last executing test programs: 1m33.779902857s ago: executing program 0 (id=1639): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000dc0)={0x40, 0x13, 0x3, "d6bf60"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m30.595364306s ago: executing program 0 (id=1662): r0 = open(&(0x7f0000000200)='./file0\x00', 0x4088043, 0x1) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) 1m30.339015709s ago: executing program 0 (id=1664): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@remote, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000001"], 0x18}, 0x40c0) 1m30.263941603s ago: executing program 0 (id=1665): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x104d886, 0x0) 1m28.959816698s ago: executing program 0 (id=1682): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) wait4(r0, 0x0, 0x8, 0x0) 1m27.853171993s ago: executing program 0 (id=1693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0xcc10}, 0x8000) 1m27.528365679s ago: executing program 32 (id=1693): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0xcc10}, 0x8000) 6.631777193s ago: executing program 1 (id=2343): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) 6.328059439s ago: executing program 1 (id=2347): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002"], 0x98}}, 0x40080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c080}, 0x4048010) 6.3162223s ago: executing program 2 (id=2348): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 5.964001918s ago: executing program 2 (id=2351): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 5.878802542s ago: executing program 1 (id=2352): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2b, 0x0, 0x4) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000600)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc0560", 0xe}, {&(0x7f0000000000)="1126252863828bacf13ce331", 0xc}, {0x0}], 0x3}, 0x0) 5.751973689s ago: executing program 1 (id=2354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r2, @ANYBLOB="0500330009"], 0x2c}}, 0x80) 5.560756159s ago: executing program 2 (id=2357): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1810002, &(0x7f0000028f40)=ANY=[], 0x1, 0x1f4, &(0x7f0000000740)="$eJzs20tu00Acx/GfnWfL+7VhhcQCNiSQRoJKLOgBuAC7qjVVhQuIsGmFBNlwCxYcggU7bsIFWglOYDTOlMTB40fBcRu+H6nNZOKf/Y/U/3hSKQLw37oc//bkqRWPoih6f0vSs6eSnXJpL6RAAJWJvEnTu7TTp7vZKQBnQ+NH+nzH2eBfjwc+qwBwlh1tNOJ9wDdP+v7z3dah/cne+k8dbfhSwz6ZybelbqH82Isfbzalw5l8R8kTeB8c+5fPk/wdJfMrReu311+dy6/mBc1HJmPsxw93byfz5ySdl3RB0kVJl+xnrSuSrqZcf3vu+jcK1g/8DfPX10vMFGrbZL6XcUAnO2+65/luGNyfPC267PzWsvkH8y98KfbvibbND8pe2L614/xa7tGjx65zmHxv61W47cw+OUF1QD7/j/5P03KuCln938g857Q/Z/q/tKar/wHkGu0fvNgMw+BN+YF/olQFA3MPPQVlMEgOuvamYWbMMp2f+lh7zYsbrJyOMtyDulcmAFXrv9173R/tH9zb3dvcCXaCl4Ph+qPh2mD4cL0f78v76bvzcS3VAviXpjf9Ysc3pU9V1wQAAAAAAAAAAAAAAMq5Jum6+2W+eAIAAAAskUV8naju9wgAAAAAAAAAAAAAAAAAAAAsi18BAAD//+DcPTo=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006b00)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES8, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES64, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRES8, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000240)='./file0\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) 5.560340709s ago: executing program 1 (id=2358): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffa, 0x0, 0x20000, 0x1}) pipe2$watch_queue(&(0x7f00000002c0), 0x80) 5.262986445s ago: executing program 1 (id=2361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.213292318s ago: executing program 4 (id=2363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(0x0) 5.002972798s ago: executing program 2 (id=2364): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)={[{@fat=@uid={'uid', 0x3d, 0xee00}}, {@shortname_winnt}, {@numtail}, {@fat=@nfs_nostale_ro}, {@uni_xlate}, {@shortname_lower}, {@fat=@sys_immutable}, {@fat=@showexec}, {@shortname_win95}, {@shortname_winnt}, {@fat=@quiet}, {@utf8no}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) 4.797527359s ago: executing program 2 (id=2366): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) 4.367020871s ago: executing program 2 (id=2369): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x4f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) 3.857526859s ago: executing program 33 (id=2369): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x4f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) 3.852159999s ago: executing program 3 (id=2373): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x12080000) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r1}, 0x0, 0x0, 0x0) 3.805052991s ago: executing program 4 (id=2374): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x80, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x54, 0x2, [@TCA_FW_ACT={0x50, 0x4, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x3, 0x2, 0x9}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3.634631359s ago: executing program 3 (id=2376): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a, 0x0, 0x0, r2, 0x14200, 0x64808}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) 3.394048392s ago: executing program 4 (id=2377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.277467488s ago: executing program 3 (id=2378): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{@nodecompose}, {@type={'type', 0x3d, "e6c0539c"}}]}, 0x1, 0x5e6, &(0x7f0000001940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) mknodat(r0, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x6) rename(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 2.922769607s ago: executing program 3 (id=2379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x105, 0x70bd29, 0x200a, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0801}, 0x4004050) 2.406225274s ago: executing program 5 (id=2381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2.217582823s ago: executing program 4 (id=2382): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.969103457s ago: executing program 5 (id=2383): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) 1.854666953s ago: executing program 4 (id=2384): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+nw/CP+/MOzPPvPPO7H7X+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjdZ/YuZPhoqiKP+v/bGmKC4u/76q2Fl+Ob/tQq8QAAAAOFvv1f7820vSCTuXcaGGbf7l2n/73sLCwkLxxXdPvP9nCwvpjHVFMbKyKGrnRf/6i58vNG4TPF+MDw03fD3cdO7Fi25+pMvyRrucP9bl/BVdzl/Z5fzxLucv2gGLrKr/PqZ2ZTfU/rqmvkuLy4qx2nk3tLnU80Mrh4fj73JqhmqXWRjbVxwoDhYzxdSiywzV/iuK19eXt/VAEW9ruOG21hZFcfKnz+6JaxgK+/iGounGahofu3fuK9a9+9Nn93xn7u2r282uu2HRSoti44ZynS8UxalfVxVDxcq0T+I6hxvWubbNOkea1jlUu1z599Z1nlzmOuP9Hg/r/FGHda4Npz11fVEU88WS27R6vhguVrfcatrf4/UjoryO8qH8UDF6WsfJ+mUcJ+Vl3rq++ThpPSbj/l8f9snoEmtofDje+cqKRfv9TI+T8l73w7FaXvdD5Y2Ojzf+arXpWC23efbGpY+Bto9dm2MgHcsNx8CGbsfA8IqR2jEwfGrNG5qOgelFlxkuhmq3deLGzsfA5Nyho5OzTz9z+4FDu/fP7J85PD21bcvmrVs2b906ue/AwZmp+p+nt0sHyOpiOB2DG8JrTTwGb27ZtvGQXPjmuXsejPfJ86C875+9qVzQxcPFEsd4uc0LG8/+eZC+7zc8D0YbngdtX1PbPA9Gl/E8KLc5uXF53zNHG/5vt4ZevRauaTgGLuT3w/I2H71l6dfCtWFdL956ut8PRxYdA/FuDYXnXnlK+nlv/K6wXxYfF9eUZ1y0ojg+O3Psjqd2z80dmy7COC8ubXisWo+X1Q33qVh0vAyf9vGy829+edM1bU5fE/bV+G2dH6tymy0TnR+r2qt7+/3ZdOqmIoxz7Hzvz3bfzcr9mbJEh/1ZbvPC7Wf/s2DKJQ2vf2PdXv9Gxkbrr38jaW+MNb3+LX5oRmorK4qTty/v9W8s/H++X/8u65PXv3JfPXpH52Og3ObFydM9BkY7vv5dH+ZQWM8tITGMN+T+92vnz9cP04bHsutxMzo6Fo6b0XiLzcfN5kWXKa+tvO2NU2d23Gy8vvmxavq5pYLHTbmv/nyq83FTbvPG9Nm/dqyKf2147VjR7RgYG1lRrncsHQT117uFVfEYuKPYUxwpDhZ702XKR7m8rYlNyzsGVoT/z/drx1V9cgyU++qVTZ2PgXKbH24+tz87bQynpG0afnZq/f3CUpn/mtFT19e628515i/X+cktnX83VG7z9pbTzRmd99Nt4ZSL2uyn1ufPUsf03uL87KerwjoPbu38u6lym8u2LfN42lkUxZvTb9Z+3xV+v/v3x//9e02/9233O+U3p998cPLhH5/O+gEAOHPv1/6cX1H/WbPhX6yX8+//AAAAwECIuX84zET+BwAAgMqIuX8kzET+BwAAgMqIuX80zCST/P/4Xdtffe+5Ir0b4EIQz4+74aF76tvFjvd8+Hrdwinl6R//9tirX31uebc9XBTFLx/8cNvtH78nrqvuaFznR5tPX+Sq65Z1+489cmq7xvdPOLm9fv3x/iz3MIhd5dcnN9Wud93T07X5xoNFbT48/+Lz9euvfx23P7G5vv1fhjct2blvqOnyG8N6bghzXXhPmYd2ntoP5YyXe3Xttf986edO3V683NCGD9bu5it/UL/e+B5RL19a3z7e76XW/09f++6r5fZP3dh+/c8Nt1//iXC9b4X5ix317Rv3+Vcb1v9HYf3x9uLl7vjWD9qu/7Ur69u/Fo6Lb4TZuv77/vQj77V7vOLt7Ly7frl4+1P/vaV2uXh98fpb1z/+3HTT/mi9/jferV/Pjid+NtK4fTw93k702N3Nx/dQeHybeuRFUXz3j4um/Vx8rH65f2xZf7y+o3e3X/9tLes8OnRd7fKn7s+apvv19b/e1Pb+xvXs/Ls1Tffn5fvD/nt38ofl9Z54OByP4fz//VH9+lrfy/S1+5tfb+L231hTf97G65tsWf/LLeufv67cd93X/8C79fW/du/KpvXv/FQ4nh6oz27r3/9XlzRd/pvfqT8ex56cOHxk9viBvQ17tfF5vHJ81eqLLv7ABy8Jr6WtX+86Mvf4zLF1U+umimLdAL5lYK/X/60w/6s+5s/9LdT9+Gf14+6lT9e/b9388/rXL4fTHwuPZ/z++PW/GGs6Xlsf9/l76/Ns139rWMdyXfm1/7xuWRue+MLrx//hD99u/bkg3p+jl4/X7t8r66+onTf0Rv381terbv7j8ubn9U9Gp2rz+2G/LoR3Zt5wRf32Wq8/vjfJS5+pP3/jT3Lx8kXL+4msGWm+H2e7/p+En2N+cFXz6188Pr7/XPO7ORdriqFyCfPh9aGYr58ft4r7+6WTV7S9vfg+PMX81aezzCXNPj07efDA4eNPTc7NzM5Nzj79zK5DR44fnttVe+/SXV/qdvlTz+/Vtef33pltW4ras/1IffTYhV7/0Uf27L1z6qa9M/t2H98398jRmWP798zO7pnZO3vT7n37Zp7sdvkDe3dMb9q++c5NE/sP7N1x1/btm7dPHDh8pFxGfVFdbJv68sThY7tqF5ndsWX79NatW6YmDh3ZO7PjzqmpiePdLl/73jRRXvqJiWMzB3fPHTg0MzF74JmZHdPbt23b1PXdHw8d3Te7bvLY8cOTx2dnjk3W78u6udrJ5fe+bpcnD7NHwutdi6Hw0/nnb9uW3h+39O2vLHlV9U2afzwt3gnvBRW/v3X7Oub+sTCTTPI/AAAA5CDm/vDG/6fOkP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v6LwkzkfwAAAKiMmPsvDjPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f/PkP6//n8n+v/6/4O8/j7s/6/S/6ff9Fv/P+b+D4SZ5JH/AQAAIAsx938wzET+BwAAgMqIuf+SMBP5HwAAACoj5v41YSaZ5H+f/6//r//v8//1//uh/39RegWuQP+/aRfr/+v/d6L/r/8/yOvvw/6/z/+n7/Rb/z/m/v8XZpJJ/gcAAIAcxNz/oTAT+R8AAAAqI+b+S8NM5H8AAACojJj7LwszyST/6//r/+v/6//r//dD/9/n/58p/X/9/0L//4xd6P78oK9f/1//n+76rf8fc//lYSaZ5H8AAADIQcz9V4SZyP8AAABQGTH3XxlmIv8DAABAZcTcf1WYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7r86zCST/A8AAAA5iLn/mjAT+R8AAAAqI+b+D4eZyP8AAABQGTH3rw0zyST/6//r/+v/6//r/+v/99Jg9f+HlzxH/79O/7+Z/r/+v/6//j+d9Vv/P+b+j4SZZJL/AQAAIAcx918bZiL/AwAAQGXE3H9dmIn8DwAAAJURc/+6MJNM8r/+v/6//r/+v/6//n8vDVb/f2n6/3X6/830//X/9f/1/+ms3/r/MfevDzPJJP8DAABADmLu3xBmIv8DAABAZcTcf32YifwPAAAAlRFz/w1hJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/7+8/v+KbldEpfVb/z/m/hvDTDLJ/wAAAJCDmPtvCjNpyP9DPfvXBAAAAOB8iLn/5jAT//4PAAAAlRFz/8Ywk0zyv/6//r/+v/6//r/+fy/p/y/q/7/1P4X+f6T/r/8/yOvX//f5/3TXb/3/mPtvCTPJJP8DAABADmLuvzXMRP4HAACAyoi5/7YwE/kfAAAAKiPm/okwk0zyv/6//r/+v/6//r/+fy9Vtf+fXkd9/r/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//X/9f/1//vpar2/8/i8//1/xvo/+v/D/L69f/1/+mu3/r/MfdPh5lkkv8BAAAgBzH3bwozkf8BAACgMmLu3xxmIv8DAABAZcTcvyXMJJP8r/+v/6//r/+v/6//30v6//r/nVS//3+k+Q0A9P/PqQu9fv1//X+aDbc5rd/6/zH3bw0zyST/AwAAQA5i7t8WZiL/AwAAQGXE3H9nmIn8DwAAAJURc/9dYSaZ5H/9f/1//X/9f/1//f9e0v/X/++k+v1/n//fSxd6/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu88hjGLu/1iYSSb5X/+/6v3/hZX6//r/+v+d16//31v6//r/nej/6/8P8vr1//X/6a7f+v8x9+8IM8kk/wMAAEAOYu6/J8xE/gcAAIDKiLn/3jAT+R8AAAAqI+b+nWEmmeR//f+q9/99/r/+v/5/t/Xr//eW/r/+fyf6/4PZ/w8/tuj/n5/+//hSl2/s/5fHkP4//ajf+v8x998XZpJJ/gcAAIAcxNz/8TAT+R8AAAAqI+b+T4SZyP8AAABQGTH3fzLMJJP8r/+v/6//r/+v/6//30v6//r/nej/D2b/P9L/9/n/+v9002/9/5j77w8zyST/AwAAQA5i7v9UmIn8DwAAAJURc///DzOR/wEAAKAyYu5/IMwkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3/0qYSSb5HwAAAHIQc/+DYSbyPwAAAFRGzP2fDjOR/wEAAKAyYu7/1TCTTPK//v/56f8Pp+vX/9f/1//X/9f/P5f0/weo/z/U+uzT/9f/H+z16//r/9Ndv/X/Y+7/tTCTTPI/AAAA5CDm/l8PM5H/AQAAoDJi7v+NMBP5HwAAACoj5v6Hwkwyyf/6/z7/X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu/80wk0zyPwAAAOQg5v6Hw0zkfwAAAKiMmPs/E2Yi/wMAAEBlxNz/2TCTTPK//r/+v/6//r/+v/5/L+n/D2z/f2Wh/9+V/r/+v/6//j+d9Vv/P+b+R8JMMsn/AAAAkIOY+z8XZiL/AwAAQGXE3P9bYSbyPwAAAFRGzP2/HWaSSf7X/9f/1//X/9f/1//vJf3/xf3/8jXsQvb/VyxnQ5//vyz6//r/+v/6/3TWb/3/mPs/H2aSSf4HAACAHMTc/zthJvI/AAAAVEbM/b8bZiL/AwAAQGXE3P9omEkm+V//X/9f/1//X/9f/7+X9P8H9vP/9f+XQf9f/1//X/+fzvqt/x9z/xfCTDLJ/wAAAJCDmPt/L8xE/gcAAIDKiLl/V5iJ/A8AAACVEXP/Y2EmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5f3eYSSb5HwAAAHIQc/8Xw0zkfwAAAKiMmPv3hJnI/wAAAFAZMffvDTPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9M2EmmeR/AAAAyEHM/fvCTOR/AAAAqIyY+/eHmcj/AAAAUBkx9z8eZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhJlkkv8BAAAgBzH3fynMRP4HAACAyoi5/8thJvI/AAAAVEbM/QfDTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+hMJNM8j8AAADkIOb+w2Em8j8AAABURsz9R8JM5H8AAACojJj7j4aZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/t8PM8kk/wMAAEAOYu4/FmYi/wMAAEBlxNw/G2Yi/wMAAEBlxNw/F2aSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7j4eZZJL/AQAAIAcx9z8RZiL/AwAAQGXE3P9kmIn8DwAAwP+xd5e7np1VHMf/pRkgIQ3XwhVwCVwDr7gFpLgWd5fi7u7u7u4uheIaSsJZax06svecU3b/z37W5/NmBWYy88AkTX+ZfLOZRu7+e8ctTfa//l//r/8/7f9vvNfJf3+k/v+k89P/6//1/2ei/9f/H/T/53bsfn7v79f/6/9ZN1r/n7v/PnFLk/0PAAAAHeTuv2/cYv8DAADANHL33y9usf8BAABgGrn7r49bmux//b/+X//v+//6f/3/lvT/+v8l+n/9/57fr//X/7NutP4/d//945Ym+x8AAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/9+S/l//v0T/r//f8/v1//p/1o3W/+fuf3Dc0mT/AwAAQAe5+x8St9j/AAAAMI3c/Q+NW+x/AAAAmEbu/ofFLU32v/5f/6//1//r//X/W9L/6/+X6P/1/3t+v/5f/8+60fr/3P0Pj1ua7H8AAADoIHf/I+IW+x8AAACmkbv/kXGL/Q8AAADTyN3/qLilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/Wbd5/3+PG/57r7b/z91/Q9zSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//f9r/33LN1P3/9Zf+een/b/1O/b/+fwv6f/3/Ev3/qP3/1f0/of/X/+v/WbN5/7/S+1/8n3P3Py5uabL/AQAAoIPc/Y+PW+x/AAAAmEbu/ifELfY/AAAATCN3/xPjlib7X/+v//f9f/2//l//vyX9v/5/if5/1P7f9/9va/9/96t4v/6fDkbr/3P3PyluabL/AQAAoIPc/U+OW+x/AAAAmEbu/qfELfY/AAAATCN3/1Pjlib7X/+v/9f/6//1//r/Len/9f9L9P/6/z2/3/f/9f+sG63/z93/tLilyf4HAACADnL3Pz1usf8BAABgGrn7nxG32P8AAAAwjdz9z4xbmux//b/+X/+v/79N/f+1+n/9/zL9v/5/if5f/7/n9+v/9f+sG63/z93/rLilyf4HAACADnL3Pztusf8BAABgGrn7nxO32P8AAAAwjdz9z41bmux//b/+X/+v//f9f/3/lvT/0/X/1+j/T+n/9f/6f/0/y0br/3P3Py9uabL/AQAAoIPc/c+PW+x/AAAAmEbu/hfELfY/AAAATCN3/41xS5P9r//X/+v/9f/6f/3/lvT/0/X/vv//P/T/+n/9v/6fZaP1/7n7Xxi3rA2/Cys/DgAAAAwjd/+L4pYmf/8PAAAAHeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fkv5f/79E/3/5/v/OV/j99P9jvV//r/9n3Wj9f+7+l8YtTfY/AAAAdJC7/2Vxi/0PAAAA08jd//K4xf4HAACAaeTuf0Xc0mT/X6n/v/kuJz+u/786+v/Lv1//r//X/+v/9f/6/yX6f9//3/P79f/6f9aN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAADCN3P2vjlvsfwAAAJhG7v7XxC1N9r/v/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/7VxS5P9DwAAAB3k7n9d3GL/AwAAwDRy978+brH/AQAAYBq5+98QtzTZ//p//f/R+/876P+T/j/+XPX/+v8z0P/r/w/6/3M7dj+/9/fr//X/rBut/8/d/8a4pcn+BwAAgA5y978pbrH/AQAAYBq5+98ct9j/AAAAMI3c/W+JW5rsf/2//v/o/b/v/xf9f/y56v/1/2eg/9f/H/T/53bsfn7v79f/6/9ZN1r/n7v/rXFLk/0PAAAAHeTuf1vcYv8DAADANHL3vz1usf8BAABgGrn73xG3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z978zbmmy/wEAAKCD3P3vilvsfwAAAJhG7v53xy32PwAAAEwjd/974pYm+1//v/f+/543xQv0//p//b/+f0j6f/3/Ev2//n/P79f/6/9ZN1r/n7v/vXFLk/0PAAAAHeTuf1/cYv8DAADANHL3vz9usf8BAABgGrn7PxC3NNn/Pfr/C5f8tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0fjFua7H8AAADoIHf/h+IW+x8AAACmkbv/w3GL/Q8AAADTyN3/kbilyf7v0f9fqkH/n/+zbt/+/5a76v/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/GLU32PwAAAHSQu/9jcYv9DwAAANPI3f/xuMX+BwAAgGnk7v9E3HC36473pNuV/n/a/t/3//X/+n/9/xD0//r/Jfp//f+e36//1/+zbrT+P3f/J+MWf/8PAAAA08jd/6m4xf4HAACAaeTu/3TcYv8DAADANHL3fyZuabL/9f/6f/2//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9s3NJk/wMAAEAHufs/F7fY/wAAADCN3P2fj1vsfwAAAJhG7v4vxC1N9r/+X/+v//+/9f8XLv719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/2Lc0mT/AwAAQAe5+78Ut9j/AAAAMI3c/V+OW+x/AAAAmEbu/q/ELU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADANHL3fz1usf8BAABgGrn7vxG3NNn/M/f/Sz9N/39C/6//P+j/9f8b0//r/5fo//X/e37/mfr/y/xLpf6fDkbr/3P3fzNuabL/AQAAoIPc/d+KW+x/AAAAmEbu/m/HLfY/AAAATCN3/3filib7f+b+f4n+/4T+X/9/0P/r/zem/9f/L9H/6//3/H7f/9f/s260/j93/3fjlib7HwAAADrI3f+9uMX+BwAAgGnk7v9+3GL/AwAAwDRy9/8gbmmy//X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/48W/jv5f/6//X6b/1/8f9P/ndux+fu/v1//r/1k3Wv+fu/+ncUuT/Q8AAAAd5O7/Wdxi/wMAAMA0cvf/PG6x/wEAAGAauft/Ebc02f/6f/2//v/c/f+1B9//v9V79P/6/8vR/+v/l+j/9f97fr/+X//PutH6/9z9v4xbmux/AAAA6CB3/6/iFvsfAAAAppG7/9dxi/0PAAAA08jd/5u4pcn+1//r//X/Q33/X/+v/9f/n5H+X/9/0P+f27H7+b2/X/+v/2fdaP1/7v6b4pYm+x8AAAA6yN3/27jF/gcAAIBp5O7/Xdxi/wMAAMA0cvffHLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAaeTu/2PcYv8DAADANHL3/yluabL/9f/6/yn7f9//1//vrf+/9vQfwPr/s9H/6/8PM/T/153+/vr//bxf/6//Z91o/X/u/j/HLU32PwAAAHSQu/8vcYv9DwAAANPI3f/XuMX+BwAAgGnk7v9b3DLV/v/3FVs2/b/+X/+v/9f/D9D/+/7/uen/9f+HGfr/w+nvr//fz/v1//p/1o3W/+fu/3vcMtX+BwAAgN5y9/8jbrH/AQAAYBq5+/8Zt9j/AAAAMI3c/f+KW5rsf/2//l//r//X/+v/t6T/1/8v0f/r//f8fv2//p91o/X/ufv/EwAA//9cXC6B") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="37b57cfa7d0121345c29b6064f49a0f95b88671b8e9149556e5ff3c7012f7856b6557bae1d1d61efea623114a0b4b52f68387d2040dd08c5aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822d1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bfbcc6c7e9808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e809e04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859001e651c1d404a5f28eaf3781f2288249ae7b385a9c40929cae3fa5a6f142cd057ebdbc000000e34db2d14a6458499de0819d89f570a72fee0dd8cf744e0daf8f31b1d8edda87296ca7632e1e6e23", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000)) 1.70896673s ago: executing program 5 (id=2385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.611640556s ago: executing program 3 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x14, r1, 0xa82e5658fbaf3b67, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x20040084) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) 