last executing test programs: 4m14.927013911s ago: executing program 3 (id=1685): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x80002011}) 4m14.508595675s ago: executing program 3 (id=1691): r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4m14.383192475s ago: executing program 3 (id=1693): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x21b2f54f54e24e41}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3b, 0x2, 0x200, 0x168f, 0x7ff, 0x800}, {0x3, 0x2, 0xf5f6, 0xf, 0x0, 0x1}, 0x9, 0x5, 0xafb}}, @TCA_TBF_PBURST={0x8, 0x7, 0x262}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 4m14.361473237s ago: executing program 3 (id=1694): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 4m13.467600019s ago: executing program 3 (id=1702): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$eJzs209u00AUx/Gf4xAn5V+hwAIhtRISsGrTAJXY0aOE1lQoBiRg04pF6QU4A+diwwHIArFBXTBo/CcFuzahYI9Rvp+F7fq9Gb+RNfU4UQRgYT3Wmjx56tg/bvWX3694Fdnd5goDUDuT7r+bOX30pHlzAbSc/y3Zr7kuBEDDptsa2Of/5y9vd+T3ZuuC7Gi6LR1m8U5QWD9M30k3u1L81uD1k85+Xl98kO5m7b2lfPOv9szSLH4+F+7F/d+7nV3/gi7qki5rWVd0VSvp9Xdn7W/86fKnOCAAABaAp/XfxUsSzsXbgZ4+i8Kh/GLCkwdxlo1vlvbfi+Ojyri/Wl5fELdf33kZ7VYNA8ApOmee/wnfzr+jYUVG9fwH4M7r/YPJOIrCVy046P9ajwmk05IlfTKr0l9eNGjDkP/fg0D5M93JODLpBypz9WPvdyE0KG11pP1jY0wuZDupf8jH5t92eJg/Y1fTzu/pwcQ/KcP1fyYAddt4cyf9JuD5eC/cC1+MhsNHWw/vb26NNuI3+2TrukwANTh5+ruuBAAAAAAAAAAAAAAAnNU1XXddAgAAAICGNPG7ItdjBACgdX4EAAD//5qhEmQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0x3f015764) 4m12.440187593s ago: executing program 3 (id=1709): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4m12.305920553s ago: executing program 32 (id=1709): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 15.888588759s ago: executing program 5 (id=3382): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x0, @ipv4}, 0x1, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d5500897cd5556770418b1b34525a7becaa1a13b103508a04d5cd215b761cd584cddde2539d4d465745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566f259c4f224d9098cbd4b94b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f779786606674fa7c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f2f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f31", 0xe2}], 0x3}, 0x0) 15.808356705s ago: executing program 5 (id=3383): r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) 15.715851913s ago: executing program 5 (id=3385): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x181c850, &(0x7f0000000100)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_win95}, {@shortname_lower}, {@utf8}, {@numtail}, {@fat=@errors_continue}, {@fat=@quiet}, {@numtail}, {@utf8no}, {@numtail}]}, 