gDAAAA4JqLuf/mrKkIXpK//9f/1//X/9f/1/9vvf+l9/8HM/3/3qH/357+fwf6//r/+v/6/3RVr/X/89yfjWZvDjMpSf4HAACAMoi5/5YwE/kfAAAACiPm/v8XZiL/AwAAQGHE3L8hzKQk+V//X/9f/1//X/+/9f59/n9/0v9vT/+/A/1//X/9f/1/uqrX+v8x998aZlKS/A8AAABlEHP/bWEm8j8AAAAURsz9/z/MRP4HAACAwoi5f2OYSUnyv/5/j/f/Y3NU/1//X/9f/1//f0n0/9vT/+9A/1//X/9f/5+u6rX+f8z9bwkzKUn+BwAAgDKIuf+tYSbyPwAAABRGzP1vCzOR/wEAAKAwYu4fCzMpSf7X/+9S/3/LDQsu8/n/+v9pfYSp/6//r/9/9en/t6f/34H+v/6//r/+P13Va/3/mPs3hZmUJP8DAABAGcTcvznMRP4HAACAwoi5//YwE/kfAAAACiPm/i1hJiXJ//r/Pf75//r/+v/6//r/+v/Lov/fnv5/B/r/+v/6//r/dFWv9f9j7n97mElJ8j8AAACUQcz9W8NM5H8AAAAojJj73xFmIv8DAABAYcTcvy3MpCT5X/9f/1//X/9f/7/1/vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmJcn/AAAAUAYx928PM5H/AQAAoDBi7r8jzET+BwAAgMKIuX88zKQk+V//X/9f/1//X/+/9f71//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/84wk5LkfwAAACiDmPvvCjOR/wEAAKAwYu6fCDOR/wEAAKAwYu6fDDMpSf7X/9f/1//X/19W//9t8/er/1+j/99b9P/b0//vQP9f//+a9/+H9f8plF7r/8fcvyPMpCT5HwAAAMog5v6dYSbyPwAAABRGzP27wkzkfwAAACiMmPt3h5mUJP/r/+v/6//r//v8/9b71//vT/r/7XW//x8fov6//r/+v8//1/9noV7r/8fcf3eYSUnyPwAAAJRBzP17wkzkfwAAACiMmPv3hpnI/wAAAFAYMffvCzMpSf7X/9f/1//X/9f/b71//f/+pP/fns//70D/X/9f/1//n67qtf5/zP37w0xKkv8BAACgDGLuf1eYifwPAAAAhRFz/6+Emcj/AAAAUBgx9/9qmElJ8r/+v/6//r/+v/5/6/3r//envu3/174M6//r/+v/9/Hx6//r/7NQr/X/Y+4/EGZSkvwPAAAAZRBz/6+Fmcj/AAAAUBgx9787zET+BwAAgMKIuf9gmElJ8r/+v/6//r/+v/5/6/3r//envu3/ByXr/480X6D/r//fz8ev/6//z0K91v+Puf89YSYlyf8AAABQBjH33xNmIv8DAABAYcTc/94wE/kfAAAACiPm/veFmZQk/+v/6//r/+v/6/+33r/+f3/S/2+vx/r/C+j/6//38/Hr/+v/s1Cv9f9j7n9/mElJ8j8AAACUQcz9Hwgzkf8BAACgMGLu/2CYifwPAAAAhRFz/4fCTEqS//X/9f/1//X/9f9b71//vz/p/7en/9+B/n/B+v9jN+j/6/9ztbRKQAtdWf//+tcW3eEK+/8x9/96mElJ8j8AAACUQcz994aZyP8AAABQGDH3fzjMRP4HAACAwoi5/yNhJiXJ/yvq/4/o/0f6/43Hr//fen3o/+v/6/9fffr/7fVZ//+XN4bL9f9r9P97+/h7sv//48X6/3Nrmm+v/8/VcGX9/5a60v+Puf+jYSYlyf8AAABQBjH3fyzMRP4HAACAwoi5/+NhJvI/AAAAFEbM/b8RZlKS/O/z/6vHMd9e1v/X/88v0P/X/9f/71v6/+31Wf/f5/830f/v7ePvyf6/z//nGuu1/n/M/Z8IMylJ/gcAAIAyiLn/vjAT+R8AAAAKI+b+T4aZyP8AAABQGDH3fyrMpCT5X//f5//r/+v/6/+33r/+f3/S/29P/78D/X/9/17r//+H/j/9rdf6/zH33x9mUpL8DwAAAGUQc/8DYSbyPwAAABRGzP2/GWYi/wMAAEBhxNz/6TCTkuR//f9+6f+P6f/r/+v/Nz0e/X/9/1b0/9vT/+9A/1//v9f6/z7/nz7Xa/3/mPsfDDNZev4fXfKWAAAAwDURc/9vhZmU5O//AQAAoAxi7v/tMBP5HwAAAAoj5v7fCTMpSf7X/++X/r/P/8/0//X/mx6P/r/+fyur1/+P7zz6//r/+v+R/r/+v/4/zXqt/x9z/++GmZQk/wMAAEAZxNz/UJiJ/A8AAAB9odX/k90s5v5DYSbyPwAAABRGzP2Hw0xKkv/1//X/9f97tP//p5v/+Yff/9jhHfr/+v/6/8uyqp//X33x+/x//X/9/0T/X/9f/59mvdb/j7n/SJhJSfI/AAAAlEHM/b8XZiL/AwAAQGHE3H80zET+BwAAgMKIuX8qzKQk+V//X/9f/79H+v+VSpYV5PP/4/nQ/2/Utf5/fNPV/29pVfv/D8z3xPX/l9v/H2l5qf6//n8/H7/+v/4/C/Va/z/m/ukwk5LkfwAAACiDkPsHjtXm/BXyPwAAABRGzP3Hw0zkfwAAACiMmPsfDjMpSf7X/9f/1//vkf5/8+f/93H/3+f/t+bz/1eH/n97vdP/b03/X/+/n49f/1//n4V6rf8fc/9MmElJ8j8AAACUQcz9nwkzkf8BAACgMGLu/2yYifwPAAAAhRFz/4kwk5Lkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/6//r/+v/09X9Vr/P+b+k2EmJcn/AAAAUAYx958KM5H/AQAA+D/27qPJ0ru64/gde2TPlF6AF95o71fg0sKu8s5+AV5444Vd5fLCsi0HskYgkgCRs0DkLIIEQiSRk0QSiIzIGUQQWYShqD7nzHTP7ef2DLenn+d/Pp/NsWcYbkM1kn7SfOvPMHL3XxG32P8AAAAwjNz9/xm3NNn/+n/9/7D9/9/o//f7fP2//n9k+v9p+v8N9P/6f/2//p+tmlv/n7v/v+KWJvsfAAAAOsjd/99xi/0PAAAAw8jdf2XcYv8DAADAMHL3/0/c0mT/7+n/j6169v+Z8er/R+r/vf+/7+fr//X/I7u4/f/Vf/gjn/5f/6//D/p//b/+n73m1v/n7v/fuKXJ/gcAAIAOcvf/X9xi/wMAAMAwcvf/f9xi/wMAAMAwcvffL25psv+9/+/9f/2//l//v/7z9f/L5P3/aZ36/yvvuvQ/7r3lL289n8/X/+v/9f/6f7Zrbv1/7v77xy27h9/f7f3rUQAAAGA5cvc/IG5p8s//AQAAoIPc/Q+MW+x/AAAAGEbu/gfFLU32v/5f/6//1//r/9d/vv5/mfT/0zr1/xfy+fp//b/+X//Pds2t/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBi5+6+KW+x/AAAAGEbu/lNxS5P9r/8//P7/t/p//X9c/b/+X/9/+PT/0/T/G+j/9f/6f/0/WzW3/j93/9VxS5P9DwAAAB3k7n9o3GL/AwAAwDBy9z8sbrH/AQAAYBi5+6+JW5rsf/2/9//1//p//f/6z9f/L5P+f9rF7//X/Rlyf/r/xff/l+j/9f/6f852nv3/fRN/2N5K/5+7/+FxS5P9DwAAAB3k7n9E3GL/AwAAwDBy9z8ybrH/AQAAYBi5+x8VtzTZ//p//b/+X/+v/1//+fr/ZdL/T5vN+//Hjq/9Yf3/4vt/7//r//X/7DK39/9z9z86bmmy/wEAAKCD3P3Xxi32PwAAAAwjd/9j4hb7HwAAAIaRu/+xcUuT/a//1//r//X/+v/1nz/V/9961ten/58X/f+02fT/+9D/6/+X/PXr//X/nGtu/X/u/sfFLU32PwAAAHSQu/+6uMX+BwAAgGHk7n983GL/AwAAwDBy9z8hbmmy/9f3/2d+Xv9/MPr/3V+//n/998e2+v/8d9T/T/b/f+v9/570/9P0/xvo//X/+v/9+v+Tm369/p915tb/5+5/YtzSZP8DAABAB7n7nxS32P8AAAAwjNz9T45b7H8AAAAYRu7+p8QtTfa/9//1//r/5fX/3v/fcZTv/68uev9/XP9/QPr/afr/DfT/+n/9v/f/2aq59f+5+58atzTZ/wAAANBB7v6nxS32PwAAACzD2b93YO9vKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f+fWEj/7/3/g9L/T9P/b3C0/f+xQfv/44P1/zfs9+vn0P9fpf9nZnb1/7ed+fGj6v9z9z8zbmmy/wEAAKCD3P3PilvsfwAAABhG7v5nxy32PwAAAAwjd//1cUuT/X/o/f/J/T9b/6//1//r/4++/1/K+//6/4PS/0/T/2/g/X/v/3v/X//PVu3q/89yVP1/7v7nxC1N9j8AAAB0kLv/uXGL/Q8AAADDyN1/Q9xi/wMAAMAwcvc/L25psv+31P9ff+01f+39/z30//r/vd8f+n/9v/7/8On/p+n/N9D/6//1//p/tmpu/X/u/ufHLU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/x/6+/8TOvT/+eP6f/3/Sv+v/9f/XxRt+/9j6/5MdK59+v87/u3UP+z+Ef2//l//r//X/7MFs+j/T5/5q8vc/S+OW5rsfwAAAOggd/9L4hb7HwAAAIaRu/+lcYv9DwAAAMPI3f+yuGWQ/X9iw8/r/73/r//X/+v/13++/n+Z2vb/B+T9/w30//p//b/+n62aRf9/1v+fu//lccsg+x8AAABY1e5/Rdxi/wMAAMAwcve/Mm6x/wEAAGAYuftfFbc02f/6f/2//l//r/9f//n6/2XS/0/T/2+g/9f/6//1/2zV3Pr/3P03xi1N9j8AAAB0kLv/1XGL/Q8AAADDyN3/mrjF/gcAAIBh5O5/bdzSZP/r//X/+n/9v/5//efr/5dJ/z9N/79arW6a+ALW9f+n/1z/r//X/+v/uUBz6/9z978ubmmy/wEAAKCD3P03xS32PwAAAAwjd//NcYv9DwAAAMPI3f/6uKXJ/tf/6//1//p//f/6z9f/L5P+f5r+fwPv/+v/9f/6f7Zqbv1/7v43xC1N9j8AAAB0kLv/lrjF/gcAAIBh5O5/Y9xi/wMAAMAwcvffGrc02f/6f/2//l//r/9f//n6/2U6vP5/pf/X/+v/N9D/6//1/+w1t/4/d/+b4pYm+x8AAAA6yN3/5rjF/gcAAIBh5O5/S9xi/wMAAMAwcve/NW5psv/1//p//b/+X/+//vP1/8vk/f9p+v8N9P/6f/2//p+tmlv/n7v/bXFLk/0PAAAAHeTuvy1usf8BAABgGLn73x632P8AAAAwjNz974hbmux//b/+f3f/v1rp//X/+v8dF6H/P7HS/2+d/n+a/n8D/f+Y/f+frAbq/0/u++v1/8zR3Pr/3P3vjFua7H8AAADoIHf/u+IW+x8AAACGkbv/3XGL/Q8AAADDyN3/nrilyf7X/+v/vf+v/9f/r/987/8vk/5/mv5/A/3/mP2/9//1/xyZufX/ufvfG7c02f8AAADQQe7+98Ut9j8AAAAMI3f/++MW+x8AAACGkbv/Azv3zN8AaLL/9f/6f/2//n9v/39qpf9f6f8XS/8/Tf+/gf5f/6//1/+zVXPr/2P3rz4YtzTZ/wAAANBB7v7b4xb7HwAAAIaRu/+OuMX+BwAAgGHk7v9Q3NJk/+v/9f/6/2X2/ye8/6//1/+vNZf+//LL//5O/b/+X/+v/9f/6/+7m1v/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADAMHL3fzRusf8BAABgGLn7Pxa3NNn/5/b/l6x2CtUd6/r/aNT0/2fR/+/++vX/678/lvL+v/5/h/5/mebS/3v//8K+fv2//n/JX/959f+XnfvrD7P//90B/reg/+cwzK3/z91/Z9zSZP8DAABAB7n7Px632P8AAAAwjNz9n4hb7H8AAAAYRu7+u+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v//f+/xX/8qf6f7Znbv1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNzSZP/r//X/+n/9v/5//efr/5dJ/z9N/7+B/l//r//3/j9bNbf+P3f/Z+OWJvsfAAAAOsjd/7m4xf4HAACAYeTu/3zcYv8DAADAMHL3fyFuabL/t9//X6b/D/r/ufT//6z/3/P5+n/9/8hm0v/nt9WR9P+XTPyc/n8D/b/+X/+v/2er5tb/5+6/O25psv8BAACgg9z9X4xb7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvvf+/+9+v9jq479v/f/9f/6/05m0v97/1//r//X/+v/9f/MsP/P3f+VuKXJ/gcAAICl+se/+ve7D/qvzd3/1bjF/gcAAIBh5O7/Wtxi/wMAAMAwcvd/PW5psv/1/736/57v/+v/9f/6/070/9P0/xvo//X/+n/9P1s1t/4/d/834pazht/x8/5PCQAAAMxJ7v5vxi1N/vk/AAAAdJC7/1txyzn7//QBf1c7AAAAMDe5+78dtzT55//6/5n3/6vx+/97Vvp//f8O/b/+fxv0/9P+yP7/9DH9v/5/gv5f/6//Z6+59f+5+78TtzTZ/wAAADCoXX9HIXf/d+MW+x8AAACGkbv/e3GL/Q8AAADDyN3//bilyf7X/8+8/7+g9/9P1v+1hP7f+/+H2P9fd2Lt5+v/9f8j0/9P8/7/Bvr/Bff/+Udl/b/+nzmZW/+fu/+euKXJ/gcAAIAOcvf/IG6x/wEAAGAYuft/GLfY/wAAADCM3P0/ilua7H/9/4j9/7Le/9f/e///wvv/v7j01O3/9K8336j/54yL2f/n94L+X/+v/9/h/X/9v/6fvebW/+fu/3Hc0mT/AwAAQAe5+++NW+x/AAAAGEbu/p/ELfY/AAAADCN3/0/jlib7X/+v/59L/5//XR9B/39qef1/NsXd+3/v/+v/z+X9/2n6/w30//p//b/+n62aW/+fu/9ncUuT/Q8AAAAd5O7/edxi/wMAAMAwcvf/Im6x/wEAAGAYuft/Gbc02f/r+/8/q5/X/x+M/n/31+/9//XfH97/1//r/w+f/n+a/n8D/b/+X/+v/2er5tb/5+7/VdzSZP8DAABAB7n774tb7H8AAAAYRu7+X8ct9j8AAAAMI3f/b+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v/9f/6//Zqrn1/7n7fx8AAP//XXxspA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) 3.18897451s ago: executing program 2 (id=1554): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000280)={[{@check_relaxed}, {@overriderock}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@unhide}, {@check_strict}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}], [{@uid_eq}]}, 0xff, 0x559, &(0x7f0000000ec0)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 2.943856732s ago: executing program 6 (id=1559): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f0000000180)='4,.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) 2.646940124s ago: executing program 2 (id=1564): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa00004, &(0x7f00000000c0)={[{@iocharset={'iocharset', 0x3d, 'cp950'}}, {}, {@gid_forget}, {@longad}, {@umask={'umask', 0x3d, 0x9}}]}, 0x1, 0xc7d, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 2.585592043s ago: executing program 6 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @pid}]}]}]}, 0x2c}}, 0x2000c004) 2.419981899s ago: executing program 6 (id=1568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x80000000}}, 0x20) 2.201049511s ago: executing program 2 (id=1569): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xfff9, 0x7, 0x748, 0x7ff}, 0x14) 2.142894344s ago: executing program 1 (id=1570): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc10000000000000008888edfcef6e296510cff24fc83423368", 0x0, 0x3, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.0879737s ago: executing program 6 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 1.727886661s ago: executing program 2 (id=1572): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.553834648s ago: executing program 1 (id=1574): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0xc, 0x0, 0x2}, 0xc) 1.532604531s ago: executing program 6 (id=1575): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 1.487017755s ago: executing program 2 (id=1576): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xf, 0x77, 0x2}, {0x9, 0x5, 0x2, 0x3, 0x10, 0x0, 0xfd, 0x22}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.336035567s ago: executing program 6 (id=1577): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.300914625s ago: executing program 5 (id=1578): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0xfffff800, 0x10001, 0x32315559, 0x1, 0xe, 0x8, 0xc, 0x7000, 0x0, 0x6, 0x0, 0x1}}) 1.248019768s ago: executing program 1 (id=1579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2431}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x6}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.172476818s ago: executing program 5 (id=1580): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) 987.022483ms ago: executing program 0 (id=1581): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') fallocate(r0, 0x40, 0xfb7, 0x6) 817.747358ms ago: executing program 1 (id=1582): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) 753.419201ms ago: executing program 5 (id=1583): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 632.06006ms ago: executing program 0 (id=1584): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000003000000000000000000000001"], 0x4c}}, 0x0) 591.169431ms ago: executing program 5 (id=1585): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0xd00, 0x3, 0x1, 0x0, 0x4003, 0x2, 0x8, 0x7, 0x5, 0x40, 0x2, 0x1, 0x2, 0x2, 0x6, 0x9, 0x1, 0x5, 0x8, 0x2, 0x5, 0xffff, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0xffff, 0xfffffff4]}) 441.498588ms ago: executing program 5 (id=1586): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 357.131353ms ago: executing program 0 (id=1587): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x148}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) 318.98146ms ago: executing program 1 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x103581, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vxcan1\x00', 0xc00}) 91.78831ms ago: executing program 5 (id=1589): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) 46.966822ms ago: executing program 0 (id=1590): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002400)={0xc, {"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", 0x1000}}, 0x1006) 0s ago: executing program 1 (id=1591): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) kernel console output (not intermixed with test programs): 776496643.524:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.269047][ T37] audit: type=1326 audit(1776496643.554:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.269211][ T37] audit: type=1326 audit(1776496643.594:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.269465][ T37] audit: type=1326 audit(1776496643.594:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.269683][ T37] audit: type=1326 audit(1776496643.594:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.272756][ T37] audit: type=1326 audit(1776496643.594:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.272884][ T37] audit: type=1326 audit(1776496643.594:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.273003][ T37] audit: type=1326 audit(1776496643.594:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f51b871c819 code=0x7ffc0000 [ 155.806533][ T6514] erofs (device loop2): mounted with root inode @ nid 36. [ 156.105796][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'. [ 156.535860][ T6539] loop2: detected capacity change from 0 to 164 [ 156.630887][ T6539] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 156.743707][ T6510] loop0: detected capacity change from 0 to 32768 [ 156.854318][ T6510] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 156.973033][ T6510] XFS (loop0): Ending clean mount [ 157.019421][ T6535] syz.1.212 (6535) used greatest stack depth: 17024 bytes left [ 157.042261][ T821] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 157.216665][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.216723][ T821] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.227187][ T5826] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 157.234254][ T821] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 157.234330][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 157.234394][ T821] usb 4-1: SerialNumber: syz [ 157.380497][ T821] usb 4-1: No union descriptors [ 157.409490][ T821] usb-storage 4-1:1.0: USB Mass Storage device detected [ 157.534823][ T821] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 157.622408][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.726384][ T821] usb 4-1: USB disconnect, device number 4 [ 157.790038][ T44] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 157.790074][ T44] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 157.790088][ T44] usb 2-1: Product: syz [ 157.790098][ T44] usb 2-1: SerialNumber: syz [ 157.974859][ T44] usb 2-1: config 0 descriptor?? [ 158.326523][ T5930] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.491320][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 158.513785][ T5930] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 158.513816][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.513836][ T5930] usb 3-1: config 1 has no interface number 0 [ 158.513893][ T5930] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.513922][ T5930] usb 3-1: config 1 interface 105 has no altsetting 0 [ 158.571551][ T5807] usb 2-1: USB disconnect, device number 3 [ 158.629483][ T5930] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 158.629517][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 