last executing test programs: 3m58.507956521s ago: executing program 0 (id=2014): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60a4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x1f, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0xf, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)={0x40, 0x22, 0x26, {0x26, 0x1, "f70ba381030000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m56.364488463s ago: executing program 0 (id=2058): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}]}}) 3m56.168540418s ago: executing program 0 (id=2049): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0080c, &(0x7f00000003c0)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@volume={'volume', 0x3d, 0x7}}, {@adinicb}, {@adinicb}, {@dmode={'dmode', 0x3d, 0x4}}, {@shortad}, {@uid_forget}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@gid_forget}, {@gid_forget}]}, 0x2, 0xc6e, &(0x7f0000000f40)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000280)='./bus\x00', 0x80020, 0x0, 0x0, 0x0, &(0x7f0000000300)) rmdir(&(0x7f0000000080)='./bus\x00') 3m55.928573144s ago: executing program 0 (id=2052): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 3m55.312321659s ago: executing program 0 (id=2061): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x1, 0x7, 0xfffffffc}) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8040) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffd, 0x6, 0x2, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)='[\x00\x00\x00\x00\x00', 0x0, 0x7, 0x0, 0x0, 0x0}) 3m54.396733291s ago: executing program 0 (id=2071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) 3m54.149076257s ago: executing program 32 (id=2071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r1) 3m42.63825032s ago: executing program 5 (id=2072): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000580)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x3f2}}, {@noload}]}, 0x3, 0x482, &(0x7f0000001240)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 3m41.963067867s ago: executing program 5 (id=2196): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="ab8b2cbd7000002300000f0000000400018044"], 0x18}, 0x1, 0x0, 0x0, 0x20048800}, 0x4044) 3m41.128541977s ago: executing program 5 (id=2203): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000daffffffa2aa853d458f486e"], 0x10) 3m40.710725028s ago: executing program 33 (id=2203): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="10000000daffffffa2aa853d458f486e"], 0x10) 37.014164979s ago: executing program 3 (id=3894): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 36.924274841s ago: executing program 3 (id=3898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x20) 36.825774944s ago: executing program 3 (id=3900): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = semget$private(0x0, 0x6, 0x50e) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x1000}], 0x1, 0x0) 36.599628449s ago: executing program 3 (id=3904): syz_mount_image$jfs(&(0x7f0000000240), &(0x7f00000004c0)='./file1\x00', 0x3010846, &(0x7f0000000500)={[{@iocharset={'iocharset', 0x3d, 'cp874'}}, {@discard_size={'discard', 0x3d, 0xa27}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@discard}, {@discard}, {@errors_remount}, {@discard_size={'discard', 0x3d, 0x2}}, {@errors_remount}, {@errors_continue}, {@nodiscard}, {@noquota}]}, 0x24, 0x6304, &(0x7f0000001f80)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5Drr+4GfXe+u1w5JDIT8nfwNbBwTQuLEazvxC22KCa8NbyUQCn3Bdu21WerYxmuXQCPZNFAiYVRU0TZctAWE2txU5IILWgHKBWqF1AraC9oLBELlIqoCCkiVaAXZas55nmdnzs7O7HrHu2fO+Xwk++c5c2bOM2eeOTO/XX/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ7pbXzXxyJMuy1p/8ry1Z9oLWvzdNbcmXvXq9RwgAAACs1i/zv5+7Pi04tIwbta3zTy/79lfm5+fns/du+LPxz87Ppyumsmx8Y5bl10VP/fB9I+3rBI9lkyOjbZdH+2x+Q5/rx/pcP97n+ok+12/sc/1kn+sX7YBFNhU/j8nvbEf+zy3FLs1uyMbz63Z0udVjIxtHR+PPcnIj+W3mx09ks9mpbCab7li/WHckX/9rt7S29eYsbmu0bVvbWjPkp48ei2MYCft4R8e2Fu4z+vFrs6mf/fTRY39z/tmbutW+u6Hj/opx3r69Nc6PhyXFWEeyjWmfxHGOto1zW5fnZEPHOEfy27X+XR7nc8sc54aFYa6p8nM+mY3m//5Ovp/G2n+sl/bTtrDs57dmWXZpYdjldRZtKxvNNncsGV14fiaLGdm6j9ZUelE2tqJ5essy5mmrHt/ROU/Lr4n4/N8Sbje2xBjan6Yff2yi7Xn/xfyVzNOo9aiXeq2U5+CgXytVmYNxXnwnf9CPd52DO8Ljf/S2pedg17nTZQ6mx902B7f3m4OjExvyMacnYSS/zcIc3N2x/oZ8SyN5fea23nNw1/mHz+6a+8hH75p9+OjJmZMzp/fu3j29d9++AwcO7Doxe2pmuvj7Cvd29W3ORtNrYHvYd/E18MrSuu1Tdf4LE4uOv1f6Opzs8TrcUlp30K/DsfKDG1mbF+TiOV28Nt7d2umTl0ezJV5j+fNzx+pfh+lxt70Ox9peh13fU7q8DseW8TpsrXP2juV9Zhlr+9NtDEu/F6xuDm5pm4PlzyPlOTjozyNVmYOTYV58746l3wu2hfE+vnOln0c2LJqD6eGGY09rSfq8P3kgL93m5c2tK66ZyC7MzZy7+5Gj58+f252FsiZe3DZXyvN1c9tjyhbN19EVz9dDsy97/OYuy7eEfTV5V+uvySWfq9Y699zd+7nK392678+OpXuyUAZsrfdnt3fz1v6cyLLPffNjD3790c+9bsn92eo3P75r9Z/FU1/advwdX+L4G/v+54vtpbt6bMP4WPH63ZD2znjH8bjzqRrLj10j+baf27W84/F4+LPWx+MbehyPt5bWHfTxeLz84OLxeKTfTztWp/x8ToZ5cmq69/G4tc7WPSudk2M9j8e3hjoS9v+rQqeQ+qK2ubPUvE3bGhsbD49rLG6hc57u7Vh/PPRmrW09uSd8KEyjXN48vf3WYv0NbbeL1mqeTpXWHfQ8TT/7WmqejvT76duVKT+fk2Fe3LC39zxtrfP0Pas/dm6K/2w7dk70m4PjGyZaYx5PkzA/3mfzm+IcvDs7lp3JTmXH82sn8vk0km9r573LO1ZOhD9rfazc2mMO3l5ad9BzML2PLTX3RsYWP/gBKD+fk2FePHFv7znYWuf1+wf72fX2YsnCj6LbPruWf7621M+8bi7tpqs1V1ojaT2Wb+7v/bPZ1jqnDqy0z+y9n+4MS67psp/Kr9+lXlPHs7XZT1vDOJ89sPR+ao2ntc5nDy5zPh3Ksuzih+7Pf94bfr9y8cJ3v9Lxe5duv9O5+KH7f3LtiX9cyfgBGH7PF2Vz8V7X9pup5fz+HwAAABgKse8fDTXR/wMAAEBtxL4//q/wRP8PAAAAtRH7/rFQkzr0/3/Uf5Wtr3929vmLWUrmzwfx+rQbHijWixnX6XB5an5Ba/n9X5r573+42H1b5cT0aJZlv3jgD7uuv/WBOK7CVBjnU2/oXL7IV+7q/6CzLDvy0MW03fb8+ufD/cfHs9xp0C2CO51l2deu/3S+nan3Xc7r0w8cyeuDlx5/rLXOcweLy/H2z7y4WP8vQ/j30ImjHbd/JuyHH4U6/Zbu+yPe7suXX7Vt/3sWthdvN7L9uvxhP/H+4n7j9+R85rFi/biflxr/1z/15Jdb6z/yiu7jvzjaffxPhvv9Uqj/89Ji/fbnoHU53u4TYfxxe/F2d3/xG13H/9Qni/XPvrFY70iocfu3h8s73vjsbPv+emTkaMfjyt5UrBe3P/3dP8mvj/cX7788/snDlzv2R3l+PP1vxf3sKq0fl8ftRH9f2n7rftrnZ9z+k398pGM/99v+Uw8+89LW/Za3f2dpvbMfuiPf/sL9dX5j01994tNdtxfHc+jvznY8nkPvDK/jsP0n3h/mY7j+f58q7q98rDjyzs7jT1z/81sudjye6M0/K7b/1GtO5nXj5KbN17zg2usuvby177LsOxuL++u3/ZN/faZj/F+4sdgf8fqY0S9vfylx++c+vPP0mbkLs8fTXn30+vy7c95ajCeO9/pwbC1fPnzm/Admzk1NT01n2VR9v0Lvin0x1J8U5VLvtecXHUHveCg8nzf/xdc23/avn4rL//3dxfLLbynet14Z1vtMWL4lPH8r2/5iT9xyY/76Hnk6jHB+8fcFr8a2Hf91oN/3++bC4y9/Lojz/exLPpDvh9Z1+ftGfF2vcvzfP17cz1fDfp0P38y8/caF7bWvH78b4fK7itf7qvdfOMzF5/Vvw/P9th8V9x/HFR/v98PnmG9s7Tzexfnx1Yuj5fvPv8XjUjieZJeK6+NacX9ffu7GrsOL30OSXbopv/yn6X5uWtHDXMrcR+Z2nZo9feGRXedn5s7vmvvIRw8/fObC6fOH8+/yPPzBfrdfOD5tzo9Px2f23ZPlR6szRbnK1nv8Zx86dnz/9G3HZ04cvXDi/ENnZ86dPDY3d2zm+NxtR0+cmPlwv9vPHr9v956De/fv2Xly9vh9Bw4e3Htw5+zpM61hFIPqY9/07+88fe5wfpO5++45uPvee++Z3vnwmeMz9+2fnt55od/t8/emna1b/8HOczOnjp6ffXhm59zsR2fu231w3749fb8N8OGzJ+amdp27cHrXhbmZc7uKxzJ1Pl/ceu/rd3vqae4HxefZspHii/iyd9y5L30/a8uXPrbkXRWrlL5A9NnwXTTfeuHZA8u5HPv+8VCTOvT/AAAAQC72/ROhJvp/AAAAqI3Y928MNdH/AwAAQG3Evn8y1PRfAhrS/69l/r/squT/t15c1vbl/+X/2/eX/H/D8v/vqlr+vzheyP8Pxmrz903I/y9rRfl/+X/5f/l/+X8GoGr5/9j3b8oyv/8HAACAmop9/+ZQE/0/AAAA1Ebs+68JNdH/AwAAQG3Evv8FoSYN6f/l/+X/5f/l/+X/u29f/n84yf/3VrH8/2R5gfz/+uf/s2bl/y8NcvzrkP/f1H5B/p8qqlr+P/b914aaNKT/BwAAgCaIff91oSb6fwAAAKiN2PdfH2qi/wcAAIDaiH3/llCThvT/8v+ryv+nzNXw5v+LLcv/y//L/8v/14X8f28Vy/8vIv+//vl/5/8fqvx/B/l/qqhq+f/Y978w1KQh/T8AAAA0Qez7XxRqov8HAACA6hm7spvFvv/FoSaL+v8r3AAAAACw7mLff0NWCoI35Pf/8v/O/1/Z8/+Py//L/xeqn//fkMn/V4f8f2/y/30MIv9/Sf5f/l/+X/6fqGr5/7zvzyazl4SaNKT/BwAAgCaIff+NoSb6fwAAAKiN2Pf/v1AT/T8AAADURuz7t4aaNKT/l/+vTf7/5+1PXS3y/87/L/8fVD//7/z/VSL/35v8fx/O/y//L/8v/89AzXXtlNYv/x/7/ptCTRrS/wMAAEATxL7/5lAT/T8AAADURuz7/3+oif4fAAAAaiP2/dtCTRrS/8v/Vzz/H5OjTTz/v/y//H9Q5fz/pPx/5cj/9yb/34f8v/y//L/8PwM194Pi82zZeuX/Y9//0lCThvT/AAAA0ASx739ZqIn+HwAAAGoj9v0vDzXR/wMAAEBtxL5/KtSkIf3/SvL/I5fk/5dylc//P7GM8/93kP9fl/z/mPx/oUn5/0z+v3Lk/3uT/+9D/l/+X/5f/p+Bqlr+P/b9t4SaNKT/BwAAgCaIff/2UBP9PwAAANRG7PtvDTXR/wMAAEBtxL5/R6hJQ/p/5/8fivx/Jv8/FPl/5/8P5P+7k/9fG/L/vcn/9yH/L/8v/y//z0BVLf8f+/5XhJo0pP8HAACAJoh9/22hJvp/AAAAqI3Y978y1ET/DwAAALUR+/7bQ00a0v/L/8v/y//L/8v/d9/+muf/L8n/D4L8f2/y/33I/8v/y//L/zNQVcv/x77/VaEmDen/AQAAoAli339HqIn+HwAAAGoj9v13hpro/wEAAKA2Yt+/M9SkIf2//L/8fz3z//8h/99j+/L/Fc3/O///QMj/9yb/34f8v/z/IPL/42GB/L/8P+ue/4+f1+Ll2PffFWrSkP4fAAAAmiD2/XeHmuj/AQAAoDZi378r1ET/DwAAALUR+/7pUJOG9P/y//L/9cz/O/9/r+2vKv//8oX7lf8vyP9Xi/x/b/L/fQwy/79R/r+x+f9Vnf9/XP6fWlnv/H/5cuz7d4eaNKT/BwAAgCaIff+eUBP9PwAAANRG7Pv3hpro/wEAAKA2Yt9/T6hJQ/p/+X/5f/l/+X/n/+++ffn/4ST/39vg8//xIcr/O/+//P9g8v/O/0+9VC3/H/v+e0NNGtL/AwAAQBPEvn9fqIn+HwAAAGoj9v37Q030/wAAAFAbse8/EGrSkP5f/l/+X/5f/l/+v/v25f+Hk/x/b87/34f8v/z/EOf/W3NL/p+qqVr+P/b9B0NNGtL/AwAAQBPEvv/VoSb6fwAAAKiN2Pf/SqiJ/h8AAAAqaOKKbhX7/l8NNWlI/y//L/8v/y//v875//F++f8J+X/5/xWQ/+9N/r8P+X/5/yHO/y9x/v9rw9Xy/6yLquX/Y99/X6hJQ/p/AAAAaILY9/9aqIn+HwAAAGoj9v2vCTXR/wMAAEBtxL7/UKhJQ/p/+f81yv/HhZXN/8cks/x/vkD+3/n/5f+Hlvx/b/L/fcj/y//XL/8/6PP/l9+mE/l/uqla/j/2/a8NNWlI/w8AAABNEPv++0NN9P8AAABQG7Hvf12oif4fAAAAaiP2/a8PNWlI/y//7/z/63/+//GOscv/L9xO/r8g/y//vxLy/73J//ch/y//L//v/P8MVNXy/7Hvf0OoSUP6fwAAAGiC2Pe/MdRE/w8AAAC1Efv+N4Wa6P8BAACgNmLf/+ZQk4b0//L/8v/rn/93/n/5/4L8v/z/IMj/9yb/34f8v/y//L/8PwNVtfx/7Pt/PdSkIf0/AAAANEHs+x8INdH/AwAAQG3Evv8toSb6fwAAAKiN2Pe/NdSkIf2//L/8v/y//L/8f/fty/8PJ/n/3oYs///L68Jy+f+C/H+1x7/S/P9Y6fJVyf//cKn8//zG8u3l/7kaqpb/j33/20JNGtL/AwAAQBPEvv/toSb6fwAAAKiN2Pe/I9RE/w8AAAC1Efv+3wg1aUj/L//fGsdCeln+X/4/XyD/L/8v/z+05P97S/n/57q9c7WpRv7f+f9L5P+rPX7n/5f/Z7Gq5f9j3//OUJOG9P8AAADQBLHvfzDURP8PAAAAtRH7/neFmuj/AQAAoDZi3//uUJOG9P/y/87/L/8v/y//33378v/DSf6/tyE7/7/8f4n8f7XHf1Xy//8p/89wq1r+P/b9D4WaNKT/BwAAgCaIff97Qk30/wAAAFAbse//zVAT/T8AAADURuz73xtq0pD+X/5/WPL/U/L/K8z/T4Rl8v/y//L/zSL/35v8fx/y//L/Vcv/O/8/Q65q+f/Y978v1GT5/f/kstcEAAAArqbyr5OS2Pf/VqhJQ37/DwAAAE0Q+/7fDjXR/wMAAEBtxL7/d0JNGtL/y/8PS/7f+f8z5/+X/y89Hvl/+f9u1i7/H488K8r/b+y3ffl/+X/5/+Edv/y//D+LVS3/H/v+3w01aUj/DwAAAE0Q+/73h5ro/wEAAGAodPs/2WWx7z8caqL/BwAAgNqIff+RUJOG9P/y//L/8v8Vzf//+fZ//t63335kt/y//L/8/4qs6fn/Wy9+5/+X/5f/T+T/5f/l/ymrWv4/9v1HQ00WGr+3OsE/AAAADLfY9/9eqElDfv8PAAAATRD7/mOhJvp/AAAAqI3Y9x8PNWlI/y//v475/7Esy+T/5f9reP7/uD+GKf+/c+MQ5f/jQVf+v6s1zf+/ZyEnLv+/0vz/RNel5fz/iPx/B/n/FY//W1mWrdn4L/6L/L/8P2VVy//Hvn8m1KQh/T8AAAA0Qej7R08UdeEK/T8AAADURuz7T4aa6P8BAACgNmLf/4FQk4b0//L/zv8v/y//7/z/3bdf2fy/8//3JP/fW3Xy/905/7/8/zCP3/n/5f9ZrGr5/9j3z4aaNKT/BwAAgCaIff8HQ030/wAAAFAbse//P/bu5MvSur7j+C2oPt19ODknuyyySPZZZZMNi7DKIvkDsmDDJuckISEDmaPSOI84zwN6VMQBB1BEVBRnwQlFHFFxBnHCCVFpD13f77emp55b1X2r7nN/v9dr4ReKLu6lD3bz6eLNc2ncYv8DAABAM3L3/1Pc0sn+1//r/5vs/4/r/8deX/+v/2+Z/n+c/n8O/b/+X/+v/2ehptb/5+7/57ilk/0PAAAAPcjdf1ncYv8DAABAM3L3/0vcYv8DAABAM3L3/2vc0sn+1//r/5vs///q/n94+C/1/3u9vv5f/98y/f84/f8c+n/9v/5f/89CTa3/z93/b3FLJ/sfAAAAepC7/9/jFvsfAAAAmpG7//K4xf4HAACAZuTu/4+4pbX9f2z4wzv6/7VZn/1/Zrz6/5b6f8//3/P19f/6/5Ydbf9/5SM/8un/9f/6/6D/1//r/9lpav1/7v7/jFta2/8AAADQsdz9/xW32P8AAADQjNz9/x232P8AAADQjNz9/xO3dLL/Pf/f8//1//p//f/w6+v/V5Pn/4/rqf+//M4LLnvgxj++6SCvr//X/+v/9f8s1tT6/9z9/xu3dLL/AQAAoAe5+/8vbrH/AQAAoBm5+/8/brH/AQAAYAWdHPxo7v5HxS2d7H/9v/5f/x/9/wn9v/5f/98C/f+4Zff/Qz9fbuX5/+33/5cu5J0u7/2P0f/r/9ltav1/7v5Hxy2d7H8AAADoQe7+x8Qt9j8AAABM17x/sWyH3P1XxC32PwAAADQjd/+puKWT/a//P/z+/3f6/9Xo/z3/X/+v/2+C/n/csvv/efT/7ff/h2nZ71//r/9nt6n1/7n7r4xbOtn/AAAA0IPc/Y+NW+x/AAAAaEbu/sfFLfY/AAAANCN3/+Pjlk72v/7f8//1//r/o+//N36w1f9vfq/q/xdH/z9O/z+H/v9c+/lj+n/9v/6frQ7Y/z808sP2Qvr/3P1PiFs62f8AAADQg9z9T4xb7H8AAABoRu7+J8Ut9j8AAAA0I3f/k+OWTvZ/D/3/+sA30//r/7d+f+n/z7L/3/233hme/z9M/3809P/jJtP/rw397Kz/b6D/9/x//b/+n22m9vz/3P1PiVs62f8AAADQg9z9T41bRvb/gX8xHwAAAFiq3P1Pi1t8/R8AAABWXlZnufufHrd0sv976P+H6P/1/1u/v/T/R/38/9Xv/2/a8v70/9Oi/x83mf5/D/p//f8qv3/9v/6f3abW/+fuf0bc0sn+BwAAgB7k7r8qbrH/AQAAoBm5+58Zt9j/AAAA0Izc/c+KWzrZ/8P9/+Yfn3T/vzMSnun/k/6/7f4//4z6/9H+/yLP/++T/n+c/n8O/b/+X/+/V/9/ct7n6/8ZMrX+P3f/s+OWTvY/AAAA9CB3/3PiFvsfAAAAmpG7/7lxi/0PAAAAzcjd/7y4pZP97/n/+n/9/+r1/57/v2GZz/+fHXn/v67/36fl9v9rD+fPoPr/s3v/+n/9/yq//yb7/2Oz7c//H/mvAOj/GTK1/j93//Pjlk72PwAAAPQgd/8L4hb7HwAAAFbD1n93YOhZcbNZ7f4Xxi32PwAAADQjd/+L4pZ29v/oszr1//p//f+ZT9f/6/8H+v/12XT6f8//3y/P/x+n/59D/38Y/fx6Y/3/1Xt9/hT6/ysO7/n/fz7v8/X/DNnW/9+y+fFl9f+5+18ct7Sz/wEAAKB7uftfErfY/wAAANCM3P0vjVvsfwAAAGhG7v6XxS2d7P9D7/9H/usD+n/9/0T6f8//1/8Pvv60nv+v/98v/f84/f8c+n/P//f8f/0/527LPzJu6/+3WFb/n7v/5XFLJ/sfAAAAepC7/xVxi/0PAAAAzcjdf3XcYv8DAABAM3L3vzJu6WT/e/6//l//r//X/w+/vv5/NZ1Tf3+e/r/o//X/+n/9v/6fBZha/7999/e3/wEAAKAHrzrzvyfi1+vtfwAAAGhR7v5Xxy32PwAAADQjd/9r4pZO9r/+/3D7//y4/l//P9P/6//1/0ei2+f/rw39TLTbHv3/7X9/6m+2f0T/r//X/+v/9f/s0x+O/LFJ9P+nN//pMnf/a+OWTvY/AAAA9CB3/zVxi/0PAAAAzcjd/7q4xf4HAACAZuTuvzZuOeD+H2sepkz/7/n/+n/9v/5/+PX1/6up2/5/nzz/fw79v/5f/6//Z6Em0f9v+f3c/a+PW3z9HwAAAJqRu/8NcYv9DwAAAM3I3f/GuMX+BwAAgGbk7n9T3NLJ/tf/6//1//p//f/w6+v/V5P+f5z+f45V6v+vPYf+f334w8vu58/Vst+//l//z25T6/9z918Xt3Sy/wEAAKAHufvfHLfY/wAAANCM3P1viVvsfwAAAGhG7v63xi2d7H/9v/5f/6//1/8Pv77+fzXp/8fp/2ez2fUjb2Co/z99fJr9v+f/T+796//1/+w2tf4/d//b4pZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcve/PW7pZP/r//X/+n/9v/5/+PX1/6tJ/z9O/z/HKj3/X/8/ufev/9f/s9vU+v/c/e+IWzrZ/wAAANCD3P03xi32PwAAADQjd/874xb7HwAAAJqRu/+muKWT/a//1//r//X/A/3/mf+r6//1/6vo8Pr/mf5f/6//n0P/r//X/7PT1Pr/3P3vils62f8AAADQg9z9N8ct9j8AAAA0I3f/u+MW+x8AAACakbv/PXFLJ/tf/6//1//r/yf4/P/1rX8+/b/+/yA8/3+c/n8O/b/+X/+v/2ehhvv/K5bW/+fuf2/c0sn+BwAAgB7k7r8lbrH/AQAAoBm5+98Xt9j/AAAA0Izc/e+PWzrZ//p//f/2/n820//r/yfQ/28zof7/rgev+YP6/QX0/ydm+v+F0/+P0//Pof9vs/8/b9ZQ/39yz8/X/zNFU3v+f+7+W+OWTvY/AAAA9CB3/wfiFvsfAAAAmpG7/4Nxi/0PAAAAzcjd/6G4pZP9r//X/y/4+f/3XTLwPvT/G/T/K9//e/7/CtD/j9P/z6H/b7P/9/x//T9LM7X+P3f/h+OWTvY/AAAA9CB3/0fiFvsfAAAAmpG7/6Nxi/0PAAAAzcjd/7G4pZP9r//X/y+4//f8f/2//n8P+v+jof8fp/+fQ//fXP+f/3Sv/9f/sxxT6/9z9388bulk/wMAAEAPcvffFrfY/wAAANCM3P23xy32PwAAADQjd/8n4pZO9r/+X/+v/1/N/v/Etv7//Jn+f/Pb6//7NpX+/8IL//oO/b/+X/+//P7f8//1/yzX1Pr/3P2fjFs62f8AAADQg9z9n4pb7H8AAABoRu7+T8ct9j8AAAA0I3f/Z+KWTvb/7v7/2GyjUN0w1P9Ho6b/30L/v/396/+H//7w/H/9v/7/8E2l//f8/7N7//p//f8qv/8D9f9/uvvz9f+0aGr9f+7+O+KWTvY/AAAA9CB3/2fjFvsfAAAAmpG7/3Nxi/0PAAAAzcjdf2fc0sn+9/x//b/+X/+/8P7/5ns3fkP/v43+/2icZX//F7fGb+j/g/5f/6//7/f5/+fr/1mcqfX/ufs/H7d0sv8BAACgB7n774pb7H8AAABoRu7+L8Qt9j8AAAA0I3f/F+OWTva//l//r//X/3v+//Dr6/9Xk+f/j9P/l51/aRv66f9PDH1w2f38uVr2+2+m//f8fxZoav1/7v4vxS2d7H8AAADoQe7+L8ct9j8AAAA0I3f/V+IW+x8AAACakbv/q3FLJ/tf/6//b7//v0T/v+P19f/6/5bp//Nn9GH6/zn66f8HLbufX/X3r//X/7Pb1Pr/3P13xy2d7H8AAADoQe7+r8Ut9j8AAAA0I3f/1+MW+x8AAACakbv/G3FLJ/tf/99X/78267H/9/x//b/+vyf6/3H6/zn0//p//b/+n4WaWv+fu/+etfUu9z8AAACsqr/9s3+8e7/f9p4z/3ti9s245aLZ6X1+GRsAAACYuEd2/9r6bPatM7/n6/8AAADQotz9345bOtn/+v+++v8+n/+v/9f/6/97MtTfD/0YvRf9f9D/6//1//p//T8LMLX+P3f/d+KWLcNv/cB/lQAAAMCU5O7/btzSydf/AQAAoAe5+78Xt+za//5zgAAAALCqcvd/P27p5Ov/+v+J9/+zQ+r/49vp/zfo//X/Q6+v/19Nnv8/7hz7/9Nr+n/9/wj9v/5f/89O0f+f3PnxZfX/ufvvjVs62f8AAADQqG2/opC7/764xf4HAACAZuTu/0HcYv8DAABAM3L33x+3dLL/9f9H3v9nqn6Iz//fzGs8/7/z/v+qE4Ovr//X/7dM/z/O8//n0P+30v8f1//r/5mG6P93WVb/n7v/h3FLJ/sfAAAAepC7/0dxi/0PAAAAzcjd/+O4xf4HAACAZuTu/0nc0sn+1/9P/Pn/Z9X/7+P5//r/Pvr/PV6/nf7/jy44ddvFf3fDdfp/Nh1l/59/Lxxx/3/8oH/OrfT/c+j/W+n/Pf9f/89ELL7/X9/2wYP2/7n7fxq3dLL/AQAAoAe5+x+IW+x/AAAAaEbu/p/FLfY/AAAANCN3/8/jlk72v/5f/z+V/j+/r5fQ/5866/7/5Gw2W0r/n01x7/2/5//r/3fz/P9x+v859P/6f/2//p+FWnz/v/2DB+3/c/f/Im7pZP8DAABAD3L3/zJuyf2/duBfugcAAAAmJnf/r+IWX/8HAACAZuTufzBu6WT/6//1/1Pp/5Pn/29+XlvP/7+44tQ++/8/qd/S/x8u/f84/f8c+n/9v/5f/89CTa3/z93/67ilk/0PAAAAPcjd/1DcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3dLL/9f+t9v9ZxOv/9f9T6f89/9/z/4+G/n+c/n8O/b/+X/+v/2ehptb/5+7/fQAAAP///9ZcIg==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 35.317064161s ago: executing program 3 (id=3923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1ac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x160, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @loopback, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xa4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 34.628030308s ago: executing program 3 (id=3921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xa74d5f43a5207919}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x20a7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) 34.419216134s ago: executing program 34 (id=3921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x54, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0xa74d5f43a5207919}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x20a7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) 4.05264024s ago: executing program 2 (id=4232): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.99972863s ago: executing program 2 (id=4233): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',iocharset=iso8859-15,dmask=00000000000000100077157,namecase=1,iocharset=iso8859-6,namecase=1,errors=remount-ro,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.772703896s ago: executing program 2 (id=4238): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f0000000740)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@treelog}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@flushoncommit}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 2.644627164s ago: executing program 2 (id=4247): mkdir(&(0x7f0000000040)='proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='proc_mnt\x00', &(0x7f0000000240), 0x1000) 2.481909138s ago: executing program 2 (id=4250): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000002c0)="84c0", 0x2}], 0x2) 2.287044384s ago: executing program 2 (id=4252): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b40)={0x2c, &(0x7f0000000880)={0x40, 0x35, 0x26, {0x26, 0x31, "aa27f10161b71a9d938b5548f75799c3ab3473faadba68caa4d15bb44b654f94bde0ddba"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.971628631s ago: executing program 7 (id=4257): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x35, 0x2, 0x3, 0x5}, {0x61}, {0x0, 0x0, 0xff}, {0x87}]}) 1.950368982s ago: executing program 1 (id=4258): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000500000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) 1.905128303s