0x1, 0x363, &(0x7f0000000c80)="$eJzs3U9oHFUYAPBvM/lbaJODUBSE0ZugoX/woKeUkkIxF5Wl6kFcbKqSjYUsLqaHbuNFPAoe9eRFPOjBQ88iKOLNg1crSFU8aG8Fi092d3Z3trtJU2Fbg7/fYfnyvffNe7OZZF8m2ZdXVmLj/ExcuHHjeszPV2J65fRK3KzEUmTRcyVGzY7JAQAHw82U4s/Utc+SyoSnBABMWOf1/7XDpcw7X+/VP3n1B4ADr/j5f2GvPvO7NVycyJQAgAkbuf//6FDz7PCv+qdLfxUAABxUz7/40jOn1iKey/P5iM13m9VmNZ4etJ+6EG9EPdbjWCzGrYjuQqH9UOk8njm7tnosz/NW/LIU1XZFsxqx2WpWuyuFU1mnfi6Ox2IsFfXFaiOllJ35Ym31eN4REVdanfFjs9KszsShYvwfD8V6nIg8Hhipjzi7tnoiLw5Q3ezVtyJ2Bvct2vNfjsX4/tW4GPU4v3AuUuota9ZWLx/P89Npbai+WZ2L8/1nYdc7IAAAAAAAAAAAAAAAAAAAAAAA8K8s531L/f1v0mD/nuXlMe2d/XG69cX+QDvd/YHSXIqU/nj7iep7WQztD3T7/jzN6nRM3d9TBwAAAAAAAAAAAAAAAAAAgP+MxvZs1Or19a3G9qWNctDaamxPRUQ78+a3n321EKN97hBMF2OUmvIidWmjlrJe55QN9SmCrD14L/Pp1f6My33m+mcxdhpzuzfV64cf+fnDQebhrHfkvwd9sqnx5dlt0ygHm0e6U7qbJ+rSySI4cYfO11JKux3n8sujVVGJmL77T9zeQWoH31x//cGTjaNPdjJfpq7HHl88d+2Dj3/bqNXbI7fVP5ndatxKG7Xi4/EX2+5BVrp+KtENKuUrYXqv8p3hTC374fcXHnr/u/2NnsqZt8b0ybqn8/lWY7tSfKV0mma7QTvXCab6VQv1s1nEbceZGXPxTyA4+tFK7erln37db1Xpm4SNOgAAAAAAAAAAAAAAAAAA4J4ovVe8ULzZd2avqqeenfzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODeGfz//1KwM5LZT/BXK0ab5ta3GhFH7vdpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dPAAAA///fkWru") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 13.440485348s ago: executing program 5 (id=3393): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xc0389423, 0x0) 5.672491149s ago: executing program 5 (id=3416): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f00000003c0)={[{@noblock_validity}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") chdir(&(0x7f0000000380)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') 4.451078078s ago: executing program 4 (id=3422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001dc0), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)={0x24, r1, 0x101, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x48020) 4.353537706s ago: executing program 1 (id=3425): r0 = syz_open_dev$usbmon(&(0x7f0000000380), 0x7, 0x48800) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x101000) read(r0, 0x0, 0x2f) 4.334373908s ago: executing program 4 (id=3426): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file0\x00', 0x181c850, &(0x7f0000000100)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_win95}, {@shortname_lower}, {@utf8}, {@numtail}, {@fat=@errors_continue}, {@fat=@quiet}, {@numtail}, {@utf8no}, {@numtail}]}, 0x1, 0x363, &(0x7f0000000c80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 4.163411632s ago: executing program 1 (id=3428): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x5}, 0x94) 4.061841709s ago: executing program 1 (id=3429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 3.947818679s ago: executing program 1 (id=3430): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000240)) 3.058884181s ago: executing program 1 (id=3437): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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") mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 2.433861622s ago: executing program 2 (id=3442): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xfffb, 0x2}]}) 2.326488721s ago: executing program 2 (id=3443): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1008) 2.223287259s ago: executing program 2 (id=3444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x7f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.134896076s ago: executing program 2 (id=3445): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@phonet={0x23, 0x9, 0x9, 0x9}, 0x80, 0x0}}], 0x1, 0x20020000) 2.081584601s ago: executing program 4 (id=3446): r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4403, 0x8, 0xffffbfff}}) 1.982093759s ago: executing program 2 (id=3447): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@resgid}, {@nojournal_checksum}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) 1.7198548s ago: executing program 5 (id=3448): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x210042, &(0x7f00000001c0)={[{@discard_size={'discard', 0x3d, 0xf4}}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@noquota}, {@uid}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uid}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x62dc, &(0x7f000000ec80)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jzE53vXYS76wzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6I7eZ4PiKGSxHV9tv/PBvxekR8fDzi/oM769Xi8/vsx/f//I8//OTYj/7+p+GZ//7lVv+Naevdvv3b//z17qPvLwAAAHRRWZZlkT7mn4yIQfpsDwA8/fLrf5nk5eqFqzcXrD9qtVqtPoJ1XTnZ3XoREZv1bar3DE7HA8ARsxmftN0FWiT/ThtExLG2OwEstKLtDnAo7j+4s16kfIv668HaTnu+FmQs/81i9/6OadNZmteYzOv5tRX9eG5Kf1bm1IdFkvPvNfO/stM+Susddv7zMi3/0c6tT52T8+838294evLvTcy/q3L+gwPl35c/AAAAAAAssPz7/xMtn/9devxd2Ze9zv+uzakPAAAAAAAAAPCkHXT8v0Fj/L9dxv8DAACAhVV9Vq/87vjDZdP+Flu1/HIR8UxjfaBj0s0yq233AwAAAAAAAAAAAAC6ZLBzDe/lImIYEc+srpZlWX3VNeuDetztj7qu7z90Wds/5AEAYMfHxxv38hcRyxFxOf2tv+Hq6mpZLq+slqvlylJ+PztaWi5Xap9r87RatjTaxxviwaisvtlybbu6WZ+XZ7U3v1/1WKOyv4+OzUeLgQNAROy8Gt2f9or0P69XR1NZPhstv8nhiNjj+OeIcvyzH20/TwEAAIDDV5ZlWaQ/530ynfPvtd0pAGAu8ut/87yAWq1Wq9Xqp6+uKye7Wy8iYrO+TfWewXD8AHDEbMYnbXeBFsm/0wYR8ULbnQAWWtF2BzgU9x/cWS9SvkX99SCN756vBRnLf7PY3i5vP2k6S/Mak3