1.427028215s ago: executing program 5 (id=2387): r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000e0e000/0x4000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x0) 1.288816472s ago: executing program 3 (id=2388): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x551c, &(0x7f00000004c0)="$eJzs3L9vG+UbAPDHTtPf334jxMDWkyqkRKqtOm0q2AK04odIFRUYmMCxHcut7YtixwmZGBgRA/8JAomJkb+BgZkNMYDYkEC+O5emUIQUJybN5yOdn7vXr597Xis66bmLHMCptZD8+nMprsSFiJiLiMsR2X4pIuYnk1bz8EJEXI2I8mNbqRh/NHA2Ii5GxJVx8jxnqXjr8+ujays/vfXLN9+dO3Ppi6+/n92qgVl7MSJ6W/n+bi+PaTuPD4rx+qiTxd6tURHzN3oPi+M0j7utjSzDbn0yr57Fm+18frq1MxjHzW69MY7tzmY2vtXPTzgYtSd5sg88qG9nx83WRhY7gzSL7f28rr39/Nq2PxjmeZpFvo+y9DEcTmI+3tpr5evZepjFRn9YjOd502ZrbxxHRSxOF42028zq2DjMN/3f9nanv7OXjFrbg07aT1aqtZeqtduV2nbabA1btyr1XvP2rWSx3R1Pqwxb9d5qO03b3Va1kfaWksV2o1Gp1ZLFO62NTr2f1GrVm9UblZWlYu968vq995JuM1kcx1c7/Z1hpztINtPtJP/EUrJcvfnyUnKtlryztp6s3797d2393Q/uvH/vlbU3Xysm/aWsZHH5xvJypXajslxbOkXr/6Qoeorrh0MpzboAgJPnn/r/R5fVJ/v/sv4fOJyn9v/jC9Ch+v/t+xFH3/+H/n8qTlT/e9r7/yNYPxyK/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NT6Yf7LN7Kdhfz4UjH+v2LoueK4FBHliPj9b8zF2QM554o880+ZP/9EDd+WIsswPse5YrsYEavF9tv/j/pbAAAAgGfXVx9f/Szv1vOXhVkXxHHKb9qUL384pXznI2J+4ccpZSuPX56fUrLs7/tM7E0pW3YD6/yUkuW33M5MK9u/MncgnH8slPJQPtZyAACAY3GwEzjeLgQAAIDj9OmsC2A2SjF5lDl5Fpz95/2fDwQvHDgCAAAATqDSrAsAAAAAjlzW//v9PwAAAHi25b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7NzPbeJAFAfgZ4MX9p8Wrfa+rewNytgS9rjHiALSBAXkQFpIA9RAbikhggiPQyDiEMljW4m+T3ImY5kfbxAcZkYaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT+zPOwqEQBiEwd71ncnc/7DSoKmpSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXP/vnFTcQDAn+3zlRYQR0A3BCGQGGCh12tp6YYYQBEDfwJSlF5L6JUfbQZaVYhb2FDmLghGhJBAYev/0LmVuoQtww1BYgbZZ+ecHxJHFNmX5PORnt/XluX3fbYU5evnBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASuP3p3GSbTqTOC6OPd6+v5L1T/b0mYfrTxezlsVRnUkfD69Wd6Juc4kAAABwoo2qO0lZ34cQNtONpayPO3n9n5bnZDX/j89P4rKe31v3l31Z+2ftj9+3Xt4ZqDMZJ7vo9dXh4ML+vFpHPtNj4oX/PKOV3/n83UuSP5D4o9FL4zS/n9H3jx590M7DM3VkCwAcxvmyL4Ly96Gs7zeZGACnRqtSeJf1f9JpNicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAOoxH4dkyjkIIi61pnHmyfX/loP7h+tPFsl158GA9fDu9ZnaJNIRwfXU4uFDrbObbnbv3bi4Ph4Pb9QevhRCaGv29Yvo3P5nh5BAauT+CIwri4mHPSz7HI2jwhxIAACdSWrSsrt9MN5ayY9FCCP/8tLv+f7MShxnr/61PrzyujlWt//u1zXD+9dZufdm7c/fe26u3lm8Mbgw+f+di/93+pauXL1/t5e9Ket6YAAAAcAjt3WF7T/0fL+xf/z9XicOM9f9XP/S/qQ6bqP8PNF30azoTAACA0+3F1//+KzrgeNRuh6+X19Zu9yfbnf2Lk20Dqf5vZ4pWrf+ThaazAgAAAOowHkW71v+vVeIw4/r/cz+/8mv1mkkI4Wyx/n9+5YvhtfqmM9fq+HPipucIAABAs84Wrbr+n+bf/8c7nzzEIYS33pjExb8BnKn+Tz787pfqWNXv/y/VN8W5FHcn9yPvuyG0uk1nBAAAwEn2TNGyYv/PdGPps9/Ofdz2/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4NAAD///lpPsU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, 0x0) 1.049190835s ago: executing program 5 (id=2389): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 14.116469ms ago: executing program 4 (id=2390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a08000000800024000000002081103400000000224"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 5 (id=2391): unshare(0x22020600) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x40004) tkill(r0, 0xf) kernel console output (not intermixed with test programs): s 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.213648][ T4348] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.248483][ T4348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.277485][ T8009] bridge0: port 3(syz_tun) entered blocking state [ 235.291994][ T4348] usb 2-1: config 0 descriptor?? [ 235.307532][ T8009] bridge0: port 3(syz_tun) entered disabled state [ 235.337084][ T8009] bridge0: port 3(syz_tun) entered blocking state [ 235.344340][ T8009] bridge0: port 3(syz_tun) entered forwarding state [ 235.665537][ T8018] loop4: detected capacity change from 0 to 1024 [ 235.742063][ T4348] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xe [ 235.761707][ T4348] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 235.840453][ T4348] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 235.878651][ T7999] loop2: detected capacity change from 0 to 40427 [ 235.888690][ T6092] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 235.942526][ T7999] F2FS-fs (loop2): invalid crc value [ 235.977975][ T7999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 236.060754][ T4311] usb 2-1: USB disconnect, device number 9 [ 236.078811][ T6092] usb 4-1: Using ep0 maxpacket: 16 [ 236.085970][ T6092] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.142903][ T6092] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.172236][ T7999] F2FS-fs (loop2): Start checkpoint disabled! [ 236.183392][ T6092] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.189813][ T8021] fido_id[8021]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 236.232670][ T7999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 236.232820][ T6092] usb 4-1: config 1 interface 0 has no altsetting 0 [ 236.280888][ T6092] usb 4-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 236.308466][ T6092] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.328346][ T6092] usb 4-1: Product: syz [ 236.332684][ T6092] usb 4-1: Manufacturer: syz [ 236.355431][ T6092] usb 4-1: SerialNumber: syz [ 236.569124][ T4322] kworker/u4:6: attempt to access beyond end of device [ 236.569124][ T4322] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 236.593238][ T6092] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 236.814872][ T6092] usb 4-1: USB disconnect, device number 7 [ 236.830402][ T6092] usblp0: removed [ 237.038181][ T8037] loop4: detected capacity change from 0 to 4096 [ 237.060867][ T8037] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 237.081332][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.147065][ T8037] ntfs: volume version 3.1. [ 237.193262][ T8041] loop1: detected capacity change from 0 to 512 [ 237.254519][ T8041] EXT4-fs (loop1): 1 truncate cleaned up [ 237.264361][ T8041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 237.291830][ T26] audit: type=1800 audit(1776500755.039:16): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1398" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 237.314266][ T26] audit: type=1800 audit(1776500755.039:17): pid=8041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1398" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 237.502948][ T8049] tap0: tun_chr_ioctl cmd 1074025694 [ 237.577284][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 237.944989][ T8068] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 237.953900][ T8068] netlink: 'syz.4.1408': attribute type 2 has an invalid length. [ 237.965814][ T8068] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 237.974049][ T8068] netlink: 'syz.4.1408': attribute type 2 has an invalid length. [ 238.445418][ T8078] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1413'. [ 238.612352][ T8080] loop3: detected capacity change from 0 to 8192 [ 238.647090][ T8080] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.835477][ T8089] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 238.918926][ T8089] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 239.064339][ T8093] loop0: detected capacity change from 0 to 512 [ 239.071239][ T26] audit: type=1326 audit(1776500756.829:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8094 comm="syz.3.1421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x0 [ 239.161796][ T8093] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1419: bg 0: block 5: invalid block bitmap [ 239.274744][ T8093] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 239.285299][ T8093] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1419: invalid indirect mapped block 3 (level 2) [ 239.299802][ T8093] EXT4-fs (loop0): 1 orphan inode deleted [ 239.305587][ T8093] EXT4-fs (loop0): 1 truncate cleaned up [ 239.314829][ T8093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.356862][ T8093] EXT4-fs (loop0): shut down requested (2) [ 239.508739][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 239.561389][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 239.579335][ T8109] netlink: 'syz.1.1424': attribute type 21 has an invalid length. [ 239.655190][ T8112] loop0: detected capacity change from 0 to 256 [ 239.663229][ T8112] exfat: Deprecated parameter 'namecase' [ 239.669186][ T8112] exfat: Deprecated parameter 'utf8' [ 239.674627][ T8112] exfat: Deprecated parameter 'namecase' [ 239.688638][ T8112] exfat: Deprecated parameter 'utf8' [ 239.696357][ T8112] exfat: Deprecated parameter 'utf8' [ 239.740143][ T8112] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d) [ 240.024170][ T8121] input: syz1 as /devices/virtual/input/input10 [ 240.048329][ T4311] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 240.116368][ T8118] loop1: detected capacity change from 0 to 8192 [ 240.189522][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1428'. [ 240.238673][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 240.250147][ T4311] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 240.274660][ T4311] usb 5-1: config 0 has no interface number 0 [ 240.296001][ T4311] usb 5-1: config 0 interface 184 has no altsetting 0 [ 240.331220][ T4311] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 240.358686][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.384876][ T4311] usb 5-1: Product: syz [ 240.389562][ T4311] usb 5-1: Manufacturer: syz [ 240.394226][ T4311] usb 5-1: SerialNumber: syz [ 240.411840][ T4311] usb 5-1: config 0 descriptor?? [ 240.430142][ T4311] smsc75xx v1.0.0 [ 240.588545][ T33] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 240.646283][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1435'. [ 240.778371][ T33] usb 4-1: Using ep0 maxpacket: 16 [ 240.787003][ T33] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.801403][ T33] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.811211][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.821841][ T33] usb 4-1: Product: syz [ 240.826173][ T33] usb 4-1: Manufacturer: syz [ 240.831327][ T33] usb 4-1: SerialNumber: syz [ 240.842310][ T33] usb 4-1: config 0 descriptor?? [ 240.852368][ T33] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.861945][ T33] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 240.927072][ T8136] loop1: detected capacity change from 0 to 2048 [ 240.967268][ T8136] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=2362, location=2362 [ 241.005691][ T8136] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 241.041302][ T8136] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 241.070219][ T8136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 241.091667][ T26] audit: type=1800 audit(1776500758.839:19): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1437" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 241.112227][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.239217][ T4311] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 241.268512][ T4311] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 241.296785][ T4311] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 241.322247][ T4311] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 241.344210][ T4311] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 241.355145][ T4311] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 241.366354][ T4311] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 241.384985][ T4311] usb 5-1: USB disconnect, device number 14 [ 241.457000][ T33] em28xx 4-1:0.0: chip ID is em2860 [ 241.735164][ T33] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 241.744981][ T33] em28xx 4-1:0.0: board has no eeprom [ 241.820535][ T33] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 241.838510][ T33] em28xx 4-1:0.0: dvb set to bulk mode. [ 241.850045][ T33] usb 4-1: USB disconnect, device number 8 [ 241.857905][ T33] em28xx 4-1:0.0: Disconnecting em28xx [ 241.864328][ T4311] em28xx 4-1:0.0: Binding DVB extension [ 241.945603][ T4311] em28xx 4-1:0.0: Registering input extension [ 242.088435][ T4311] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 242.095280][ T4311] Registered IR keymap rc-empty [ 242.111752][ T4311] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 242.123737][ T4311] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 242.147927][ T4311] em28xx 4-1:0.0: Input extension successfully initialized [ 242.155819][ T33] em28xx 4-1:0.0: Closing input extension [ 242.282401][ T33] em28xx 4-1:0.0: Freeing device [ 242.444782][ T8158] program syz.1.1445 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.122886][ T8180] loop1: detected capacity change from 0 to 256 [ 243.195074][ T8180] FAT-fs (loop1): Directory bread(block 64) failed [ 243.235173][ T8180] FAT-fs (loop1): Directory bread(block 65) failed [ 243.259452][ T8180] FAT-fs (loop1): Directory bread(block 66) failed [ 243.266112][ T8180] FAT-fs (loop1): Directory bread(block 67) failed [ 243.292434][ T8180] FAT-fs (loop1): Directory bread(block 68) failed [ 243.305149][ T8180] FAT-fs (loop1): Directory bread(block 69) failed [ 243.313162][ T8180] FAT-fs (loop1): Directory bread(block 70) failed [ 243.328431][ T8180] FAT-fs (loop1): Directory bread(block 71) failed [ 243.335166][ T8180] FAT-fs (loop1): Directory bread(block 72) failed [ 243.352724][ T8180] FAT-fs (loop1): Directory bread(block 73) failed [ 243.660931][ T8189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1456'. [ 243.698139][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 243.746283][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.012598][ T8190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.125165][ T8206] loop2: detected capacity change from 0 to 2048 [ 244.146699][ T8204] mkiss: ax0: crc mode is auto. [ 244.181340][ T8206] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362 [ 244.225585][ T8206] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.243561][ T8208] loop0: detected capacity change from 0 to 4096 [ 244.268754][ T8206] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 244.290557][ T8208] EXT4-fs: Ignoring removed nobh option [ 244.330271][ T8206] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.387098][ T8208] EXT4-fs (loop0): Test dummy encryption mode enabled [ 244.412677][ T26] audit: type=1800 audit(1776500762.159:20): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1462" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 244.442623][ T8208] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 244.725169][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 244.980558][ T8224] loop1: detected capacity change from 0 to 4096 [ 245.112685][ T8231] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.511748][ T8241] loop1: detected capacity change from 0 to 512 [ 245.523196][ T8241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.572440][ T8241] EXT4-fs (loop1): 1 truncate cleaned up [ 245.578174][ T8241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 245.811188][ T8248] loop3: detected capacity change from 0 to 2048 [ 245.882515][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 245.882525][ T8249] loop2: detected capacity change from 0 to 4096 [ 245.919447][ T8248] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=2362, location=2362 [ 245.940895][ T8218] loop4: detected capacity change from 0 to 40427 [ 245.963309][ T8249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 245.970953][ T8248] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 246.008648][ T8218] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 246.029745][ T8248] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 246.056136][ T8218] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 246.085103][ T8248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.170662][ T26] audit: type=1800 audit(1776500763.919:21): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1480" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 246.212683][ T8218] F2FS-fs (loop4): Found nat_bits in checkpoint [ 246.395227][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 246.471621][ T8261] loop0: detected capacity change from 0 to 1024 [ 246.500117][ T8218] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 246.507322][ T8218] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 246.531467][ T8261] EXT4-fs: inline encryption not supported [ 246.599745][ T8261] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 246.633408][ T8261] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.723710][ T8261] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 3: comm syz.0.1485: lblock 3 mapped to illegal pblock 3 (length 1) [ 246.804916][ T8261] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 246.817012][ T8269] loop2: detected capacity change from 0 to 4096 [ 246.846409][ T8269] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 246.916231][ T8261] EXT4-fs (loop0): This should not happen!! Data will be lost [ 246.916231][ T8261] [ 246.957899][ T8269] ntfs: (device loop2): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 246.979930][ T8272] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.1485: lblock 0 mapped to illegal pblock 0 (length 3) [ 246.984883][ T8269] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 247.081872][ T8269] ntfs: volume version 3.1. [ 247.093037][ T8272] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 247.163917][ T8272] EXT4-fs (loop0): This should not happen!! Data will be lost [ 247.163917][ T8272] [ 247.430649][ T4322] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 4: comm kworker/u4:6: lblock 4 mapped to illegal pblock 4 (length 1) [ 247.462120][ T4322] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 247.480606][ T8282] loop3: detected capacity change from 0 to 512 [ 247.515625][ T4322] EXT4-fs (loop0): This should not happen!! Data will be lost [ 247.515625][ T4322] [ 247.545477][ T8282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.557979][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 247.636925][ T8282] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1495: invalid indirect mapped block 256 (level 2) [ 247.735471][ T8282] EXT4-fs (loop3): 2 truncates cleaned up [ 247.741733][ T8282] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.837302][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 248.147707][ T8299] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop2:00000002 [ 249.085703][ T8318] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 249.275427][ T8318] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 249.301193][ T8318] Quota error (device loop0): write_blk: dquota write failed [ 249.308825][ T8318] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 249.318135][ T8318] Quota error (device loop0): write_blk: dquota write failed [ 249.326195][ T8318] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 249.336579][ T8318] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.1510: Failed to acquire dquot type 1 [ 249.352321][ T8318] EXT4-fs (loop0): 1 truncate cleaned up [ 249.358039][ T8318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 249.445776][ T8318] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 249.484529][ T8323] set_capacity_and_notify: 3 callbacks suppressed [ 249.484545][ T8323] loop4: detected capacity change from 0 to 4096 [ 249.507046][ T8318] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 249.538478][ T8318] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 249.606189][ T8318] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 249.726428][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 249.833845][ T4348] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 250.030688][ T4348] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 250.057164][ T4348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.072197][ T4348] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 250.091712][ T4348] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.092465][ T8342] loop4: detected capacity change from 0 to 2048 [ 250.132585][ T4348] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 250.155990][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 250.171988][ T8342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.207625][ T4348] usb 4-1: Product: syz [ 250.226373][ T4348] usb 4-1: Manufacturer: syz [ 250.262612][ T4348] cdc_wdm 4-1:1.0: skipping garbage [ 250.278194][ T4348] cdc_wdm 4-1:1.0: skipping garbage [ 250.301135][ T4348] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 250.317380][ T4348] cdc_wdm 4-1:1.0: Unknown control protocol [ 250.510594][ T4348] usb 4-1: USB disconnect, device number 9 [ 250.956982][ T8345] loop0: detected capacity change from 0 to 32768 [ 251.254252][ T8363] ialloc: diAlloc returned -28! [ 251.695457][ T8381] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1539'. [ 251.732685][ T8379] loop3: detected capacity change from 0 to 8192 [ 251.826186][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1541'. [ 252.242984][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1547'. [ 252.268020][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.358928][ T8394] loop3: detected capacity change from 0 to 8192 [ 252.482123][ T8398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.530847][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1544'. [ 252.688510][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 252.697788][ T8404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 252.762167][ T8407] loop2: detected capacity change from 0 to 128 [ 252.790300][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 252.809659][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 252.866197][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 252.918393][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1549'. [ 252.933427][ T8411] loop1: detected capacity change from 0 to 2048 [ 252.976846][ T8412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.637351][ T8431] loop0: detected capacity change from 0 to 1024 [ 253.700089][ T8435] loop2: detected capacity change from 0 to 512 [ 253.741967][ T8435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 253.759260][ T8431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 253.786216][ T8441] loop4: detected capacity change from 0 to 16 [ 253.798005][ T8431] System zones: 0-1, 3-36 [ 253.849705][ T8435] EXT4-fs (loop2): 1 truncate cleaned up [ 253.855503][ T8435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 253.892139][ T8441] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 253.913747][ T8431] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.1561: bad orphan inode 134217728 [ 253.975953][ T8431] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 254.023742][ T8431] EXT4-fs (loop0): shut down requested (2) [ 254.161998][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 254.199661][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 254.499940][ T8452] loop4: detected capacity change from 0 to 8192 [ 254.540539][ T8452] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 254.671016][ T8452] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 254.682030][ T8452] REISERFS (device loop4): using ordered data mode [ 254.688679][ T8452] reiserfs: using flush barriers [ 254.695184][ T8452] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.738798][ T8452] REISERFS (device loop4): checking transaction log (loop4) [ 255.025384][ T8452] REISERFS (device loop4): Using tea hash to sort names [ 255.047729][ T8452] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 255.095274][ T8452] REISERFS warning (device loop4): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 255.135282][ T8448] loop3: detected capacity change from 0 to 32768 [ 255.153909][ T8471] loop0: detected capacity change from 0 to 4096 [ 255.183992][ T8448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1566 (8448) [ 255.223847][ T8471] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 255.266726][ T8448] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.345697][ T8448] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 255.402363][ T8448] BTRFS info (device loop3): setting nodatasum [ 255.430018][ T8448] BTRFS info (device loop3): force zlib compression, level 3 [ 255.480923][ T8448] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 255.528272][ T8448] BTRFS info (device loop3): use lzo compression, level 0 [ 255.558882][ T8448] BTRFS info (device loop3): turning on flush-on-commit [ 255.566042][ T8448] BTRFS info (device loop3): enabling auto defrag [ 255.596813][ T8448] BTRFS info (device loop3): max_inline at 4096 [ 255.596852][ T8448] BTRFS info (device loop3): using free space tree [ 255.621610][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.621697][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.838404][ T8448] BTRFS info (device loop3): enabling ssd optimizations [ 255.980021][ T8503] loop2: detected capacity change from 0 to 512 [ 256.030940][ T4268] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.590203][ T8511] loop3: detected capacity change from 0 to 512 [ 256.624792][ T8511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 256.794908][ T8511] EXT4-fs (loop3): 1 orphan inode deleted [ 256.809531][ T8511] EXT4-fs (loop3): 1 truncate cleaned up [ 256.815255][ T8511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 256.899557][ T8525] __nla_validate_parse: 1 callbacks suppressed [ 256.899573][ T8525] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1591'. [ 256.933872][ T8511] EXT4-fs (loop3): shut down requested (0) [ 257.266686][ T8536] loop2: detected capacity change from 0 to 16 [ 257.285706][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 257.291386][ T8536] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 257.303525][ T4271] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 257.312806][ T4271] Bluetooth: hci3: Injecting HCI hardware error event [ 257.323099][ T4275] Bluetooth: hci3: hardware error 0x00 [ 257.875160][ T8547] loop3: detected capacity change from 0 to 128 [ 257.919123][ T8547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.934147][ T8547] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 258.032304][ T8547] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 258.161119][ T8554] loop1: detected capacity change from 0 to 1024 [ 258.199296][ T8554] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 258.222634][ T8554] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 258.242977][ T26] audit: type=1326 audit(1776500775.989:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.282546][ T8557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 258.299936][ T8554] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.1604: unexpected bad inode w/o EXT4_IGET_BAD [ 258.324778][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 258.347221][ T8557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.348674][ T26] audit: type=1326 audit(1776500776.049:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.376816][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.400514][ T8554] EXT4-fs (loop1): no journal found [ 258.405792][ T8554] EXT4-fs (loop1): can't get journal size [ 258.422165][ T8557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.463244][ T8554] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 258.476070][ T8557] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.495636][ T26] audit: type=1326 audit(1776500776.049:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.518787][ T26] audit: type=1326 audit(1776500776.049:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.541061][ T26] audit: type=1326 audit(1776500776.049:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.563247][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.574620][ T26] audit: type=1326 audit(1776500776.049:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.596903][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.603210][ T26] audit: type=1326 audit(1776500776.049:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.641720][ T8554] EXT4-fs (loop1): shut down requested (2) [ 258.657532][ T8554] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 258.665873][ T26] audit: type=1326 audit(1776500776.049:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.699830][ T8530] loop0: detected capacity change from 0 to 40427 [ 258.742023][ T26] audit: type=1326 audit(1776500776.049:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.764235][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.795536][ T8530] F2FS-fs (loop0): invalid crc value [ 258.839175][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 258.900090][ T8530] F2FS-fs (loop0): Found nat_bits in checkpoint [ 258.903919][ T26] audit: type=1326 audit(1776500776.049:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.4.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 258.928576][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.041209][ T8530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 259.268761][ T8577] loop2: detected capacity change from 0 to 1024 [ 259.315240][ T4269] syz-executor: attempt to access beyond end of device [ 259.315240][ T4269] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 259.343004][ T8577] hfsplus: request for non-existent node 3 in B*Tree [ 259.378707][ T4275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 259.392441][ T8577] hfsplus: request for non-existent node 3 in B*Tree [ 259.551641][ T8585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.556012][ T8577] hfsplus: catalog searching failed [ 259.744727][ T8585] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 259.767899][ T8585] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 259.799896][ T8585] Remounting filesystem read-only [ 259.806237][ T4268] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 260.182977][ T8597] program syz.0.1617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.372833][ T8595] set_capacity_and_notify: 1 callbacks suppressed [ 260.372850][ T8595] loop1: detected capacity change from 0 to 32768 [ 260.413016][ T8595] loop1: p3 < p5 p6 p7 p8 > p4 < p9 p10 > [ 260.425194][ T8595] loop1: p6 start 50334720 is beyond EOD, truncated [ 260.432037][ T8595] loop1: p7 start 68608 is beyond EOD, truncated [ 260.438668][ T8595] loop1: p8 size 33554432 extends beyond EOD, truncated [ 260.447567][ T8595] loop1: p10 start 50334720 is beyond EOD, truncated [ 260.598419][ T33] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 260.788603][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 260.795999][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.829935][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.858299][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 260.922204][ T33] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 260.947128][ T8615] loop0: detected capacity change from 0 to 1024 [ 260.958485][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.990780][ T33] usb 3-1: config 0 descriptor?? [ 261.096447][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 261.099794][ T5239] udevd[5239]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 261.121089][ T5235] udevd[5235]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 261.136107][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 261.155922][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 261.407417][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.434874][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.480901][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.495044][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.543567][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.563832][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.589546][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.602281][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.628487][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.635484][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.646240][ T8627] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 261.653327][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.678327][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x2 [ 261.728358][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.745568][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.765832][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.786100][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x2 [ 261.815688][ T33] apple 0003:05AC:027D.0007: unknown main item tag 0x0 [ 261.830782][ T33] apple 0003:05AC:027D.0007: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 261.897449][ T33] usb 3-1: USB disconnect, device number 11 [ 262.091745][ T8634] fido_id[8634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 262.124929][ T8641] loop3: detected capacity change from 0 to 512 [ 262.247480][ T8641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.281930][ T8641] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.511118][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 262.618445][ T8656] loop3: detected capacity change from 0 to 256 [ 262.678378][ T125] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 262.878314][ T125] usb 5-1: Using ep0 maxpacket: 8 [ 262.885087][ T125] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 262.916060][ T125] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 262.943807][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.963313][ T125] usb 5-1: Product: syz [ 262.967543][ T125] usb 5-1: Manufacturer: syz [ 262.998376][ T125] usb 5-1: SerialNumber: syz [ 263.006609][ T125] usb 5-1: config 0 descriptor?? [ 263.030567][ T125] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 263.049066][ T125] usb 5-1: setting power ON [ 263.054441][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 263.082947][ T125] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 263.100252][ T125] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 263.122377][ T125] usb 5-1: media controller created [ 263.142514][ T8653] loop1: detected capacity change from 0 to 32768 [ 263.153354][ T8654] loop2: detected capacity change from 0 to 32768 [ 263.179999][ T125] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.202604][ T8654] JBD2: Ignoring recovery information on journal [ 263.220881][ T125] usb 5-1: selecting invalid altsetting 6 [ 263.227333][ T125] usb 5-1: digital interface selection failed (-22) [ 263.252793][ T8650] dvb-usb: bulk message failed: -22 (3/0) [ 263.262731][ T125] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 263.297231][ T8650] dvb-usb: bulk message failed: -22 (4/0) [ 263.304870][ T8650] cxusb: i2c read failed [ 263.311227][ T8654] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 263.326473][ T8668] cxusb: i2c rd: len=147 is too big! [ 263.326473][ T8668] [ 263.346753][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 263.346768][ T26] audit: type=1800 audit(1776500781.089:40): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1644" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 263.376216][ T125] usb 5-1: setting power OFF [ 263.381830][ T125] dvb-usb: bulk message failed: -22 (2/0) [ 263.390472][ T125] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 263.400236][ T125] (NULL device *): no alternate interface [ 263.404819][ T8653] XFS (loop1): Mounting V5 Filesystem [ 263.435855][ T125] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 263.448682][ T125] usb 5-1: USB disconnect, device number 15 [ 263.539921][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 263.560758][ T33] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 263.594836][ T8653] XFS (loop1): Ending clean mount [ 263.747488][ T4270] XFS (loop1): Unmounting Filesystem [ 263.758472][ T33] usb 4-1: Using ep0 maxpacket: 16 [ 263.773559][ T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.792688][ T33] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 263.804266][ T33] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 263.814856][ T33] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.864955][ T33] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.886289][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 263.905122][ T33] usb 4-1: SerialNumber: syz [ 263.919169][ T8666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 263.958485][ T8666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 264.009410][ T33] hub 4-1:1.0: bad descriptor, ignoring hub [ 264.015468][ T33] hub: probe of 4-1:1.0 failed with error -5 [ 264.040797][ T8678] loop2: detected capacity change from 0 to 16 [ 264.083647][ T8678] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 264.231285][ T8666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 264.282166][ T8666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 264.658299][ T4348] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 264.700123][ T33] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 264.860652][ T4348] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 264.872758][ T4348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.919961][ T4348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 264.949997][ T4348] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.994250][ T4348] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.018297][ T4348] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.026378][ T4348] usb 3-1: Product: syz [ 265.029214][ T33] usb 4-1: USB disconnect, device number 10 [ 265.038246][ T4348] usb 3-1: Manufacturer: syz [ 265.057822][ T4348] cdc_wdm 3-1:1.0: skipping garbage [ 265.079033][ T4348] cdc_wdm 3-1:1.0: skipping garbage [ 265.096456][ T4348] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 265.105638][ T4348] cdc_wdm 3-1:1.0: Unknown control protocol [ 265.240261][ T8694] loop4: detected capacity change from 0 to 32768 [ 265.323709][ T33] usb 3-1: USB disconnect, device number 12 [ 265.355131][ T8694] ialloc: diAlloc returned -28! [ 265.957764][ T8704] loop0: detected capacity change from 0 to 32768 [ 266.003899][ T8704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1665 (8704) [ 266.050321][ T8704] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.118560][ T8704] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 266.127302][ T8704] BTRFS info (device loop0): using free space tree [ 266.410312][ T8704] BTRFS info (device loop0): enabling ssd optimizations [ 266.695434][ T4269] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 266.980387][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1684'. [ 267.047157][ T8767] loop4: detected capacity change from 0 to 128 [ 267.162562][ T8767] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 267.219088][ T8767] hpfs: filesystem error: improperly stopped [ 267.279075][ T8767] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 267.286900][ T8767] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 267.328334][ T8767] hpfs: You really don't want any checks? You are crazy... [ 267.346875][ T8767] hpfs: hpfs_map_sector(): read error [ 267.410264][ T8767] hpfs: code page support is disabled [ 267.443661][ T8767] hpfs: hpfs_map_4sectors(): unaligned read [ 267.479693][ T8767] hpfs: hpfs_map_4sectors(): unaligned read [ 267.485665][ T8767] hpfs: filesystem error: unable to find root dir [ 267.621233][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1691'. [ 267.684376][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1691'. [ 267.845153][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.003695][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.124170][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.208357][ T22] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 268.305749][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.343045][ T8790] tap0: tun_chr_ioctl cmd 1074025677 [ 268.353356][ T8790] tap0: linktype set to 823 [ 268.398455][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 268.405441][ T22] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 268.456940][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.462027][ T8794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1701'. [ 268.478447][ T22] usb 5-1: config 0 descriptor?? [ 268.694897][ T22] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 268.711684][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 268.795138][ T22] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 268.815321][ T22] usb 5-1: media controller created [ 268.883268][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.015145][ T4271] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.033520][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.041994][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.052890][ T4271] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.064044][ T4271] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.071714][ T4271] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.297796][ T22] DVB: Unable to find symbol dib7000p_attach() [ 269.307464][ T22] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 269.594212][ T22] rc_core: IR keymap rc-dib0700-rc5 not found [ 269.601318][ T22] Registered IR keymap rc-empty [ 269.606514][ T22] dvb-usb: could not initialize remote control. [ 269.622883][ T22] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 269.648957][ T8804] loop1: detected capacity change from 0 to 32768 [ 269.690641][ T22] usb 5-1: USB disconnect, device number 16 [ 269.738125][ T22] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 269.751275][ T8804] XFS (loop1): Mounting V5 Filesystem [ 269.863596][ T8804] XFS (loop1): Ending clean mount [ 269.897611][ T8804] XFS (loop1): Quotacheck needed: Please wait. [ 269.967920][ T8804] XFS (loop1): Quotacheck: Done. [ 270.170291][ T4270] XFS (loop1): Unmounting Filesystem [ 270.345992][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 270.557432][ T8811] loop3: detected capacity change from 0 to 40427 [ 270.592277][ T8811] F2FS-fs (loop3): invalid crc value [ 270.615316][ T8811] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.793906][ T8811] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.831612][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.848609][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.878454][ T8805] device bridge_slave_0 entered promiscuous mode [ 270.941868][ T26] audit: type=1800 audit(1776500788.699:41): pid=8811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1707" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 270.962077][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.115221][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.138500][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 271.147457][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.169395][ T8805] device bridge_slave_1 entered promiscuous mode [ 271.261305][ T4268] syz-executor: attempt to access beyond end of device [ 271.261305][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 271.595223][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.656043][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.106537][ T8864] loop1: detected capacity change from 0 to 64 [ 272.128307][ T8864] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 272.165907][ T8858] loop4: detected capacity change from 0 to 32768 [ 272.206056][ T8858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1717 (8858) [ 272.316219][ T8858] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.392579][ T8858] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 272.443916][ T8858] BTRFS info (device loop4): setting nodatasum [ 272.468361][ T8858] BTRFS info (device loop4): force zlib compression, level 3 [ 272.519416][ T31] device hsr_slave_0 left promiscuous mode [ 272.538456][ T8858] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 272.547863][ T8858] BTRFS info (device loop4): use lzo compression, level 0 [ 272.596151][ T8858] BTRFS info (device loop4): turning on flush-on-commit [ 272.628515][ T8858] BTRFS info (device loop4): enabling auto defrag [ 272.635131][ T8858] BTRFS info (device loop4): max_inline at 4096 [ 272.648562][ T31] device hsr_slave_1 left promiscuous mode [ 272.686606][ T8858] BTRFS info (device loop4): using free space tree [ 272.716610][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.728516][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.799122][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.806685][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.835556][ T8858] BTRFS info (device loop4): enabling ssd optimizations [ 272.855087][ T31] device bridge_slave_1 left promiscuous mode [ 272.885046][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.904675][ T8862] loop2: detected capacity change from 0 to 32768 [ 272.930809][ T31] device bridge_slave_0 left promiscuous mode [ 272.937419][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.016134][ T8862] XFS (loop2): Mounting V5 Filesystem [ 273.060016][ T4279] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.104731][ T8862] XFS (loop2): Ending clean mount [ 273.116295][ T8862] XFS (loop2): Quotacheck needed: Please wait. [ 273.156955][ T31] device veth1_macvtap left promiscuous mode [ 273.170650][ T31] device veth0_macvtap left promiscuous mode [ 273.183737][ T31] device veth1_vlan left promiscuous mode [ 273.196673][ T31] device veth0_vlan left promiscuous mode [ 273.218550][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 273.470600][ T8862] XFS (loop2): Quotacheck: Done. [ 273.490807][ T4571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (4571) [ 273.657542][ T4276] XFS (loop2): Unmounting Filesystem [ 274.346898][ T8903] loop1: detected capacity change from 0 to 40427 [ 274.392584][ T8903] F2FS-fs (loop1): invalid crc value [ 274.403243][ T8903] F2FS-fs (loop1): Found nat_bits in checkpoint [ 274.456130][ T8903] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 274.463426][ T8903] F2FS-fs (loop1): Start checkpoint disabled! [ 274.471376][ T8903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 274.680779][ T75] kworker/u4:4: attempt to access beyond end of device [ 274.680779][ T75] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 275.298498][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 275.945433][ T31] team0 (unregistering): Port device team_slave_1 removed [ 276.067741][ T31] team0 (unregistering): Port device team_slave_0 removed [ 276.136041][ T8922] loop1: detected capacity change from 0 to 512 [ 276.164940][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.180292][ T8922] EXT4-fs (loop1): 1 truncate cleaned up [ 276.186103][ T8922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 276.247683][ T26] audit: type=1800 audit(1776500793.999:42): pid=8922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1730" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 276.272155][ T8922] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1730: bg 0: block 465: padding at end of block bitmap is not set [ 276.294701][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.320178][ T8922] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 276.320958][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.341687][ T8922] EXT4-fs (loop1): This should not happen!! Data will be lost [ 276.341687][ T8922] [ 276.354780][ T8922] EXT4-fs (loop1): Total free blocks count 0 [ 276.363028][ T8922] EXT4-fs (loop1): Free/Dirty block details [ 276.370310][ T8922] EXT4-fs (loop1): free_blocks=0 [ 276.382051][ T8922] EXT4-fs (loop1): dirty_blocks=10 [ 276.387365][ T8922] EXT4-fs (loop1): Block reservation details [ 276.398368][ T8922] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 276.474021][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 276.583649][ T8926] loop1: detected capacity change from 0 to 8 [ 276.601630][ T8926] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 276.633830][ T4370] udevd[4370]: incorrect cramfs checksum on /dev/loop1 [ 276.671774][ T4370] udevd[4370]: incorrect cramfs checksum on /dev/loop1 [ 277.026533][ T31] bond0 (unregistering): Released all slaves [ 277.157469][ T8805] team0: Port device team_slave_0 added [ 277.166114][ T8805] team0: Port device team_slave_1 added [ 277.172535][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1721'. [ 277.202906][ T8875] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1721'. [ 277.325581][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.378833][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 277.389031][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.494408][ T8941] loop4: detected capacity change from 0 to 1024 [ 277.517090][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.569683][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.599766][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.625773][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.708420][ T8941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.799585][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.846537][ T8945] loop3: detected capacity change from 0 to 8192 [ 277.855222][ T8950] loop2: detected capacity change from 0 to 2048 [ 277.876332][ T8805] device hsr_slave_0 entered promiscuous mode [ 277.918741][ T8805] device hsr_slave_1 entered promiscuous mode [ 277.937782][ T8945] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.022639][ T8950] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 278.038680][ T8950] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.077753][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.091637][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 278.138315][ T8805] Cannot create hsr debugfs directory [ 278.322546][ T8962] loop1: detected capacity change from 0 to 256 [ 278.345755][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 278.409964][ T8962] exfat: Deprecated parameter 'namecase' [ 278.415726][ T8962] exfat: Deprecated parameter 'utf8' [ 278.565314][ T8962] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 278.662570][ T8967] loop2: detected capacity change from 0 to 2048 [ 278.796139][ T8967] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 278.878468][ T8967] NILFS (loop2): mounting unchecked fs [ 278.912981][ T8974] loop4: detected capacity change from 0 to 1024 [ 278.950594][ T8967] NILFS (loop2): recovery complete [ 278.976122][ T8975] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.029584][ T8974] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block [ 279.029584][ T8974] [ 279.147972][ T8805] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.272576][ T8805] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 279.314317][ T8805] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 279.354004][ T8805] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 