158.629539][ T5930] usb 3-1: Product: syz [ 158.629556][ T5930] usb 3-1: Manufacturer: syz [ 158.629580][ T5930] usb 3-1: SerialNumber: syz [ 159.042994][ T5930] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 159.290786][ T5930] usb 3-1: USB disconnect, device number 6 [ 159.406797][ T6601] tipc: Can't bind to reserved service type 1 [ 159.698991][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 160.034310][ T6610] bridge1: entered promiscuous mode [ 160.578900][ T5807] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.645755][ T6637] netlink: 'syz.2.255': attribute type 11 has an invalid length. [ 160.728866][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 160.774332][ T5807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 160.792369][ T5807] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 160.817612][ T5807] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 160.817644][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.817666][ T5807] usb 4-1: Product: syz [ 160.817681][ T5807] usb 4-1: Manufacturer: syz [ 160.817696][ T5807] usb 4-1: SerialNumber: syz [ 161.071020][ T6645] veth1: entered promiscuous mode [ 161.071047][ T6645] veth1: entered allmulticast mode [ 161.185299][ T6645] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 161.237559][ T5807] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 161.270885][ T5807] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 161.308455][ T5807] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 161.628405][ T5807] usb 4-1: USB disconnect, device number 5 [ 162.030173][ T6675] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.275'. [ 162.040539][ T6673] loop4: detected capacity change from 0 to 1024 [ 162.081625][ T6678] loop2: detected capacity change from 0 to 16 [ 162.128056][ T6680] tmpfs: Bad value for 'mpol' [ 162.173684][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.173793][ T6673] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.325987][ T6678] erofs (device loop2): mounted with root inode @ nid 36. [ 162.496510][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.655681][ T6678] syz.2.272: attempt to access beyond end of device [ 162.655681][ T6678] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 162.717867][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.751265][ T6678] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 162.751303][ T6678] erofs (device loop2): read error -117 @ 0 of nid 89 [ 162.816719][ T37] audit: type=1800 audit(1776496651.074:16): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.272" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 162.920833][ T6698] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 163.077210][ T6698] team0: Device ipvlan1 failed to register rx_handler [ 163.256374][ T6706] warning: `syz.4.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 163.434575][ T6710] loop1: detected capacity change from 0 to 1024 [ 163.599267][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.292'. [ 164.358431][ T6742] loop0: detected capacity change from 0 to 8 [ 164.554731][ T6748] loop1: detected capacity change from 0 to 8 [ 164.868292][ T6759] QAT: Stopping all acceleration devices. [ 165.133569][ T6768] loop1: detected capacity change from 0 to 1024 [ 165.165681][ T6770] netlink: 'syz.0.318': attribute type 10 has an invalid length. [ 165.165701][ T6770] netlink: 55 bytes leftover after parsing attributes in process `syz.0.318'. [ 165.206215][ T6772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.319'. [ 165.265513][ T6774] loop4: detected capacity change from 0 to 256 [ 165.432003][ T6774] FAT-fs (loop4): Directory bread(block 64) failed [ 165.432038][ T6774] FAT-fs (loop4): Directory bread(block 65) failed [ 165.432151][ T6774] FAT-fs (loop4): Directory bread(block 66) failed [ 165.432175][ T6774] FAT-fs (loop4): Directory bread(block 67) failed [ 165.432275][ T6774] FAT-fs (loop4): Directory bread(block 68) failed [ 165.432298][ T6774] FAT-fs (loop4): Directory bread(block 69) failed [ 165.432390][ T6774] FAT-fs (loop4): Directory bread(block 70) failed [ 165.432411][ T6774] FAT-fs (loop4): Directory bread(block 71) failed [ 165.432493][ T6774] FAT-fs (loop4): Directory bread(block 72) failed [ 165.432515][ T6774] FAT-fs (loop4): Directory bread(block 73) failed [ 166.293630][ T6790] loop3: detected capacity change from 0 to 256 [ 166.365702][ T6784] loop2: detected capacity change from 0 to 4096 [ 166.386933][ T6790] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 166.387856][ T6784] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 166.464307][ T6784] ntfs3(loop2): ino=3, mi_enum_attr [ 166.568937][ T37] audit: type=1326 audit(1776496654.884:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.572937][ T37] audit: type=1326 audit(1776496654.894:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.572990][ T37] audit: type=1326 audit(1776496654.894:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.573043][ T37] audit: type=1326 audit(1776496654.894:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.573091][ T37] audit: type=1326 audit(1776496654.894:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.573138][ T37] audit: type=1326 audit(1776496654.894:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.573188][ T37] audit: type=1326 audit(1776496654.894:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.573232][ T37] audit: type=1326 audit(1776496654.894:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 166.573276][ T37] audit: type=1326 audit(1776496654.894:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.020760][ T6801] loop3: detected capacity change from 0 to 512 [ 167.048398][ T6802] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.112178][ T6784] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 167.287408][ T6801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.287683][ T6801] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.456879][ T822] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.609177][ T822] usb 2-1: Using ep0 maxpacket: 32 [ 167.621876][ T822] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 167.621906][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.621927][ T822] usb 2-1: config 0 has no interface number 0 [ 167.621979][ T822] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.717685][ T822] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 167.717718][ T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.717741][ T822] usb 2-1: Product: syz [ 167.717756][ T822] usb 2-1: Manufacturer: syz [ 167.717771][ T822] usb 2-1: SerialNumber: syz [ 167.788041][ T822] usb 2-1: config 0 descriptor?? [ 167.807868][ T822] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 167.807964][ T822] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 167.811287][ T6784] ntfs3(loop2): ino=1e, mi_enum_attr [ 167.848044][ T37] kauditd_printk_skb: 693 callbacks suppressed [ 167.848063][ T37] audit: type=1326 audit(1776496656.124:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.848207][ T37] audit: type=1326 audit(1776496656.164:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.848390][ T37] audit: type=1326 audit(1776496656.164:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.848556][ T37] audit: type=1326 audit(1776496656.164:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.895427][ T37] audit: type=1326 audit(1776496656.164:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.909996][ T37] audit: type=1326 audit(1776496656.204:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.910051][ T37] audit: type=1326 audit(1776496656.234:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.910989][ T37] audit: type=1326 audit(1776496656.234:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.911038][ T37] audit: type=1326 audit(1776496656.234:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 167.926891][ T37] audit: type=1326 audit(1776496656.234:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x50000 [ 168.107789][ T822] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 168.108413][ T822] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 168.363075][ T821] usb 2-1: USB disconnect, device number 4 [ 168.477033][ T6815] loop0: detected capacity change from 0 to 512 [ 168.653646][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.880087][ T6815] FAT-fs (loop0): FAT read failed (blocknr 128) [ 169.590343][ T6830] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 169.590366][ T6830] netlink: 504 bytes leftover after parsing attributes in process `syz.3.346'. [ 169.729438][ T6833] loop1: detected capacity change from 0 to 256 [ 169.793292][ T6835] loop4: detected capacity change from 0 to 512 [ 169.912610][ T6835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.912770][ T6835] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.942134][ T6833] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e09, chksum : 0x7e84ed8f, utbl_chksum : 0xe619d30d) [ 170.447029][ T6835] EXT4-fs error (device loop4): ext4_xattr_block_find:1881: inode #15: comm syz.4.349: corrupted xattr block 33: e_value out of bounds [ 170.582340][ T6854] loop2: detected capacity change from 0 to 256 [ 170.699421][ T6856] loop3: detected capacity change from 0 to 512 [ 170.727652][ T6856] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 170.783864][ T6856] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.358: bad orphan inode 131083 [ 170.783900][ T6856] loop3: lost filesystem error report for type 5 error -117 [ 170.790049][ C1] EXT4-fs (loop3): initial error at time 1776496659: ext4_orphan_get:1423 [ 170.790088][ C1] EXT4-fs (loop3): last error at time 1776496659: ext4_orphan_get:1423 [ 170.801224][ T6835] EXT4-fs (loop4): Remounting filesystem read-only [ 170.885049][ T6856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.071921][ T6856] EXT4-fs error (device loop3): ext4_lookup:1777: inode #2: comm syz.3.358: bad inode number: 12 [ 171.114172][ T13] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.114197][ T13] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.115056][ T13] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.136003][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.212676][ T6865] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 171.583950][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.965978][ T6873] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 172.201113][ T6873] bond1 (unregistering): Released all slaves [ 172.602499][ T6903] loop4: detected capacity change from 0 to 512 [ 172.701720][ T6903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.701851][ T6903] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.705173][ T6875] ip6gre1: entered allmulticast mode [ 172.912179][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.108262][ T6911] loop2: detected capacity change from 0 to 4096 [ 173.429202][ T6918] bond1: entered allmulticast mode [ 173.434571][ T6918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.470103][ T6924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.769077][ T6911] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 173.840928][ T6911] ntfs3(loop2): Failed to load $Extend (-22). [ 173.840955][ T6911] ntfs3(loop2): Failed to initialize $Extend. [ 174.272211][ T6936] loop4: detected capacity change from 0 to 512 [ 175.177807][ T6957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.402'. [ 175.177832][ T6957] netlink: 11 bytes leftover after parsing attributes in process `syz.4.402'. [ 175.269765][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 175.355312][ T6963] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 175.419017][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 175.421655][ T5930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 175.452224][ T5930] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 175.452255][ T5930] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 175.452289][ T5930] usb 1-1: Product: syz [ 175.452303][ T5930] usb 1-1: Manufacturer: syz [ 175.452317][ T5930] usb 1-1: SerialNumber: syz [ 175.736087][ T5930] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 175.736115][ T5930] usb 1-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 175.736136][ T5930] usb 1-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 175.736156][ T5930] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 175.944065][ T5930] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 175.944164][ T5930] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 175.995649][ T5930] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 176.031066][ T5930] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 176.057655][ T5930] usb 1-1: USB disconnect, device number 2 [ 176.107829][ T5930] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 176.122963][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.206294][ T5930] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 176.207458][ T5930] visor 1-1:1.0: device disconnected [ 176.236770][ T6973] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.442206][ T6987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.416'. [ 176.669897][ T6998] loop2: detected capacity change from 0 to 64 [ 176.735315][ T6998] minix: block size(59136) > page size(4096) not supported by filesystem [ 176.767151][ T7001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.422'. [ 177.060937][ T6998] syz.2.420: attempt to access beyond end of device [ 177.060937][ T6998] loop2: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 177.084244][ T6998] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 177.154066][ T6998] syz.2.420: attempt to access beyond end of device [ 177.154066][ T6998] loop2: rw=0, sector=234881062, nr_sectors = 2 limit=64 [ 177.154103][ T6998] Buffer I/O error on dev loop2, logical block 117440531, async page read [ 177.161241][ T37] kauditd_printk_skb: 965 callbacks suppressed [ 177.161259][ T37] audit: type=1800 audit(1776496665.474:1689): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.420" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 177.406675][ T7021] loop4: detected capacity change from 0 to 24 [ 177.421254][ T7021] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 177.452470][ T7024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.433'. [ 177.472461][ T7016] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 177.583737][ T7021] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 177.704347][ T7016] bond1 (unregistering): Released all slaves [ 178.037055][ T7025] ip6gre1: entered allmulticast mode [ 178.186016][ T7035] veth1: entered promiscuous mode [ 178.186043][ T7035] veth1: entered allmulticast mode [ 178.326871][ T7035] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 178.550187][ T7042] netlink: 104 bytes leftover after parsing attributes in process `syz.1.442'. [ 178.621234][ T7045] loop3: detected capacity change