k9v7aiH89N6c/zc+rDIsn595r5X9lpH6X1Hj//cuzXhG1dYzQt/2o/T7TQn7bl/PvN/BsO+/ifl63oTcy/q3L+gwPl35c/AAAAAAAssPz7/xMLdf539Ki7M9Ne53/XJm5xeH0BAAAAAAAAgCfl/oM76/m+13z+/wsT1nP/59Mp51/Iv5Ny/r1G/l9trNevzd97+2H+/35wZ/2Pt/71+Tzdb/5LeaZIz6wiPSOK9EjFIE0fZ+8+a2vYH1WPNCx6/UG65qccvhvX4npsxNmxdXvp/+Nh+7mx9qqnw+32sr/Tfn6sfbDbnre/MNY+TFcXlSu5/XSsx8/jeryz3V61Lc3Y/+UZ7eWM9px/3/HfSTn/Qe2ryn81tReNaeXeR73PHPf16aTHeevaF39z9vB3Z6at6O/uW121fy+10J/t/5Njo/jlzY0bp29fvXXrxrlIk7Gl5yNNnrCc/zB97f78f3mnPf/crx+v9z4aHTj/RbEVg6n5v1ybr/b3lTn3rQ05/1H6yvm/k9onH/9HOf/px/+rLfQHAAAAAAAAAAAAAAAA9lKW5fYtom9FxMV0/09b92YCAPOVX//LJC+fV92f8+Op1YdWF8U8Hq9YmP1tof60nPPjD8YXtL3/avWTqOvKyd6sFxHxt/o21XuGX0/6ZgDAIvs0Iv7Zdidojfw7LP+9v2p6qu3OAHN184MPf3r1+vWNGzfb7gkAAAAAAAAA8Kjy+J9rtfGfT5Vlebex3tj4r2/H2uOO/5lvp3k4wOiUgar7B9+nvWz1Rv1ebbjxF2Pa+N/D3bm9xv8ezHi84Yz20Yz2pRntyzPaJ97oUZPzf7E23vmpiDjZGH69C+O/Nse874Kc/0u153OV/1ca69XzL39/lPPvjeV/5tb7vzhz84MPX7v2/tX3Nt7b+NmFc+fOXrh48dKlS2fevXZ94+zOvy32+HDl/PPY164D7Zacf85c/t2S8/9SquXfLTn/L6da/t2S88/v9+TfLTn//NlH/t2S838l1fLvlpz/11It/27J+b+aavl3S87/66mWf7fk/F9Ltfy7Jed/OtXy75ac/5lU7zP/lcPuF/OR889nuBz/3ZLzz1c2yL9bcv7nUy3/bsn5X0i1/Lsl5/96quXfLTn/b6Ra/t2S87+Yavl3S87/m6mWf7fk/C+lWv7dkvP/Vqrl3y05/2+nWv7dkvN/I9Xy75ac/3dSLf9uyfl/N9Xy75ac//dSLf9uyfm/mWr5d8vDv/9vxowZM3mm7Z9MAAAAAAAAAAAAAEDTPC4nbnsfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp7dxcj11nfD/zsq9cOJAZC/k7+BjaOSUKyya7txC+0KSa8NryVQCj0Bdv1rs2CYxuvXQKNZNNAiYRRUUXbUKktINTmpiIXXNAKUC5QK6RK0F7QG0SFykWEAgpIlWgF2WrOeZ5nZ2bnZde73j1zzucj2T/vmTNznjnznLPz2/V3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANLv5dXOfGsqyrPEn/2t7lr2g8e+tk9vzZa/e7BECAAAAa/Wr/O/nrksLDq/gTk3r/MvLv/PVxcXFxey9I38+9rnFxXTDZJaNbcmy/LboqR++b6h5neCxbGJouOnr4T6bH+lz+2if28f63D7e5/YtfW6f6HP7sh2wzNbi5zH5g+3O/7m92KXZ9dlYftvuDvd6bGjL8HD8WU5uKL/P4tiJbD47lc1lMy3rF+sO5et//ebGtt6cxW0NN21rZ2OG/OzR43EMQ2Ef727Z1tJjRj95bTb58589evzvzj97Y6fadze0PF4xztt3Ncb5ibCkGOtQtiXtkzjO4aZx7uzwmoy0jHMov1/j3+3jfG6F4xxZGuaGan/NJ7Lh/N/fzffTaPOP9dJ+2hmW/eKWLMsuLQ27fZ1l28qGs20tS4aXXp+JYkY2HqMxlV6cja5qnt68gnnaqLO7W+dp+zERX/+bw/1Gu4yh+WX6ycfHm173Xy5eyTyNGs+627HSPgfX+1gpyxyM8+K7+ZN+vOMc3B2e/6O3dp+DHedOhzmYnnfTHNzVbw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5febW3nNw+vzDZ6cXPvqxu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+B29rWbZ6qi18cX3b+vdLjcKLHcbi9bd31Pg5H25/c0MYckMvndHFsvLux0ycuD2ddjrH89blj7cdhet5Nx+Fo03HY8XtKh+NwdAXHYWOds3es7D3LaNOfTmPo/r1gbXNwe9McbH8/0j4H1/v9SFnm4ESYF9+/o/v3gp1hvI9Prfb9yEi2reWb6vDS0w3nnsaS9H5/4mBeOs3Lmxo3XDOeXViYO3f3I8fOnz+3JwtlQ7ykaa60z9dtTc8pWzZfh1c9Xw/Pv/zxmzos3x721cRdjb8mur5WjXXuubv3a5V/d+u8P1uW7s1CWWcbvT87fTdv7M/xLPv8tz7+4Dce/fzruu7PRr/5iem1vxdPfWnT+Xesy/k39v3PF9tLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3Y+Hgt/Nvp8fH2P8/GOtnXX+3w81v7k4vl4qN9PO9am/fWcCPPk1Ezv83FjnR17VzsnR5fNyeZj7JZQh8L+f1XoFNIpvGnudJu3aVujo2PheY3GLbTO030t64+F3qyxrSf3hjeFaZQrm6e331KsP9J0v2ij5ulk27rrPU/Tz766zdOhfj99uzLtr+dEmBfX7+s9TxvrPH3P2s+dW+M/m86d4/3m4NjIeGPMY2kS5uf7bHFrnIN3Z8ezM9mpbDa/dTyfT0P5tqbuXdm5cjz82ehz5Y4ec/D2tnXXew6m72Pd5t7Q6PInvw7aX8+JMC+euLf3HGys8/oDV/DetWVJ67ny9rAkrdP03rX952vdfuZ1U9tuulpzZTSM81sHev9strHOqYOr7TN776c7w5JrOuyn9uO32zE1m23MftoRxvnswe77qTGexjqfO7TC+XQ4y7KLH74//3lv+P3KxQvf+2rL7106/U7n4ofv/+kLT/zzasYPwOB7vijbiu91TT9EW8nv/wEAAICBEPv+4VAT/T8AAABURuz74/8KT/T/AAAAUBmx7x8NNalC///H/VfZ8fpn55+/mKVk/mIQb0+74YFivZhxnQlfTy4uaSy//8tz//1PF1c2vOEsy375wB91XH/HA3Fchckwzqfe0Lp8ma/etaJtH33oYtpuc379C+Hx4/NZ6TToFMGdybLs69d9Jt/O5Psu5/XpB47m9cFLjz/WWOe5Q8XX8f7PvKRY/69D+PfwiWMt938m7IcfhTrzls77I97vK5dftfPAe5a2F+83tOva/Gk/8f7icePn5Hz2sWL9uJ+7jf8bn37yK431H3ll5/FfHO48/ifD43451P95WbF+82vQ+Dre75Nh/HF78X53f+mbHcf/1KeK9c++sVjvaKhx+7eHr3e/8dn55v31yNCxlueVvalYL25/5nt/mt8eHy8+fvv4J45cbtkf7fPj6X8vHme6bf24PG4n+se27Tcep3l+xu0/+SdHW/Zzv+0/9eAzL2s8bvv272xb7+yH78i3v/R4rZ/Y9Def/EzH7cXxHP6Hsy3P5/A7w3Ectv/E+8N8DLf/71PF47V/usLRd7aef+L6X9h+seX5RG/+ebH9p15zMq9bJrZuu+YFL7z20isa+y7LvruleLx+2z/5t2daxv/FG4r9EW+PGf327XcTt3/uI1OnzyxcmJ9Ne/XR6/LPznlrMZ443uvCubX96yNnzn9g7tzkzORMlk1W9yP0rtiXQv1pUS71Xntx2Rn0jofC63nTX359263/9um4/D/eXSy//Jbi+9ZtYb3PhuXbw+u3uu0v98TNN+TH99DTYYSLyz8veC127v7xwRWtGJ5/+/uCON/PvvQD+X5o3JZ/34jH9RrH/4PZ4nG+FvbrYvhk5l03LG2vef342QiX31Uc72vef+E0F1/Xvw+v99t+VDx+HFd8vj8I72O+uaP1fBfnx9cuDrc/fv4pHpfC+SS7VNwe14r7+/JzN3QcXvwckuzSjfnXf5Ye58ZVPc1uFj66MH1q/vSFR6bPzy2cn1746MeOPHzmwunzR/LP8jzywR53/avbsixbOj9ty89Ps3P778nys9WZolxlaxh/bq3jP/vQ8dkDM7fOzp04duHE+YfOzp07eXxh4fjc7MKtx06cmPtIv/vPz963Z++hfQf2Tp2cn73v4KFD+w5NzZ8+0xhGMag+9s98aOr0uSP5XRbuu+fQnnvvvWdm6uEzs3P3HZiZmbrQ7/7596apxr3/cOrc3Klj5+cfnptamP/Y3H17Du3fv7fvpwE+fPbEwuT0uQunpy8szJ2bLp7L5Pl8ceN7X7/7U00L/1m8n203VHwQX/aOO/enz2dt+PLHuz5UsUrbB4g+Gz6L5tsvOntwJV/Hvn8s1KQK/T8AAACQi33/eKiJ/h8AAAAqI/b9W0JN9P8AAABQGbHvnwg1/ZeAmvT/lcv/77i4ou3L/8v/N+8v+f+a5f/fVbb8f3G+kP9fH2vN38v/B/L/8v8pPz+eZdnG5Oevzvjl/+X/2Uxly//Hvn9rlvn9PwAAAFRU7Pu3hZro/wEAAKAyYt9/TaiJ/h8AAAAqI/b9Lwg1qUn/L/8v/y//L/8v/995+/L/g0n+vzf5/26KT4SW/1+YzjYxP78e419l/v/Seo5/E/L/W5u/kP+njMqW/499/wtDTWrS/wMAAEAdxL7/2lAT/T8AAABURuz7rws10f8DAABAZcS+f3uoSU36f/n/NeX/U+ZK/r91/PL/reT/w3yQ/5f/3wDy/73J//ch/7+p188f9PG7/r/8P8uVLf8f+/4XhZrUpP8HAACAyhpb+mfs+18caqL/BwAAgPIZvbK7xb7/JaEmy/r/K9wAAAAAsOli33991hYEr8nv/+X/Xf9f/l/+X/6/8/ZXnv8fyeT/y0P+vzf5/z7k/+X/65v/n8jk/7kKypb/z/v+bCJ7aahJTfp/AAAAqIPY998QaqL/BwAAgMqIff//CzXR/wMAAEBlxL5/R6hJTfr/Dvn/lqCa/P/