279.693040][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.714692][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.745068][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.788826][ T8995] loop2: detected capacity change from 0 to 64 [ 279.802420][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.841085][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.860358][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.897957][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.905165][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.969030][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.977738][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.991503][ T6088] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 280.015795][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.064566][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.071765][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.094608][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.132594][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.147132][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.183074][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.198439][ T6088] usb 2-1: Using ep0 maxpacket: 8 [ 280.204106][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 280.214592][ T6088] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.227093][ T9003] syz_tun: Device is already in use. [ 280.240489][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.252353][ T6088] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.267520][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.276069][ T6088] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 280.276099][ T6088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.291075][ T6088] usb 2-1: config 0 descriptor?? [ 280.330394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.367518][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.399188][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.431634][ T8805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.447405][ T9007] loop2: detected capacity change from 0 to 512 [ 280.459698][ T8805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.476466][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.485683][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.495166][ T9007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.514061][ T6088] usbhid 2-1:0.0: can't add hid device: -71 [ 280.554867][ T6088] usbhid: probe of 2-1:0.0 failed with error -71 [ 280.653018][ T6088] usb 2-1: USB disconnect, device number 10 [ 280.707465][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 281.307438][ T9027] loop4: detected capacity change from 0 to 4096 [ 281.344003][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.394620][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.433183][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.452391][ T9033] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 281.516249][ T9027] NILFS (loop4): nilfs_sufile_do_free: segment 7 is already clean [ 281.551113][ T9027] NILFS (loop4): nilfs_sufile_do_free: segment 8 is already clean [ 281.627841][ T9014] loop3: detected capacity change from 0 to 32768 [ 281.713671][ T9014] XFS (loop3): Mounting V5 Filesystem [ 281.912505][ T9014] XFS (loop3): Ending clean mount [ 281.940911][ T9014] XFS (loop3): Quotacheck needed: Please wait. [ 282.036347][ T9014] XFS (loop3): Quotacheck: Done. [ 282.263258][ T9061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1773'. [ 282.477259][ T4268] XFS (loop3): Unmounting Filesystem [ 283.407691][ T9068] loop1: detected capacity change from 0 to 131072 [ 283.444220][ T9068] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 283.452541][ T9068] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 283.462619][ T9068] F2FS-fs (loop1): invalid crc value [ 283.480371][ T9068] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.528445][ T9068] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 283.535555][ T9068] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 283.705704][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.725883][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.801270][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 283.854297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.910887][ T8805] device veth0_vlan entered promiscuous mode [ 283.963987][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.994599][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.033152][ T8805] device veth1_vlan entered promiscuous mode [ 284.129412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.144083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.183546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.210752][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.256277][ T8805] device veth0_macvtap entered promiscuous mode [ 284.326701][ T8805] device veth1_macvtap entered promiscuous mode [ 284.404394][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.445703][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.488314][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.538278][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.565506][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.598261][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.652924][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.686955][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.705148][ T9106] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 284.736344][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.765972][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.799359][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.870878][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.907076][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.947788][ T8805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.994674][ T8805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.066366][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.106969][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 285.127312][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.176569][ T8805] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.194700][ T8805] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.233521][ T8805] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.272896][ T8805] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.286980][ T9092] loop4: detected capacity change from 0 to 32768 [ 285.363139][ T9092] [ 285.363139][ T9092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.363139][ T9092] [ 285.468844][ T26] audit: type=1800 audit(1776500803.219:43): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1782" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 285.572071][ T9092] [ 285.572071][ T9092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.572071][ T9092] [ 285.639285][ T9092] [ 285.639285][ T9092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.639285][ T9092] [ 285.659642][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.678333][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.726644][ T9101] loop3: detected capacity change from 0 to 32768 [ 285.741945][ T106] [ 285.741945][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.741945][ T106] [ 285.760457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 285.791133][ T9101] (syz.3.1776,9101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 285.820672][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.859167][ T9101] (syz.3.1776,9101,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 285.868551][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.975048][ T4279] [ 285.975048][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 285.975048][ T4279] [ 285.998460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 286.009963][ T4279] [ 286.009963][ T4279] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 286.009963][ T4279] [ 286.021869][ T9101] JBD2: Ignoring recovery information on journal [ 286.092269][ T9124] device macvlan0 entered promiscuous mode [ 286.111999][ T9124] device ipvlan1 entered promiscuous mode [ 286.122050][ T9124] device ipvlan1 left promiscuous mode [ 286.209019][ T9124] device macvlan0 left promiscuous mode [ 286.289104][ T9101] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 286.700272][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 286.999801][ T9140] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.274817][ T26] audit: type=1326 audit(1776500805.019:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.344162][ T26] audit: type=1326 audit(1776500805.059:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.380338][ T9153] netlink: 16342 bytes leftover after parsing attributes in process `syz.5.1798'. [ 287.404853][ T26] audit: type=1326 audit(1776500805.059:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.550015][ T26] audit: type=1326 audit(1776500805.059:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.625391][ T26] audit: type=1326 audit(1776500805.059:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.692745][ T26] audit: type=1326 audit(1776500805.059:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.738691][ T26] audit: type=1326 audit(1776500805.059:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.828688][ T26] audit: type=1326 audit(1776500805.059:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 287.930140][ T26] audit: type=1326 audit(1776500805.059:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9146 comm="syz.3.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f7fa239c819 code=0x7ffc0000 [ 288.364984][ T9180] loop5: detected capacity change from 0 to 128 [ 288.611715][ T9183] mkiss: ax0: crc mode is auto. [ 288.730881][ T9145] loop2: detected capacity change from 0 to 32768 [ 288.923863][ T9145] XFS (loop2): Mounting V5 Filesystem [ 289.052988][ T9145] XFS (loop2): Ending clean mount [ 289.096861][ T9145] XFS (loop2): Quotacheck needed: Please wait. [ 289.215793][ T9145] XFS (loop2): Quotacheck: Done. [ 289.244153][ T9145] XFS (loop2): User initiated shutdown received. [ 289.302380][ T9145] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 289.343151][ T9145] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 289.361274][ T9207] device bond1 entered promiscuous mode [ 289.367450][ T9207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.375320][ T9207] bridge0: port 4(bond1) entered blocking state [ 289.381914][ T9207] bridge0: port 4(bond1) entered disabled state [ 289.391044][ T9207] bridge0: port 4(bond1) entered blocking state [ 289.397464][ T9207] bridge0: port 4(bond1) entered forwarding state [ 289.420832][ T4332] bridge0: port 4(bond1) entered disabled state [ 289.590170][ T4276] XFS (loop2): Unmounting Filesystem [ 290.080368][ T9225] tipc: Started in network mode [ 290.105830][ T9225] tipc: Node identity ac14140f, cluster identity 4711 [ 290.137608][ T9225] tipc: New replicast peer: 255.255.255.255 [ 290.187130][ T9225] tipc: Enabled bearer , priority 10 [ 290.801999][ T9214] loop4: detected capacity change from 0 to 32768 [ 290.924239][ T9214] XFS (loop4): Mounting V5 Filesystem [ 291.041014][ T9214] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 291.121857][ T9214] XFS (loop4): Starting recovery (logdev: internal) [ 291.140951][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'. [ 291.193259][ T9214] XFS (loop4): Ending recovery (logdev: internal) [ 291.308734][ T22] tipc: Node number set to 2886997007 [ 291.338889][ T9268] loop5: detected capacity change from 0 to 64 [ 291.538460][ T4279] XFS (loop4): Unmounting Filesystem [ 292.036521][ T9286] tap0: tun_chr_ioctl cmd 1074025677 [ 292.079191][ T9286] tap0: linktype set to 270 [ 292.844052][ T9315] loop4: detected capacity change from 0 to 1024 [ 292.999341][ T9319] tap0: tun_chr_ioctl cmd 2147767506 [ 293.682519][ T6641] kernel write not supported for file /adsp1 (pid: 6641 comm: kworker/0:13) [ 293.779253][ T9330] loop3: detected capacity change from 0 to 4096 [ 293.793356][ T9342] loop5: detected capacity change from 0 to 256 [ 293.810316][ T9330] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 293.905502][ T9342] FAT-fs (loop5): Directory bread(block 64) failed [ 293.914375][ T9330] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 293.928660][ T9342] FAT-fs (loop5): Directory bread(block 65) failed [ 293.935556][ T9342] FAT-fs (loop5): Directory bread(block 66) failed [ 293.971669][ T9330] ntfs3: loop3: Failed to load $Extend. [ 293.982927][ T9342] FAT-fs (loop5): Directory bread(block 67) failed [ 293.998392][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 294.014662][ T9342] FAT-fs (loop5): Directory bread(block 68) failed [ 294.037687][ T9346] loop4: detected capacity change from 0 to 128 [ 294.055125][ T9342] FAT-fs (loop5): Directory bread(block 69) failed [ 294.084543][ T9342] FAT-fs (loop5): Directory bread(block 70) failed [ 294.112577][ T9342] FAT-fs (loop5): Directory bread(block 71) failed [ 294.135178][ T9342] FAT-fs (loop5): Directory bread(block 72) failed [ 294.148411][ T9342] FAT-fs (loop5): Directory bread(block 73) failed [ 294.200983][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.222386][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16648, setting to 1024 [ 294.280778][ T22] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 294.318708][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.378755][ T22] usb 2-1: config 0 descriptor?? [ 294.876483][ T22] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 295.051748][ T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0008/input/input13 [ 295.146436][ C1] usb 2-1: input irq status -75 received [ 295.348082][ T9366] loop4: detected capacity change from 0 to 64 [ 295.366849][ T22] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 295.416251][ T9366] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 295.423225][ T22] usb 2-1: USB disconnect, device number 11 [ 295.785438][ T9369] fido_id[9369]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 295.897153][ T9376] loop3: detected capacity change from 0 to 512 [ 295.941499][ T9376] EXT4-fs (loop3): Test dummy encryption mode enabled [ 295.999870][ T9376] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.1871: inode has both inline data and extents flags [ 296.208566][ T9376] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.1871: couldn't read orphan inode 15 (err -117) [ 296.248742][ T9376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.396853][ T9362] loop2: detected capacity change from 0 to 32768 [ 296.529789][ T9362] jfs_rename did not expect dtDelete to return rc = -2 [ 296.558439][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 296.576298][ T9362] ERROR: (device loop2): jfs_rename: [ 296.576298][ T9362] [ 296.638462][ T9362] ERROR: (device loop2): remounting filesystem as read-only [ 296.706666][ T9376] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 296.748308][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 296.755423][ T22] usb 6-1: config 0 has an invalid interface number: 4 but max is 0 [ 296.799210][ T22] usb 6-1: config 0 has no interface number 0 [ 296.826985][ T22] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.889133][ T22] usb 6-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.929261][ T22] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 296.958624][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.977938][ T22] usb 6-1: config 0 descriptor?? [ 297.000712][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 297.034809][ T9380] loop4: detected capacity change from 0 to 32768 [ 297.116643][ T9380] XFS (loop4): Mounting V5 Filesystem [ 297.191605][ T9416] loop3: detected capacity change from 0 to 512 [ 297.240991][ T9380] XFS (loop4): Ending clean mount [ 297.266881][ T9416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.342209][ T9416] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 297.406821][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.431393][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.473645][ T22] hid (null): unknown global tag 0xc [ 297.484831][ T22] hid (null): unknown global tag 0xc [ 297.496004][ T4279] XFS (loop4): Unmounting Filesystem [ 297.517868][ T22] hid (null): unknown global tag 0xd [ 297.709898][ T6088] usb 6-1: USB disconnect, device number 2 [ 297.754319][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 298.206844][ T9431] loop2: detected capacity change from 0 to 2048 [ 298.300014][ T9433] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 298.524603][ T9433] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 298.555921][ T9433] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 298.595625][ T9433] Remounting filesystem read-only [ 298.617869][ T4276] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 299.121634][ T9460] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1894'. [ 299.674161][ T9478] loop2: detected capacity change from 0 to 256 [ 300.378113][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 300.378129][ T26] audit: type=1107 audit(1776500818.119:62): pid=9491 uid=0 auid=0 ses=1 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 300.675149][ T9508] loop5: detected capacity change from 0 to 512 [ 300.762130][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.814078][ T9508] EXT4-fs (loop5): Test dummy encryption mode enabled [ 300.832017][ T9508] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.1910: inode has both inline data and extents flags [ 300.848528][ T9508] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1910: couldn't read orphan inode 15 (err -117) [ 300.860660][ T9508] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 301.343348][ T9532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1920'. [ 301.417451][ T9508] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 301.600298][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 302.047119][ T9556] loop1: detected capacity change from 0 to 2048 [ 302.101771][ T9556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.299865][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1933'. [ 302.317463][ T9564] device ip6gre1 entered promiscuous mode [ 302.473944][ T9566] loop4: detected capacity change from 0 to 256 [ 302.525822][ T9566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 302.640899][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.688036][ T26] audit: type=1326 audit(1776500820.429:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 302.689793][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.710266][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.776688][ T26] audit: type=1326 audit(1776500820.499:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9565 comm="syz.4.