from 0 to 128 [ 178.712212][ T7045] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.712269][ T7045] hpfs: filesystem error: improperly stopped [ 178.712284][ T7045] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.712299][ T7045] hpfs: You really don't want any checks? You are crazy... [ 178.712772][ T7045] hpfs: hpfs_map_sector(): read error [ 178.712783][ T7045] hpfs: code page support is disabled [ 178.768015][ T7045] hpfs: hpfs_map_4sectors(): unaligned read [ 178.797030][ T7045] hpfs: hpfs_map_4sectors(): unaligned read [ 178.797051][ T7045] hpfs: filesystem error: unable to find root dir [ 178.893347][ T7053] loop4: detected capacity change from 0 to 128 [ 179.083058][ T7061] xfrm0: entered promiscuous mode [ 179.083086][ T7061] xfrm0: entered allmulticast mode [ 179.368855][ T7064] veth1: entered promiscuous mode [ 179.368884][ T7064] veth1: entered allmulticast mode [ 179.488157][ T7064] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 179.800800][ T7083] tmpfs: Bad value for 'mpol' [ 180.181971][ T7095] loop2: detected capacity change from 0 to 256 [ 180.305124][ T7095] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 180.353917][ T7095] overlayfs: failed to resolve 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/': -22 [ 180.498672][ T7103] loop0: detected capacity change from 0 to 256 [ 180.500139][ T7103] exfat: Deprecated parameter 'utf8' [ 180.503453][ T7103] exfat: Deprecated parameter 'utf8' [ 180.547119][ T7103] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 180.606876][ T7103] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 180.641592][ T7107] netlink: 'syz.1.484': attribute type 3 has an invalid length. [ 180.705104][ T7108] veth1: entered promiscuous mode [ 180.705129][ T7108] veth1: entered allmulticast mode [ 180.918071][ T7108] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 181.082484][ T7115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 181.304138][ T7122] loop1: detected capacity change from 0 to 256 [ 181.316139][ T7122] exfat: Deprecated parameter 'namecase' [ 181.394105][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 181.410359][ T7122] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 181.454834][ T7117] loop2: detected capacity change from 0 to 4096 [ 181.477436][ T7117] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 181.544175][ T7089] loop3: detected capacity change from 0 to 32768 [ 181.607077][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.485'. [ 181.645645][ T7127] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 181.669506][ T7089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.466 (7089) [ 181.771341][ T7117] ntfs3(loop2): ino=19, mi_enum_attr [ 181.934889][ T7089] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.934936][ T7089] BTRFS info (device loop3): using sha256 checksum algorithm [ 182.012944][ T7117] ntfs3(loop2): failed to convert "c46c" to maccyrillic [ 182.137686][ T7117] ntfs3(loop2): ino=20, mi_enum_attr [ 182.245773][ T7089] BTRFS info (device loop3): enabling ssd optimizations [ 182.245799][ T7089] BTRFS info (device loop3): turning on async discard [ 182.245814][ T7089] BTRFS info (device loop3): enabling free space tree [ 182.439214][ T7154] netlink: 9 bytes leftover after parsing attributes in process `syz.0.491'. [ 182.439449][ T7154] 0·: renamed from hsr0 (while UP) [ 182.555719][ T7154] 0·: entered allmulticast mode [ 182.555744][ T7154] hsr_slave_0: entered allmulticast mode [ 182.555765][ T7154] hsr_slave_1: entered allmulticast mode [ 182.580845][ T7154] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 183.176352][ T7172] Invalid ELF header magic: != ELF [ 184.018871][ T822] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.192000][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 184.204115][ T822] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 184.204150][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7 [ 184.204179][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024 [ 184.208662][ T822] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 184.208989][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.209069][ T822] usb 1-1: Product: syz [ 184.209106][ T822] usb 1-1: Manufacturer: syz [ 184.209157][ T822] usb 1-1: SerialNumber: syz [ 184.383088][ T822] usb 1-1: config 0 descriptor?? [ 184.450187][ T7197] netlink: 2800 bytes leftover after parsing attributes in process `syz.1.515'. [ 184.458836][ T822] usb 1-1: no audio or video endpoints found [ 184.607527][ T7201] loop2: detected capacity change from 0 to 2048 [ 184.714637][ T822] usb 1-1: USB disconnect, device number 3 [ 184.812892][ T7201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.863134][ T7201] EXT4-fs error (device loop2): ext4_find_extent:904: inode #2: comm syz.2.513: inode has invalid extent depth: 7 [ 185.150071][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.263383][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.736363][ T7225] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 185.736404][ T7225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.234728][ T7233] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.813095][ T7254] 9p: Could not find request transport: fNx´ëÇrÅHýFlU [ 186.813095][ T7254] [¾G«ÓJäîB3áŸ:•ýŠÓLº~¼\Ç [œ‘8².6¦î>ó [ 186.827238][ T7256] binder: 7252:7256 ioctl c00c6211 ffffffffff600000 returned -14 [ 187.116740][ T7263] netlink: 156 bytes leftover after parsing attributes in process `syz.0.539'. [ 187.116812][ T7263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.539'. [ 187.457599][ T7274] netlink: 'syz.4.546': attribute type 7 has an invalid length. [ 187.457620][ T7274] netlink: 'syz.4.546': attribute type 8 has an invalid length. [ 187.500548][ T7277] loop3: detected capacity change from 0 to 256 [ 187.765701][ T7275] bond1: entered allmulticast mode [ 187.766909][ T7275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.803180][ T7277] FAT-fs (loop3): Directory bread(block 64) failed [ 187.803214][ T7277] FAT-fs (loop3): Directory bread(block 65) failed [ 187.803473][ T7277] FAT-fs (loop3): Directory bread(block 66) failed [ 187.803497][ T7277] FAT-fs (loop3): Directory bread(block 67) failed [ 187.803625][ T7277] FAT-fs (loop3): Directory bread(block 68) failed [ 187.803649][ T7277] FAT-fs (loop3): Directory bread(block 69) failed [ 187.803759][ T7277] FAT-fs (loop3): Directory bread(block 70) failed [ 187.803783][ T7277] FAT-fs (loop3): Directory bread(block 71) failed [ 187.803886][ T7277] FAT-fs (loop3): Directory bread(block 72) failed [ 187.803909][ T7277] FAT-fs (loop3): Directory bread(block 73) failed [ 188.004514][ T7282] bond1 (unregistering): Released all slaves [ 188.352380][ T7290] ip6gre2: entered allmulticast mode [ 188.598121][ T7301] netlink: 232 bytes leftover after parsing attributes in process `syz.3.553'. [ 188.647442][ T7304] openvswitch: netlink: IPv4 tunnel dst address is zero [ 188.729232][ T7302] comedi comedi0: Cannot bond this driver to itself! [ 189.650055][ T7335] netlink: 'syz.2.571': attribute type 3 has an invalid length. [ 189.650082][ T7335] netlink: 'syz.2.571': attribute type 3 has an invalid length. [ 189.692473][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.571'. [ 189.705456][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 189.705481][ T7338] netlink: 3 bytes leftover after parsing attributes in process `syz.3.572'. [ 190.785696][ T7365] ip6gre2: entered allmulticast mode [ 190.997846][ T7377] netlink: 76 bytes leftover after parsing attributes in process `syz.3.590'. [ 191.417075][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.418128][ T7389] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 191.801142][ T7406] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.972540][ T7407] ip6gre1: entered allmulticast mode [ 192.644055][ T7436] loop1: detected capacity change from 0 to 256 [ 192.686297][ T7438] loop3: detected capacity change from 0 to 256 [ 192.743258][ T7436] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 192.819790][ T7436] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 192.973297][ T7438] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 193.102475][ T7441] loop0: detected capacity change from 0 to 2048 [ 193.230297][ T7441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.633144][ T37] audit: type=1800 audit(1776496681.954:1690): pid=7441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.623" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 194.268977][ T7463] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 194.379367][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379480][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454148][ T7463] team0: Device ipvlan1 failed to register rx_handler [ 195.288878][ T822] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 195.459516][ T822] usb 3-1: Using ep0 maxpacket: 32 [ 195.465410][ T822] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 195.465439][ T822] usb 3-1: config 0 has no interface number 0 [ 195.465489][ T822] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 777 [ 195.467838][ T822] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 195.467865][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.467890][ T822] usb 3-1: Product: syz [ 195.467901][ T822] usb 3-1: Manufacturer: syz [ 195.467912][ T822] usb 3-1: SerialNumber: syz [ 195.567885][ T822] usb 3-1: config 0 descriptor?? [ 195.595057][ T7487] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.607947][ T822] redrat3 3-1:0.83: Couldn't find all endpoints [ 195.818438][ T822] usb 3-1: USB disconnect, device number 7 [ 195.915699][ T7503] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 196.137275][ T7503] team0: Device ipvlan1 failed to register rx_handler [ 196.905977][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.077820][ T7523] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 197.193207][ T7527] loop0: detected capacity change from 0 to 16 [ 197.214338][ T7527] erofs (device loop0): mounted with root inode @ nid 36. [ 197.438576][ T37] audit: type=1326 audit(1776496685.754:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 197.477293][ T37] audit: type=1326 audit(1776496685.794:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 197.485005][ T37] audit: type=1326 audit(1776496685.804:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 197.485145][ T37] audit: type=1326 audit(1776496685.804:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 197.485263][ T37] audit: type=1326 audit(1776496685.804:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.1.670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 197.813691][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.818162][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.832239][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.875091][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.907884][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.024272][ T7545] loop0: detected capacity change from 0 to 128 [ 198.241472][ T7544] loop1: detected capacity change from 0 to 4096 [ 198.409669][ T7544] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 198.452896][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.542167][ T7544] ntfs3(loop1): Failed to load $Extend (-22). [ 198.542190][ T7544] ntfs3(loop1): Failed to initialize $Extend. [ 198.996277][ T7557] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 199.343402][ T7565] loop4: detected capacity change from 0 to 1024 [ 199.477881][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.631324][ T822] kernel write not supported for file /dsp (pid: 822 comm: kworker/0:2) [ 199.852891][ T7565] hfsplus: keylen 65060 too large [ 199.853325][ T7565] hfsplus: keylen 65060 too large [ 200.051509][ T5138] Bluetooth: hci3: command tx timeout [ 200.546300][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.923133][ T7600] netlink: 'syz.4.700': attribute type 3 has an invalid length. [ 200.923159][ T7600] netlink: 'syz.4.700': attribute type 3 has an invalid length. [ 200.955393][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.700'. [ 201.205650][ T7596] bond2 (unregistering): Released all slaves [ 201.348448][ T7607] loop4: detected capacity change from 0 to 256 [ 201.358851][ T7607] exfat: Deprecated parameter 'utf8' [ 201.358981][ T7607] exfat: Deprecated parameter 'utf8' [ 201.473588][ T7609] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.604357][ T7607] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 201.792046][ T7615] netlink: 224 bytes leftover after parsing attributes in process `syz.2.707'. [ 201.913862][ T7617] autofs4:pid:7617:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 202.128906][ T5138] Bluetooth: hci3: command tx timeout [ 202.368080][ T7627] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 202.368108][ T7627] netlink: 'syz.0.712': attribute type 3 has an invalid length. [ 202.374627][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'. [ 203.030150][ T7634] loop4: detected capacity change from 0 to 4096 [ 203.115188][ T7634] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 203.199484][ T7636] netlink: 228 bytes leftover after parsing attributes in process `syz.1.719'. [ 203.239912][ T7634] ntfs3(loop4): Failed to load $Extend (-22). [ 203.239939][ T7634] ntfs3(loop4): Failed to initialize $Extend. [ 204.038219][ T7649] netlink: 'syz.1.724': attribute type 3 has an invalid length. [ 204.038248][ T7649] netlink: 'syz.1.724': attribute type 3 has an invalid length. [ 204.096024][ T13] bridge_slave_1: left allmulticast mode [ 204.096139][ T13] bridge_slave_1: left promiscuous mode [ 204.115844][ T7649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 204.144967][ T7651] syz.4.725 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 204.203283][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.210102][ T5138] Bluetooth: hci3: command tx timeout [ 204.621015][ T13] bridge_slave_0: left allmulticast mode [ 204.621044][ T13] bridge_slave_0: left promiscuous mode [ 204.621322][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.978834][ T5930] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 205.160637][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.160666][ T5930] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 205.163058][ T5930] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 205.163090][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.163105][ T5930] usb 2-1: Product: syz [ 205.163115][ T5930] usb 2-1: Manufacturer: syz [ 205.163131][ T5930] usb 2-1: SerialNumber: syz [ 205.666671][ T5930] usb 2-1: 0:2 : does not exist [ 205.666769][ T5930] usb 2-1: unit 3 not found! [ 205.666792][ T5930] usb 2-1: unit 64 not found! [ 205.905898][ T5930] usb 2-1: 1:2 : does not exist [ 206.293286][ T5138] Bluetooth: hci3: command tx timeout [ 206.456031][ T5930] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -16 [ 