KlCD//4vmiKb8v/x/r+3L/7v+f5XJ//cm/9+H/L/8f33z/67/z1VRtvx/7PtvDDWpSf8PAAAAdRD7/ptCTfT/AAAAUBmx7///oSb6fwAAAKiM2PfvDDWpSf/v+v8lz//H5Kjr/8v/y/+XMv8/If9fOvL/vcn/9yH/L/8v/y//z7oqW/4/9v0vCzWpSf8PAAAAdRD7/peHmuj/AQAAoDJi3/+KUBP9PwAAAFRG7PsnQ01q0v+vJv8/dEn+v5urfP3/8RVc/7+F/L/8f6/ty/+7/n+Vyf/3Jv/fh/y//L/8v/w/66ps+f/Y998calKT/h8AAADqIPb9u0JN9P8AAABQGbHvvyXURP8PAAAAlRH7/t2hJjXp/13/fyDy/5n8v/y//L/8v/z/ysj/9yb/34f8v/y//L/8P+tqnfP/w+0LV5v/j33/K0NNatL/AwAAQB3Evv/WUBP9PwAAAFRG7PtvCzXR/wMAAEBlxL7/9lCTmvT/8v/y//L/8v/y/523L/8/mOT/e5P/70P+X/5f/l/+n3VVtuv/x77/VaEmNen/AQAAoA5i339HqIn+HwAAACoj9v13hpro/wEAAKAyYt8/FWpSk/5f/l/+X/5f/l/+v/P25f8Hk/x/b/L/fcj/y//L/8v/s67Klv+Pff9doSY16f8BAACgDmLff3eoif4fAAAAKiP2/dOhJvp/AAAAqIzY98+EmtSk/5f/l/+X/5f/X1X+/xVLjyv/X5D/Lxf5/97k//uQ/5f/3/T8/5j8P5VStvx/7Pv3hJrUpP8HAACAOoh9/95QE/0/AAAAVEbs+/eFmuj/AQAAoDJi339PqElN+n/5f/l/+X/5f9f/77x9+f/BJP/f2/rn/+NTlP+X/5f/d/1/+X+WK1v+P/b994aa1KT/BwAAgDqIff/+UBP9PwAAAFRG7PsPhJro/wEAAKAyYt9/MNSkJv2//L/8v/y//L/8f+fty/8PJvn/3lz/vw/5f/n/Ac7/N+aW/D9lU7b8f+z7D4Wa1KT/BwAAgDqIff+rQ030/wAAAFAZse//tVAT/T8AAABURuz7fz3UpCb9v/y//L/8v/x/2fP/4/L/8v+rIP/fm/x/H/L/8v8DnP93/X/KqGz5/9j33xdqUpP+HwAAAOog9v2/EWqi/wcAAIDKiH3/a0JN9P8AAABQGbHvPxxqUpP+X/5/g/L/caH8v/y//L/r/8v/X1Xy/73J//ch/y//L/8v/8+6Klv+P/b9rw01qUn/DwAAAHUQ+/77Q030/wAAAFAZse9/XaiJ/h8AAAAqI/b9rw81qUn/L//v+v+bn/8faxm7/P/S/eT/C/L/8v+rIf/fm/x/H/L/8v/y//L/rKuy5f9j3/+GUJOa9P8AAABQB7Hvf2Ooif4fAAAAKiP2/W8KNdH/AwAAQGXEvv/NoSY16f/l/+X/Nz//7/r/8v8F+X/5//Ug/9/bYOb/G7tR/j+T/y/9+OX/5f9Zrmz5/9j3/2aoSU36fwAAAKiD2Pc/EGqi/wcAAIDKiH3/W0JN9P8AAABQGbHvf2uoSU36f/l/+X/5f/l/+f/O25f/H0zy/70NWP7/V9eG5a7/X5D/L/f4V5v/H237+qrk/3/YLf+/uKX9/vL/XA1ly//Hvv9toSY16f8BAACgDmLf//ZQE/0/AAAAVEbs+98RaqL/BwAAgMqIff9vhZrUpP+X/2+MYym9LP8v/58vkP+X/5f/H1jy/70NWP4/XP9f/j+S/y/3+F3/X/6f5cqW/499/ztDTWrS/wMAAEAdxL7/wVAT/T8AAABURuz73xVqov8HAACAyoh9/7tDTWrS/8v/u/6//L/8v/x/5+3L/w+m9cn/j8j/y//L/8v/lyP//1/y/wy2suX/Y9//UKhJTfp/AAAAqIPY978n1ET/DwAAAJUR+/7fDjXR/wMAAEBlxL7/vaEmNen/5f8HJf8/Kf+/yvz/eFgm/y//L/9fL67/39vO3T/unqxsJv8v/y//X478v+v/M+DKlv+Pff/7Qk1W3v9PrHhNAAAAYFPEvv93Qk1q8vt/AAAAqIPY9/9uqIn+HwAAACoj9v2/F2pSk/5f/n9Q8v+u/59t2vX/l0JI8v/y//L/5bdx+f945hm4/L/r//ci/y//L//fNf8/3Of+8v90Urb8f+z7fz/UpCb9PwAAANRB7PvfH2qi/wcAAICB0On/ZLeLff+RUBP9PwAAAFRG7PuPhprUpP+X/5f/l/8v6fX//2LXv37/O28/ukf+X/5f/n9VNvT6/42Df/Cu/y//34v8v/y//L/r/7Ouypb/j33/sVCTpcbvrS7wDwAAAIMt9v1/EGpSk9//AwAAQB3Evv94qIn+HwAAACoj9v2zoSY16f/l/+X/5f9Lmv8f4Ov/x/0xSPn/qS0DlP+PJ135/442NP//nqWcuPz/avP/4x2Xtuf/h+T/W8j/r3r8386yTP5f/p9NVLb8f+z750JNatL/AwAAQB2Evn/4RFGXbtD/AwAAQGXEvv9kqIn+HwAAACoj9v0fCDWpSf8v/y//L/8v/+/6/523X9r8v+v/9yT/31t58v+duf6//P8gj1/+X/6f5cqW/499/3yoSU36fwAAAKiD2Pd/MNRE/w8AAACVEfv+D4Wa6P8BAACgMv6PvTt70rQs7zj+NmmKmSIhqVSqcpADcp4/gYNwlIPkD8gBJzlJVSqVkIXsG0P2lSTuOyqiuOACirihuAsqoriLivsu4o5aY830dV0z3f30805Pv2+/z3Pfn89BLmZ0fJs4hfwYvty5+/8gbulk/+v/9f/6f/2//n/48/X/86T/H6f/X0L/r//X/+v/Wamp9f+5+/8wbulk/wMAAEAPcvdfG7fY/wAAANCM3P1/FLfY/wAAANCM3P1/HLfMcv9vPXLYSlD/r/9vtv//df3/QZ+v/9f/t0z/P07/v8Rx9f9XLPT/a7Dpr1//r/9nv6n1/7n7/yRumeX+BwAAAIbk7v/TuMX+BwAAgGbk7r8ubrH/AQAAoBm5+/8sbulk/+/p/7cWffb/mfHq/1vq/8/1+tsL/f+uz9f/6/9bdrz9/w1n/sin/9f/e/8/6P/1//p/9ppa/5+7/8/jlk72PwAAAPQgd/9fxC32PwAAADQjd/9fxi32PwAAADQjd/9fxS2d7P8Jvv9/9r8E7//vfFv/v5L+3/v/ez5f/6//b5n3/8f11P9f9+Dl1z5656/cdZjP1//r//X/+n9Wa2r9f+7+v45bOtn/AAAA0IPc/X8Tt9j/AAAA0Izc/X8bt9j/AAAAMEMnB783d//fxS2d7P8J9v87X5f+/yz9/zH2/yf0//p//X8L9P/jeur/L+bzO+n/h/+keAL9/FGt7Ou/eaH/1/+zIlPr/3P3/33c0sn+BwAAgB7k7v+HuMX+BwAAgOka+huxR+Tuvz5usf8BAACgGbn7T8Utnex//f/6+/+f6P/n0f97/1//r/9vgv5/nP5/iT76/wPp/73/r/9n1abW/+fuvyFu6WT/AwAAQA9y9/9j3GL/AwAAQDNy9/9T3GL/AwAAQDNy9/9z3NLJ/tf/e/9f/6//1/8Pf77+f570/+P0/0vo/4/az1+q/9f/6/853yH7/8dG/rC9kv4/d/+/xC2d7H8AAADoQe7+f41b7H8AAABoRu7+f4tb7H8AAABoRu7+f49bOtn/+n/9v/5f/3/R/f/+n3pn6f+H6f+Ph/5/3GT6/63twe/W/8++//f+v/5f/88uU3v/P3f/f8Qtnex/AAAA6EHu/v+MW0b2/6H/Yj4AAACwUbn7/ytu8ev/AAAAMHtZneXu/++4pZP9P5/+//7f2Pkt/b/+X/8/mf6/4/f/7zrv69P/T4v+f9xk+v8D6P/1/3P++vX/+n/2m1r/n7v/f+KWTvY/AAAA9CB3/41xi/0PAAAAzcjd/79xi/0PAAAAzcjd/39xSyf7f7j/P/evT6f/9/6//l//n/1//ifq/0f7/6u9/98n/f84/f8S+n/9v/7/oP7/5LIfr/9nyNT6/9z9/x+3dLL/AQAAoAe5+x8Xt9j/AAAA0Izc/Y+PW+x/AAAAaEbu/ifELZ3s//m8/6//1//r/73/v/v3Z5Pv/y+Ovf/f1v9fIP3/OP3/Evp//b/+f/z9/5F/CoD+nyFT6/9z9z8xbulk/wMAAEAPcvc/KW6x/wEAAGAezv97B/b+DaUhd/+T4xb7HwAAAJqRu/8pcUs7+3/0rU79v/5f/6//1/8Pf/60+n/v/18o/f84/f8S+v919PPbjfX/Nx3046fQ/1+/7v5/hP6fIbv6/7vPff+m+v/c/U+NW9rZ/wAAANC93P1Pi1vsfwAAAGhG7v6nxy32PwAAADQjd/8z4pZO9v/a+/+Rf/qA/l//r//X/+v/9f+rpv8fp/9fQv/v/X/v/+v/Wald/f95NtX/5+5/ZtzSyf4HAACAHuTuf1bcYv8DAABAM3L33xS32P8AAADQjNz9z45bOtn/3v/X/+v/9f/6/+HP1//P05H6+0v0/0X/r//X/+v/9f+swNT6/9z9z4lbOtn/AAAA0IPc/c+NW+x/AAAAaEbu/pvjFvsfAAAAmpG7/3lxSyf7X/+/3v4/v1//r/9f6P/1//r/Y9Ht+/9bQ/9LtN8B/f99v3fqt3Z/j/5f/6//1//r/7lAvzDyr02i/z997s8uc/ffErd0sv8BAACgB7n7nx+3DO//nz2erwoAAABYpdz9L4hb/Po/AAAANCN3/61xyyH3/1jzMOyRKw/9Q9ZA/+/9f/2//l//P/z5+v956rb/v0De/19C/6//1//r/1mpSfT/5307d/8L4xa//g8AAADNyN3/orjF/gcAAIBm5O5/cdxi/wMAAEAzcve/JG7pZP/r//X/+n/9v/5/+PP1//Ok/x+n/19iTv3/rUfo/7eHv3vT/fxRbfrr1//r/9lvav1/7v7b4pZO9j8AAAD0IHf/S+MW+x8AAACakbv/ZXGL/Q8AAADNyN3/8rilk/2v/9f/6//1//r/4c/X/8+T/n+c/n+xWNw+8gUM9f+nL5tm/+/9/8l9/fp//T/7Ta3/z93/irilk/0PAAAAPcjdf3vcYv8DAABAM3L33xG32P8AAADQjNz9r4xbOtn/+n/9v/5f/7+C/n9XX6v/H6b/Px76/3H6/yXm9P6//n9yX7/+X//PfsfQ/9/y84fo/3P3vypu6WT/AwAAQA9y998Zt