ago: executing program 1 (id=4259): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x8, 0x4) read(r0, &(0x7f0000000000)=""/149, 0xaa) 1.784050906s ago: executing program 7 (id=4261): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00e7c7698f6023d0938f308c4c3a1a03c6f1ca229b6fedf8d8920fc462352d9e554071b63c1aa30c34a4bc64a39d229c29bf070b25cbb440273f8c429453d5cddf115782f36cf9c149a562d2f282149fd79f06eb6db85d1b7d7dd6678e86cf23a245d8133945cb0baeaa156bc3438e7ae081f7cf4c8a9611587a19298009c8772d9c90ff0088ae9a9a1f3baf250075c35c8baa353c608f48a7d9c6362b17996ee44cef026c98ba42be53ba"], 0x1, 0x177, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) 1.553938721s ago: executing program 1 (id=4266): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10c52, &(0x7f00000008c0)={[{@rodir}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@shortname_lower}, {@shortname_winnt}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '850'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_win95}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}]}, 0x3, 0x27b, &(0x7f0000000640)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.474391653s ago: executing program 7 (id=4268): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0xed}}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 1.473804873s ago: executing program 4 (id=4269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1.300702908s ago: executing program 1 (id=4271): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x20590e85}}, {@noextend}]}}) 1.242091599s ago: executing program 4 (id=4273): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x3, 0x1e8, 0x0}) 1.241397599s ago: executing program 7 (id=4283): r0 = socket(0x1, 0x803, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000007940)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 1.120499972s ago: executing program 7 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 1.097047553s ago: executing program 7 (id=4277): epoll_create1(0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 752.257041ms ago: executing program 6 (id=4284): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002400)={'ip_vti0\x00', &(0x7f0000002300)={'syztnl1\x00', 0x0, 0x7, 0x8000, 0x14, 0x10001, {{0x6, 0x4, 0x2, 0x3e, 0x18, 0x67, 0x0, 0x9, 0x4, 0x0, @remote, @remote, {[@timestamp_prespec={0x44, 0x4, 0x81, 0x3, 0x4}]}}}}}) 677.221644ms ago: executing program 6 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003002000000014000000110001"], 0xec}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6074"], 0x0) 629.298664ms ago: executing program 4 (id=4286): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)='h', 0x1}], 0x1}}], 0x1, 0xc8844) 582.869746ms ago: executing program 6 (id=4287): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 440.404609ms ago: executing program 6 (id=4288): syz_emit_ethernet(0x72, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f00000003c0)={[{@rodir}, {@shortname_win95}, {@numtail}, {@fat=@usefree}, {@uni_xlate}, {@uni_xlateno}, {@fat=@sys_immutable}, {@utf8no}, {@fat=@debug}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_winnt}]}, 0x1, 0x2b4, &(0x7f0000000e40)="$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") statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/38) 411.67055ms ago: executing program 4 (id=4289): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r0, &(0x7f0000000040)=""/27, 0x1b) getdents(r0, &(0x7f00000005c0)=""/180, 0xb4) 374.906451ms ago: executing program 1 (id=4290): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file7\x00', 0x3100888, 0x0, 0xfe, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000040)='./file2\x00', 0x8) 288.713903ms ago: executing program 4 (id=4291): unshare(0x2c020400) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r0, 0x732ac428, 0x5) 288.539923ms ago: executing program 6 (id=4292): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x92b}], 0x3}, 0x0) 237.431084ms ago: executing program 4 (id=4293): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 135.316717ms ago: executing program 6 (id=4294): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x1004001, &(0x7f0000000300)={[{@heartbeat_none}, {@heartbeat_none}, {@commit={'commit', 0x3d, 0x6}}, {@barrier={'barrier', 0x3d, 0x2}}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@intr}]}, 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 0s ago: executing program 1 (id=4295): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) kernel console output (not intermixed with test programs): .134146][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/811.tmp-b7:3' failed: Read-only file system [ 343.415508][T12830] loop6: detected capacity change from 0 to 8 [ 343.673078][T12830] SQUASHFS error: lzo decompression failed, data probably corrupt [ 343.715944][T12830] SQUASHFS error: Failed to read block 0x82: -5 [ 343.728647][T12830] SQUASHFS error: Unable to read metadata cache entry [80] [ 343.759569][T12830] SQUASHFS error: Unable to read inode 0x11f [ 344.345558][ T4267] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 344.508478][T12863] loop1: detected capacity change from 0 to 512 [ 344.640818][T12863] EXT4-fs (loop1): Ignoring removed oldalloc option [ 344.692999][T12863] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 344.768088][T12863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 344.821312][T12863] EXT4-fs (loop1): orphan cleanup on readonly fs [ 344.827857][T12863] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.3323: bad orphan inode 267 [ 344.929405][ T4267] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.955106][ T4267] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.964226][T12863] EXT4-fs (loop1): Remounting filesystem read-only [ 344.977398][T12863] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,noblock_validity,discard,errors=remount-ro,lazytime. Quota mode: none. [ 345.024944][T12863] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.3323: dx entry: limit 0 != root limit 125 [ 345.084667][ T4267] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 345.094010][T12863] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3323: Corrupt directory, running e2fsck is recommended [ 345.107461][ T4267] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 345.149359][ T4267] usb 7-1: SerialNumber: syz [ 345.232938][ T4267] usb 7-1: 0:2 : does not exist [ 345.352595][T12860] loop3: detected capacity change from 0 to 32768 [ 345.362214][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/818.tmp-b7:1' failed: Read-only file system [ 345.397121][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 345.449216][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000007.tmp-b7:1' failed: Read-only file system [ 345.683492][T12860] XFS (loop3): Mounting V5 Filesystem [ 345.695022][ T1109] usb 7-1: USB disconnect, device number 11 [ 345.869355][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3326'. [ 345.903032][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/816.tmp-b7:4' failed: Read-only file system [ 346.447535][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 346.629446][T12860] XFS (loop3): Ending clean mount [ 346.804266][ T4190] XFS (loop3): Unmounting Filesystem [ 346.841242][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 346.882401][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3340'. [ 346.938403][T12907] netlink: 'syz.1.3340': attribute type 18 has an invalid length. [ 346.960244][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/817.tmp-b7:6' failed: Read-only file system [ 347.119183][ T4451] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 347.503025][ T4451] usb 5-1: Using ep0 maxpacket: 8 [ 347.666860][ T4451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 347.689276][ T4451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.698989][ T4451] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.754907][ T4451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 347.799120][ T4451] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 347.834894][ T4451] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 347.874194][ T4451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.896611][ T4451] usb 5-1: config 0 descriptor?? [ 347.958390][T12905] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 348.107741][T12909] loop1: detected capacity change from 0 to 32768 [ 348.169641][T12921] comedi comedi3: Minor 256 is invalid! [ 348.261582][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.269640][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.276806][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.287500][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.294730][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.301934][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.309119][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.316324][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.323510][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.330675][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.337819][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.345007][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.352192][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.359384][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.366550][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.374220][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.381417][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.388569][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.396168][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.403343][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.410884][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.418046][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.425263][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.432454][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.439640][ T4199] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 348.485007][ T4267] usb 5-1: USB disconnect, device number 30 [ 348.593951][ T4690] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 349.062128][T12923] loop4: detected capacity change from 0 to 64 [ 349.149050][ T4690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.160592][ T4690] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.179031][ T4690] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.239031][ T4690] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 349.263241][ T4690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.323022][ T4690] usb 7-1: config 0 descriptor?? [ 349.787033][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3353'. [ 349.828674][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3353'. [ 349.846076][ T4690] plantronics 0003:047F:FFFF.0040: unbalanced collection at end of report description [ 349.860603][T12939] netlink: 'syz.2.3353': attribute type 18 has an invalid length. [ 349.959357][ T4690] plantronics 0003:047F:FFFF.0040: parse failed [ 349.991437][ T4690] plantronics: probe of 0003:047F:FFFF.0040 failed with error -22 [ 350.044032][ T4342] udevd[4342]: symlink '../../loop3' '/dev/disk/by-diskseq/821.tmp-b7:3' failed: Read-only file system [ 350.146468][ T4455] usb 7-1: USB disconnect, device number 12 [ 350.267643][T12909] [ 350.267643][T12909] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.267643][T12909] [ 350.365009][ T4189] [ 350.365009][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.365009][ T4189] [ 350.389651][T12952] loop3: detected capacity change from 0 to 1024 [ 350.415098][ T4189] [ 350.415098][ T4189] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 350.415098][ T4189] [ 350.987654][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3369'. [ 350.996678][T12965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3369'. [ 351.047682][T12923] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 351.091015][T12965] netlink: 'syz.6.3369': attribute type 18 has an invalid length. [ 351.148074][T12969] loop1: detected capacity change from 0 to 1024 [ 351.184219][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/820.tmp-b7:6' failed: Read-only file system [ 351.850165][T12995] loop6: detected capacity change from 0 to 256 [ 352.359086][T12995] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 352.361433][T13013] netlink: 'syz.2.3391': attribute type 3 has an invalid length. [ 352.469078][T13015] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 352.719558][T12952] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 353.150511][T12969] EXT4-fs (loop1): Ignoring removed nobh option [ 353.160447][T12969] EXT4-fs (loop1): Ignoring removed bh option [ 353.288832][T12969] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 353.319095][T12969] System zones: 0-1, 3-12 [ 353.324555][T12969] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 353.460071][ T4690] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 353.573935][T13033] loop3: detected capacity change from 0 to 2048 [ 353.862825][T13034] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 353.969337][T13033] NILFS (loop3): cannot delete checkpoints: invalid range [8, 7) [ 353.977139][T13033] NILFS (loop3): error -22 preparing GC: cannot delete checkpoints [ 353.991262][ T4690] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 354.008661][ T4690] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 354.037592][ T4690] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 354.082833][ T4690] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.145772][T13023] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 354.365174][T13038] loop3: detected capacity change from 0 to 1024 [ 354.548367][ T1109] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 354.659664][ T4453] usb 7-1: USB disconnect, device number 13 [ 354.873839][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 355.052833][ T1109] usb 3-1: config index 0 descriptor too short (expected 18, got 10) [ 355.071192][ T1109] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 355.078471][ T1109] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 355.279787][T13045] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3404'. [ 355.385796][ T1109] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 355.408602][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.446072][ T1109] usb 3-1: Product: syz [ 355.452068][ T1109] usb 3-1: Manufacturer: syz [ 355.456724][ T1109] usb 3-1: SerialNumber: syz [ 355.499015][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/822.tmp-b7:4' failed: Read-only file system [ 355.552217][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/822.tmp-b7:4' failed: Read-only file system [ 355.573388][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/818.tmp-b7:1' failed: Read-only file system [ 355.610091][ T4298] udevd[4298]: symlink '../../loop3' '/dev/disk/by-diskseq/821.tmp-b7:3' failed: Read-only file system [ 355.626379][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/820.tmp-b7:6' failed: Read-only file system [ 355.658956][ T4278] udevd[4278]: symlink '../../loop4' '/dev/disk/by-diskseq/822.tmp-b7:4' failed: Read-only file system [ 355.713801][ T4345] udevd[4345]: symlink '../../loop1' '/dev/disk/by-diskseq/818.tmp-b7:1' failed: Read-only file system [ 355.729207][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/820.tmp-b7:6' failed: Read-only file system [ 355.762007][ T4298] udevd[4298]: symlink '../../loop3' '/dev/disk/by-diskseq/821.tmp-b7:3' failed: Read-only file system [ 355.790518][T11920] udevd[11920]: symlink '../../loop4' '/dev/disk/by-diskseq/822.tmp-b7:4' failed: Read-only file system [ 356.030287][ T1109] usb 3-1: USB disconnect, device number 31 [ 356.745814][T13081] loop3: detected capacity change from 0 to 128 [ 357.149984][T13047] loop6: detected capacity change from 0 to 32768 [ 357.183978][T13081] EXT4-fs (loop3): Test dummy encryption mode enabled [ 357.396981][T13081] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: none. [ 357.477251][T13081] ext4 filesystem being mounted at /672/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 357.507144][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3430'. [ 357.548082][T13105] loop1: detected capacity change from 0 to 1024 [ 359.253886][T13105] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 359.307653][ T1109] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 359.480795][T13136] loop4: detected capacity change from 0 to 128 [ 359.713004][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 359.874587][ T1109] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 360.017079][ T4176] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 360.039008][T13136] EXT4-fs (loop4): Test dummy encryption mode enabled [ 360.197675][T13136] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,journal_ioprio=0x0000000000000004,,errors=continue. Quota mode: none. [ 360.275418][T13136] ext4 filesystem being mounted at /638/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 360.294062][ T1109] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 360.390048][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.398108][ T1109] usb 3-1: Product: syz [ 360.428962][ T1109] usb 3-1: Manufacturer: syz [ 360.457565][ T1109] usb 3-1: SerialNumber: syz [ 360.513502][ T1109] r8152-cfgselector 