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9263b9c819 code=0x7ffc0000 [ 302.819081][ T9573] loop1: detected capacity change from 0 to 512 [ 302.848023][ T9573] EXT4-fs (loop1): Test dummy encryption mode enabled [ 302.868747][ T22] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 302.915617][ T9573] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.1936: inode has both inline data and extents flags [ 302.948589][ T9573] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1936: couldn't read orphan inode 15 (err -117) [ 302.972927][ T9573] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 303.043596][ T9583] loop3: detected capacity change from 0 to 256 [ 303.084379][ T9583] exfat: Deprecated parameter 'utf8' [ 303.098398][ T6088] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.156166][ T9583] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d) [ 303.277813][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 303.494724][ T9588] loop5: detected capacity change from 0 to 8192 [ 303.508490][ T4315] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 303.544538][ T9588] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 303.563742][ T9588] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 303.620621][ T9588] REISERFS (device loop5): using ordered data mode [ 303.627241][ T9588] reiserfs: using flush barriers [ 303.669494][ T9588] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 303.724825][ T9588] REISERFS (device loop5): checking transaction log (loop5) [ 303.924087][ T9598] loop4: detected capacity change from 0 to 4096 [ 303.965418][ T9598] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 304.050198][ T9598] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 304.081927][ T9588] REISERFS (device loop5): Using r5 hash to sort names [ 304.103840][ T9598] ntfs3: loop4: Failed to load $Extend. [ 304.107540][ T9588] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 304.436187][ T9614] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 304.500582][ T9614] syzkaller1: linktype set to 776 [ 304.557173][ T9620] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1955'. [ 304.847181][ T9629] IPv6: Can't replace route, no match found [ 305.082783][ T9641] loop2: detected capacity change from 0 to 512 [ 305.114471][ T9641] EXT4-fs: Ignoring removed orlov option [ 305.136206][ T9641] EXT4-fs (loop2): Test dummy encryption mode enabled [ 305.154288][ T9641] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 305.201752][ T9635] loop5: detected capacity change from 0 to 8192 [ 305.213206][ T9641] EXT4-fs (loop2): 1 truncate cleaned up [ 305.224672][ T9641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.275242][ T9635] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 305.300661][ T9641] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 305.323089][ T9641] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 305.328921][ T9635] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 305.344279][ T9635] REISERFS (device loop5): using ordered data mode [ 305.351694][ T9635] reiserfs: using flush barriers [ 305.388482][ T9635] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 305.409515][ T9641] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 305.510878][ T9635] REISERFS (device loop5): checking transaction log (loop5) [ 305.532291][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 305.583385][ T9635] REISERFS (device loop5): Using r5 hash to sort names [ 305.599557][ T9635] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 305.703948][ T9635] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 305.824099][ T9635] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 305.874416][ T9635] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 305.923994][ T9635] overlayfs: upper fs needs to support d_type. [ 305.951875][ T9635] overlayfs: upper fs does not support tmpfile. [ 305.974427][ T9635] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 306.008781][ T9655] loop2: detected capacity change from 0 to 4096 [ 306.050724][ T9655] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 306.118898][ T9635] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 306.127109][ T9635] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 306.229511][ T9635] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 306.319871][ T9635] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 306.385209][ T9635] overlayfs: failed to set xattr on upper [ 306.426357][ T9635] overlayfs: ...falling back to index=off,metacopy=off. [ 306.610664][ T8805] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 306.658333][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.723235][ T8805] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 306.757151][ T9675] loop1: detected capacity change from 0 to 4096 [ 306.804575][ T9675] NILFS (loop1): invalid segment: Checksum error in segment payload [ 306.850068][ T9675] NILFS (loop1): trying rollback from an earlier position [ 306.908362][ T9675] NILFS (loop1): recovery complete [ 306.954031][ T9678] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.024999][ T9659] loop4: detected capacity change from 0 to 32768 [ 307.237561][ T9659] XFS (loop4): Mounting V5 Filesystem [ 307.534508][ T9659] XFS (loop4): Ending clean mount [ 307.568140][ T9659] XFS (loop4): Quotacheck needed: Please wait. [ 307.717614][ T9659] XFS (loop4): Quotacheck: Done. [ 308.039999][ T4279] XFS (loop4): Unmounting Filesystem [ 308.940800][ T9742] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1998'. [ 309.114737][ T9748] loop1: detected capacity change from 0 to 2048 [ 309.167639][ T9748] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 309.209650][ T9748] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 309.258344][ T9748] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 309.266103][ T9748] UDF-fs: Scanning with blocksize 512 failed [ 309.302923][ T9748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.444777][ T9758] loop2: detected capacity change from 0 to 512 [ 309.587738][ T9755] mkiss: ax0: crc mode is auto. [ 309.857985][ T9770] netlink: 'syz.3.2008': attribute type 18 has an invalid length. [ 310.104551][ T9768] loop2: detected capacity change from 0 to 4096 [ 310.183562][ T9768] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 310.276609][ T9768] ntfs3: loop2: Failed to load $Extend. [ 310.504449][ T26] audit: type=1800 audit(1776500828.249:65): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2007" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 310.594528][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2016'. [ 310.677560][ T6641] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 310.868537][ T6641] usb 4-1: Using ep0 maxpacket: 16 [ 310.879006][ T6641] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 310.928145][ T6641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.957130][ T6641] usb 4-1: Product: syz [ 310.974116][ T6641] usb 4-1: Manufacturer: syz [ 310.988769][ T6641] usb 4-1: SerialNumber: syz [ 311.208870][ T6641] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 311.244461][ T6641] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 311.265788][ T6641] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 311.296107][ T6641] usb 4-1: media controller created [ 311.353856][ T6641] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.468916][ T6641] zl10353_read_register: readreg error (reg=127, ret==-71) [ 311.515347][ T22] kernel write not supported for file /input/mouse0 (pid: 22 comm: kworker/1:0) [ 311.553440][ T6641] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 311.612617][ T6641] usb 4-1: USB disconnect, device number 11 [ 311.957827][ T9820] loop2: detected capacity change from 0 to 8192 [ 312.006729][ T9820] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff" or missing value [ 312.208344][ T6641] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 312.412034][ T6641] usb 5-1: Using ep0 maxpacket: 16 [ 312.426303][ T6641] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 312.478259][ T6641] usb 5-1: config 0 has no interface number 0 [ 312.517092][ T6641] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 312.562929][ T9848] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2034'. [ 312.586714][ T6641] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 312.625687][ T6641] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 312.649383][ T6641] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.658608][ T9850] netlink: 'syz.1.2036': attribute type 10 has an invalid length. [ 312.688309][ T6641] usb 5-1: Product: syz [ 312.692641][ T6641] usb 5-1: Manufacturer: syz [ 312.697271][ T6641] usb 5-1: SerialNumber: syz [ 312.719189][ T6641] usb 5-1: config 0 descriptor?? [ 312.737356][ T9831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.774083][ T9831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.960362][ T9850] device veth0_vlan left promiscuous mode [ 313.023803][ T9831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.046475][ T9850] device veth0_vlan entered promiscuous mode [ 313.053600][ T9831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.125079][ T9850] team0: Device veth0_vlan failed to register rx_handler [ 313.286106][ T9857] netlink: 'syz.5.2039': attribute type 6 has an invalid length. [ 313.683821][ T6641] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.708917][ T6641] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 313.748393][ T6641] asix: probe of 5-1:0.251 failed with error -71 [ 313.803121][ T6641] usb 5-1: USB disconnect, device number 17 [ 313.956205][ T9875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 314.498354][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.546741][ T9895] loop5: detected capacity change from 0 to 4096 [ 314.645774][ T9903] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.782870][ T9895] syz.5.2051: attempt to access beyond end of device [ 314.782870][ T9895] loop5: rw=0, sector=781374535348781056, nr_sectors = 2 limit=4096 [ 314.851263][ T9895] syz.5.2051: attempt to access beyond end of device [ 314.851263][ T9895] loop5: rw=0, sector=12028111102284383530, nr_sectors = 2 limit=4096 [ 314.961845][ T9895] NILFS (loop5): nilfs_ioctl_move_inode_block: invalid virtual block address (data): ino=6537792126923791912, cno=1244419967719, offset=0, blocknr=0, vblocknr=0 [ 315.028549][ T9895] NILFS (loop5): error -2 preparing GC: cannot read source blocks [ 316.216267][ T9912] loop1: detected capacity change from 0 to 40427 [ 316.282985][ T9912] F2FS-fs (loop1): invalid crc value [ 316.337524][ T9912] F2FS-fs (loop1): Found nat_bits in checkpoint [ 316.486801][ T9912] F2FS-fs (loop1): Start checkpoint disabled! [ 316.523131][ T9912] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 316.829143][ T9958] loop5: detected capacity change from 0 to 128 [ 316.959559][ T9958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 316.994656][ T9958] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.061721][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.068249][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.091198][ T9958] fscrypt (loop5, inode 12): Unsupported encryption flags (0xd7) [ 317.108894][ T75] kworker/u4:4: attempt to access beyond end of device [ 317.108894][ T75] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 317.315935][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 317.329759][ T9968] netlink: 'syz.4.2074': attribute type 32 has an invalid length. [ 317.337758][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 317.410267][ T9968] (unnamed net_device) (uninitialized): option coupled_control: invalid value (20) [ 318.635141][ T26] audit: type=1326 audit(1776500836.379:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.2.2085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f276439c819 code=0x0 [ 318.656873][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.767190][ T9976] loop4: detected capacity change from 0 to 32768 [ 318.832164][T10008] loop1: detected capacity change from 0 to 4096 [ 318.859031][T10008] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 319.107445][T10018] loop5: detected capacity change from 0 to 512 [ 319.155560][T10021] program syz.3.2091 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.240849][T10018] EXT4-fs: Ignoring removed i_version option [ 319.250715][T10018] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.390485][T10018] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2089: invalid indirect mapped block 4294967295 (level 1) [ 319.424074][T10018] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2089: invalid indirect mapped block 4294967295 (level 1) [ 319.488646][T10018] EXT4-fs (loop5): 2 truncates cleaned up [ 319.494501][T10018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 319.618898][T10032] loop3: detected capacity change from 0 to 1024 [ 319.657328][T10032] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.693073][T10036] loop2: detected capacity change from 0 to 64 [ 319.768176][T10032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.797970][T10032] EXT4-fs (loop3): shut down requested (2) [ 319.861596][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 320.020119][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 320.044652][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 320.114050][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 320.446406][T10057] loop5: detected capacity change from 0 to 512 [ 320.542351][T10057] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.2102: inode has both inline data and extents flags [ 320.597943][T10066] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2105'. [ 320.708543][T10057] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.2102: couldn't read orphan inode 15 (err -117) [ 320.734487][T10057] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 321.018992][T10080] loop4: detected capacity change from 0 to 2048 [ 321.097136][T10079] loop1: detected capacity change from 0 to 4096 [ 321.139741][T10084] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.423098][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 321.841025][T10103] input: syz0 as /devices/virtual/input/input15 [ 322.311562][T10123] loop3: detected capacity change from 0 to 128 [ 322.397788][T10123] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 322.453992][T10123] ext4 filesystem being mounted at /415/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.591534][T10123] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes [ 322.725952][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 322.775635][T10109] loop5: detected capacity change from 0 to 32768 [ 322.845839][T10109] XFS (loop5): Mounting V5 Filesystem [ 322.965700][T10109] XFS (loop5): Ending clean mount [ 322.990942][T10109] XFS (loop5): Quotacheck needed: Please wait. [ 323.084848][T10109] XFS (loop5): Quotacheck: Done. [ 323.241262][ T8805] XFS (loop5): Unmounting Filesystem [ 323.995945][T10145] loop3: detected capacity change from 0 to 32768 [ 324.075214][T10145] JBD2: Ignoring recovery information on journal [ 324.259824][T10145] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 324.401450][ T26] audit: type=1326 audit(1776500842.149:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.1.2136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb53f9c819 code=0x0 [ 324.423146][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.514112][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 324.579486][T10151] loop4: detected capacity change from 0 to 32768 [ 324.711952][T10151] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.777362][T10151] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 324.831591][T10151] BTRFS info (device loop4): setting nodatasum [ 324.877794][T10151] BTRFS info (device loop4): force zlib compression, level 3 [ 324.913744][T10151] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 324.956696][T10151] BTRFS info (device loop4): use lzo compression, level 0 [ 324.986092][T10151] BTRFS info (device loop4): turning on flush-on-commit [ 325.015885][T10151] BTRFS info (device loop4): enabling auto defrag [ 325.038111][T10151] BTRFS info (device loop4): max_inline at 4096 [ 325.067366][T10151] BTRFS info (device loop4): using free space tree [ 325.101039][T10187] loop2: detected capacity change from 0 to 4096 [ 325.170490][ T26] audit: type=1326 audit(1776500842.919:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10193 comm="syz.3.2143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fa239c819 code=0x0 [ 325.369603][T10151] BTRFS info (device loop4): enabling ssd optimizations [ 325.484886][T10216] loop5: detected capacity change from 0 to 1024 [ 325.910338][ T4279] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.986512][T10225] loop5: detected capacity change from 0 to 512 [ 326.255519][T10225] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 326.264716][T10225] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 326.459459][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 327.106219][T10223] loop2: detected capacity change from 0 to 32768 [ 327.126097][T10218] loop1: detected capacity change from 0 to 40427 [ 327.169582][T10218] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 327.194875][T10218] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 327.207731][T10218] F2FS-fs (loop1): Found nat_bits in checkpoint [ 327.245252][T10223] XFS (loop2): Mounting V5 Filesystem [ 327.264194][T10218] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 327.273355][T10218] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 327.369596][T10223] XFS (loop2): Ending clean mount [ 327.614975][ T4270] syz-executor: attempt to access beyond end of device [ 327.614975][ T4270] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 327.627285][ T4276] XFS (loop2): Unmounting Filesystem [ 328.374195][T10262] loop3: detected capacity change from 0 to 32768 [ 328.491475][T10262] XFS (loop3): Mounting V5 Filesystem [ 328.550251][T10290] loop1: detected capacity change from 0 to 256 [ 328.650186][T10262] XFS (loop3): Ending clean mount [ 328.770010][T10262] XFS (loop3): User initiated shutdown received. [ 328.786794][T10262] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 328.838515][T10262] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 328.895155][T10292] loop5: detected capacity change from 0 to 512 [ 328.951873][T10292] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 329.032735][ T4268] XFS (loop3): Unmounting Filesystem [ 329.049610][T10292] EXT4-fs (loop5): 1 truncate cleaned up [ 329.063370][T10292] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 329.450499][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 329.839716][T10316] loop5: detected capacity change from 0 to 16 [ 329.879836][T10316] erofs: (device loop5): mounted with root inode @ nid 36. [ 329.943308][T10316] overlayfs: failed to set xattr on upper [ 329.968265][T10316] overlayfs: ...falling back to index=off,metacopy=off. [ 330.498338][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.564074][T10340] loop3: detected capacity change from 0 to 256 [ 330.614999][T10340] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.636502][T10340] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 330.674188][T10340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xaa2dc89a, utbl_chksum : 0xe619d30d) [ 331.061723][ T6088] kernel read not supported for file /dsp1 (pid: 6088 comm: kworker/1:12) [ 331.101755][T10352] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 331.122443][T10352] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 331.135059][T10353] loop1: detected capacity change from 0 to 128 [ 331.230914][T10353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 331.274342][T10353] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.293894][T10334] loop2: detected capacity change from 0 to 32768 [ 331.441518][T10334] XFS (loop2): Mounting V5 Filesystem [ 331.536209][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 331.551382][T10334] XFS (loop2): Ending clean mount [ 331.829203][ T4276] XFS (loop2): Unmounting Filesystem [ 332.198062][T10387] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2206'. [ 332.620787][ T125] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 332.823968][ T125] usb 5-1: Using ep0 maxpacket: 32 [ 332.841464][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.877393][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.897776][ T125] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.951308][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.987134][ T125] usb 5-1: config 0 descriptor?? [ 333.007992][ T125] hub 5-1:0.0: USB hub found [ 333.206217][ T125] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 333.407726][T10411] loop5: detected capacity change from 0 to 8192 [ 333.452521][T10393] loop3: detected capacity change from 0 to 32768 [ 333.527377][ T26] audit: type=1800 audit(1776500851.269:69): pid=10393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2209" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 333.619410][ T125] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1 [ 333.664626][ T125] hid-generic: probe of 0003:046D:C31C.000A failed with error -22 [ 333.854192][ T3654] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 333.878655][ T3654] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 333.910218][ T3654] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 333.967344][T10415] loop1: detected capacity change from 0 to 512 [ 333.984271][ T3654] usb 5-1: USB disconnect, device number 18 [ 334.043222][T10415] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 334.109698][T10415] EXT4-fs (loop1): 1 truncate cleaned up [ 334.116628][T10415] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 334.367577][T10416] fido_id[10416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 334.541288][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 334.854494][T10437] loop5: detected capacity change from 0 to 512 [ 334.929038][T10437] EXT4-fs: Ignoring removed i_version option [ 335.049048][T10437] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 335.354226][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 335.418508][T10457] syzkaller0: tun_chr_ioctl cmd 3221841430 [ 335.896728][T10469] loop5: detected capacity change from 0 to 256 [ 336.162908][T10453] loop3: detected capacity change from 0 to 32768 [ 336.252193][T10453] (syz.3.2230,10453,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 336.303705][T10453] (syz.3.2230,10453,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 336.390724][T10453] (syz.3.2230,10453,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 336.426888][T10453] JBD2: Ignoring recovery information on journal [ 336.657983][T10453] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 336.784714][T10427] loop2: detected capacity change from 0 to 40427 [ 336.845720][T10427] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 336.901668][T10453] (syz.3.2230,10453,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 336.969763][T10453] (syz.3.2230,10453,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 337.025974][T10427] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 337.050977][T10453] (syz.3.2230,10453,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 337.092180][T10427] F2FS-fs (loop2): invalid crc value [ 337.138412][T10453] (syz.3.2230,10453,1):ocfs2_quota_read:201 ERROR: status = -5 [ 337.146628][T10488] loop1: detected capacity change from 0 to 2048 [ 337.196279][T10453] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5 [ 337.216668][T10427] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 337.248697][T10453] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 337.271446][T10488] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.292391][T10453] (syz.3.2230,10453,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 337.357760][T10453] (syz.3.2230,10453,1):ocfs2_mknod:314 ERROR: status = -5 [ 337.399223][T10486] (syz.3.2230,10486,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 337.451580][T10453] (syz.3.2230,10453,1):ocfs2_mknod:502 ERROR: status = -5 [ 337.493554][T10486] (syz.3.2230,10486,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 337.521875][T10492] loop4: detected capacity change from 0 to 8192 [ 337.533567][T10453] (syz.3.2230,10453,1):ocfs2_create:676 ERROR: status = -5 [ 337.563107][T10486] (syz.3.2230,10486,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 337.583118][T10492] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 337.588537][T10486] (syz.3.2230,10486,1):ocfs2_quota_read:201 ERROR: status = -5 [ 337.608595][T10486] Quota error (device loop3): find_next_id: Can't read quota tree block 5 [ 337.622742][T10492] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 337.634576][T10492] REISERFS (device loop4): using ordered data mode [ 337.641132][T10486] (syz.3.2230,10486,0):ocfs2_get_next_id:909 ERROR: status = -5 [ 337.649813][T10492] reiserfs: using flush barriers [ 337.687573][T10492] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 337.768820][T10492] REISERFS (device loop4): checking transaction log (loop4) [ 337.814377][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 337.829326][T10492] REISERFS (device loop4): Using r5 hash to sort names [ 337.836636][T10492] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 337.888352][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 337.946537][ T26] audit: type=1800 audit(1776500855.689:70): pid=10492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2246" name="file1" dev="loop4" ino=2 res=0 errno=0 [ 338.598692][T10518] loop1: detected capacity change from 0 to 16 [ 338.627448][T10518] erofs: (device loop1): mounted with root inode @ nid 36. [ 338.700731][T10518] erofs: (device loop1): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 338.796906][T10520] erofs: (device loop1): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 338.899725][T10520] syz.1.2254: attempt to access beyond end of device [ 338.899725][T10520] loop1: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 338.992070][T10520] syz.1.2254: attempt to access beyond end of device [ 338.992070][T10520] loop1: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 339.119751][T10520] syz.1.2254: attempt to access beyond end of device [ 339.119751][T10520] loop1: rw=524288, sector=525144, nr_sectors = 8 limit=16 [ 339.605376][T10542] loop4: detected capacity change from 0 to 4096 [ 339.703987][T10549] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.864356][T10542] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 339.918326][T10542] Remounting filesystem read-only [ 340.486195][T10570] loop5: detected capacity change from 0 to 256 [ 340.528425][ T6641] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 340.574215][T10570] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 340.749737][ T6641] usb 2-1: Using ep0 maxpacket: 32 [ 340.757050][ T6641] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 340.785862][ T6641] usb 2-1: config 0 has no interface number 0 [ 340.808589][ T6641] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 340.838288][ T6641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.846357][ T6641] usb 2-1: Product: syz [ 340.898280][ T6641] usb 2-1: Manufacturer: syz [ 340.913217][ T6641] usb 2-1: SerialNumber: syz [ 340.931245][ T6641] usb 2-1: config 0 descriptor?? [ 340.953361][ T6641] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 341.156106][T10563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.204311][T10563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.419487][T10568] loop3: detected capacity change from 0 to 32768 [ 341.538010][T10568] XFS (loop3): Mounting V5 Filesystem [ 341.620020][ T6641] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 341.672096][ T6641] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 341.682197][T10568] XFS (loop3): Ending clean mount [ 341.829054][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 341.842402][ T6641] usb 2-1: USB disconnect, device number 12 [ 341.872953][ T6641] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 341.916434][ T6641] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 341.976568][ T6641] quatech2 2-1:0.51: device disconnected [ 341.986042][ T4268] XFS (loop3): Unmounting Filesystem [ 342.400590][T10584] loop5: detected capacity change from 0 to 32768 [ 342.550227][T10584] XFS (loop5): Mounting V5 Filesystem [ 342.625613][T10621] loop2: detected capacity change from 0 to 512 [ 342.656319][T10584] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 342.678493][T10621] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 342.815509][T10584] XFS (loop5): Starting recovery (logdev: internal) [ 342.841973][T10621] EXT4-fs (loop2): 1 truncate cleaned up [ 342.847691][T10621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 342.875400][T10584] XFS (loop5): Ending recovery (logdev: internal) [ 343.027453][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 343.055121][T10630] loop3: detected capacity change from 0 to 2048 [ 343.208042][ T8805] XFS (loop5): Unmounting Filesystem [ 343.250206][T10630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.487004][T10619] loop1: detected capacity change from 0 to 32768 [ 344.184940][T10648] loop5: detected capacity change from 0 to 8192 [ 344.458473][T10655] device wlan0 entered promiscuous mode [ 344.464232][T10655] device macsec1 entered promiscuous mode [ 344.651273][T10659] loop5: detected capacity change from 0 to 2048 [ 344.674013][T10659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 344.864259][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 345.046018][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2309'. [ 345.418508][T10678] loop3: detected capacity change from 0 to 4096 [ 345.926380][T10680] loop1: detected capacity change from 0 to 32768 [ 345.954150][T10687] loop4: detected capacity change from 0 to 64 [ 346.023683][ T6641] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 346.043653][T10680] XFS (loop1): Mounting V5 Filesystem [ 346.156034][T10680] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 346.224188][ T6641] usb 4-1: Using ep0 maxpacket: 16 [ 346.261582][ T6641] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.282712][T10680] XFS (loop1): Starting recovery (logdev: internal) [ 346.300336][ T6641] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.365787][ T6641] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 346.378436][T10680] XFS (loop1): Ending recovery (logdev: internal) [ 346.385298][ T6641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.422675][ T6641] usb 4-1: Product: syz [ 346.437324][ T6641] usb 4-1: Manufacturer: syz [ 346.458669][ T6641] usb 4-1: SerialNumber: syz [ 346.488958][ T6641] usb 4-1: config 0 descriptor?? [ 346.504274][T10701] input input16: cannot allocate more than FF_MAX_EFFECTS effects [ 346.620339][ T4270] XFS (loop1): Unmounting Filesystem [ 346.749294][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.806376][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.852599][ T14] usb 4-1: USB disconnect, device number 12 [ 347.118409][ T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 347.322409][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 347.343497][ T22] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 347.368365][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.388302][ T22] usb 6-1: Product: syz [ 347.392542][ T22] usb 6-1: Manufacturer: syz [ 347.417633][ T22] usb 6-1: SerialNumber: syz [ 347.422943][ T14] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 347.463383][ T22] usb 6-1: selecting invalid altsetting 1 [ 347.480940][ T22] usb 6-1: unit 6 not found! [ 347.602552][ T14] usb 4-1: config 0 has an invalid interface number: 229 but max is 0 [ 