206.533286][ T5930] usb 2-1: USB disconnect, device number 5 [ 206.784107][ T7664] loop1: detected capacity change from 0 to 4096 [ 206.961992][ T7664] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 207.095435][ T7664] ntfs3(loop1): Failed to load $Extend (-22). [ 207.095461][ T7664] ntfs3(loop1): Failed to initialize $Extend. [ 208.263803][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.349790][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.377291][ T13] bond0 (unregistering): Released all slaves [ 208.400826][ T13] bond1 (unregistering): Released all slaves [ 209.686239][ T7534] chnl_net:caif_netlink_parms(): no params data found [ 210.039382][ T5483] 8021q: adding VLAN 0 to HW filter on device eth1 [ 210.208329][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.216536][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.216841][ T7534] bridge_slave_0: entered allmulticast mode [ 210.232859][ T7534] bridge_slave_0: entered promiscuous mode [ 210.481039][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.483925][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.484277][ T7534] bridge_slave_1: entered allmulticast mode [ 210.492506][ T7534] bridge_slave_1: entered promiscuous mode [ 210.929112][ T13] hsr_slave_0: left promiscuous mode [ 210.970463][ T13] hsr_slave_1: left promiscuous mode [ 210.977446][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.977533][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.026556][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.026584][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.130503][ T13] veth1_macvtap: left promiscuous mode [ 211.130690][ T13] veth0_macvtap: left promiscuous mode [ 211.130910][ T13] veth1_vlan: left promiscuous mode [ 211.131123][ T13] veth0_vlan: left promiscuous mode [ 211.808942][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 211.989658][ T13] team0 (unregistering): Port device team_slave_1 removed [ 212.050039][ T13] team0 (unregistering): Port device team_slave_0 removed [ 212.276049][ T7534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.278314][ T5483] 8021q: adding VLAN 0 to HW filter on device eth2 [ 212.299664][ T7534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.434436][ T7534] team0: Port device team_slave_0 added [ 212.462782][ T7534] team0: Port device team_slave_1 added [ 212.514087][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.514100][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.514120][ T7534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.518211][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.518227][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.518255][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.756819][ T7534] hsr_slave_0: entered promiscuous mode [ 212.764879][ T7534] hsr_slave_1: entered promiscuous mode [ 212.767710][ T7534] debugfs: 'hsr0' already exists in 'hsr' [ 212.767737][ T7534] Cannot create hsr debugfs directory [ 213.553838][ T5483] 8021q: adding VLAN 0 to HW filter on device eth3 [ 213.915167][ T7534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.956351][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.957531][ T7534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 213.995807][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.996592][ T7534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.090963][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 214.092243][ T7534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.160906][ T7534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.365796][ T5483] 8021q: adding VLAN 0 to HW filter on device eth4 [ 214.400619][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.472594][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.495413][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.495533][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.574198][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.574352][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.137726][ T7534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.444280][ T7534] veth0_vlan: entered promiscuous mode [ 215.465037][ T7534] veth1_vlan: entered promiscuous mode [ 215.540133][ T7534] veth0_macvtap: entered promiscuous mode [ 215.562395][ T7534] veth1_macvtap: entered promiscuous mode [ 215.600076][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.625659][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.659660][ T6060] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.661082][ T6060] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.662613][ T6060] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.710192][ T6060] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.351993][ T6060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.352015][ T6060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.436464][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.436486][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.681915][ T7760] random: crng reseeded on system resumption [ 216.981802][ T7772] netlink: 'syz.5.737': attribute type 3 has an invalid length. [ 216.981831][ T7772] netlink: 'syz.5.737': attribute type 3 has an invalid length. [ 216.982723][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.737'. [ 217.011867][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 217.011904][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 217.012220][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 217.173220][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.738'. [ 217.173684][ T7775] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 217.638241][ T7782] loop4: detected capacity change from 0 to 16 [ 217.685984][ T7782] erofs (device loop4): DAX unsupported by block device. Turning off DAX. [ 217.730607][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'. [ 217.815094][ T7782] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 217.836142][ T7782] erofs (device loop4): mounted with root inode @ nid 36. [ 217.866203][ T7782] erofs (device loop4): read error -117 @ 0 of nid 36 [ 217.908923][ T32] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 217.976442][ T7768] loop2: detected capacity change from 0 to 32768 [ 217.987800][ T7768] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.748 (7768) [ 218.099905][ T32] usb 6-1: Using ep0 maxpacket: 16 [ 218.115534][ T32] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.148422][ T32] usb 6-1: config 7 has an invalid interface number: 192 but max is 0 [ 218.148462][ T32] usb 6-1: config 7 has an invalid interface descriptor of length 2, skipping [ 218.148483][ T32] usb 6-1: config 7 has no interface number 0 [ 218.148531][ T32] usb 6-1: config 7 interface 192 altsetting 9 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 218.148560][ T32] usb 6-1: config 7 interface 192 altsetting 9 endpoint 0x8C has an invalid bInterval 92, changing to 7 [ 218.148588][ T32] usb 6-1: config 7 interface 192 altsetting 9 endpoint 0x8C has invalid maxpacket 18327, setting to 1024 [ 218.148617][ T32] usb 6-1: config 7 interface 192 altsetting 9 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 218.148645][ T32] usb 6-1: config 7 interface 192 has no altsetting 0 [ 218.265648][ T32] usb 6-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 218.265680][ T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.265702][ T32] usb 6-1: Product: syz [ 218.265718][ T32] usb 6-1: Manufacturer: syz [ 218.265733][ T32] usb 6-1: SerialNumber: syz [ 218.447987][ T7768] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 218.448028][ T7768] BTRFS info (device loop2): using xxhash64 checksum algorithm [ 218.740375][ T32] rndis_host 6-1:7.192: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 218.937471][ T7768] BTRFS info (device loop2): enabling ssd optimizations [ 218.937499][ T7768] BTRFS info (device loop2): turning on async discard [ 218.937516][ T7768] BTRFS info (device loop2): enabling free space tree [ 219.039003][ T7815] loop4: detected capacity change from 0 to 1024 [ 219.060785][ T32] usb 6-1: USB disconnect, device number 2 [ 219.122876][ T9] IPVS: starting estimator thread 0... [ 219.221884][ T7822] IPVS: using max 10 ests per chain, 24000 per kthread [ 219.599360][ T5824] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 219.947401][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947441][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947470][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947499][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947527][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947555][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947589][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947617][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947645][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 219.947673][ T9] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 220.200408][ T9] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz0 [ 220.658217][ T7831] fido_id[7831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 221.102997][ T7846] Illegal XDP return value 2013265923 on prog (id 37) dev N/A, expect packet loss! [ 221.216156][ T7828] loop1: detected capacity change from 0 to 32768 [ 221.565359][ T7851] loop4: detected capacity change from 0 to 4096 [ 222.351457][ T37] audit: type=1326 audit(1776496710.674:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff80344d609 code=0x7ffc0000 [ 222.351514][ T37] audit: type=1326 audit(1776496710.674:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80344c819 code=0x7ffc0000 [ 222.351919][ T37] audit: type=1326 audit(1776496710.674:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff80340957b code=0x7ffc0000 [ 222.352425][ T37] audit: type=1326 audit(1776496710.674:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ff803408c6c code=0x7ffc0000 [ 222.352584][ T37] audit: type=1326 audit(1776496710.674:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff803408cce code=0x7ffc0000 [ 222.353017][ T37] audit: type=1326 audit(1776496710.674:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff80344c4ab code=0x7ffc0000 [ 222.353070][ T37] audit: type=1326 audit(1776496710.674:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80344c819 code=0x7ffc0000 [ 222.354400][ T37] audit: type=1326 audit(1776496710.674:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80344c819 code=0x7ffc0000 [ 222.354452][ T37] audit: type=1326 audit(1776496710.674:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80344c819 code=0x7ffc0000 [ 222.354723][ T37] audit: type=1326 audit(1776496710.674:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7857 comm="syz.0.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7ff80344c819 code=0x7ffc0000 [ 223.345871][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'. [ 223.413467][ T7876] netlink: 'syz.0.780': attribute type 1 has an invalid length. [ 223.413491][ T7876] netlink: 2096 bytes leftover after parsing attributes in process `syz.0.780'. [ 223.413519][ T7876] netlink: 5 bytes leftover after parsing attributes in process `syz.0.780'. [ 223.446986][ T7854] loop2: detected capacity change from 0 to 32768 [ 223.705404][ T7880] loop4: detected capacity change from 0 to 2048 [ 223.986274][ T7880] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 225.280998][ T7917] IPv6: sit1: Disabled Multicast RS [ 225.320263][ T7917] sit1: entered allmulticast mode [ 225.371244][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.5.802'. [ 225.371268][ T7920] netlink: 152 bytes leftover after parsing attributes in process `syz.5.802'. [ 225.761613][ T7933] ptrace attach of "./syz-executor exec"[7534] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ"[7933] [ 226.663803][ T7912] loop1: detected capacity change from 0 to 32768 [ 227.068842][ T7912] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.486806][ T7974] loop4: detected capacity change from 0 to 512 [ 227.634725][ T7974] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 227.688170][ T7974] EXT4-fs (loop4): orphan cleanup on readonly fs [ 227.780614][ T7942] loop2: detected capacity change from 0 to 32768 [ 227.856827][ T7974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 227.946773][ C0] EXT4-fs (loop4): initial error at time 1776496716: ext4_mb_generate_buddy:1317 [ 227.946813][ C0] EXT4-fs (loop4): last error at time 1776496716: ext4_mb_generate_buddy:1317 [ 227.994890][ T7974] __quota_error: 8 callbacks suppressed [ 227.994910][ T7974] Quota error (device loop4): write_blk: dquota write failed [ 227.994928][ T7974] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 227.995045][ T7974] Quota error (device loop4): write_blk: dquota write failed [ 227.995165][ T7974] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 227.995221][ T7974] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.820: Failed to acquire dquot type 1 [ 227.995245][ T7974] loop4: lost filesystem error report for type 5 error -28 [ 228.059166][ T7942] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 228.158571][ T7974] EXT4-fs (loop4): 1 truncate cleaned up [ 228.216078][ T7942] JBD2: Ignoring recovery information on journal [ 228.251205][ T7974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 228.367783][ T7987] binder: 7986:7987 ioctl c018620c 200000000100 returned -22 [ 228.398871][ T7974] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 228.438887][ T7974] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 228.476531][ T37] audit: type=1326 audit(1776496716.794:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 228.478394][ T37] audit: type=1326 audit(1776496716.794:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 228.525439][ T37] audit: type=1326 audit(1776496716.824:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 228.526008][ T37] audit: type=1326 audit(1776496716.844:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 228.526067][ T37] audit: type=1326 audit(1776496716.844:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 228.526401][ T37] audit: type=1326 audit(1776496716.844:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.5.