3-1: config 0 descriptor?? [ 360.541816][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/838.tmp-b7:4' failed: Read-only file system [ 360.560842][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/843.tmp-b7:3' failed: Read-only file system [ 360.582859][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-diskseq/846.tmp-b7:1' failed: Read-only file system [ 360.605453][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 360.657622][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/844.tmp-b7:3' failed: Read-only file system [ 360.693085][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-diskseq/849.tmp-b7:1' failed: Read-only file system [ 360.725668][T11920] udevd[11920]: symlink '../../loop6' '/dev/disk/by-diskseq/840.tmp-b7:6' failed: Read-only file system [ 360.765070][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-diskseq/849.tmp-b7:1' failed: Read-only file system [ 360.779834][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/844.tmp-b7:3' failed: Read-only file system [ 360.855568][T11920] udevd[11920]: symlink '../../loop6' '/dev/disk/by-diskseq/840.tmp-b7:6' failed: Read-only file system [ 360.954754][ T1109] r8152-cfgselector 3-1: Unknown version 0x0000 [ 360.973929][ T4176] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 360.999376][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.078334][ T4176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.113968][ T1109] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 361.146361][ T4176] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 361.191037][T13164] loop3: detected capacity change from 0 to 2048 [ 361.272992][ T4176] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 361.353837][ T4176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.383584][T13169] loop4: detected capacity change from 0 to 16 [ 361.411185][ T4690] usb 3-1: USB disconnect, device number 32 [ 361.442618][ T4176] usb 2-1: config 0 descriptor?? [ 361.471627][T13169] erofs: (device loop4): mounted with root inode @ nid 36. [ 361.709157][T13164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.968969][ T4176] hid-generic 0003:05AC:0323.0041: unknown main item tag 0x2 [ 361.976502][ T4176] hid-generic 0003:05AC:0323.0041: unknown main item tag 0x7 [ 362.031890][ T4176] hid-generic 0003:05AC:0323.0041: hidraw0: USB HID v0.06 Device [HID 05ac:0323] on usb-dummy_hcd.1-1/input0 [ 362.199935][ T7574] usb 2-1: USB disconnect, device number 19 [ 362.242372][T13177] fido_id[13177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 363.389433][ T4451] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 363.427998][T13195] loop6: detected capacity change from 0 to 256 [ 363.936703][ T4451] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 363.968221][ T4451] usb 2-1: config 0 interface 0 has no altsetting 0 [ 364.008239][ T4451] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 364.068205][ T4451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.118465][ T4451] usb 2-1: config 0 descriptor?? [ 364.404323][T13213] loop3: detected capacity change from 0 to 256 [ 364.701710][ T4451] input: HID 04b4:07b1 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04B4:07B1.0042/input/input56 [ 364.769782][T13221] loop6: detected capacity change from 0 to 512 [ 364.776906][T13197] loop4: detected capacity change from 0 to 32768 [ 364.783760][ T4451] cypress 0003:04B4:07B1.0042: input,hidraw0: USB HID v80.00 Joystick [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 364.933144][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3486'. [ 364.978418][ T4176] usb 2-1: USB disconnect, device number 20 [ 365.319978][T13197] JBD2: Ignoring recovery information on journal [ 365.367406][T13221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 365.385734][T13221] System zones: 1-12 [ 365.449783][T13221] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3484: corrupted inode contents [ 365.477132][T13228] fido_id[13228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 365.542368][T13221] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 365.580995][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/862.tmp-b7:6' failed: Read-only file system [ 365.628480][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-diskseq/852.tmp-b7:1' failed: Read-only file system [ 365.632978][T13237] loop1: detected capacity change from 0 to 64 [ 365.647110][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 365.688510][T13221] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3484: corrupted inode contents [ 365.715839][T13197] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 365.742262][T13221] EXT4-fs error (device loop6): ext4_evict_inode:332: inode #15: comm syz.6.3484: mark_inode_dirty error [ 365.832946][T13221] EXT4-fs (loop6): 1 orphan inode deleted [ 365.838796][T13221] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,debug,debug_want_extra_isize=0x0000000000000004,discard,prjquota,,errors=continue. Quota mode: writeback. [ 365.887232][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/862.tmp-b7:6' failed: Read-only file system [ 365.913499][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 366.097231][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/863.tmp-b7:4' failed: Read-only file system [ 366.154130][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 366.181195][T13213] FAT-fs (loop3): Directory bread(block 64) failed [ 366.190185][T13213] FAT-fs (loop3): Directory bread(block 65) failed [ 366.196858][T13213] FAT-fs (loop3): Directory bread(block 66) failed [ 366.229711][T13213] FAT-fs (loop3): Directory bread(block 67) failed [ 366.236394][T13213] FAT-fs (loop3): Directory bread(block 68) failed [ 366.305423][T13213] FAT-fs (loop3): Directory bread(block 69) failed [ 366.331123][T13213] FAT-fs (loop3): Directory bread(block 70) failed [ 366.337713][T13213] FAT-fs (loop3): Directory bread(block 71) failed [ 366.414506][T13213] FAT-fs (loop3): Directory bread(block 72) failed [ 366.423029][ T4201] ocfs2: Unmounting device (7,4) on (node local) [ 366.458477][T13213] FAT-fs (loop3): Directory bread(block 73) failed [ 367.042819][T13252] loop4: detected capacity change from 0 to 4096 [ 367.069453][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 367.242392][T13262] loop6: detected capacity change from 0 to 256 [ 367.441259][T13264] loop3: detected capacity change from 0 to 512 [ 367.704058][T13262] attempt to access beyond end of device [ 367.704058][T13262] loop6: rw=0, want=276, limit=256 [ 367.741911][T13262] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 198) [ 367.780831][T13262] FAT-fs (loop6): Filesystem has been set read-only [ 367.787587][T13262] FAT-fs (loop6): error, fat_free: invalid cluster chain (i_pos 198) [ 367.806268][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-diskseq/864.tmp-b7:1' failed: Read-only file system [ 367.829375][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-label/unt.tmp-b7:1' failed: Read-only file system [ 367.858867][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/862.tmp-b7:6' failed: Read-only file system [ 368.046304][T13266] loop1: detected capacity change from 0 to 256 [ 368.728109][T13252] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 368.952609][T13266] FAT-fs (loop1): Directory bread(block 64) failed [ 368.965006][T13266] FAT-fs (loop1): Directory bread(block 65) failed [ 369.000451][T13266] FAT-fs (loop1): Directory bread(block 66) failed [ 369.015078][T13266] FAT-fs (loop1): Directory bread(block 67) failed [ 369.065162][T13266] FAT-fs (loop1): Directory bread(block 68) failed [ 369.107760][T13266] FAT-fs (loop1): Directory bread(block 69) failed [ 369.128790][T13266] FAT-fs (loop1): Directory bread(block 70) failed [ 369.135421][T13266] FAT-fs (loop1): Directory bread(block 71) failed [ 369.192580][T13266] FAT-fs (loop1): Directory bread(block 72) failed [ 369.224423][T13266] FAT-fs (loop1): Directory bread(block 73) failed [ 369.271413][T13264] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 369.324029][T13264] ext4 filesystem being mounted at /688/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.977758][T13272] loop6: detected capacity change from 0 to 32768 [ 370.503648][T13295] loop3: detected capacity change from 0 to 64 [ 371.243981][ T4345] udevd[4345]: symlink '../../loop1' '/dev/disk/by-diskseq/873.tmp-b7:1' failed: Read-only file system [ 371.613190][ T4342] udevd[4342]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 371.630213][ T4345] udevd[4345]: symlink '../../loop1' '/dev/disk/by-diskseq/873.tmp-b7:1' failed: Read-only file system [ 371.751436][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/863.tmp-b7:4' failed: Read-only file system [ 371.972826][T13331] loop1: detected capacity change from 0 to 4096 [ 372.033785][T13272] (syz.6.3516,13272,0):ocfs2_initialize_super:2311 ERROR: status = -12 [ 372.056483][T13272] (syz.6.3516,13272,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 372.236409][T13331] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 372.497307][T11920] udevd[11920]: symlink '../../loop6' '/dev/disk/by-diskseq/874.tmp-b7:6' failed: Read-only file system [ 372.573609][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/870.tmp-b7:3' failed: Read-only file system [ 372.607116][T11920] udevd[11920]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system [ 372.633030][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-label/unt.tmp-b7:3' failed: Read-only file system [ 372.657784][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/863.tmp-b7:4' failed: Read-only file system [ 372.823757][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3543'. [ 372.897832][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/868.tmp-b7:4' failed: Read-only file system [ 373.331192][T13367] loop3: detected capacity change from 0 to 64 [ 373.702326][T13379] program syz.2.3557 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.277008][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 375.050130][T13411] loop4: detected capacity change from 0 to 2048 [ 375.186482][ T4236] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 375.670739][ T4236] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 375.690450][ T4236] usb 2-1: config 0 interface 0 has no altsetting 0 [ 375.705554][ T4236] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 375.722908][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.762181][ T4236] usb 2-1: config 0 descriptor?? [ 375.817497][T13409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 376.028326][T13417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 376.067767][T13417] netlink: del zone limit has 4 unknown bytes [ 376.212950][T13421] binder: 13418:13421 ioctl 4018620d 0 returned -22 [ 376.234109][T13421] binder: 13418:13421 ioctl c0306201 200000000180 returned -11 [ 376.295747][ T4236] petalynx 0003:18B1:0037.0043: ignoring exceeding usage max [ 376.331026][ T4236] petalynx 0003:18B1:0037.0043: hidraw0: USB HID v0.c1 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 376.559728][ T4236] usb 2-1: USB disconnect, device number 21 [ 376.647445][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/879.tmp-b7:1' failed: Read-only file system [ 376.662349][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-diskseq/874.tmp-b7:6' failed: Read-only file system [ 376.706324][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/879.tmp-b7:1' failed: Read-only file system [ 376.754950][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-diskseq/880.tmp-b7:6' failed: Read-only file system [ 376.803210][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/879.tmp-b7:1' failed: Read-only file system [ 376.823662][T13427] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.838036][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-diskseq/880.tmp-b7:6' failed: Read-only file system [ 376.873437][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-diskseq/880.tmp-b7:6' failed: Read-only file system [ 376.935102][T13426] fido_id[13426]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 376.963266][ T4342] udevd[4342]: symlink '../../loop3' '/dev/disk/by-diskseq/870.tmp-b7:3' failed: Read-only file system [ 376.999448][T13411] NILFS (loop4): cannot delete checkpoints: invalid range [8, 7) [ 377.007247][T13411] NILFS (loop4): error -22 preparing GC: cannot delete checkpoints [ 377.031107][T11920] udevd[11920]: symlink '../../loop4' '/dev/disk/by-diskseq/884.tmp-b7:4' failed: Read-only file system [ 377.074119][ T4342] udevd[4342]: symlink '../../loop3' '/dev/disk/by-diskseq/870.tmp-b7:3' failed: Read-only file system [ 377.218960][T13431] netlink: 'syz.3.3582': attribute type 3 has an invalid length. [ 377.250973][T13437] loop1: detected capacity change from 0 to 256 [ 378.037602][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.277857][T13437] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 378.671863][T13470] loop4: detected capacity change from 0 to 1024 [ 378.801596][ T1109] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 379.167461][ T1109] usb 4-1: Using ep0 maxpacket: 8 [ 379.343433][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 379.364878][ T1109] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 379.403495][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.438706][ T1109] usb 4-1: config 0 descriptor?? [ 379.959960][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 379.966897][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 379.987238][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 380.003780][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 380.019453][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 380.026390][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 380.083599][ T1109] wacom 0003:056A:0018.0044: unknown main item tag 0x0 [ 380.093454][ T1109] wacom 0003:056A:0018.0044: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 380.135076][ T1109] wacom 0003:056A:0018.0044: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 380.184307][ T1109] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0044/input/input57 [ 380.267977][ T1109] usb 4-1: USB disconnect, device number 23 [ 380.384620][T13494] fido_id[13494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 381.149827][T13513] loop4: detected capacity change from 0 to 8 [ 381.562540][T13513] SQUASHFS error: zlib decompression failed, data probably corrupt [ 381.574107][T13513] SQUASHFS error: Failed to read block 0x9b: -5 [ 381.588639][ T4267] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 381.597405][T13513] SQUASHFS error: Unable to read metadata cache entry [99] [ 381.597428][T13513] SQUASHFS error: Unable to read inode 0x127 [ 381.854558][ T4342] udevd[4342]: symlink '../../loop3' '/dev/disk/by-diskseq/885.tmp-b7:3' failed: Read-only file system [ 381.943118][ T4267] usb 2-1: Using ep0 maxpacket: 8 [ 382.007005][ T4342] udevd[4342]: symlink '../../loop3' '/dev/disk/by-diskseq/885.tmp-b7:3' failed: Read-only file system [ 382.108706][T13533] netlink: 'syz.2.3616': attribute type 11 has an invalid length. [ 382.150915][ T4267] usb 2-1: config 0 interface 0 has no altsetting 0 [ 382.157585][ T4267] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 382.167534][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/885.tmp-b7:3' failed: Read-only file system [ 382.180662][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.226159][ T4267] usb 2-1: config 0 descriptor?? [ 382.595957][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/885.tmp-b7:3' failed: Read-only file system [ 382.752782][ T4267] waltop 0003:172F:0038.0045: unknown main item tag 0x2 [ 382.777109][ T4267] waltop 0003:172F:0038.0045: unknown main item tag 0x6 [ 382.811083][ T4267] waltop 0003:172F:0038.0045: ignoring exceeding usage max [ 382.852524][ T4267] waltop 0003:172F:0038.0045: hidraw0: USB HID v0.81 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0 [ 383.043426][ T4267] usb 2-1: USB disconnect, device number 22 [ 383.101052][T13548] fido_id[13548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 383.115571][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/885.tmp-b7:3' failed: Read-only file system [ 383.512553][ T4451] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 383.659378][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/889.tmp-b7:1' failed: Read-only file system [ 383.876752][ T4451] usb 4-1: Using ep0 maxpacket: 8 [ 384.076736][T11011] udevd[11011]: symlink '../../loop6' '/dev/disk/by-diskseq/880.tmp-b7:6' failed: Read-only file system [ 384.167882][ T4451] usb 4-1: unable to get BOS descriptor or descriptor too short [ 384.197114][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/889.tmp-b7:1' failed: Read-only file system [ 384.282960][T13558] loop6: detected capacity change from 0 to 1024 [ 384.322161][T13556] netlink: 'syz.1.3628': attribute type 11 has an invalid length. [ 384.336831][ T4451] usb 4-1: config 117 has an invalid interface number: 163 but max is 0 [ 384.358210][ T4451] usb 4-1: config 117 has no interface number 0 [ 384.371058][ T4451] usb 4-1: config 117 interface 163 has no altsetting 0 [ 384.620700][ T4451] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 384.637861][ T4451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.682175][ T4451] usb 4-1: Product: syz [ 384.686403][ T4451] usb 4-1: Manufacturer: syz [ 384.697852][ T4451] usb 4-1: SerialNumber: syz [ 385.213682][ T1109] Bluetooth: hci0: command 0x0406 tx timeout [ 385.383054][ T4451] f81534a_ctrl 4-1:117.163: failed to set register 0x116: -5 [ 385.397722][ T4451] f81534a_ctrl 4-1:117.163: failed to enable ports: -5 [ 385.415860][ T4451] f81534a_ctrl: probe of 4-1:117.163 failed with error -5 [ 385.428297][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3649'. [ 385.493795][ T4451] usb 4-1: USB disconnect, device number 24 [ 385.863628][T13592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.126010][T13598] loop3: detected capacity change from 0 to 256 [ 386.430592][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/880.tmp-b7:6' failed: Read-only file system [ 386.493919][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 387.025224][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/892.tmp-b7:6' failed: Read-only file system [ 387.139225][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/891.tmp-b7:4' failed: Read-only file system [ 387.192358][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/892.tmp-b7:6' failed: Read-only file system [ 387.219747][T13086] udevd[13086]: symlink '../../loop1' '/dev/disk/by-diskseq/889.tmp-b7:1' failed: Read-only file system [ 387.263754][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/892.tmp-b7:6' failed: Read-only file system [ 387.264356][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/891.tmp-b7:4' failed: Read-only file system [ 387.304620][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/889.tmp-b7:1' failed: Read-only file system [ 387.352050][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/892.tmp-b7:6' failed: Read-only file system [ 387.384867][ T4298] udevd[4298]: symlink '../../loop3' '/dev/disk/by-diskseq/894.tmp-b7:3' failed: Read-only file system [ 387.432940][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/889.tmp-b7:1' failed: Read-only file system [ 387.535417][T13631] loop4: detected capacity change from 0 to 512 [ 387.969349][ T1109] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 388.022751][T13598] FAT-fs (loop3): Directory bread(block 64) failed [ 388.057916][T13598] FAT-fs (loop3): Directory bread(block 65) failed [ 388.064570][T13598] FAT-fs (loop3): Directory bread(block 66) failed [ 388.091160][T13598] FAT-fs (loop3): Directory bread(block 67) failed [ 388.123094][T13598] FAT-fs (loop3): Directory bread(block 68) failed [ 388.135742][T13598] FAT-fs (loop3): Directory bread(block 69) failed [ 388.161549][T13598] FAT-fs (loop3): Directory bread(block 70) failed [ 388.184802][T13598] FAT-fs (loop3): Directory bread(block 71) failed [ 388.202928][T13598] FAT-fs (loop3): Directory bread(block 72) failed [ 388.250891][T13598] FAT-fs (loop3): Directory bread(block 73) failed [ 388.353926][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 388.507483][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.536419][ T1109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.603484][ T1109] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.623253][ T1109] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.654454][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.679020][ T1109] usb 3-1: config 0 descriptor?? [ 388.893806][T13643] loop1: detected capacity change from 0 to 40427 [ 388.979829][T13643] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 388.990103][T13643] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 389.057811][T13643] F2FS-fs (loop1): invalid crc value [ 389.119022][T13643] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 389.199269][ T1109] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 389.206651][ T1109] microsoft 0003:045E:07DA.0046: unknown main item tag 0x0 [ 389.236185][ T1109] microsoft 0003:045E:07DA.0046: ignoring exceeding usage max [ 389.285465][ T1109] microsoft 0003:045E:07DA.0046: ignoring exceeding usage max [ 389.316062][ T1109] microsoft 0003:045E:07DA.0046: No inputs registered, leaving [ 389.348063][ T1109] microsoft 0003:045E:07DA.0046: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 389.364678][T13643] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 389.374524][ T1109] microsoft 0003:045E:07DA.0046: no inputs found [ 389.380415][T13643] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 389.422995][ T1109] microsoft 0003:045E:07DA.0046: could not initialize ff, continuing anyway [ 389.465246][T13631] EXT4-fs error (device loop4): ext4_quota_enable:6444: comm syz.4.3661: inode #196608: comm syz.4.3661: iget: illegal inode # [ 389.523308][T13631] EXT4-fs error (device loop4): ext4_quota_enable:6447: comm syz.4.3661: Bad quota inode: 196608, type: 2 [ 389.564309][ T1109] usb 3-1: USB disconnect, device number 33 [ 389.628118][T13631] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-117, ino=196608). Please run e2fsck to fix. [ 389.661079][T13631] EXT4-fs (loop4): mount failed [ 389.714103][ T4189] attempt to access beyond end of device [ 389.714103][ T4189] loop1: rw=2049, want=45104, limit=40427 [ 389.816074][T13651] fido_id[13651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 391.156629][ T4176] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 391.285096][T13674] loop4: detected capacity change from 0 to 4096 [ 391.687880][ T4176] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 391.706940][ T4176] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 391.757834][ T4176] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 254 [ 391.797823][ T4176] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 391.807028][ T4176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.878906][ T4176] usb 4-1: config 0 descriptor?? [ 391.902325][T13663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 391.975580][T13670] loop6: detected capacity change from 0 to 32768 [ 392.417505][ T4176] hid-thrustmaster 0003:044F:B65D.0047: ignoring exceeding usage max [ 392.428637][ T4176] hid-thrustmaster 0003:044F:B65D.0047: unknown main item tag 0x4 [ 392.474894][ T4176] hid-thrustmaster 0003:044F:B65D.0047: hidraw0: USB HID v0.01 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 392.644615][ T4176] hid-thrustmaster 0003:044F:B65D.0047: setup data couldn't be sent [ 392.673741][ T4176] usb 4-1: USB disconnect, device number 25 [ 392.679997][ C0] hid-thrustmaster 0003:044F:B65D.0047: URB to get model id failed with error -71 [ 392.784314][T13684] loop1: detected capacity change from 0 to 4096 [ 392.891937][T13684] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 392.948497][ T4453] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 393.464270][ T4453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.483482][ T4453] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.512679][ T4453] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.584439][ T4453] usb 3-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.00 [ 393.613678][ T4453] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.651650][ T4453] usb 3-1: config 0 descriptor?? [ 393.796242][T13670] [ 393.796242][T13670] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 393.796242][T13670] [ 394.046262][ T9855] [ 394.046262][ T9855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 394.046262][ T9855] [ 394.113990][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/897.tmp-b7:1' failed: Read-only file system [ 394.123792][ T9855] [ 394.123792][ T9855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 394.123792][ T9855] [ 394.181246][ T4453] apple 0003:05AC:0251.0048: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling [ 394.219796][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 394.257934][ T4453] apple 0003:05AC:0251.0048: No inputs registered, leaving [ 394.318130][ T4453] apple 0003:05AC:0251.0048: hidraw0: USB HID v0.00 Joystick [HID 05ac:0251] on usb-dummy_hcd.2-1/input0 [ 394.320859][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-uuid/4C6CE0A9116F2120.tmp-b7:1' failed: Read-only file system [ 394.431658][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/901.tmp-b7:6' failed: Read-only file system [ 394.511337][ T1109] usb 3-1: USB disconnect, device number 34 [ 394.566936][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:6' failed: Read-only file system [ 394.762041][ T4298] udevd[4298]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 394.779150][T11920] udevd[11920]: symlink '../../loop3' '/dev/disk/by-diskseq/899.tmp-b7:3' failed: Read-only file system [ 394.830880][ T4298] udevd[4298]: symlink '../../loop4' '/dev/disk/by-diskseq/900.tmp-b7:4' failed: Read-only file system [ 394.882201][T11920] udevd[11920]: symlink '../../loop3' '/dev/disk/by-diskseq/899.tmp-b7:3' failed: Read-only file system [ 394.919742][ T4267] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 394.937911][T13712] fido_id[13712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 394.989087][T11920] udevd[11920]: symlink '../../loop3' '/dev/disk/by-diskseq/899.tmp-b7:3' failed: Read-only file system [ 395.290359][T13715] fido_id[13715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 395.613996][ T4267] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.634981][ T4267] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 395.943307][ T4267] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 395.977792][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.012404][T13725] netlink: 'syz.2.3701': attribute type 29 has an invalid length. [ 396.047811][ T4267] usb 5-1: Product: syz [ 396.052223][ T4267] usb 5-1: Manufacturer: syz [ 396.056854][ T4267] usb 5-1: SerialNumber: syz [ 396.069125][T13725] netlink: 'syz.2.3701': attribute type 29 has an invalid length. [ 396.083303][T13726] netlink: 'syz.2.3701': attribute type 29 has an invalid length. [ 396.100974][T13709] loop6: detected capacity change from 0 to 40427 [ 396.183973][T13709] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 396.217776][T13709] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 396.358209][T13714] loop3: detected capacity change from 0 to 32768 [ 396.387036][T13709] F2FS-fs (loop6): invalid crc value [ 396.438742][ T4267] usb 5-1: Limiting number of CPorts to U8_MAX [ 396.513968][T13709] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 396.659861][ C1] usb 5-1: invalid arpc response id received: 0 [ 396.832136][T13709] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 396.869460][ T4267] usb 5-1: failed to set cport flags for port 0 [ 396.879104][ T4267] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 396.897822][T13709] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 396.931697][T13714] ERROR: (device loop3): diAllocAG: free inode not found in summary map [ 396.931697][T13714] [ 396.961546][ T4267] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 397.031121][ T4267] usb 5-1: USB disconnect, device number 31 [ 397.042650][T13714] ERROR: (device loop3): remounting filesystem as read-only [ 397.084758][T13714] ialloc: diAlloc returned -5! [ 398.054740][ T4176] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 398.426562][T13740] loop1: detected capacity change from 0 to 32768 [ 398.440331][ T4176] usb 3-1: Using ep0 maxpacket: 32 [ 398.486628][ T4267] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 398.583701][ T4176] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 398.612954][ T4176] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.639196][ T4176] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.664116][ T4176] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 398.711883][ T4176] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.733885][ T4176] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 398.753939][ T4176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.784515][ T4453] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 398.793755][ T4176] usb 3-1: config 0 descriptor?? [ 398.836450][ T4267] usb 5-1: Using ep0 maxpacket: 16 [ 398.980293][ T4267] usb 5-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 399.009367][ T4267] usb 5-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.039805][ T4267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 399.058253][ T4267] usb 5-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 399.067357][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.133396][ T4267] usb 5-1: config 0 descriptor?? [ 399.147461][ T4453] usb 7-1: Using ep0 maxpacket: 16 [ 399.218028][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/910.tmp-b7:1' failed: Read-only file system [ 399.274362][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:1' failed: Read-only file system [ 399.328244][ T4176] wacom 0003:056A:0000.0049: ignoring exceeding usage max [ 399.346828][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.366678][ T4453] usb 7-1: unable to get BOS descriptor or descriptor too short [ 399.367959][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.430241][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.437195][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.453514][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.460750][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.477665][ T4453] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 399.488411][ T4453] usb 7-1: config 0 has no interface number 0 [ 399.491137][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.511371][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.534467][ T4453] usb 7-1: config 0 interface 67 altsetting 133 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 399.552946][ T4453] usb 7-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0x8, skipping [ 399.569808][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.576749][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.586129][ T4453] usb 7-1: config 0 interface 67 altsetting 133 endpoint 0xF has an invalid bInterval 151, changing to 11 [ 399.599975][ T4176] wacom 0003:056A:0000.0049: unknown main item tag 0x0 [ 399.628850][ T4453] usb 7-1: config 0 interface 67 altsetting 133 endpoint 0xF has invalid wMaxPacketSize 0 [ 399.646738][ T4176] wacom 0003:056A:0000.0049: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 399.658898][ T4176] wacom 0003:056A:0000.0049: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 399.666097][ T4453] usb 7-1: config 0 interface 67 altsetting 133 has a duplicate endpoint with address 0xF, skipping [ 399.688276][ T4176] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0049/input/input62 [ 399.694473][ T4267] lenovo 0003:17EF:60A3.004A: unknown main item tag 0x4 [ 399.741665][ T4453] usb 7-1: config 0 interface 67 has no altsetting 0 [ 399.748533][ T4267] lenovo 0003:17EF:60A3.004A: unknown main item tag 0xd [ 399.791671][ T4267] lenovo 0003:17EF:60A3.004A: hidraw1: USB HID v9.42 Device [HID 17ef:60a3] on usb-dummy_hcd.4-1/input0 [ 399.825669][ T4176] usb 3-1: USB disconnect, device number 35 [ 399.945480][ T4267] usb 5-1: USB disconnect, device number 32 [ 399.988659][ T4453] usb 7-1: New USB device found, idVendor=067c, idProduct=1001, bcdDevice=e9.13 [ 400.000033][ T4453] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.029636][ T4453] usb 7-1: Product: syz [ 400.033857][ T4453] usb 7-1: Manufacturer: syz [ 400.070182][ T4453] usb 7-1: SerialNumber: syz [ 400.083506][T13086] udevd[13086]: symlink '../../loop1' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:3' failed: Read-only file system [ 400.114240][ T4453] usb 7-1: config 0 descriptor?? [ 400.128363][T13763] fido_id[13763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 400.158670][T13764] fido_id[13764]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 400.159801][T13086] udevd[13086]: symlink '../../loop3' '/dev/disk/by-diskseq/907.tmp-b7:3' failed: Read-only file system [ 400.275293][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/907.tmp-b7:3' failed: Read-only file system [ 400.534808][ T4453] pegasus 7-1:0.67: Missing or invalid endpoints [ 400.573571][ T4453] usb 7-1: USB disconnect, device number 14 [ 400.603889][ T4298] udevd[4298]: symlink '../../loop3' '/dev/disk/by-diskseq/911.tmp-b7:3' failed: Read-only file system [ 400.642270][T11920] udevd[11920]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system [ 400.823323][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/911.tmp-b7:3' failed: Read-only file system [ 400.912071][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system [ 401.149077][T13783] loop6: detected capacity change from 0 to 512 [ 401.197635][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/911.tmp-b7:3' failed: Read-only file system [ 401.242256][T13783] EXT4-fs (loop6): Test dummy encryption mode enabled [ 401.284765][T13786] loop3: detected capacity change from 0 to 1024 [ 401.377580][T13783] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.3725: inode has both inline data and extents flags [ 401.466754][T13783] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.3725: couldn't read orphan inode 15 (err -117) [ 401.534095][T13783] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 402.456875][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3738'. [ 402.993533][ T4267] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 403.505039][ T4267] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 403.517752][ T4267] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 