347.624617][ T14] usb 4-1: config 0 has no interface number 0 [ 347.644639][ T14] usb 4-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.684052][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 347.706938][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.724174][ T14] usb 4-1: Product: syz [ 347.773731][ T14] usb 4-1: Manufacturer: syz [ 347.783843][ T14] usb 4-1: SerialNumber: syz [ 347.800227][ T14] usb 4-1: config 0 descriptor?? [ 347.819044][T10715] loop2: detected capacity change from 0 to 32768 [ 348.014746][ T14] usb 4-1: USB disconnect, device number 13 [ 348.270023][ T22] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 348.288681][ T22] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 348.318996][ T22] usb 6-1: selecting invalid altsetting 1 [ 348.336016][ T22] usb 6-1: unit 6 not found! [ 348.346142][ T22] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 348.372686][ T22] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 348.413464][ T22] usb 6-1: selecting invalid altsetting 1 [ 348.441378][ T22] usb 6-1: unit 6 not found! [ 348.451165][ T22] usb 6-1: 2:0: cannot get min/max values for control 1 (id 2) [ 348.513459][ T22] snd-usb-audio: probe of 6-1:1.2 failed with error -22 [ 348.574660][ T22] usb 6-1: USB disconnect, device number 3 [ 348.775436][T10738] loop3: detected capacity change from 0 to 256 [ 348.813049][T10738] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 348.830315][ T4571] udevd[4571]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.884416][T10738] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 348.943089][T10738] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 349.214540][T10752] loop5: detected capacity change from 0 to 1024 [ 349.346045][T10752] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 349.369124][T10752] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.390526][ T26] audit: type=1800 audit(1776500867.139:71): pid=10752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2345" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 349.396971][T10752] EXT4-fs error (device loop5): ext4_map_blocks:747: inode #15: comm syz.5.2345: lblock 0 mapped to illegal pblock 0 (length 1) [ 349.448775][T10752] EXT4-fs (loop5): Remounting filesystem read-only [ 349.471954][T10760] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2347'. [ 349.481148][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 349.529786][T10752] EXT4-fs error (device loop5): ext4_ext_remove_space:2930: inode #15: comm syz.5.2345: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 349.612152][T10752] EXT4-fs (loop5): Remounting filesystem read-only [ 349.819383][ T8805] EXT4-fs (loop5): unmounting filesystem. [ 350.032713][T10775] netlink: 340 bytes leftover after parsing attributes in process `syz.3.2355'. [ 350.049679][T10775] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2355'. [ 350.078599][T10777] loop4: detected capacity change from 0 to 128 [ 350.153439][T10782] loop2: detected capacity change from 0 to 64 [ 350.318598][T10782] syz.2.2357: attempt to access beyond end of device [ 350.318598][T10782] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 350.365176][T10782] buffer_io_error: 9 callbacks suppressed [ 350.375093][T10782] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 350.430747][T10790] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2362'. [ 350.623876][T10795] loop2: detected capacity change from 0 to 128 [ 351.378083][ T4322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.627998][ T4322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.834383][ T4322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.888524][T10812] netlink: 'syz.4.2374': attribute type 12 has an invalid length. [ 351.896502][T10812] netlink: 'syz.4.2374': attribute type 29 has an invalid length. [ 351.935767][T10812] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2374'. [ 351.971695][T10812] netlink: 'syz.4.2374': attribute type 1 has an invalid length. [ 351.991547][T10812] netlink: 'syz.4.2374': attribute type 2 has an invalid length. [ 352.033879][T10812] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2374'. [ 352.120311][ T4322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.421452][T10821] loop3: detected capacity change from 0 to 1024 [ 352.560177][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 352.573362][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 352.584411][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 352.592817][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 352.600591][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 352.607981][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.179270][T10822] chnl_net:caif_netlink_parms(): no params data found [ 353.326797][T10835] syzkaller0: tun_chr_ioctl cmd 35108 [ 353.353563][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.360909][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.369588][T10822] device bridge_slave_0 entered promiscuous mode [ 353.432766][T10840] loop4: detected capacity change from 0 to 16 [ 353.458044][T10840] erofs: (device loop4): mounted with root inode @ nid 36. [ 353.706376][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.718406][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.726869][T10822] device bridge_slave_1 entered promiscuous mode [ 353.917036][T10822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.108958][T10822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.291801][T10822] team0: Port device team_slave_0 added [ 354.413684][T10822] team0: Port device team_slave_1 added [ 354.576905][T10822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.588211][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.658503][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 354.726116][T10822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.778824][T10822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.807757][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.895587][T10822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.926778][T10847] loop4: detected capacity change from 0 to 32768 [ 354.992532][T10847] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 354.992532][T10847] [ 355.027566][T10847] ERROR: (device loop4): remounting filesystem as read-only [ 355.277394][T10822] device hsr_slave_0 entered promiscuous mode [ 355.305647][T10822] device hsr_slave_1 entered promiscuous mode [ 355.330921][T10822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.353596][T10822] Cannot create hsr debugfs directory [ 355.542165][ T106] BUG: Bad page state in process jfsCommit pfn:7fa7e [ 355.568685][ T106] page:ffffea0001fe9f80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7fa7e [ 355.618342][ T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 355.649010][ T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 355.685694][ T106] raw: 000000000000001c ffff88807838e5d0 00000000ffffffff 0000000000000000 [ 355.722028][ T106] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 355.758250][ T106] page_owner tracks the page as allocated [ 355.787503][ T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 10847, tgid 10846 (syz.4.2384), ts 354963555750, free_ts 354923303541 [ 355.819286][T10861] loop3: detected capacity change from 0 to 40427 [ 355.847179][T10861] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 355.871348][ T106] post_alloc_hook+0x173/0x1a0 [ 355.879610][T10861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 355.892385][ T106] get_page_from_freelist+0x1a1e/0x1ab0 [ 355.910621][ T106] __alloc_pages+0x1ec/0x4f0 [ 355.922100][T10861] F2FS-fs (loop3): invalid crc value [ 355.930613][ T106] folio_alloc+0x1c/0x60 [ 355.953992][ T106] filemap_alloc_folio+0xdb/0x480 [ 355.966791][ T106] do_read_cache_folio+0x1bb/0x760 [ 355.974296][T10861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 355.986350][ T106] do_read_cache_page+0x32/0x220 [ 356.000451][ T106] __get_metapage+0x316/0xfa0 [ 356.010912][ T106] diRead+0x6f7/0xbb0 [ 356.054897][ T106] jfs_iget+0x89/0x3f0 [ 356.071699][ T106] jfs_fill_super+0x70e/0xad0 [ 356.089403][ T106] mount_bdev+0x287/0x3c0 [ 356.126027][ T106] legacy_get_tree+0xe6/0x180 [ 356.131391][ T106] vfs_get_tree+0x88/0x270 [ 356.135866][ T106] do_new_mount+0x24a/0xa40 [ 356.161496][ T106] __se_sys_mount+0x2e3/0x3d0 [ 356.166267][ T106] page last free stack trace: [ 356.191850][ T106] free_unref_page_prepare+0x8b4/0x9a0 [ 356.197414][ T106] free_unref_page+0x2e/0x3f0 [ 356.202729][T10861] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 356.219047][T10861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 356.228440][ T106] __unfreeze_partials+0x1a5/0x200 [ 356.233632][ T106] put_cpu_partial+0x17c/0x250 [ 356.253995][ T106] qlist_free_all+0x76/0xe0 [ 356.275301][ T106] kasan_quarantine_reduce+0x144/0x160 [ 356.292637][ T106] __kasan_slab_alloc+0x1e/0x80 [ 356.309829][ T106] slab_post_alloc_hook+0x4b/0x480 [ 356.328381][ T106] __kmem_cache_alloc_node+0x140/0x260 [ 356.336694][ T106] __kmalloc+0xa0/0x240 [ 356.341568][ T106] tomoyo_realpath_from_path+0xdf/0x5d0 [ 356.347243][ T106] tomoyo_path_perm+0x26f/0x610 [ 356.360536][ T106] security_inode_getattr+0xcf/0x120 [ 356.370948][ T106] vfs_getattr+0x26/0x3a0 [ 356.377667][ T106] __x64_sys_newfstat+0x13d/0x220 [ 356.388684][ T106] do_syscall_64+0x4c/0xa0 [ 356.397809][ T106] Modules linked in: [ 356.408006][ T106] CPU: 0 PID: 106 Comm: jfsCommit Not tainted syzkaller #0 [ 356.415272][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 356.425398][ T106] Call Trace: [ 356.428738][ T106] [ 356.431725][ T106] dump_stack_lvl+0x188/0x24e [ 356.436505][ T106] ? show_regs_print_info+0x12/0x12 [ 356.441761][ T106] ? swiotlb_print_info+0x60/0x60 [ 356.446860][ T106] bad_page+0x14b/0x170 [ 356.451065][ T106] free_unref_page_prepare+0x42a/0x9a0 [ 356.456568][ T106] free_unref_page+0x2e/0x3f0 [ 356.461277][ T106] ? __folio_put+0xf1/0x210 [ 356.465813][ T106] txUnlock+0x27e/0xcb0 [ 356.470000][ T106] ? lockdep_hardirqs_on+0x94/0x140 [ 356.475224][ T106] jfs_lazycommit+0x56a/0xa70 [ 356.479938][ T106] ? txFreelock+0x5a0/0x5a0 [ 356.484481][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 356.490406][ T106] ? do_task_dead+0xd0/0xd0 [ 356.494971][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 356.500899][ T106] ? __kthread_parkme+0x162/0x1c0 [ 356.505972][ T106] kthread+0x29d/0x330 [ 356.510067][ T106] ? txFreelock+0x5a0/0x5a0 [ 356.514596][ T106] ? kthread_blkcg+0xd0/0xd0 [ 356.519205][ T106] ret_from_fork+0x1f/0x30 [ 356.523657][ T106] [ 356.526797][ C0] vkms_vblank_simulate: vblank timer overrun [ 356.547730][ T4268] syz-executor: attempt to access beyond end of device [ 356.547730][ T4268] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.738484][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 356.819257][ T106] Disabling lock debugging due to kernel taint [ 356.825565][ T106] page:ffffea0001fe9f80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7fa7e [ 356.859638][T10787] Set syz1 is full, maxelem 65536 reached [ 356.895938][ T106] flags: 0xfff08000002047(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 356.936079][ T106] raw: 00fff08000002047 dead000000000100 dead000000000122 0000000000000000 [ 356.960628][ T106] raw: 000000000000001c ffff88807838e5d0 00000000ffffffff 0000000000000000 [ 356.985067][ T106] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 357.006769][ T106] page_owner tracks the page as allocated [ 357.014500][ T106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 10847, tgid 10846 (syz.4.2384), ts 354963555750, free_ts 354923303541 [ 357.035209][ T106] post_alloc_hook+0x173/0x1a0 [ 357.040166][ T106] get_page_from_freelist+0x1a1e/0x1ab0 [ 357.045763][ T106] __alloc_pages+0x1ec/0x4f0 [ 357.056537][ T106] folio_alloc+0x1c/0x60 [ 357.061151][ T106] filemap_alloc_folio+0xdb/0x480 [ 357.066244][ T106] do_read_cache_folio+0x1bb/0x760 [ 357.073515][ T106] do_read_cache_page+0x32/0x220 [ 357.079077][ T106] __get_metapage+0x316/0xfa0 [ 357.083800][ T106] diRead+0x6f7/0xbb0 [ 357.087839][ T106] jfs_iget+0x89/0x3f0 [ 357.095152][ T106] jfs_fill_super+0x70e/0xad0 [ 357.099956][ T106] mount_bdev+0x287/0x3c0 [ 357.104337][ T106] legacy_get_tree+0xe6/0x180 [ 357.112684][ T106] vfs_get_tree+0x88/0x270 [ 357.117166][ T106] do_new_mount+0x24a/0xa40 [ 357.121860][ T106] __se_sys_mount+0x2e3/0x3d0 [ 357.126584][ T106] page last free stack trace: [ 357.133473][ T106] free_unref_page_prepare+0x8b4/0x9a0 [ 357.139084][ T106] free_unref_page+0x2e/0x3f0 [ 357.143807][ T106] __unfreeze_partials+0x1a5/0x200 [ 357.151355][ T106] put_cpu_partial+0x17c/0x250 [ 357.156173][ T106] qlist_free_all+0x76/0xe0 [ 357.160796][ T106] kasan_quarantine_reduce+0x144/0x160 [ 357.166300][ T106] __kasan_slab_alloc+0x1e/0x80 [ 357.173272][ T106] slab_post_alloc_hook+0x4b/0x480 [ 357.178569][ T106] __kmem_cache_alloc_node+0x140/0x260 [ 357.184071][ T106] __kmalloc+0xa0/0x240 [ 357.191004][ T106] tomoyo_realpath_from_path+0xdf/0x5d0 [ 357.197095][ T106] tomoyo_path_perm+0x26f/0x610 [ 357.202714][ T106] security_inode_getattr+0xcf/0x120 [ 357.208094][ T106] vfs_getattr+0x26/0x3a0 [ 357.214561][ T106] __x64_sys_newfstat+0x13d/0x220 [ 357.221316][ T106] do_syscall_64+0x4c/0xa0 [ 357.226168][ T106] ------------[ cut here ]------------ [ 357.231961][ T106] kernel BUG at include/linux/mm.h:1146! [ 357.239810][ T106] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 357.245932][ T106] CPU: 1 PID: 106 Comm: jfsCommit Tainted: G B syzkaller #0 [ 357.254639][ T106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.258830][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.264709][ T106] RIP: 0010:put_metapage+0x24f/0x340 [ 357.276035][ T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 31 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f [ 357.295696][ T106] RSP: 0018:ffffc900025afce0 EFLAGS: 00010246 [ 357.301811][ T106] RAX: 8961c3cfed474100 RBX: ffff88807838e5d0 RCX: 8961c3cfed474100 [ 357.309833][ T106] RDX: 0000000000000000 RSI: ffffffff8adf1180 RDI: ffffffff8adf1140 [ 357.317843][ T106] RBP: 000000000000007f R08: ffffffff8e1ff26f R09: 1ffffffff1c3fe4d [ 357.325854][ T106] R10: dffffc0000000000 R11: fffffbfff1c3fe4e R12: ffff88807838e5f8 [ 357.333986][ T106] R13: ffffea0001fe9fb4 R14: 1ffff1100f071cbf R15: 1ffff1100f071ccc [ 357.341997][ T106] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 357.350965][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.357580][ T106] CR2: 00007f7fa25e92f8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 357.365597][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.373604][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.381618][ T106] Call Trace: [ 357.384935][ T106] [ 357.387904][ T106] txUnlock+0x427/0xcb0 [ 357.392110][ T106] jfs_lazycommit+0x56a/0xa70 [ 357.396828][ T106] ? txFreelock+0x5a0/0x5a0 [ 357.401366][ T106] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 357.407305][ T106] ? do_task_dead+0xd0/0xd0 [ 357.411855][ T106] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 357.417797][ T106] ? __kthread_parkme+0x162/0x1c0 [ 357.422878][ T106] kthread+0x29d/0x330 [ 357.426978][ T106] ? txFreelock+0x5a0/0x5a0 [ 357.431547][ T106] ? kthread_blkcg+0xd0/0xd0 [ 357.436176][ T106] ret_from_fork+0x1f/0x30 [ 357.440649][ T106] [ 357.443713][ T106] Modules linked in: [ 357.464628][ T106] ---[ end trace 0000000000000000 ]--- [ 357.470629][ T106] RIP: 0010:put_metapage+0x24f/0x340 [ 357.476000][ T106] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 1b b7 e0 fe e9 25 ff ff ff e8 e1 aa 8f fe 48 8b 3c 24 48 c7 c6 c0 31 c6 8a e8 41 ca ca fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 9a ae 8f [ 357.498093][ T106] RSP: 0018:ffffc900025afce0 EFLAGS: 00010246 [ 357.504923][ T106] RAX: 8961c3cfed474100 RBX: ffff88807838e5d0 RCX: 8961c3cfed474100 [ 357.515312][ T106] RDX: 0000000000000000 RSI: ffffffff8adf1180 RDI: ffffffff8adf1140 [ 357.541375][ T106] RBP: 000000000000007f R08: ffffffff8e1ff26f R09: 1ffffffff1c3fe4d [ 357.552825][T10822] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.559616][ T106] R10: dffffc0000000000 R11: fffffbfff1c3fe4e R12: ffff88807838e5f8 [ 357.567639][ T106] R13: ffffea0001fe9fb4 R14: 1ffff1100f071cbf R15: 1ffff1100f071ccc [ 357.583074][T10822] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.590524][ T106] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 357.599885][ T106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.606805][ T106] CR2: 00007f53ae1435c0 CR3: 0000000068954000 CR4: 00000000003506e0 [ 357.615199][ T106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.618415][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.627192][ T106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.641609][ T106] Kernel panic - not syncing: Fatal exception [ 357.648290][ T106] Kernel Offset: disabled [ 357.652633][ T106] Rebooting in 86400 seconds..