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 228.734889][ T7993] loop0: detected capacity change from 0 to 512 [ 228.965498][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.971037][ T7993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 228.971208][ T7993] ext4 filesystem being mounted at /162/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.225768][ T7942] JBD2: journal reset failed [ 229.225784][ T7942] (syz.2.810,7942,1):ocfs2_journal_load:1162 ERROR: Failed to load journal! [ 229.225813][ T7942] (syz.2.810,7942,1):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4 [ 229.371169][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 230.251271][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 230.411133][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 230.415566][ T44] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 230.415617][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.459708][ T44] usb 6-1: config 0 descriptor?? [ 230.495031][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 230.912030][ T44] gspca_vc032x: reg_w err -71 [ 230.912059][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912072][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912081][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912091][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912102][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912111][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912121][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912131][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912141][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912150][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912160][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912169][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912179][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912189][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912198][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912208][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912219][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912229][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 230.912244][ T44] gspca_vc032x: Unknown sensor... [ 230.912331][ T44] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 231.127195][ T44] usb 6-1: USB disconnect, device number 3 [ 231.137175][ T5818] ocfs2: Unmounting device (7,1) on (node local) [ 231.206732][ T8045] openvswitch: netlink: Message has 8 unknown bytes. [ 231.206769][ T8045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.744183][ T8057] netlink: 'syz.5.846': attribute type 4 has an invalid length. [ 231.744209][ T8057] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.846'. [ 232.055550][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.107788][ T8069] netlink: 76 bytes leftover after parsing attributes in process `syz.2.852'. [ 232.107818][ T8069] netlink: 76 bytes leftover after parsing attributes in process `syz.2.852'. [ 232.513195][ T8079] loop1: detected capacity change from 0 to 2048 [ 232.653063][ T9] IPVS: starting estimator thread 0... [ 232.728541][ T8079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.748864][ T8087] IPVS: using max 8 ests per chain, 19200 per kthread [ 232.882571][ T8095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.883549][ T8122] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 233.883578][ T8122] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 233.884358][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 233.893005][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 234.088111][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.088135][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.088151][ T44] usb 3-1: Product: syz [ 234.088161][ T44] usb 3-1: Manufacturer: syz [ 234.088172][ T44] usb 3-1: SerialNumber: syz [ 234.225782][ T44] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 234.363528][ T8075] loop5: detected capacity change from 0 to 32768 [ 234.672585][ T8075] jfs_strtoUCS: char2uni returned -22. [ 234.672606][ T8075] charset = euc-jp, char = 0xd4 [ 234.674145][ T8139] netlink: 'syz.1.876': attribute type 4 has an invalid length. [ 234.674164][ T8139] netlink: 17 bytes leftover after parsing attributes in process `syz.1.876'. [ 235.256623][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.880'. [ 235.256650][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.880'. [ 235.259981][ T8148] netlink: 31 bytes leftover after parsing attributes in process `syz.5.880'. [ 235.260045][ T8148] netlink: 'syz.5.880': attribute type 3 has an invalid length. [ 235.260080][ T8148] netlink: 'syz.5.880': attribute type 2 has an invalid length. [ 235.260115][ T8148] netlink: 31 bytes leftover after parsing attributes in process `syz.5.880'. [ 235.260167][ T8148] netlink: 'syz.5.880': attribute type 2 has an invalid length. [ 235.565645][ T32] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.053815][ T8157] loop1: detected capacity change from 0 to 64 [ 237.101798][ T5831] usb 3-1: USB disconnect, device number 8 [ 237.109831][ T32] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 237.110154][ T8163] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 237.110231][ T32] ath9k_htc: Failed to initialize the device [ 237.197695][ T8141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.270170][ T5831] usb 3-1: ath9k_htc: USB layer deinitialized [ 237.529987][ T8165] netlink: 36 bytes leftover after parsing attributes in process `syz.2.889'. [ 237.865076][ T8180] loop0: detected capacity change from 0 to 512 [ 237.881078][ T8180] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 238.019180][ T8180] EXT4-fs (loop0): orphan cleanup on readonly fs [ 238.162882][ T8180] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.897: Block bitmap for bg 0 marked uninitialized [ 238.162920][ T8180] loop0: lost filesystem error report for type 5 error -117 [ 238.171081][ C1] EXT4-fs (loop0): initial error at time 1776496726: ext4_read_block_bitmap_nowait:517 [ 238.171115][ C1] EXT4-fs (loop0): last error at time 1776496726: ext4_read_block_bitmap_nowait:517 [ 238.349095][ T8180] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 238.349124][ T8180] loop0: lost filesystem error report for type 5 error -117 [ 238.382479][ T8180] EXT4-fs (loop0): 1 orphan inode deleted [ 238.422234][ T8180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 238.716613][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.913629][ T8209] openvswitch: netlink: Tunnel attr 4 has unexpected len 8 expected 1 [ 239.068610][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 239.068629][ T37] audit: type=1326 audit(1776496727.384:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 239.069951][ T37] audit: type=1326 audit(1776496727.384:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 239.099920][ T37] audit: type=1326 audit(1776496727.414:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 239.100074][ T37] audit: type=1326 audit(1776496727.424:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 239.100200][ T37] audit: type=1326 audit(1776496727.424:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8210 comm="syz.5.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7c64c819 code=0x7ffc0000 [ 239.413645][ T8221] autofs: Bad value for 'fd' [ 239.521949][ T8224] loop0: detected capacity change from 0 to 128 [ 239.599140][ T8224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.612728][ T8224] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.624676][ T8230] loop1: detected capacity change from 0 to 256 [ 239.815809][ T5826] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.931042][ T8230] FAT-fs (loop1): Directory bread(block 64) failed [ 239.931077][ T8230] FAT-fs (loop1): Directory bread(block 65) failed [ 239.931184][ T8230] FAT-fs (loop1): Directory bread(block 66) failed [ 239.931210][ T8230] FAT-fs (loop1): Directory bread(block 67) failed [ 239.932925][ T8230] FAT-fs (loop1): Directory bread(block 68) failed [ 239.932956][ T8230] FAT-fs (loop1): Directory bread(block 69) failed [ 239.933095][ T8230] FAT-fs (loop1): Directory bread(block 70) failed [ 239.933121][ T8230] FAT-fs (loop1): Directory bread(block 71) failed [ 239.933226][ T8230] FAT-fs (loop1): Directory bread(block 72) failed [ 239.933251][ T8230] FAT-fs (loop1): Directory bread(block 73) failed [ 240.683121][ T8203] loop4: detected capacity change from 0 to 32768 [ 240.700514][ T8203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.907 (8203) [ 241.046678][ T8203] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.046717][ T8203] BTRFS info (device loop4): using sha256 checksum algorithm [ 241.618784][ T8203] BTRFS info (device loop4): enabling ssd optimizations [ 241.618823][ T8203] BTRFS info (device loop4): turning on async discard [ 241.618843][ T8203] BTRFS info (device loop4): enabling free space tree [ 241.888579][ T5823] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.397911][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 242.397938][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 242.398147][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 242.398165][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.945'. [ 242.398181][ T8305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.572342][ T8277] loop5: detected capacity change from 0 to 32768 [ 242.716489][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.884503][ T44] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 242.884538][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.951316][ T8277] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.067750][ T44] usb 3-1: config 0 descriptor?? [ 243.208350][ T8277] XFS (loop5): Ending clean mount [ 243.538389][ T7534] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.548927][ T44] ath6kl: Failed to submit usb control message: -71 [ 243.549072][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 243.549116][ T44] ath6kl: Unable to send get target info: -71 [ 243.588912][ T44] ath6kl: Failed to init ath6kl core: -71 [ 243.590128][ T44] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 243.665662][ T44] usb 3-1: USB disconnect, device number 9 [ 244.461729][ T8341] bond2: option ad_actor_sys_prio: invalid value (0) [ 244.461756][ T8341] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 244.514664][ T8341] bond2 (unregistering): Released all slaves [ 244.519578][ T5807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 244.692702][ T5807] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 244.692735][ T5807] usb 3-1: config 0 has no interface number 0 [ 244.692782][ T5807] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.769897][ T5807] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 244.769930][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.769950][ T5807] usb 3-1: Product: syz [ 244.769965][ T5807] usb 3-1: Manufacturer: syz [ 244.769980][ T5807] usb 3-1: SerialNumber: syz [ 244.824466][ T8326] loop1: detected capacity change from 0 to 32768 [ 244.850439][ T5807] usb 3-1: config 0 descriptor?? [ 244.971576][ T8326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.954 (8326) [ 245.067895][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 245.141052][ T5807] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 245.276926][ T8326] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 245.276964][ T8326] BTRFS info (device loop1): using sha256 checksum algorithm [ 245.324587][ T5807] usb 3-1: USB disconnect, device number 10 [ 245.492060][ T5807] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 245.526886][ T8369] loop0: detected capacity change from 0 to 512 [ 245.661299][ T8369] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.967: bad orphan inode 13 [ 245.661333][ T8369] loop0: lost filesystem error report for type 5 error -117 [ 245.670549][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 245.670572][ C0] EXT4-fs (loop0): initial error at time 1776496733: ext4_orphan_get:1423 [ 245.670591][ C0] EXT4-fs (loop0): last error at time 1776496733: ext4_orphan_get:1423 [ 245.749950][ T8369] ext4_test_bit(bit=12, block=4) = 1 [ 245.749969][ T8369] is_bad_inode(inode)=0 [ 245.749978][ T8369] NEXT_ORPHAN(inode)=0 [ 245.749985][ T8369] max_ino=32 [ 245.749994][ T8369] i_nlink=1 [ 245.750186][ T37] audit: type=1326 audit(1776496734.074:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 245.750230][ T37] audit: type=1326 audit(1776496734.074:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 245.782994][ T37] audit: type=1326 audit(1776496734.094:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 245.783055][ T37] audit: type=1326 audit(1776496734.104:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 245.803321][ T37] audit: type=1326 audit(1776496734.104:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 245.932594][ T37] audit: type=1326 audit(1776496734.244:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 246.013793][ T37] audit: type=1326 audit(1776496734.334:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff59fb3d04e code=0x7ffc0000 [ 246.054244][ T37] audit: type=1326 audit(1776496734.374:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff59fb3d04e code=0x7ffc0000 [ 246.054881][ T37] audit: type=1326 audit(1776496734.374:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 246.055169][ T37] audit: type=1326 audit(1776496734.374:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8371 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff59fb7c819 code=0x7ffc0000 [ 246.171361][ T8369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.201119][ T8369] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.967: Hash code is SIPHASH, but hash not in dirent [ 246.201151][ T8369] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.967: Corrupt directory, running e2fsck is recommended [ 246.244647][ T8369] EXT4-fs warning (device loop0): dx_probe:813: inode #2: comm syz.0.967: Hash code is SIPHASH, but hash not in dirent [ 246.244681][ T8369] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.967: Corrupt directory, running e2fsck is recommended [ 246.244729][ T8369] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.967: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 246.479326][ T8378] loop2: detected capacity change from 0 to 64 [ 246.684380][ T8326] BTRFS error (device loop1): open_ctree failed: -4 [ 246.785320][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.834898][ T8384] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 247.565228][ T8393] netlink: 104 bytes leftover after parsing attributes in process `syz.0.979'. [ 247.565255][ T8393] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 247.988209][ T8403] netlink: 'syz.0.981': attribute type 1 has an invalid length. [ 248.064577][ T8409] loop2: detected capacity change from 0 to 128 [ 248.285256][ T8413] loop1: detected capacity change from 0 to 256 [ 248.361657][ T8410] loop4: detected capacity change from 0 to 4096 [ 248.551726][ T8413] FAT-fs (loop1): Directory bread(block 64) failed [ 248.551762][ T8413] FAT-fs (loop1): Directory bread(block 65) failed [ 248.551800][ T8410] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 248.552973][ T8413] FAT-fs (loop1): Directory bread(block 66) failed [ 248.553006][ T8413] FAT-fs (loop1): Directory bread(block 67) failed [ 248.558853][ T8413] FAT-fs (loop1): Directory bread(block 68) failed [ 248.558886][ T8413] FAT-fs (loop1): Directory bread(block 69) failed [ 248.558988][ T8413] FAT-fs (loop1): Directory bread(block 70) failed [ 248.559015][ T8413] FAT-fs (loop1): Directory bread(block 71) failed [ 248.559132][ T8413] FAT-fs (loop1): Directory bread(block 72) failed [ 248.559165][ T8413] FAT-fs (loop1): Directory bread(block 73) failed [ 248.810400][ T8410] ntfs3(loop4): ino=19, mi_enum_attr [ 249.148967][ T8420] loop2: detected capacity change from 0 to 128 [ 249.185823][ T8410] ntfs3(loop4): failed to convert "c46c" to cp862 [ 249.244069][ T8410] ntfs3(loop4): ino=20, mi_enum_attr [ 249.305641][ T8420] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 249.351464][ T8420] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.658331][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.329442][ T8446] loop0: detected capacity change from 0 to 64 [ 250.332174][ T8447] netlink: 'syz.4.1002': attribute type 3 has an invalid length. [ 250.652779][ T8454] loop4: detected capacity change from 0 to 1024 [ 251.137834][ T8465] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1011'. [ 252.488298][ T8512] gre1: entered promiscuous mode [ 252.873511][ T8521] netlink: 'syz.5.1029': attribute type 29 has an invalid length. [ 253.311884][ T8532] loop2: detected capacity change from 0 to 2048 [ 253.382229][ T8532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.382389][ T8532] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.573156][ T8541] netlink: 'syz.0.1043': attribute type 2 has an invalid length. [ 253.720970][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1041'. [ 253.721015][ T8540] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 253.727700][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.891832][ T8506] loop4: detected capacity change from 0 to 32768 [ 254.081483][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 254.239723][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 254.241580][ T5831] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.241604][ T5831] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.241647][ T5831] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 254.248108][ T5831] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.248139][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.248162][ T5831] usb 1-1: Product: syz [ 254.248177][ T5831] usb 1-1: Manufacturer: syz [ 254.248193][ T5831] usb 1-1: SerialNumber: syz [ 254.501000][ T5831] cdc_ncm 1-1:1.0: skipping garbage [ 254.501030][ T5831] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 254.501078][ T5831] cdc_ncm 1-1:1.0: bind() failure [ 254.645261][ T8552] syz.2.1048 uses obsolete (PF_INET,SOCK_PACKET) [ 254.897393][ T44] usb 1-1: USB disconnect, device number 4 [ 255.151991][ T8556] netlink: 'syz.5.1049': attribute type 2 has an invalid length. [ 255.217733][ T8528] loop1: detected capacity change from 0 to 32768 [ 255.244015][ T8528] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1038 (8528) [ 255.426025][ T8528] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 255.426064][ T8528] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 255.587707][ T5823] read_mapping_page failed! [ 255.587805][ T5823] ERROR: (device loop4): txCommit: [ 255.587805][ T5823] [ 255.701025][ T5823] read_mapping_page failed! [ 255.701186][ T5823] ERROR: (device loop4): txCommit: [ 255.701186][ T5823] [ 255.815927][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816040][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.920798][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 256.083411][ T8528] BTRFS info (device loop1): enabling ssd optimizations [ 256.083438][ T8528] BTRFS info (device loop1): turning on flush-on-commit [ 256.083456][ T8528] BTRFS info (device loop1): turning on async discard [ 256.083472][ T8528] BTRFS info (device loop1): enabling free space tree [ 256.083502][ T8528] BTRFS info (device loop1): force zlib compression, level 3 [ 256.083524][ T8528] BTRFS info (device loop1): max_inline set to 4096 [ 256.090118][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 256.097282][ T44] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 256.097358][ T44] usb 3-1: config 0 has no interface number 0 [ 256.097478][ T44] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.097548][ T44] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 256.097627][ T44] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 256.097714][ T44] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 256.097794][ T44] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 256.097871][ T44] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.097929][ T44] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 256.098003][ T44] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 26159, setting to 1024 [ 256.098073][ T44] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 256.098147][ T44] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.123593][ T44] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 256.123625][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.123648][ T44] usb 3-1: Product: syz [ 256.123664][ T44] usb 3-1: Manufacturer: syz [ 256.123680][ T44] usb 3-1: SerialNumber: syz [ 256.305520][ T44] usb 3-1: config 0 descriptor?? [ 256.312845][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 256.315260][ T8575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.315551][ T8575] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 256.340884][ T44] usb 3-1: will this work? Response EP is not usually 3 [ 256.340909][ T44] usb 3-1: will this work? Image data EP is not usually 2 [ 256.394304][ T44] scsi host1: microtekX6 [ 256.480934][ T5818] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 256.498844][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 256.593870][ T9] usb 6-1: config 251 has an invalid interface number: 202 but max is 0 [ 256.593903][ T9] usb 6-1: config 251 has no interface number 0 [ 256.593966][ T9] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 256.593993][ T9] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 256.594018][ T9] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 256.594047][ T9] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 256.594074][ T9] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 118, changing to 7 [ 256.594103][ T9] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 10102, setting to 1024 [ 256.594131][ T9] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.594160][ T9] usb 6-1: config 251 interface 202 has no altsetting 0 [ 256.727807][ T9] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 256.727841][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.727864][ T9] usb 6-1: Product: syz [ 256.727881][ T9] usb 6-1: Manufacturer: syz [ 256.727897][ T9] usb 6-1: SerialNumber: syz [ 256.824824][ T8579] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 257.103364][ T9] cxacru 6-1:251.202: cxacru_bind: interface has incorrect endpoints [ 257.103515][ T9] cxacru 6-1:251.202: usbatm_usb_probe: bind failed: -19! [ 257.205178][ T44] usb 3-1: USB disconnect, device number 11 [ 257.212091][ T8587] usb 3-1: error -19 submitting URB [ 257.273525][ T9] usb 6-1: USB disconnect, device number 4 [ 258.549012][ T5823] ERROR: (device loop4): diFree: numfree > numinos [ 258.549012][ T5823] [ 258.702888][ T128] ERROR: (device loop4): diFree: numfree > numinos [ 258.702888][ T128] [ 260.025571][ T6060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.770984][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.871636][ T8639] loop5: detected capacity change from 0 to 1024 [ 260.874843][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.878245][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.940312][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.942923][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.252445][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 261.252480][ T37] audit: type=1326 audit(1776496749.574:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.252882][ T37] audit: type=1326 audit(1776496749.574:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.266393][ T37] audit: type=1326 audit(1776496749.584:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.267992][ T37] audit: type=1326 audit(1776496749.584:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.268047][ T37] audit: type=1326 audit(1776496749.584:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.268100][ T37] audit: type=1326 audit(1776496749.584:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.270123][ T37] audit: type=1326 audit(1776496749.584:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.271199][ T37] audit: type=1326 audit(1776496749.594:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.272808][ T37] audit: type=1326 audit(1776496749.594:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8647 comm="syz.1.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe18a11c819 code=0x7ffc0000 [ 261.563947][ T37] audit: type=1326 audit(1776496749.884:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8652 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80344c819 code=0x7ffc0000 [ 261.661106][ T8655] netlink: 'syz.1.1089': attribute type 5 has an invalid length. [ 261.743376][ T8653] loop0: detected capacity change from 0 to 2048 [ 261.785901][ T6060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.907452][ T8653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.134785][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.764454][ T6060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.019531][ T5828] Bluetooth: hci1: command tx timeout [ 263.139493][ T8679] loop1: detected capacity change from 0 to 128 [ 263.162910][ T8679] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 263.187457][ T8679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.216974][ T8676] loop2: detected capacity change from 0 to 4096 [ 263.448245][ T6060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.263246][ T8692] ip6erspan0: entered allmulticast mode [ 264.288566][ T8697] loop2: detected capacity change from 0 to 1024 [ 264.305230][ T8697] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 265.090840][ T5828] Bluetooth: hci1: command tx timeout [ 265.176563][ T8708] bond2 (unregistering): Released all slaves [ 265.615469][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 265.860076][ T8725] loop1: detected capacity change from 0 to 4096 [ 265.867931][ T8725] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 265.932423][ T8725] ntfs3(loop1): ino=19, mi_enum_attr [ 266.028930][ T8725] ntfs3(loop1): failed to convert "c46c" to cp862 [ 266.171515][ T8725] ntfs3(loop1): ino=20, mi_enum_attr [ 266.468001][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1130'. [ 266.782859][ T8751] openvswitch: netlink: IP tunnel dst address not specified [ 266.789723][ T8750] loop2: detected capacity change from 0 to 64 [ 267.169191][ T5828] Bluetooth: hci1: command tx timeout [ 267.316913][ T8760] loop5: detected capacity change from 0 to 1024 [ 267.469377][ T6060] bridge_slave_1: left allmulticast mode [ 267.469408][ T6060] bridge_slave_1: left promiscuous mode [ 267.469708][ T6060] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.749688][ T6060] bridge_slave_0: left allmulticast mode [ 267.749721][ T6060] bridge_slave_0: left promiscuous mode [ 267.749996][ T6060] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.009054][ T8770] loop0: detected capacity change from 0 to 4096 [ 268.013985][ T8770] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 268.233416][ T8770] ntfs3(loop0): ino=19, mi_enum_attr [ 268.351783][ T8770] ntfs3(loop0): failed to convert "c46c" to cp862 [ 268.365961][ T8770] ntfs3(loop0): ino=20, mi_enum_attr [ 269.080875][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 269.238809][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 269.241385][ T9] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 269.241414][ T9] usb 1-1: config 0 has no interface number 0 [ 269.241462][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 269.241493][ T9] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 269.244477][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 269.244510][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.244532][ T9] usb 1-1: Product: syz [ 269.244548][ T9] usb 1-1: Manufacturer: syz [ 269.244565][ T9] usb 1-1: SerialNumber: syz [ 269.249797][ T5828] Bluetooth: hci1: command tx timeout [ 269.370699][ T8802] netlink: 'syz.5.1159': attribute type 6 has an invalid length. [ 269.374961][ T9] usb 1-1: config 0 descriptor?? [ 269.603759][ T9] radio-si470x 1-1:0.35: this is not a si470x device. [ 269.808478][ T9] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 269.838626][ T9] usb 1-1: USB disconnect, device number 5 [ 270.099786][ T6060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.179612][ T6060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.202007][ T6060] bond0 (unregistering): Released all slaves [ 270.464930][ T8638] chnl_net:caif_netlink_parms(): no params data found [ 270.916462][ T8820] comedi comedi0: Minor 8 could not be opened [ 271.538227][ T8808] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 271.823148][ T8840] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1177'. [ 271.823648][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 272.655023][ T8861] loop1: detected capacity change from 0 to 2048 [ 272.687414][ T8861] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.278415][ T8880] netlink: 'syz.0.1196': attribute type 28 has an invalid length. [ 273.278439][ T8880] netlink: 'syz.0.1196': attribute type 3 has an invalid length. [ 273.278455][ T8880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1196'. [ 273.317788][ T8879] loop5: detected capacity change from 0 to 512 [ 273.441867][ T822] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 273.497676][ T8879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.497850][ T8879] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.590678][ T6060] hsr_slave_0: left promiscuous mode [ 273.610092][ T822] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 273.610122][ T822] usb 3-1: config 0 has no interface number 0 [ 273.610170][ T822] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 273.610201][ T822] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.610226][ T822] usb 3-1: config 0 interface 113 has no altsetting 0 [ 273.676987][ T822] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 273.677023][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.677045][ T822] usb 3-1: Product: syz [ 273.677061][ T822] usb 3-1: Manufacturer: syz [ 273.677077][ T822] usb 3-1: SerialNumber: syz [ 273.688021][ T6060] hsr_slave_1: left promiscuous mode [ 273.740621][ T822] usb 3-1: config 0 descriptor?? [ 273.771134][ C0] usb 3-1: NFC: Urb failure (status -71) [ 273.806386][ T8891] loop0: detected capacity change from 0 to 4096 [ 273.849610][ T8891] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 273.853169][ T822] usb 3-1: NFC: Unable to get FW version [ 273.853671][ T822] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 273.889583][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.889612][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.040027][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.040057][ T6060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.055623][ T8891] ntfs3(loop0): ino=19, mi_enum_attr [ 274.056991][ T822] usb 3-1: USB disconnect, device number 12 [ 274.102895][ T7534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.293951][ T8891] ntfs3(loop0): failed to convert "c46c" to cp1250 [ 274.296470][ T8891] ntfs3(loop0): ino=20, mi_enum_attr [ 274.734711][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1201'. [ 274.734737][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1201'. [ 274.824657][ T6060] veth1_macvtap: left promiscuous mode [ 274.824763][ T6060] veth0_macvtap: left promiscuous mode [ 274.825062][ T6060] veth1_vlan: left promiscuous mode [ 274.825258][ T6060] veth0_vlan: left promiscuous mode [ 275.022697][ T8902] loop2: detected capacity change from 0 to 4096 [ 275.040848][ T8902] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 275.331651][ T8902] ntfs3(loop2): ino=19, mi_enum_attr [ 275.447714][ T8902] ntfs3(loop2): failed to convert "c46c" to cp862 [ 275.452644][ T8902] ntfs3(loop2): ino=20, mi_enum_attr [ 275.515535][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1208'. [ 276.941521][ T6060] team0 (unregistering): Port device team_slave_1 removed [ 276.987938][ T8948] loop2: detected capacity change from 0 to 8192 [ 277.000539][ T6060] team0 (unregistering): Port device team_slave_0 removed [ 277.560639][ T5483] 8021q: adding VLAN 0 to HW filter on device eth5 [ 277.561398][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.561741][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.562050][ T8638] bridge_slave_0: entered allmulticast mode [ 277.603432][ T8638] bridge_slave_0: entered promiscuous mode [ 277.767492][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.767830][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.805028][ T8638] bridge_slave_1: entered allmulticast mode [ 277.844960][ T8638] bridge_slave_1: entered promiscuous mode [ 277.868585][ T8962] overlayfs: unescaped trailing colons in lowerdir mount option. [ 278.076794][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.103018][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.505377][ T8638] team0: Port device team_slave_0 added [ 278.554791][ T8638] team0: Port device team_slave_1 added [ 279.142011][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.142030][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.142061][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.172923][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.172977][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.173060][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.487109][ T9003] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 279.487134][ T9003] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1245'. [ 279.839061][ T9013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1247'. [ 280.147459][ T8638] hsr_slave_0: entered promiscuous mode [ 280.147804][ T9017] netlink: 516 bytes leftover after parsing attributes in process `syz.2.1250'. [ 280.174219][ T8638] hsr_slave_1: entered promiscuous mode [ 280.187765][ T8638] debugfs: 'hsr0' already exists in 'hsr' [ 280.187791][ T8638] Cannot create hsr debugfs directory [ 280.387892][ T6060] IPVS: stop unused estimator thread 0... [ 280.717104][ T8988] loop0: detected capacity change from 0 to 32768 [ 280.736111][ T8988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1240 (8988) [ 280.793350][ T8988] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.793385][ T8988] BTRFS info (device loop0): using sha256 checksum algorithm [ 281.117459][ T8988] BTRFS info (device loop0): enabling ssd optimizations [ 281.117489][ T8988] BTRFS info (device loop0): turning on async discard [ 281.117524][ T8988] BTRFS info (device loop0): enabling free space tree [ 281.117543][ T8988] BTRFS info (device loop0): force clearing of disk cache [ 281.117564][ T8988] BTRFS info (device loop0): force zlib compression, level 3 [ 281.117587][ T8988] BTRFS info (device loop0): max_inline set to 0 [ 281.243891][ T5483] 8021q: adding VLAN 0 to HW filter on device eth6 [ 281.488540][ T8988] BTRFS info (device loop0 state M): resize thread pool 8 -> 4 [ 281.508006][ T9055] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1259'. [ 281.549123][ T8988] BTRFS info (device loop0 state M): force compression, level 0 [ 281.590768][ T9057] loop2: detected capacity change from 0 to 16 [ 281.592116][ T9057] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 281.826108][ T9055] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1259'. [ 282.625671][ T9075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1266'. [ 282.728287][ T9081] netlink: 'syz.5.1268': attribute type 1 has an invalid length. [ 282.728311][ T9081] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1268'. [ 282.880510][ T9051] loop1: detected capacity change from 0 to 32768 [ 282.913065][ T9051] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1257 (9051) [ 283.226355][ T9051] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.226389][ T9051] BTRFS info (device loop1): using sha256 checksum algorithm [ 283.578279][ T9051] BTRFS info (device loop1): enabling ssd optimizations [ 283.578308][ T9051] BTRFS info (device loop1): turning on async discard [ 283.578325][ T9051] BTRFS info (device loop1): enabling free space tree [ 283.578343][ T9051] BTRFS info (device loop1): enabling auto defrag [ 283.578361][ T9051] BTRFS info (device loop1): max_inline set to 4096 [ 283.923537][ T8638] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 283.996331][ T8638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.010903][ T8638] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 284.366041][ T8638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.370311][ T8638] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 284.537444][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 284.638591][ T8638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.665490][ T5483] 8021q: adding VLAN 0 to HW filter on device eth7 [ 284.665845][ T9130] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 284.707014][ T8638] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 284.791703][ T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 284.802937][ T5818] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.850179][ T9135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.889386][ T8638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.889913][ T9133] netlink: 'syz.5.1284': attribute type 4 has an invalid length. [ 284.958791][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 284.971955][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.971991][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.972033][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 284.972059][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.050832][ T44] usb 1-1: config 0 descriptor?? [ 285.066638][ T44] hub 1-1:0.0: USB hub found [ 285.272715][ T44] hub 1-1:0.0: 1 port detected [ 285.656569][ T44] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 285.656601][ T44] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 285.692672][ T44] usbhid 1-1:0.0: can't add hid device: -71 [ 285.692801][ T44] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 285.970796][ T44] usb 1-1: USB disconnect, device number 6 [ 286.459988][ T9168] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1294'. [ 286.460281][ T9168] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1294'. [ 286.612792][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1296'. [ 287.136920][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.615357][ T9200] netlink: 'syz.5.1307': attribute type 10 has an invalid length. [ 287.615381][ T9200] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1307'. [ 287.627875][ T8638] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.788053][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.804920][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.902504][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.902673][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.955420][ T9202] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 288.812587][ T5828] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 289.035892][ T5483] 8021q: adding VLAN 0 to HW filter on device eth8 [ 289.038539][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 289.040131][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 289.047696][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 289.059300][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 289.139103][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1322'. [ 289.880237][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.023027][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 290.189839][ T9] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 290.189896][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 290.189926][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 8118, setting to 64 [ 290.189955][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.197351][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 290.197385][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.197415][ T9] usb 3-1: Product: syz [ 290.197432][ T9] usb 3-1: Manufacturer: syz [ 290.197448][ T9] usb 3-1: SerialNumber: syz [ 290.289494][ T9] usb 3-1: config 0 descriptor?? [ 290.291458][ T9254] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 290.578783][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 290.578807][ T9] Registered IR keymap rc-empty [ 290.610319][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 290.614006][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 291.333601][ T9] usb 3-1: USB disconnect, device number 13 [ 291.333687][ C0] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 291.568349][ T9295] __nla_validate_parse: 5 callbacks suppressed [ 291.568369][ T9295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1340'. [ 291.874193][ T8638] veth0_vlan: entered promiscuous mode [ 291.921381][ T5967] udevd[5967]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 291.921528][ T5967] udevd[5967]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 291.984772][ T8638] veth1_vlan: entered promiscuous mode [ 292.346371][ T8638] veth0_macvtap: entered promiscuous mode [ 292.470308][ T8638] veth1_macvtap: entered promiscuous mode [ 292.487544][ T9316] loop2: detected capacity change from 0 to 128 [ 292.604121][ T9316] hpfs: hpfs_map_sector(): read error [ 292.716668][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.851849][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 292.852016][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 292.866251][ T5828] Bluetooth: hci4: hardware error 0x00 [ 292.892991][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.194043][ T149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.211017][ T149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.215006][ T70] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.215789][ T70] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.399389][ T9337] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1358'. [ 294.191943][ T9359] binder: BC_ATTEMPT_ACQUIRE not supported [ 294.191959][ T9359] binder: 9358:9359 ioctl c0306201 2000000002c0 returned -22 [ 295.054300][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.054324][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.170817][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 295.275240][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.275262][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.590735][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 295.865176][ T9364] loop5: detected capacity change from 0 to 32768 [ 296.050599][ T9364] read_mapping_page failed! [ 296.050720][ T9364] ERROR: (device loop5): txCommit: [ 296.050720][ T9364] [ 296.102109][ T9390] bond1 (unregistering): Released all slaves [ 296.472450][ T9399] loop6: detected capacity change from 0 to 64 [ 297.314043][ T9421] loop2: detected capacity change from 0 to 1024 [ 297.333661][ T9421] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 297.333795][ T9421] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 297.334477][ T9421] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: inode #32: comm syz.2.1394: iget: special inode unallocated [ 297.334508][ T9421] fserror_report: 1 callbacks suppressed [ 297.334521][ T9421] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 297.337700][ T9421] EXT4-fs (loop2): Remounting filesystem read-only [ 297.337812][ T9421] EXT4-fs (loop2): no journal found [ 297.337826][ T9421] EXT4-fs (loop2): can't get journal size [ 297.339397][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 297.339420][ C0] EXT4-fs (loop2): initial error at time 1776496785: ext4_get_journal_inode:5896: inode 32 [ 297.339456][ C0] EXT4-fs (loop2): last error at time 1776496785: ext4_get_journal_inode:5896: inode 32 [ 297.531904][ T9421] EXT4-fs (loop2): filesystem is read-only [ 297.591426][ T9421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 297.888590][ T9440] loop6: detected capacity change from 0 to 256 [ 297.929278][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.102707][ T9444] netlink: 'syz.5.1407': attribute type 3 has an invalid length. [ 298.292088][ T9440] FAT-fs (loop6): Directory bread(block 64) failed [ 298.292124][ T9440] FAT-fs (loop6): Directory bread(block 65) failed [ 298.292228][ T9440] FAT-fs (loop6): Directory bread(block 66) failed [ 298.292253][ T9440] FAT-fs (loop6): Directory bread(block 67) failed [ 298.292353][ T9440] FAT-fs (loop6): Directory bread(block 68) failed [ 298.292377][ T9440] FAT-fs (loop6): Directory bread(block 69) failed [ 298.292475][ T9440] FAT-fs (loop6): Directory bread(block 70) failed [ 298.292499][ T9440] FAT-fs (loop6): Directory bread(block 71) failed [ 298.292607][ T9440] FAT-fs (loop6): Directory bread(block 72) failed [ 298.292631][ T9440] FAT-fs (loop6): Directory bread(block 73) failed [ 298.665452][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'. [ 298.665511][ T9454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1411'. [ 298.965291][ T9459] netlink: 'syz.1.1413': attribute type 46 has an invalid length. [ 299.176526][ T9466] loop2: detected capacity change from 0 to 64 [ 299.548194][ T9472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.265873][ T9495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1431'. [ 300.295230][ T9496] netlink: 'syz.1.1430': attribute type 10 has an invalid length. [ 300.409574][ T9496] team0: Device veth1_vlan failed to register rx_handler [ 300.584840][ T9505] netlink: 'syz.2.1433': attribute type 1 has an invalid length. [ 300.814990][ T9510] loop2: detected capacity change from 0 to 512 [ 300.896970][ T9510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.897122][ T9510] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.438502][ T9480] loop5: detected capacity change from 0 to 32768 [ 301.487826][ T9480] BTRFS info: device /dev/loop5 (7:5) using temp-fsid a2e0f31f-5a30-490b-a8ef-df99599ca5b4 [ 301.487893][ T9480] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1423 (9480) [ 301.538037][ T9510] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.1434: corrupted inode contents [ 301.630768][ T9510] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.1434: mark_inode_dirty error [ 301.694769][ T9510] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.1434: corrupted inode contents [ 301.715787][ T9510] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1434: mark_inode_dirty error [ 302.126746][ T9480] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 302.126784][ T9480] BTRFS info (device loop5): using sha256 checksum algorithm [ 302.456470][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.271117][ T9480] BTRFS error (device loop5): open_ctree failed: -4 [ 303.903205][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1459'. [ 304.646010][ T9605] bond1 (unregistering): Released all slaves [ 305.048833][ T9610] caif0: entered promiscuous mode [ 305.048870][ T9610] caif0: entered allmulticast mode [ 305.128841][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 305.304886][ T9] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 305.304918][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 305.307453][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 305.307486][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.307508][ T9] usb 2-1: Product: syz [ 305.307524][ T9] usb 2-1: Manufacturer: syz [ 305.307539][ T9] usb 2-1: SerialNumber: syz [ 305.393224][ T9] usb 2-1: config 0 descriptor?? [ 305.621267][ T9] mos7840 2-1:0.0: required endpoints missing [ 305.861110][ T32] usb 2-1: USB disconnect, device number 6 [ 306.187738][ T9657] loop6: detected capacity change from 0 to 2048 [ 306.211177][ T9657] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 306.237285][ T9657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.336903][ T9657] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 144 with incorrect tag 100 [ 307.098806][ T9691] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 307.231607][ T822] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 307.393821][ T822] usb 1-1: Using ep0 maxpacket: 8 [ 307.403975][ T822] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 14129, setting to 64 [ 307.404014][ T822] usb 1-1: config 0 interface 0 has no altsetting 0 [ 307.433435][ T822] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 307.433469][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.433490][ T822] usb 1-1: Product: syz [ 307.433505][ T822] usb 1-1: Manufacturer: syz [ 307.433520][ T822] usb 1-1: SerialNumber: syz [ 307.498519][ T822] usb 1-1: config 0 descriptor?? [ 307.515755][ T822] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 308.021500][ T822] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 308.049080][ T822] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 308.122437][ T822] usb 1-1: USB disconnect, device number 7 [ 309.041004][ T9742] loop6: detected capacity change from 0 to 1024 [ 309.057759][ T9742] hfsplus: Bad value for 'gid' [ 309.566723][ T9753] netlink: 'syz.5.1518': attribute type 1 has an invalid length. [ 309.566747][ T9753] netlink: 'syz.5.1518': attribute type 3 has an invalid length. [ 309.566764][ T9753] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1518'. [ 309.741177][ T9757] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 309.869231][ T9755] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 310.016179][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1522'. [ 310.060859][ T9757] team0: Cannot enslave team device to itself [ 310.720620][ T9742] loop6: detected capacity change from 0 to 32768 [ 310.740909][ T9742] JFS: Invalid value of umask [ 310.817705][ T9775] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 311.246213][ T9786] loop2: detected capacity change from 0 to 256 [ 311.353850][ T9786] FAT-fs (loop2): Directory bread(block 64) failed [ 311.353889][ T9786] FAT-fs (loop2): Directory bread(block 65) failed [ 311.353996][ T9786] FAT-fs (loop2): Directory bread(block 66) failed [ 311.354022][ T9786] FAT-fs (loop2): Directory bread(block 67) failed [ 311.354124][ T9786] FAT-fs (loop2): Directory bread(block 68) failed [ 311.354149][ T9786] FAT-fs (loop2): Directory bread(block 69) failed [ 311.354274][ T9786] FAT-fs (loop2): Directory bread(block 70) failed [ 311.354298][ T9786] FAT-fs (loop2): Directory bread(block 71) failed [ 311.354398][ T9786] FAT-fs (loop2): Directory bread(block 72) failed [ 311.354421][ T9786] FAT-fs (loop2): Directory bread(block 73) failed [ 312.254767][ T9815] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1557'. [ 312.427551][ T9818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.730806][ T9833] loop2: detected capacity change from 0 to 164 [ 312.996029][ T9839] libceph: resolve '4' (ret=-3): failed [ 313.024422][ T9833] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 313.460846][ T9851] loop2: detected capacity change from 0 to 2048 [ 313.493812][ T9851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 313.673378][ T9854] loop5: detected capacity change from 0 to 2048 [ 313.695807][ T9854] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 313.748300][ T9854] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.634578][ T32] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 314.698220][ T9879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.783482][ T32] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 314.783514][ T32] usb 3-1: config 1 has no interface number 0 [ 314.783561][ T32] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 314.783591][ T32] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 314.783618][ T32] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 314.783643][ T32] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 314.786740][ T32] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 314.786771][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.786794][ T32] usb 3-1: Product: syz [ 314.786809][ T32] usb 3-1: Manufacturer: syz [ 314.786825][ T32] usb 3-1: SerialNumber: syz [ 314.895171][ T9871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 314.895461][ T9871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.028905][ T5930] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 315.113137][ T9871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.113495][ T9871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 315.137714][ T32] usb 3-1: No status endpoint found [ 315.210925][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 315.214889][ T5930] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 315.214917][ T5930] usb 7-1: config 0 has no interface number 0 [ 315.214965][ T5930] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 315.218309][ T5930] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 315.218336][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 315.218356][ T5930] usb 7-1: Product: syz [ 315.218369][ T5930] usb 7-1: SerialNumber: syz [ 315.298919][ T9889] comedi comedi3: pcl812: I/O base address or length out of range [ 315.345891][ T32] usb 3-1: USB disconnect, device number 14 [ 315.433326][ T5930] usb 7-1: config 0 descriptor?? [ 315.551845][ T5930] cm109 7-1:0.8: invalid payload size 208, expected 4 [ 315.660787][ T5930] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input9 [ 315.943763][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 315.943822][ C0] ------------[ cut here ]------------ [ 315.943830][ C0] URB ffff88803659af00 submitted while active [ 315.943906][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: ktimers/0/16 [ 315.943987][ C0] Modules linked in: [ 315.944027][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.944087][ C0] Tainted: [L]=SOFTLOCKUP [ 315.944108][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 315.944134][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 315.944189][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 87 30 6f fb 49 83 3e 00 74 40 e8 ac b9 05 fb 48 8d 3d f5 d0 da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 b9 05 fb eb 05 e8 8a b9 [ 315.944235][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010283 [ 315.944270][ C0] RAX: ffffffff86beeff4 RBX: ffff88803659af00 RCX: 0000000000040000 [ 315.944301][ C0] RDX: ffffc90002b11000 RSI: ffff88803659af00 RDI: ffffffff8f99c0f0 [ 315.944340][ C0] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000100 [ 315.944366][ C0] R10: dffffc0000000000 R11: fffffbfff1f1a83f R12: 0000000000000820 [ 315.944394][ C0] R13: ffff888035d39bc4 R14: ffff88803659af08 R15: dffffc0000000000 [ 315.944438][ C0] FS: 0000000000000000(0000) GS:ffff888125eba000(0000) knlGS:0000000000000000 [ 315.944467][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.944493][ C0] CR2: 00007ffeae7fb030 CR3: 000000003ad30000 CR4: 00000000003526f0 [ 315.944525][ C0] Call Trace: [ 315.944545][ C0] [ 315.944556][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 315.944633][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 315.944687][ C0] ? ___ratelimit+0x58c/0x8d0 [ 315.944736][ C0] cm109_urb_irq_callback+0x6db/0xc80 [ 315.944794][ C0] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 315.944848][ C0] dummy_timer+0x8a9/0x47d0 [ 315.944915][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 315.944974][ C0] ? lapic_next_event+0x11/0x20 [ 315.945075][ C0] ? clockevents_program_event+0x491/0x630 [ 315.945169][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 315.945242][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 315.945316][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 315.945375][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.945434][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 315.945487][ C0] __hrtimer_run_queues+0x405/0xb10 [ 315.945550][ C0] hrtimer_run_softirq+0x18f/0x260 [ 315.945599][ C0] handle_softirqs+0x1de/0x6d0 [ 315.945658][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 315.945707][ C0] run_ktimerd+0x69/0x100 [ 315.945758][ C0] smpboot_thread_fn+0x541/0xa50 [ 315.945810][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 315.945877][ C0] kthread+0x388/0x470 [ 315.945955][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 315.946003][ C0] ? __pfx_kthread+0x10/0x10 [ 315.946070][ C0] ret_from_fork+0x514/0xb70 [ 315.946108][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 315.946156][ C0] ? __switch_to+0xc79/0x1410 [ 315.946227][ C0] ? __pfx_kthread+0x10/0x10 [ 315.946292][ C0] ret_from_fork_asm+0x1a/0x30 [ 315.946357][ C0] [ 315.946382][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.946415][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.946466][ C0] Tainted: [L]=SOFTLOCKUP [ 315.946484][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 315.946509][ C0] Call Trace: [ 315.946518][ C0] [ 315.946539][ C0] vpanic+0x56c/0xa60 [ 315.946598][ C0] ? __pfx__printk+0x10/0x10 [ 315.946652][ C0] ? __pfx_vpanic+0x10/0x10 [ 315.946701][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 315.946772][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 315.946862][ C0] panic+0xc5/0xd0 [ 315.946908][ C0] ? __pfx_panic+0x10/0x10 [ 315.946964][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 315.947032][ C0] __warn+0x315/0x4c0 [ 315.947078][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 315.947132][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 315.947192][ C0] __report_bug+0x29a/0x540 [ 315.947244][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 315.947302][ C0] ? usb_submit_urb+0x7b/0x18b0 [ 315.947368][ C0] ? __pfx___report_bug+0x10/0x10 [ 315.947409][ C0] ? dev_printk_emit+0xee/0x140 [ 315.947461][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 315.947528][ C0] report_bug_entry+0x19a/0x290 [ 315.947703][ C0] ? usb_submit_urb+0x7e/0x18b0 [ 315.947793][ C0] ? usb_submit_urb+0x83/0x18b0 [ 315.947856][ C0] handle_bug+0xce/0x200 [ 315.947910][ C0] exc_invalid_op+0x1a/0x50 [ 315.947964][ C0] asm_exc_invalid_op+0x1a/0x20 [ 315.948010][ C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 315.948065][ C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 87 30 6f fb 49 83 3e 00 74 40 e8 ac b9 05 fb 48 8d 3d f5 d0 da 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 91 b9 05 fb eb 05 e8 8a b9 [ 315.948109][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010283 [ 315.948141][ C0] RAX: ffffffff86beeff4 RBX: ffff88803659af00 RCX: 0000000000040000 [ 315.948240][ C0] RDX: ffffc90002b11000 RSI: ffff88803659af00 RDI: ffffffff8f99c0f0 [ 315.948268][ C0] RBP: 000000000000000f R08: 0000000000000000 R09: 0000000000000100 [ 315.948293][ C0] R10: dffffc0000000000 R11: fffffbfff1f1a83f R12: 0000000000000820 [ 315.948375][ C0] R13: ffff888035d39bc4 R14: ffff88803659af08 R15: dffffc0000000000 [ 315.948427][ C0] ? usb_submit_urb+0x74/0x18b0 [ 315.948487][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 315.948554][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 315.948609][ C0] ? ___ratelimit+0x58c/0x8d0 [ 315.948687][ C0] cm109_urb_irq_callback+0x6db/0xc80 [ 315.948757][ C0] __usb_hcd_giveback_urb+0x3b3/0x5e0 [ 315.948812][ C0] dummy_timer+0x8a9/0x47d0 [ 315.948871][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 315.948944][ C0] ? lapic_next_event+0x11/0x20 [ 315.948991][ C0] ? clockevents_program_event+0x491/0x630 [ 315.949076][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 315.949154][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 315.949210][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 315.949259][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.949309][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 315.949360][ C0] __hrtimer_run_queues+0x405/0xb10 [ 315.949422][ C0] hrtimer_run_softirq+0x18f/0x260 [ 315.949477][ C0] handle_softirqs+0x1de/0x6d0 [ 315.949534][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 315.949584][ C0] run_ktimerd+0x69/0x100 [ 315.949643][ C0] smpboot_thread_fn+0x541/0xa50 [ 315.949696][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 315.949754][ C0] kthread+0x388/0x470 [ 315.949807][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 315.949879][ C0] ? __pfx_kthread+0x10/0x10 [ 315.949941][ C0] ret_from_fork+0x514/0xb70 [ 315.950003][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 315.950062][ C0] ? __switch_to+0xc79/0x1410 [ 315.950171][ C0] ? __pfx_kthread+0x10/0x10 [ 315.950241][ C0] ret_from_fork_asm+0x1a/0x30 [ 315.950347][ C0] [ 315.950966][ C0] Kernel Offset: disabled