403.742264][ T4267] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 403.761826][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.799230][ T4267] usb 2-1: Product: syz [ 403.803469][ T4267] usb 2-1: Manufacturer: syz [ 403.820345][ T4267] usb 2-1: SerialNumber: syz [ 403.830995][ T6967] hfsplus: b-tree write err: -5, ino 25 [ 403.836825][ T6967] hfsplus: b-tree write err: -5, ino 4 [ 403.866243][ T6967] hfsplus: b-tree write err: -5, ino 2 [ 404.054711][ T4453] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 404.153696][ T4267] usb 2-1: Limiting number of CPorts to U8_MAX [ 404.397848][ C1] usb 2-1: invalid arpc response id received: 0 [ 404.405986][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/912.tmp-b7:6' failed: Read-only file system [ 404.504839][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/915.tmp-b7:6' failed: Read-only file system [ 404.589992][ T4267] usb 2-1: failed to set cport flags for port 0 [ 404.596343][ T4267] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 404.605242][T11920] udevd[11920]: symlink '../../loop3' '/dev/disk/by-diskseq/913.tmp-b7:3' failed: Read-only file system [ 404.618339][ T4345] udevd[4345]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system [ 404.641069][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-diskseq/915.tmp-b7:6' failed: Read-only file system [ 404.694989][ T4453] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 404.706593][ T4267] es2_ap_driver: probe of 2-1:1.0 failed with error -71 [ 404.737377][ T4453] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 404.773128][ T4267] usb 2-1: USB disconnect, device number 23 [ 404.780660][ T4345] udevd[4345]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system [ 404.802855][ T4298] udevd[4298]: symlink '../../loop3' '/dev/disk/by-diskseq/913.tmp-b7:3' failed: Read-only file system [ 404.864433][ T4453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.925739][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system [ 404.946902][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/916.tmp-b7:3' failed: Read-only file system [ 405.003089][ T4453] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 405.036648][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/904.tmp-b7:4' failed: Read-only file system [ 405.428236][T13884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3759'. [ 405.787798][ T4689] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 406.006746][T13901] devpts: called with bogus options [ 406.018936][T13902] loop4: detected capacity change from 0 to 256 [ 406.434703][ T4453] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 406.444997][ T4453] stv0680 7-1:4.0: Could not get descriptor 0200 [ 406.474995][ T4689] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 406.484153][ T4689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.499951][ T4689] usb 2-1: Product: syz [ 406.504329][ T4689] usb 2-1: Manufacturer: syz [ 406.508994][ T4689] usb 2-1: SerialNumber: syz [ 406.532899][ T4453] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 406.543751][ T4453] stv0680 7-1:4.0: last error: 9, command = 0x2c [ 406.632522][ T4453] usb 7-1: USB disconnect, device number 15 [ 406.912473][ T4267] kernel write not supported for file /dsp (pid: 4267 comm: kworker/1:6) [ 407.235828][ T4689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 407.291484][ T4689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 407.310586][ T4689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 407.342461][ T4689] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.369564][T13930] devpts: called with bogus options [ 407.375840][ T4689] lan78xx: probe of 2-1:1.0 failed with error -71 [ 407.471567][ T4689] usb 2-1: USB disconnect, device number 24 [ 407.511133][T13911] loop3: detected capacity change from 0 to 32768 [ 408.257909][T13939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3786'. [ 408.701070][T13902] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 409.016266][T13961] loop3: detected capacity change from 0 to 8 [ 409.200384][T13968] loop1: detected capacity change from 0 to 512 [ 409.256241][T13968] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.317968][ T4455] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 409.346994][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3802'. [ 409.357165][T13968] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.3798: Allocating blocks 41-42 which overlap fs metadata [ 409.459534][T13968] Quota error (device loop1): write_blk: dquota write failed [ 409.466982][T13968] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 409.494988][T13968] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 409.506077][T13968] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.3798: Failed to acquire dquot type 1 [ 409.531443][T13968] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 409.597941][ T4455] usb 5-1: Using ep0 maxpacket: 8 [ 409.607955][T13968] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.3798: corrupted inode contents [ 409.641361][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/918.tmp-b7:3' failed: Read-only file system [ 409.653217][T13968] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #12: comm syz.1.3798: mark_inode_dirty error [ 409.679904][T11920] udevd[11920]: symlink '../../loop6' '/dev/disk/by-diskseq/915.tmp-b7:6' failed: Read-only file system [ 409.692530][ T4345] udevd[4345]: symlink '../../loop4' '/dev/disk/by-diskseq/917.tmp-b7:4' failed: Read-only file system [ 409.728033][ T4455] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 409.740900][T13968] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.3798: corrupted inode contents [ 409.777745][ T4455] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.791258][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/918.tmp-b7:3' failed: Read-only file system [ 409.806208][T13086] udevd[13086]: symlink '../../loop1' '/dev/disk/by-diskseq/914.tmp-b7:1' failed: Read-only file system [ 409.809238][T13968] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.3798: mark_inode_dirty error [ 409.833473][ T4298] udevd[4298]: symlink '../../loop4' '/dev/disk/by-diskseq/917.tmp-b7:4' failed: Read-only file system [ 409.840732][ T4455] usb 5-1: config 0 interface 0 has no altsetting 0 [ 409.855069][T13086] udevd[13086]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 409.874922][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/915.tmp-b7:6' failed: Read-only file system [ 409.903740][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/918.tmp-b7:3' failed: Read-only file system [ 409.918420][ T4455] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 409.943736][ T4298] udevd[4298]: symlink '../../loop4' '/dev/disk/by-diskseq/917.tmp-b7:4' failed: Read-only file system [ 409.961045][T13989] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3809'. [ 409.975987][T13968] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.3798: corrupted inode contents [ 409.980725][ T4455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.038005][T13968] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 410.085592][ T4455] usb 5-1: config 0 descriptor?? [ 410.087353][T13968] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #12: comm syz.1.3798: corrupted inode contents [ 410.148722][T13968] EXT4-fs error (device loop1): ext4_truncate:4286: inode #12: comm syz.1.3798: mark_inode_dirty error [ 410.196664][T13968] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 410.238426][T13968] EXT4-fs (loop1): 1 truncate cleaned up [ 410.244228][T13968] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 410.599346][ T4455] uclogic 0003:28BD:0094.004B: item fetching failed at offset 9/40 [ 410.635566][ T4455] uclogic 0003:28BD:0094.004B: parse failed [ 410.663192][ T4455] uclogic: probe of 0003:28BD:0094.004B failed with error -22 [ 410.763317][T13995] loop1: detected capacity change from 0 to 8 [ 410.847444][ T4689] usb 5-1: USB disconnect, device number 33 [ 410.897125][T13987] loop6: detected capacity change from 0 to 32768 [ 410.913339][ T4176] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 410.945701][T13999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3814'. [ 411.318053][ T4176] usb 4-1: unable to get BOS descriptor or descriptor too short [ 411.408012][ T4176] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 411.416255][ T4176] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 411.465943][ T4176] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 411.504411][ T4176] usb 4-1: config 13 has no interface number 0 [ 411.511769][T14018] loop4: detected capacity change from 0 to 8 [ 411.525101][ T4176] usb 4-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 411.556768][ T4176] usb 4-1: config 13 interface 50 has no altsetting 0 [ 411.721977][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3827'. [ 411.738157][ T4176] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 411.754247][ T4176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.777520][T14028] netlink: 'syz.6.3827': attribute type 14 has an invalid length. [ 411.791940][ T4176] usb 4-1: Product: syz [ 411.805986][T14029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3828'. [ 411.806805][ T4176] usb 4-1: Manufacturer: syz [ 411.820736][T14028] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3827'. [ 411.839505][ T4176] usb 4-1: SerialNumber: syz [ 411.847944][ T4689] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 412.100961][ T4689] usb 2-1: Using ep0 maxpacket: 8 [ 412.214815][ T4176] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 412.228703][ T4689] usb 2-1: config 0 interface 0 has no altsetting 0 [ 412.239139][ T6967] usb 4-1: Failed to submit usb control message: -71 [ 412.268059][ T6967] usb 4-1: unable to send the bmi data to the device: -71 [ 412.277499][ T4176] usb 4-1: USB disconnect, device number 26 [ 412.287179][ T6967] usb 4-1: unable to get target info from device [ 412.301422][ T6967] usb 4-1: could not get target info (-71) [ 412.316801][ T6967] usb 4-1: could not probe fw (-71) [ 412.425498][T14052] loop4: detected capacity change from 0 to 512 [ 412.429147][ T4689] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 412.442589][ T4689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.452959][ T4689] usb 2-1: Product: syz [ 412.457235][ T4689] usb 2-1: Manufacturer: syz [ 412.462403][ T4689] usb 2-1: SerialNumber: syz [ 412.469190][ T4689] usb 2-1: config 0 descriptor?? [ 412.477886][ T1109] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 412.502184][T14052] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 412.513193][ T4689] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 412.563603][T14052] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.3837: Allocating blocks 41-42 which overlap fs metadata [ 412.584949][T14052] Quota error (device loop4): write_blk: dquota write failed [ 412.594157][T14052] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 412.608077][T14052] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3894: comm syz.4.3837: Allocating blocks 41-42 which overlap fs metadata [ 412.624456][T14052] Quota error (device loop4): write_blk: dquota write failed [ 412.632283][T14052] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 412.657822][T14052] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.3837: Failed to acquire dquot type 1 [ 412.670648][T14052] EXT4-fs error (device loop4): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 412.686238][T14052] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.3837: corrupted inode contents [ 412.726973][T14052] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #12: comm syz.4.3837: mark_inode_dirty error [ 412.738507][ T1109] usb 3-1: Using ep0 maxpacket: 8 [ 412.744045][ T4689] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 412.752714][T14052] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.3837: corrupted inode contents [ 412.769204][ T4689] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 412.777382][T14052] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #12: comm syz.4.3837: mark_inode_dirty error [ 412.806832][T14052] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.3837: corrupted inode contents [ 412.841818][T14052] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 412.858209][ T1109] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 244, changing to 11 [ 412.869486][T14059] loop3: detected capacity change from 0 to 256 [ 412.878346][ T1109] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.897930][T14052] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #12: comm syz.4.3837: corrupted inode contents [ 412.913843][ T1109] usb 3-1: config 0 interface 0 has no altsetting 0 [ 412.927643][ T1109] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 412.940298][ T1109] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.951015][T14052] EXT4-fs error (device loop4): ext4_truncate:4286: inode #12: comm syz.4.3837: mark_inode_dirty error [ 412.988454][ T4689] usb 2-1: USB disconnect, device number 25 [ 412.997448][ T1109] usb 3-1: config 0 descriptor?? [ 413.010823][T14052] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 413.023043][T14052] EXT4-fs (loop4): 1 truncate cleaned up [ 413.032158][T14052] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 413.058608][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.168462][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3840'. [ 413.209833][T14065] netlink: 'syz.3.3840': attribute type 14 has an invalid length. [ 413.227307][T14065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3840'. [ 413.492016][ T1109] uclogic 0003:28BD:0094.004C: item fetching failed at offset 9/40 [ 413.500743][ T1109] uclogic 0003:28BD:0094.004C: parse failed [ 413.506692][ T1109] uclogic: probe of 0003:28BD:0094.004C failed with error -22 [ 413.613355][ T4689] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 413.648615][T14073] loop3: detected capacity change from 0 to 32768 [ 413.694709][T14073] (syz.3.3845,14073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 413.719703][ T1109] usb 3-1: USB disconnect, device number 36 [ 413.749890][T14073] (syz.3.3845,14073,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 413.833406][T14073] JBD2: Ignoring recovery information on journal [ 413.878093][ T4689] usb 5-1: Using ep0 maxpacket: 16 [ 414.002609][T14073] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 414.012243][ T4689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 414.041556][ T4689] usb 5-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 414.080014][ T4689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.101014][ T4689] usb 5-1: config 0 descriptor?? [ 414.176956][ T4190] ocfs2: Unmounting device (7,3) on (node local) [ 414.589558][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.596590][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.622875][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 414.634043][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.644365][T14099] netlink: 'syz.1.3858': attribute type 14 has an invalid length. [ 414.652583][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.688161][T14099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3858'. [ 414.707780][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.714852][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.728727][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/936.tmp-b7:3' failed: Read-only file system [ 414.768712][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/928.tmp-b7:6' failed: Read-only file system [ 414.780176][ T4689] cherry 0003:046A:0023.004D: unknown main item tag 0x0 [ 414.819736][ T4689] cherry 0003:046A:0023.004D: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.4-1/input0 [ 414.835553][ T4345] udevd[4345]: symlink '../../loop1' '/dev/disk/by-diskseq/927.tmp-b7:1' failed: Read-only file system [ 414.854597][T14103] loop3: detected capacity change from 0 to 2048 [ 414.898432][T14107] raw_sendmsg: syz.1.3862 forgot to set AF_INET. Fix it! [ 414.906335][ T4689] usb 5-1: USB disconnect, device number 34 [ 414.915671][T14109] vim2m vim2m.0: vidioc_s_fmt queue busy [ 414.985272][T14103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.035142][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-diskseq/937.tmp-b7:3' failed: Read-only file system [ 415.059514][T11011] udevd[11011]: symlink '../../loop6' '/dev/disk/by-diskseq/928.tmp-b7:6' failed: Read-only file system [ 415.090544][T11920] udevd[11920]: symlink '../../loop1' '/dev/disk/by-diskseq/927.tmp-b7:1' failed: Read-only file system [ 415.090750][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 415.161731][ T4345] udevd[4345]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 415.174221][T14110] fido_id[14110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 415.231633][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-diskseq/937.tmp-b7:3' failed: Read-only file system [ 415.246194][T11011] udevd[11011]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 415.387446][T14117] loop6: detected capacity change from 0 to 256 [ 415.410509][T14114] netlink: 'syz.2.3866': attribute type 4 has an invalid length. [ 415.448853][T14114] netlink: 'syz.2.3866': attribute type 1 has an invalid length. [ 415.490523][T14114] netlink: 197448 bytes leftover after parsing attributes in process `syz.2.3866'. [ 415.522124][T14117] FAT-fs (loop6): Directory bread(block 64) failed [ 415.558568][T14117] FAT-fs (loop6): Directory bread(block 65) failed [ 415.586842][T14117] FAT-fs (loop6): Directory bread(block 66) failed [ 415.654785][T14117] FAT-fs (loop6): Directory bread(block 67) failed [ 415.694323][T14117] FAT-fs (loop6): Directory bread(block 68) failed [ 415.751851][T14117] FAT-fs (loop6): Directory bread(block 69) failed [ 415.784502][T14117] FAT-fs (loop6): Directory bread(block 70) failed [ 415.816877][T14117] FAT-fs (loop6): Directory bread(block 71) failed [ 415.845603][T14117] FAT-fs (loop6): Directory bread(block 72) failed [ 415.871239][T14117] FAT-fs (loop6): Directory bread(block 73) failed [ 416.459032][T14146] vim2m vim2m.0: vidioc_s_fmt queue busy [ 416.718097][ T4453] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 416.991939][ T4453] usb 7-1: Using ep0 maxpacket: 16 [ 417.130155][ T4453] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 417.153319][ T4453] usb 7-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 417.185820][ T4453] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.225846][ T4453] usb 7-1: config 0 descriptor?? [ 417.673944][T14184] loop4: detected capacity change from 0 to 512 [ 417.711965][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.723174][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.739093][T14184] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.766001][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.815624][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.823083][T14192] netlink: 'syz.4.3901': attribute type 4 has an invalid length. [ 417.831068][T14192] netlink: 'syz.4.3901': attribute type 1 has an invalid length. [ 417.843708][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.858857][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.866014][ T4453] cherry 0003:046A:0023.004E: unknown main item tag 0x0 [ 417.871612][T14192] netlink: 197448 bytes leftover after parsing attributes in process `syz.4.3901'. [ 417.906448][ T4453] cherry 0003:046A:0023.004E: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.6-1/input0 [ 417.993264][ T4453] usb 7-1: USB disconnect, device number 16 [ 418.171340][T14199] fido_id[14199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 418.602477][T14196] loop3: detected capacity change from 0 to 32768 [ 418.679145][T14198] loop1: detected capacity change from 0 to 32768 [ 418.690271][T14209] loop4: detected capacity change from 0 to 1024 [ 418.737098][T14196] read_mapping_page failed! [ 418.776039][T14198] (syz.1.3903,14198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 418.798961][T14196] ERROR: (device loop3): txCommit: [ 418.798961][T14196] [ 418.839042][T14198] (syz.1.3903,14198,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 418.879824][T14196] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 418.924040][ T1241] hfsplus: b-tree write err: -5, ino 25 [ 418.949499][ T1241] hfsplus: b-tree write err: -5, ino 4 [ 418.955126][ T1241] hfsplus: b-tree write err: -5, ino 2 [ 418.970778][T14198] JBD2: Ignoring recovery information on journal [ 419.054204][ T1241] hfsplus: b-tree write err: -5, ino 20 [ 419.061865][T14198] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 419.074388][ T4190] read_mapping_page failed! [ 419.104545][ T4190] ERROR: (device loop3): txCommit: [ 419.104545][ T4190] [ 419.116271][ T4190] read_mapping_page failed! [ 419.123576][ T4190] ERROR: (device loop3): txCommit: [ 419.123576][ T4190] [ 419.266971][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 419.406305][T14222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3912'. [ 419.680763][T14226] device geneve2 entered promiscuous mode [ 419.760228][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/940.tmp-b7:6' failed: Read-only file system [ 419.843003][ T7520] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.882788][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/940.tmp-b7:6' failed: Read-only file system [ 419.974185][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/940.tmp-b7:6' failed: Read-only file system [ 419.999773][ T7520] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.036725][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/946.tmp-b7:4' failed: Read-only file system [ 420.055286][T14240] loop6: detected capacity change from 0 to 1024 [ 420.116605][ T7520] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.165222][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/949.tmp-b7:6' failed: Read-only file system [ 420.199955][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 420.232001][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:6' failed: Read-only file system [ 420.256777][ T6967] hfsplus: b-tree write err: -5, ino 25 [ 420.263797][ T7520] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.271574][ T6967] hfsplus: b-tree write err: -5, ino 4 [ 420.296236][ T6967] hfsplus: b-tree write err: -5, ino 2 [ 420.314033][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/946.tmp-b7:4' failed: Read-only file system [ 420.333474][ T6967] hfsplus: b-tree write err: -5, ino 20 [ 420.362344][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/949.tmp-b7:6' failed: Read-only file system [ 420.383384][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system [ 420.660232][ T7520] tipc: Left network mode [ 420.867371][T14250] chnl_net:caif_netlink_parms(): no params data found [ 420.955506][T14250] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.963699][T14250] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.972549][T14250] device bridge_slave_0 entered promiscuous mode [ 420.990188][T14250] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.997502][T14250] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.006467][T14250] device bridge_slave_1 entered promiscuous mode [ 421.051204][T14250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.076978][T14250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.131432][T14250] team0: Port device team_slave_0 added [ 421.152663][T14250] team0: Port device team_slave_1 added [ 421.196498][T14250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.204079][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.232007][T14250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.258884][T14250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.265883][T14250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.293125][T14250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.356538][T14250] device hsr_slave_0 entered promiscuous mode [ 421.363942][T14250] device hsr_slave_1 entered promiscuous mode [ 421.370792][T14250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.380242][T14250] Cannot create hsr debugfs directory [ 421.593977][T14250] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 421.604158][T14250] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 421.614949][T14250] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.634679][T14250] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.674543][ T7520] device hsr_slave_0 left promiscuous mode [ 421.683487][ T7520] device hsr_slave_1 left promiscuous mode [ 421.694574][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.706162][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.716762][ T7520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.729231][ T7520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.737138][ T7520] device bridge_slave_1 left promiscuous mode [ 421.748844][ T7520] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.757566][ T7520] device bridge_slave_0 left promiscuous mode [ 421.772799][ T7520] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.790985][ T7520] device veth1_macvtap left promiscuous mode [ 421.797131][ T7520] device veth0_macvtap left promiscuous mode [ 421.811351][ T7520] device veth1_vlan left promiscuous mode [ 421.817187][ T7520] device veth0_vlan left promiscuous mode [ 422.002120][ T7520] team0 (unregistering): Port device team_slave_1 removed [ 422.020760][ T7520] team0 (unregistering): Port device team_slave_0 removed [ 422.034214][ T7520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.049923][ T7520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.122876][ T7520] bond0 (unregistering): Released all slaves [ 422.281519][T14250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.304975][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.313987][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.329593][T14250] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.351542][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 422.360908][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.369812][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.376907][ T1241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.407378][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 422.420793][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 422.429737][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.438616][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.445741][ T1241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.473491][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 422.499034][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 422.513914][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 422.532543][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.551178][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.581189][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.590793][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.608814][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.617556][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.638952][T14250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 422.657096][T14250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 422.665771][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.686522][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.803943][ T4453] Bluetooth: hci3: command 0x0409 tx timeout [ 422.880354][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.898147][ T6967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.919798][T14250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.268228][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 423.276984][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 423.330572][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 423.345741][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 423.363456][T14250] device veth0_vlan entered promiscuous mode [ 423.373680][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 423.382581][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 423.415334][T14250] device veth1_vlan entered promiscuous mode [ 423.474607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 423.494566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 423.503187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 423.533450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 423.562960][T14250] device veth0_macvtap entered promiscuous mode [ 423.585023][T14250] device veth1_macvtap entered promiscuous mode [ 423.618638][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.650452][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.662474][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.673372][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.685442][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.707832][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.729067][T14250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.747772][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.759852][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.775979][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.792515][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.803057][T14250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.821921][T14250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.836887][T14250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.856924][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.875818][ T1241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.900735][T14250] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.910227][T14250] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.919125][T14250] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.932863][T14250] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.099335][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.107213][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.131736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.166857][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.181384][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.198219][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.304598][T14334] loop4: detected capacity change from 0 to 1024 [ 424.783682][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/951.tmp-b7:4' failed: Read-only file system [ 424.860075][T14351] Restarting kernel threads ... [ 424.862309][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 424.878224][T14351] done. [ 424.882474][ T1109] Bluetooth: hci3: command 0x041b tx timeout [ 424.955192][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-uuid/c002970e-44c2-3eff-9630-c49fa665f579.tmp-b7:4' failed: Read-only file system [ 425.173898][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/951.tmp-b7:4' failed: Read-only file system [ 425.307405][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/951.tmp-b7:4' failed: Read-only file system [ 425.432932][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/953.tmp-b7:4' failed: Read-only file system [ 425.582326][T14332] loop6: detected capacity change from 0 to 32768 [ 425.886385][T14332] XFS (loop6): Mounting V5 Filesystem [ 425.922799][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/953.tmp-b7:4' failed: Read-only file system [ 425.962633][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/947.tmp-b7:1' failed: Read-only file system [ 426.015812][T14386] sock: sock_timestamping_bind_phc: sock not bind to device [ 426.050328][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/953.tmp-b7:4' failed: Read-only file system [ 426.074587][T14389] device geneve2 entered promiscuous mode [ 426.076676][T11011] udevd[11011]: symlink '../../loop6' '/dev/disk/by-diskseq/954.tmp-b7:6' failed: Read-only file system [ 426.130211][T14332] XFS (loop6): Ending clean mount [ 426.258819][ T9855] XFS (loop6): Unmounting Filesystem [ 426.288572][T14396] loop1: detected capacity change from 0 to 256 [ 426.373060][T14400] loop4: detected capacity change from 0 to 512 [ 426.399698][T14396] exfat: Deprecated parameter 'namecase' [ 426.575072][T14396] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 426.594270][T14400] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 426.623081][T14400] ext4 filesystem being mounted at /744/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.958048][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 427.288623][T14427] loop1: detected capacity change from 0 to 512 [ 427.317016][T14427] EXT4-fs (loop1): Ignoring removed nobh option [ 427.377957][T14427] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 427.398219][T14427] ext4 filesystem being mounted at /821/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.529470][T14439] sock: sock_timestamping_bind_phc: sock not bind to device [ 428.412435][T14415] loop4: detected capacity change from 0 to 40427 [ 428.488351][T14415] F2FS-fs (loop4): invalid crc value [ 428.576499][T14415] F2FS-fs (loop4): Found nat_bits in checkpoint [ 428.646960][T14442] loop7: detected capacity change from 0 to 32768 [ 428.784796][T14415] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 428.849030][T14481] sock: sock_timestamping_bind_phc: sock not bind to device [ 428.938709][T14442] XFS (loop7): Mounting V5 Filesystem [ 429.018558][ T4201] attempt to access beyond end of device [ 429.018558][ T4201] loop4: rw=2049, want=45104, limit=40427 [ 429.038162][ T1109] Bluetooth: hci3: command 0x0419 tx timeout [ 429.257083][T14442] XFS (loop7): Ending clean mount [ 429.454195][T14250] XFS (loop7): Unmounting Filesystem [ 429.945738][ T4342] udevd[4342]: symlink '../../loop7' '/dev/disk/by-diskseq/963.tmp-b7:7' failed: Read-only file system [ 429.974018][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/964.tmp-b7:4' failed: Read-only file system [ 429.996103][T14518] loop4: detected capacity change from 0 to 512 [ 430.036427][ T4342] udevd[4342]: symlink '../../loop7' '/dev/disk/by-diskseq/963.tmp-b7:7' failed: Read-only file system [ 430.044282][T14518] EXT4-fs (loop4): Ignoring removed nobh option [ 430.095228][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/966.tmp-b7:4' failed: Read-only file system [ 430.108164][T14507] loop6: detected capacity change from 0 to 32768 [ 430.149584][T14518] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 430.168486][T14518] ext4 filesystem being mounted at /747/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.173824][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 430.310167][T14528] loop1: detected capacity change from 0 to 128 [ 430.380034][T14528] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.465546][T14528] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 430.538573][T14535] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 430.552530][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/968.tmp-b7:1' failed: Read-only file system [ 430.599520][ T4345] udevd[4345]: symlink '../../loop4' '/dev/disk/by-diskseq/966.tmp-b7:4' failed: Read-only file system [ 430.601534][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/967.tmp-b7:6' failed: Read-only file system [ 430.623233][ T4298] udevd[4298]: symlink '../../loop7' '/dev/disk/by-diskseq/965.tmp-b7:7' failed: Read-only file system [ 430.666857][ T7520] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 430.689720][ T4345] udevd[4345]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 430.835143][T14540] sock: sock_timestamping_bind_phc: sock not bind to device [ 431.841462][T14537] loop7: detected capacity change from 0 to 40427 [ 431.881523][T14537] F2FS-fs (loop7): invalid crc value [ 431.902047][T14537] F2FS-fs (loop7): Found nat_bits in checkpoint [ 431.982826][T14537] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 432.060985][T14250] attempt to access beyond end of device [ 432.060985][T14250] loop7: rw=2049, want=45104, limit=40427 [ 432.567937][ T4267] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 432.785939][T14601] loop7: detected capacity change from 0 to 512 [ 432.817995][ T4267] usb 5-1: Using ep0 maxpacket: 16 [ 432.828403][T14601] EXT4-fs (loop7): Ignoring removed nobh option [ 432.926533][T14601] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,grpquota,,errors=continue. Quota mode: writeback. [ 432.967325][T14601] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.978170][ T4267] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 432.991643][ T4267] usb 5-1: config 0 interface 0 has no altsetting 0 [ 432.998333][ T4267] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 433.007410][ T4267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.028694][ T4267] usb 5-1: config 0 descriptor?? [ 433.098440][T14594] loop1: detected capacity change from 0 to 32768 [ 433.320705][T14594] XFS (loop1): Mounting V5 Filesystem [ 433.439547][T14594] XFS (loop1): Ending clean mount [ 433.528333][ T4267] wacom 0003:056A:00CC.004F: unknown main item tag 0x6 [ 433.535355][ T4267] wacom 0003:056A:00CC.004F: ignoring exceeding usage max [ 433.638036][ T4267] wacom 0003:056A:00CC.004F: hidraw0: USB HID v0.81 Device [HID 056a:00cc] on usb-dummy_hcd.4-1/input0 [ 433.675006][ T4189] XFS (loop1): Unmounting Filesystem [ 433.730460][ T4267] usb 5-1: USB disconnect, device number 35 [ 433.898827][T14633] fido_id[14633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 433.963993][T14634] loop6: detected capacity change from 0 to 4096 [ 434.059041][T14634] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 434.555663][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'. [ 434.627892][T14655] nbd: socks must be embedded in a SOCK_ITEM attr [ 434.827764][T14669] loop7: detected capacity change from 0 to 256 [ 434.837016][T14668] loop6: detected capacity change from 0 to 16 [ 434.981793][ T4342] udevd[4342]: symlink '../../loop7' '/dev/disk/by-diskseq/981.tmp-b7:7' failed: Read-only file system [ 434.995981][T14668] erofs: (device loop6): mounted with root inode @ nid 36. [ 435.111484][ T4342] udevd[4342]: symlink '../../loop7' '/dev/disk/by-diskseq/981.tmp-b7:7' failed: Read-only file system [ 435.147977][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-diskseq/980.tmp-b7:6' failed: Read-only file system [ 435.198883][ T4342] udevd[4342]: symlink '../../loop7' '/dev/disk/by-diskseq/981.tmp-b7:7' failed: Read-only file system [ 435.212952][ T4345] udevd[4345]: symlink '../../loop6' '/dev/disk/by-uuid/dc080900-0000-0000-00db-a5c46e0e7dba.tmp-b7:6' failed: Read-only file system [ 435.253741][T14681] netlink: 'syz.6.4038': attribute type 46 has an invalid length. [ 435.328070][T11011] udevd[11011]: symlink '../../loop7' '/dev/disk/by-diskseq/982.tmp-b7:7' failed: Read-only file system [ 435.384546][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/980.tmp-b7:6' failed: Read-only file system [ 435.445844][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/980.tmp-b7:6' failed: Read-only file system [ 435.470840][T11011] udevd[11011]: symlink '../../loop7' '/dev/disk/by-diskseq/982.tmp-b7:7' failed: Read-only file system [ 435.537214][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/980.tmp-b7:6' failed: Read-only file system [ 435.822556][T14663] loop1: detected capacity change from 0 to 32768 [ 435.962815][T14714] loop4: detected capacity change from 0 to 256 [ 436.022216][T14663] XFS (loop1): Mounting V5 Filesystem [ 436.046368][T14725] jffs2: notice: (14725) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 436.094118][T14714] FAT-fs (loop4): Directory bread(block 64) failed [ 436.144295][T14714] FAT-fs (loop4): Directory bread(block 65) failed [ 436.198773][T14714] FAT-fs (loop4): Directory bread(block 66) failed [ 436.205371][T14714] FAT-fs (loop4): Directory bread(block 67) failed [ 436.244128][T14663] XFS (loop1): Ending clean mount [ 436.268122][T14714] FAT-fs (loop4): Directory bread(block 68) failed [ 436.278063][T14714] FAT-fs (loop4): Directory bread(block 69) failed [ 436.284733][T14714] FAT-fs (loop4): Directory bread(block 70) failed [ 436.300432][T14714] FAT-fs (loop4): Directory bread(block 71) failed [ 436.308466][T14714] FAT-fs (loop4): Directory bread(block 72) failed [ 436.315093][T14714] FAT-fs (loop4): Directory bread(block 73) failed [ 436.544219][ T4189] XFS (loop1): Unmounting Filesystem [ 436.798550][T14752] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 436.960883][T14757] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 436.988284][T14758] binder: 14756:14758 ioctl c018620c 200000000280 returned -22 [ 437.148883][T14761] usb usb1: usbfs: process 14761 (syz.7.4070) did not claim interface 0 before use [ 437.429151][T14771] loop1: detected capacity change from 0 to 4096 [ 437.453468][T14777] tipc: Started in network mode [ 437.478378][T14777] tipc: Node identity 00000000000040080020000000000001, cluster identity 4711 [ 437.498405][T14777] tipc: Enabling of bearer rejected, failed to enable media [ 437.588513][T14771] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 437.646662][T14771] ntfs3: loop1: failed to convert name for inode 1e. [ 437.710907][T14771] ntfs3: loop1: ino=1f, Correct links count -> 1. [ 437.738244][T14771] ntfs3: loop1: ino=1f, Correct links count -> 1. [ 437.822493][T14794] loop7: detected capacity change from 0 to 512 [ 438.029846][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4089'. [ 438.088247][T14809] block nbd1: Unsupported socket: shutdown callout must be supported. [ 438.117219][T14794] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.177914][T14794] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.204081][T14813] loop1: detected capacity change from 0 to 128 [ 438.375450][T14813] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 438.417248][T14813] FAT-fs (loop1): Filesystem has been set read-only [ 438.675925][ T4233] Bluetooth: hci3: command 0x0405 tx timeout [ 438.812005][T14826] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4097'. [ 438.827133][T14795] loop6: detected capacity change from 0 to 32768 [ 438.916021][T14795] [ 438.916021][T14795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.916021][T14795] [ 438.984003][T14795] [ 438.984003][T14795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.984003][T14795] [ 438.998577][T14795] [ 438.998577][T14795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 438.998577][T14795] [ 439.022723][T14815] loop4: detected capacity change from 0 to 32768 [ 439.032200][T14795] [ 439.032200][T14795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 439.032200][T14795] [ 439.056870][T14832] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 439.096975][T14795] [ 439.096975][T14795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 439.096975][T14795] [ 439.215710][ T275] [ 439.215710][ T275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 439.215710][ T275] [ 439.256234][T14830] jfs_create: dtInsert returned -EIO [ 439.264468][T14830] ERROR: (device loop6): jfs_create: [ 439.264468][T14830] [ 439.285786][T14830] ERROR: (device loop6): remounting filesystem as read-only [ 439.427290][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4105'. [ 439.440150][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.547612][T14843] loop7: detected capacity change from 0 to 16 [ 439.558349][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4106'. [ 439.567405][T14845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4106'. [ 439.623712][T14843] erofs: (device loop7): mounted with root inode @ nid 36. [ 439.646640][T14843] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 439.728332][T14843] erofs: (device loop7): z_erofs_lz4_decompress: failed to decompress -37 in[64, 4032] out[1851] [ 439.776276][T14843] erofs: (device loop7): z_erofs_readpage: failed to read, err [-117] [ 439.968872][T14861] loop7: detected capacity change from 0 to 512 [ 440.067154][T14869] loop1: detected capacity change from 0 to 256 [ 440.090520][T14861] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 440.191710][ T4342] udevd[4342]: symlink '../../loop7' '/dev/disk/by-diskseq/1000.tmp-b7:7' failed: Read-only file system [ 440.269117][T14875] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 440.369362][T14881] ip_tables: iptables: counters copy to user failed while replacing table [ 440.385874][T14876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 440.422711][T14876] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 440.458790][T14876] Symlink component flag not implemented [ 440.464629][T14876] Symlink component flag not implemented (7) [ 440.543827][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/998.tmp-b7:4' failed: Read-only file system [ 440.569196][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:4' failed: Read-only file system [ 440.610860][T11011] udevd[11011]: symlink '../../loop7' '/dev/disk/by-diskseq/1000.tmp-b7:7' failed: Read-only file system [ 440.631179][T14887] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 440.666024][T14887] EXT4-fs (loop1): 1 truncate cleaned up [ 440.710716][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/1001.tmp-b7:1' failed: Read-only file system [ 440.718571][ T4233] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 440.729725][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 440.737417][T14887] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 440.762390][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/996.tmp-b7:6' failed: Read-only file system [ 440.789053][T14887] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 440.802076][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/1002.tmp-b7:4' failed: Read-only file system [ 440.828744][T14894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 440.839704][T14894] System zones: 1-3, 19-19, 35-36 [ 440.846291][T14894] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 440.858908][T14894] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 440.885296][ T4345] udevd[4345]: symlink '../../loop1' '/dev/disk/by-diskseq/1001.tmp-b7:1' failed: Read-only file system [ 440.910400][ T4345] udevd[4345]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 441.137879][ T4233] usb 7-1: Using ep0 maxpacket: 16 [ 441.196742][T14903] set_capacity_and_notify: 4 callbacks suppressed [ 441.196759][T14903] loop1: detected capacity change from 0 to 512 [ 441.258589][ T4233] usb 7-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 441.317967][ T4233] usb 7-1: config 0 interface 0 has no altsetting 0 [ 441.326932][T14903] EXT4-fs (loop1): Ignoring removed orlov option [ 441.367462][ T4233] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 441.408036][T14903] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,orlov,bsddf,auto_da_alloc=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 441.421008][ T4233] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.520616][ T4233] usb 7-1: config 0 descriptor?? [ 441.681511][T14922] nbd: must specify at least one socket [ 441.883300][T14932] binder: 14929:14932 ioctl c018620b 200000000040 returned -14 [ 441.980604][T14937] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 442.020232][ T4233] zydacron 0003:13EC:0006.0050: unbalanced collection at end of report description [ 442.051099][ T4233] zydacron 0003:13EC:0006.0050: parse failed [ 442.057165][ T4233] zydacron: probe of 0003:13EC:0006.0050 failed with error -22 [ 442.073646][T14940] loop4: detected capacity change from 0 to 128 [ 442.093639][T14942] loop7: detected capacity change from 0 to 1024 [ 442.158748][T14940] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.184680][T14942] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 442.200684][T14940] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.215317][T14942] EXT4-fs (loop7): group descriptors corrupted! [ 442.227388][ T4233] usb 7-1: USB disconnect, device number 17 [ 442.308531][ T1213] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.547925][ T1109] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 442.765333][T14968] team0: Device wg0 is of different type [ 442.799523][ T1109] usb 3-1: Using ep0 maxpacket: 16 [ 442.891666][T14968] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 442.918229][ T1109] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 442.945721][T14978] loop6: detected capacity change from 0 to 4096 [ 443.088064][ T1109] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 443.097186][ T1109] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.140511][T14989] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.141648][T14978] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 443.188083][ T1109] usb 3-1: Product: syz [ 443.212126][T14978] NILFS (loop6): mounting fs with errors [ 443.213034][ T1109] usb 3-1: Manufacturer: syz [ 443.264062][ T1109] usb 3-1: SerialNumber: syz [ 443.287276][T14993] loop7: detected capacity change from 0 to 16 [ 443.295338][ T1109] r8152-cfgselector 3-1: config 0 descriptor?? [ 443.308007][T14978] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 443.350097][T14993] erofs: (device loop7): mounted with root inode @ nid 36. [ 443.358184][T14978] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 443.420805][T14993] attempt to access beyond end of device [ 443.420805][T14993] loop7: rw=524288, want=40, limit=16 [ 443.466705][T14993] attempt to access beyond end of device [ 443.466705][T14993] loop7: rw=524288, want=104, limit=16 [ 443.491630][T14993] attempt to access beyond end of device [ 443.491630][T14993] loop7: rw=0, want=24, limit=16 [ 443.532246][ T26] audit: type=1800 audit(1786560838.253:17): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4161" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 443.791712][ T1109] r8152-cfgselector 3-1: Unknown version 0x0000 [ 443.819163][ T1109] r8152-cfgselector 3-1: bad CDC descriptors [ 443.835465][T15003] loop6: detected capacity change from 0 to 4096 [ 443.880298][ T1109] r8152-cfgselector 3-1: Unknown version 0x0000 [ 443.932074][ T1109] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 443.952015][T15007] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 444.034805][T14987] loop1: detected capacity change from 0 to 32768 [ 444.089786][T14981] loop4: detected capacity change from 0 to 32768 [ 444.162580][T14987] JBD2: Ignoring recovery information on journal [ 444.256135][T15016] loop7: detected capacity change from 0 to 2048 [ 444.294045][T14987] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 444.327700][T15016] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 444.438084][T15016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 444.524913][T15016] UDF-fs: unknown compression code (0) [ 444.572001][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 444.675212][T15028] loop6: detected capacity change from 0 to 1024 [ 444.833456][T15028] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #11: comm syz.6.4170: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 444.870976][T15037] usb usb8: check_ctrlrecip: process 15037 (syz.1.4175) requesting ep 01 but needs 81 [ 444.900870][T15028] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.4170: couldn't read orphan inode 11 (err -117) [ 445.003243][T15028] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: writeback. [ 445.026151][T15037] usb usb8: usbfs: process 15037 (syz.1.4175) did not claim interface 0 before use [ 445.252895][T11011] udevd[11011]: symlink '../../loop1' '/dev/disk/by-diskseq/1023.tmp-b7:1' failed: Read-only file system [ 445.271702][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/1031.tmp-b7:4' failed: Read-only file system [ 445.391556][T15060] ADFS-fs (loop1): unrecognised mount option "u" or missing value [ 445.423487][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/1031.tmp-b7:4' failed: Read-only file system [ 445.450686][ T4345] udevd[4345]: symlink '../../loop7' '/dev/disk/by-diskseq/1028.tmp-b7:7' failed: Read-only file system [ 445.516599][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-diskseq/1027.tmp-b7:6' failed: Read-only file system [ 445.540615][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/1023.tmp-b7:1' failed: Read-only file system [ 445.552811][T15060] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4181'. [ 445.578100][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/1031.tmp-b7:4' failed: Read-only file system [ 445.606819][ T4345] udevd[4345]: symlink '../../loop7' '/dev/disk/by-diskseq/1028.tmp-b7:7' failed: Read-only file system [ 445.619648][ T4298] udevd[4298]: symlink '../../loop6' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:6' failed: Read-only file system [ 445.709726][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/1031.tmp-b7:4' failed: Read-only file system [ 445.816528][T15077] netlink: 'syz.1.4188': attribute type 1 has an invalid length. [ 446.483924][T15107] set_capacity_and_notify: 3 callbacks suppressed [ 446.483944][T15107] loop6: detected capacity change from 0 to 128 [ 446.578062][ T26] audit: type=1800 audit(1786560841.303:18): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4199" name="file1" dev="loop6" ino=1048907 res=0 errno=0 [ 446.604126][T15107] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 446.650158][T15107] FAT-fs (loop6): Filesystem has been set read-only [ 446.825252][T15072] loop7: detected capacity change from 0 to 32768 [ 446.969245][T15126] loop4: detected capacity change from 0 to 4096 [ 447.027680][T15072] XFS (loop7): Mounting V5 Filesystem [ 447.131622][T15135] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 447.186621][T15072] XFS (loop7): Ending clean mount [ 447.284559][ T26] audit: type=1800 audit(1786560842.003:19): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4185" name="file1" dev="loop7" ino=4422 res=0 errno=0 [ 447.349719][T14250] XFS (loop7): Unmounting Filesystem [ 447.585841][T15149] loop6: detected capacity change from 0 to 1024 [ 447.752866][T15149] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 2: comm syz.6.4211: lblock 2 mapped to illegal pblock 2 (length 1) [ 447.903153][T15149] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 447.934571][T15149] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 48: comm syz.6.4211: lblock 0 mapped to illegal pblock 48 (length 1) [ 447.978408][T15149] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 448.048326][T15149] EXT4-fs error (device loop6): ext4_acquire_dquot:6236: comm syz.6.4211: Failed to acquire dquot type 0 [ 448.095144][T15149] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 448.163695][T15149] EXT4-fs error (device loop6): ext4_evict_inode:284: inode #11: comm syz.6.4211: mark_inode_dirty error [ 448.209827][T15149] EXT4-fs warning (device loop6): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 448.240887][T15149] EXT4-fs (loop6): 1 orphan inode deleted [ 448.246690][T15149] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 448.270034][ T7520] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 448.373307][ T7520] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 448.448046][ T7520] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 448.538132][ T1213] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 448.592679][T15156] loop1: detected capacity change from 0 to 32768 [ 448.617129][ T1213] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 448.626583][ T1213] EXT4-fs error (device loop6): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 448.670851][T15156] JBD2: Ignoring recovery information on journal [ 448.697359][ T9855] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 448.774161][ T9855] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 448.813136][T15161] loop4: detected capacity change from 0 to 40427 [ 448.817234][T15156] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 448.853193][ T9855] EXT4-fs error (device loop6): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 448.932999][T15161] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288) [ 448.951428][ T26] audit: type=1800 audit(1786560843.673:20): pid=15156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4214" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 448.994221][T15161] F2FS-fs (loop4): invalid crc value [ 449.012090][T15161] F2FS-fs (loop4): Found nat_bits in checkpoint [ 449.162049][ T4189] ocfs2: Unmounting device (7,1) on (node local) [ 449.175626][T15161] F2FS-fs (loop4): recover fsync data on readonly fs [ 449.241485][T15161] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 449.297992][T15161] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 449.355550][T15161] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 449.488070][T15196] loop6: detected capacity change from 0 to 512 [ 449.863289][T15161] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=38d380e8, run fsck to fix. [ 450.286223][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/1050.tmp-b7:6' failed: Read-only file system [ 450.441664][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/1050.tmp-b7:6' failed: Read-only file system [ 450.648540][T15198] loop1: detected capacity change from 0 to 32768 [ 450.699579][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/1051.tmp-b7:4' failed: Read-only file system [ 450.723347][ T4342] udevd[4342]: symlink '../../loop6' '/dev/disk/by-diskseq/1050.tmp-b7:6' failed: Read-only file system [ 450.774874][T15248] loop6: detected capacity change from 0 to 8 [ 450.826314][T15198] XFS (loop1): Mounting V5 Filesystem [ 450.853296][T15253] loop4: detected capacity change from 0 to 128 [ 450.917617][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/1052.tmp-b7:1' failed: Read-only file system [ 450.935808][T15198] XFS (loop1): Ending clean mount [ 450.961394][T15198] XFS (loop1): Quotacheck needed: Please wait. [ 450.972381][T15253] ADFS-fs (loop4): unrecognised mount option "u" or missing value [ 451.039392][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system [ 451.143319][T15198] XFS (loop1): Quotacheck: Done. [ 451.195256][T15253] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4237'. [ 451.287146][ T4189] XFS (loop1): Unmounting Filesystem [ 451.362866][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-diskseq/1052.tmp-b7:1' failed: Read-only file system [ 451.432880][ T4342] udevd[4342]: symlink '../../loop1' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:1' failed: Read-only file system [ 451.458895][T11011] udevd[11011]: symlink '../../loop4' '/dev/disk/by-diskseq/1054.tmp-b7:4' failed: Read-only file system [ 451.561797][T15273] set_capacity_and_notify: 1 callbacks suppressed [ 451.561814][T15273] loop6: detected capacity change from 0 to 128 [ 451.584206][ T4342] udevd[4342]: symlink '../../loop4' '/dev/disk/by-diskseq/1054.tmp-b7:4' failed: Read-only file system [ 451.642243][T15273] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 451.714876][T15273] hpfs: filesystem error: improperly stopped [ 451.726918][T15273] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 451.749916][T15273] hpfs: You really don't want any checks? You are crazy... [ 451.757178][T15273] hpfs: Code page index out of array [ 451.762905][T15273] hpfs: code page support is disabled [ 451.769491][T15273] hpfs: hpfs_map_4sectors(): unaligned read [ 451.775849][T15273] hpfs: hpfs_map_4sectors(): unaligned read [ 451.782352][T15273] hpfs: filesystem error: unable to find root dir [ 452.054514][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 452.143614][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 452.234257][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 452.339688][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 452.389272][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 452.399491][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 452.410454][T15282] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 452.803517][ T4680] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 452.834140][T15317] loop7: detected capacity change from 0 to 16 [ 452.935753][T15317] erofs: (device loop7): mounted with root inode @ nid 36. [ 453.038516][T15321] sp0: Synchronizing with TNC [ 453.045064][T15325] loop1: detected capacity change from 0 to 256 [ 453.098123][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4269'. [ 453.151367][T15329] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4269'. [ 453.168108][ T4680] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 453.203653][ T4680] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 453.237837][ T4680] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 453.263695][ T4680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.302431][ T4680] usb 3-1: config 0 descriptor?? [ 453.371479][T15341] usb usb1: usbfs: process 15341 (syz.4.4273) did not claim interface 0 before use [ 453.811036][ T4680] hid-led 0003:1294:1320.0051: unknown main item tag 0xd [ 453.825497][ T4680] hid-led 0003:1294:1320.0051: unknown main item tag 0xe [ 453.835152][ T4680] hid-led 0003:1294:1320.0051: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 453.854643][ T4680] hid-led 0003:1294:1320.0051: Riso Kagaku Webmail Notifier initialized [ 454.032102][ T7574] usb 3-1: USB disconnect, device number 38 [ 454.060709][ T4267] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 454.076987][ T4267] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 454.086548][ T4267] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 454.135623][T15371] loop6: detected capacity change from 0 to 128 [ 454.249589][T15375] loop1: detected capacity change from 0 to 2048 [ 454.352432][T15380] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 454.386321][T15382] loop4: detected capacity change from 0 to 128 [ 454.395480][T15382] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 454.444336][T15382] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 454.461425][T15375] NILFS (loop1): error -2 truncating bmap (ino=16) [ 454.518885][T15380] ------------[ cut here ]------------ [ 454.525284][T15380] WARNING: CPU: 1 PID: 15380 at fs/nilfs2/dat.c:200 nilfs_dat_commit_end+0x5ac/0x6b0 [ 454.534961][T15380] Modules linked in: [ 454.538953][T15380] CPU: 1 PID: 15380 Comm: segctord Not tainted syzkaller #0 [ 454.546377][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.556656][T15380] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 454.562817][T15380] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 23 3b 65 fe e8 7e bb ec fd e9 b8 fc ff ff e8 14 3b 65 fe <0f> 0b e9 16 fc ff ff e8 08 3b 65 fe e8 63 bb ec fd e9 74 fe ff ff [ 454.582989][T15380] RSP: 0018:ffffc90003eaf3c0 EFLAGS: 00010293 [ 454.589291][T15380] RAX: ffffffff8313c19c RBX: ffff88802364d1a0 RCX: ffff888024669dc0 [ 454.597346][T15380] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 454.605423][T15380] RBP: 0000000000000003 R08: ffff88805cce3cb7 R09: 1ffff1100b99c796 [ 454.613492][T15380] R10: dffffc0000000000 R11: ffffed100b99c797 R12: ffff88802466b548 [ 454.621558][T15380] R13: ffff8880616bf9e0 R14: 00000000003f0002 R15: ffff8880774e1eb0 [ 454.629619][T15380] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 454.638639][T15380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.645295][T15380] CR2: 00005555596e69f8 CR3: 0000000061971000 CR4: 00000000003506e0 [ 454.653340][T15380] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 454.661469][T15380] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 454.669528][T15380] Call Trace: [ 454.672852][T15380] [ 454.676002][T15380] nilfs_dat_commit_update+0x24/0x40 [ 454.681407][T15380] nilfs_btree_commit_update_v+0x93/0x410 [ 454.687182][T15380] nilfs_btree_propagate+0x8fe/0xcb0 [ 454.692554][T15380] nilfs_bmap_propagate+0x70/0x120 [ 454.697752][T15380] nilfs_segctor_apply_buffers+0x15d/0x320 [ 454.703609][T15380] ? nilfs_collect_file_data+0xc0/0xc0 [ 454.709139][T15380] nilfs_segctor_scan_file+0x7af/0x9d0 [ 454.714692][T15380] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 454.721925][T15380] ? rcu_is_watching+0x11/0xa0 [ 454.726738][T15380] nilfs_segctor_do_construct+0x1c0c/0x6c10 [ 454.732787][T15380] ? verify_lock_unused+0x140/0x140 [ 454.738074][T15380] ? nilfs_transaction_unlock+0x210/0x210 [ 454.743971][T15380] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 454.750279][T15380] ? clear_nonspinnable+0x60/0x60 [ 454.755355][T15380] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 454.760898][T15380] ? __lock_acquire+0x7b50/0x7b50 [ 454.766014][T15380] ? __rwlock_init+0x140/0x140 [ 454.770870][T15380] ? do_raw_spin_unlock+0x11d/0x230 [ 454.776117][T15380] ? _raw_spin_unlock+0x24/0x40 [ 454.781075][T15380] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 454.786576][T15380] nilfs_segctor_construct+0x170/0x690 [ 454.792111][T15380] nilfs_segctor_thread+0x533/0x1100 [ 454.797501][T15380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 454.803458][T15380] ? nilfs_iput_work_func+0x70/0x70 [ 454.808718][T15380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.814694][T15380] ? _raw_spin_unlock+0x40/0x40 [ 454.819610][T15380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 454.825540][T15380] ? init_wait_entry+0xd0/0xd0 [ 454.830401][T15380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 454.836353][T15380] ? __kthread_parkme+0x14e/0x1b0 [ 454.841452][T15380] kthread+0x42e/0x520 [ 454.845600][T15380] ? nilfs_iput_work_func+0x70/0x70 [ 454.850871][T15380] ? kthread_blkcg+0xd0/0xd0 [ 454.855504][T15380] ret_from_fork+0x1f/0x30 [ 454.860001][T15380] [ 454.863109][T15380] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 454.870412][T15380] CPU: 1 PID: 15380 Comm: segctord Not tainted syzkaller #0 [ 454.877756][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.887877][T15380] Call Trace: [ 454.891215][T15380] [ 454.894174][T15380] dump_stack_lvl+0x188/0x250 [ 454.898892][T15380] ? show_regs_print_info+0x20/0x20 [ 454.904131][T15380] ? load_image+0x410/0x410 [ 454.908686][T15380] panic+0x2f8/0x850 [ 454.912630][T15380] ? bpf_jit_dump+0xd0/0xd0 [ 454.917178][T15380] ? ret_from_fork+0x1f/0x30 [ 454.921820][T15380] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 454.927229][T15380] __warn+0x248/0x2b0 [ 454.931247][T15380] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 454.936656][T15380] report_bug+0x1b9/0x2e0 [ 454.941021][T15380] handle_bug+0x3a/0x70 [ 454.945213][T15380] exc_invalid_op+0x16/0x40 [ 454.949783][T15380] asm_exc_invalid_op+0x16/0x20 [ 454.954703][T15380] RIP: 0010:nilfs_dat_commit_end+0x5ac/0x6b0 [ 454.960736][T15380] Code: 8b 34 24 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b8 54 03 00 e8 23 3b 65 fe e8 7e bb ec fd e9 b8 fc ff ff e8 14 3b 65 fe <0f> 0b e9 16 fc ff ff e8 08 3b 65 fe e8 63 bb ec fd e9 74 fe ff ff [ 454.980384][T15380] RSP: 0018:ffffc90003eaf3c0 EFLAGS: 00010293 [ 454.986495][T15380] RAX: ffffffff8313c19c RBX: ffff88802364d1a0 RCX: ffff888024669dc0 [ 454.994506][T15380] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 00000000003f0002 [ 455.002513][T15380] RBP: 0000000000000003 R08: ffff88805cce3cb7 R09: 1ffff1100b99c796 [ 455.010646][T15380] R10: dffffc0000000000 R11: ffffed100b99c797 R12: ffff88802466b548 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 455.018653][T15380] R13: ffff8880616bf9e0 R14: 00000000003f0002 R15: ffff8880774e1eb0 [ 455.026663][T15380] ? nilfs_dat_commit_end+0x5ac/0x6b0 [ 455.032100][T15380] nilfs_dat_commit_update+0x24/0x40 [ 455.037437][T15380] nilfs_btree_commit_update_v+0x93/0x410 [ 455.043209][T15380] nilfs_btree_propagate+0x8fe/0xcb0 [ 455.048557][T15380] nilfs_bmap_propagate+0x70/0x120 [ 455.053716][T15380] nilfs_segctor_apply_buffers+0x15d/0x320 [ 455.059563][T15380] ? nilfs_collect_file_data+0xc0/0xc0 [ 455.065060][T15380] nilfs_segctor_scan_file+0x7af/0x9d0 [ 455.070571][T15380] ? trace_nilfs2_collection_stage_transition+0x1a0/0x1a0 [ 455.077748][T15380] ? rcu_is_watching+0x11/0xa0 [ 455.082564][T15380] nilfs_segctor_do_construct+0x1c0c/0x6c10 [ 455.088566][T15380] ? verify_lock_unused+0x140/0x140 [ 455.093820][T15380] ? nilfs_transaction_unlock+0x210/0x210 [ 455.099583][T15380] ? nilfs_bmap_test_and_clear_dirty+0x4c/0x70 [ 455.105785][T15380] ? clear_nonspinnable+0x60/0x60 [ 455.110847][T15380] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 455.116347][T15380] ? __lock_acquire+0x7b50/0x7b50 [ 455.121419][T15380] ? __rwlock_init+0x140/0x140 [ 455.126222][T15380] ? do_raw_spin_unlock+0x11d/0x230 [ 455.131460][T15380] ? _raw_spin_unlock+0x24/0x40 [ 455.136340][T15380] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 455.141837][T15380] nilfs_segctor_construct+0x170/0x690 [ 455.147334][T15380] nilfs_segctor_thread+0x533/0x1100 [ 455.152681][T15380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 455.158603][T15380] ? nilfs_iput_work_func+0x70/0x70 [ 455.163835][T15380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 455.169770][T15380] ? _raw_spin_unlock+0x40/0x40 [ 455.174660][T15380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 455.180583][T15380] ? init_wait_entry+0xd0/0xd0 [ 455.185390][T15380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 455.191317][T15380] ? __kthread_parkme+0x14e/0x1b0 [ 455.196380][T15380] kthread+0x42e/0x520 [ 455.200482][T15380] ? nilfs_iput_work_func+0x70/0x70 [ 455.205716][T15380] ? kthread_blkcg+0xd0/0xd0 [ 455.210344][T15380] ret_from_fork+0x1f/0x30 [ 455.214812][T15380] [ 455.218243][T15380] Kernel Offset: disabled [ 455.223005][T15380] Rebooting in 86400 seconds..