9j/AAAA0Izc/a+OW+x/AAAAaEbu/rvilk72v/5f/6//1/97/3/48/X/87S+/n+h/9f/6/+X0P/r//X/7DW19/9z978mbulk/wMAAEAPcve/Nm6x/wEAAKAZuftfF7fY/wAAANCM3P2vj1s62f/6f/2//l//P43+/8wfg/T/+v+j8/7/OP3/Evp//b/+X//PSg33/9dvrP/P3f+GuKWT/Q8AAAA9yN1/d9xi/wMAAEAzcve/MW6x/wEAAKAZufvfFLd0sv/1//r/3f3/YqH/1/97/3/HMfT/Jxb6/5XT/4/T/y+h/2+z/79k0VD/f/LAH6//Z4qm9v5/7v574pZO9j8AAAD0IHf/m+MW+x8AAACakbv/LXGL/Q8AAADNyN3/1rilk/2v/9f/e/9f/6//H/587//Pk/5/XH/9/7b+/xCa7f+9/6//Z2Om1v/n7n9b3NLJ/gcAAIAe5O5/e9xi/wMAAEAzcve/I26x/wEAAKAZufvfGbd0sv/1//p//b/+X/8//Pn6/3nS/4/rr//3/v9hbLqfn/vXr//X/7Pf1Pr/3P3vils62f8AAADQg9z998Yt9j8AAAA0I3f/fXGL/Q8AAADNyN3/7rilk/2v/9f/6//n2f+f0P/r//X/g6bS/1911W8+oP/X/+v/u+z/L1no//X/lKn1/7n73xO3dLL/AQAAoAe5+98bt9j/AAAA0Izc/ffHLfY/AAAANCN3//vilk72//7+/9LFTqG6Y6j/j0ZN/38e/f/ur1//P/zzw/v/+n/9//pNpf/3/v/Fff36f/3/nL/+Q73//6v7f7z+nxZNrf/P3f9A3NLJ/gcAAIAe5O5/f9xi/wMAAEAzcvd/IG6x/wEAAKAZufsfjFs62f/e/9f/6//1//r/4c/X/8+T/n+c/n8J/b/+/7j6/wGT6f9/Rv/P6kyt/8/d/8G4pZP9DwAAAD3I3f+huMX+BwAAgGbk7v9w3GL/AwAAQDNy938kbulk/+v/9f/6/zX0/9vDPz/0//p//f/66f/H6f/L3t+1Hf30/yeGvnPT/fxRbfrrX1P/f8/l3v9nxqbW/+fu/2jc0sn+BwAAgB7k7v9Y3GL/AwAAQDNy9388brH/AQAAoBm5+z8Rt3Sy//X/jff/Z77Rff//O97/3/P5+n/9f8v0//m/6MP0/0v00/8P2nQ/P/evv5n3//X/rNDU+v/c/Q/FLZ3sfwAAAOhB7v5Pxi32PwAAADQjd/+n4hb7HwAAAJqRu//TcUsn+1//33j/v+f9/61Fj/3/Bt7/P+Dnh/5f/6//Xz/9/zj9/xL6f/2//l//z0pNrf/P3f/w1naX+x8AAADm6rd/7fcfutB/78Nn/++JxWfilqsXpy/wl7EBAACAiTuz+7e2F4vPnv2WX/8HAACAFuXu/1zc0sn+1//31f/3+f7/Gvv/Mx+s/9f/6/8nRf8/Tv+/hP5f/6//1/+zUlPr/3P3fz5uOW/4bR/69xIAAACYktz9X4hbOvn1fwAAAOhB7v4vxi379r9/HCAAAADMVe7+L8Utnfz6v/5/4v3/Yk39f/z79P87vP+v/x/6fP3/POn/xx2x/z+9pf/X/4/Q/+v/9f/sNbX+P3f/l+OWTvY/AAAANGrXX1HI3f+VuMX+BwAAgGbk7v9q3GL/AwAAQDNy938tbulk/+v/j73/z1R9je//n6zfuqj3/xe/tPMN/f/8+/8bTwx+vv5f/98y/f847/8vof9vpf+/TP+v/2captb/5+7/etzSyf4HAACAHuTu/0bcYv8DAABAM3L3fzNusf8BAACgGbn7Hzlzfq6//b+R/j/+Qzrt/w/3/v8F9v+/eMXuz176/v9Y/+/9/3b6/wM+v53+/5cvP3XvNb97x236f845zv4/fy7o//X/+v8dE+r/vf+v/2ciVt//b+/6zsP2/2d3/+LE4ltxSyf7HwAAAHqQu//RuMX+BwAAgGbk7v923GL/AwAAQDNy938nbulk/3v/v43+f6859v/5/+sN9P+nLrr/P7lYLDbS/2dT3Hv/7/1//f9+3v8f10f/v63/v0ib7ufn/vXr//X/7Lf6/n/3dx62/8/d/924pZP9DwAAAD3I3f+9uCX3/9ah/9I9AAAAMDG5+78ft/j1fwAAAGhG7v4fxC2d7H/9v/5/Kv1/8v7/uR/X1vv/11Sc2mf/f2X9lv5/vfT/4/ro/73/f7E23c/P/evX/+v/2W9q/X/u/h/GLZ3sfwAAAOhB7v7H4hb7HwAAAJqRu/9HcYv9DwAAAM3I3f/juKWT/a//b7X/zyJe/6//n0r/7/1/7/8fD/3/OP3/Evr/mff/8RNmof/X/zMVU+v/c/f/NAAA//8GEl6W") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 789.381756ms ago: executing program 4 (id=3451): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f0000000100)={0x5, 0x400, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "8d416cfa6fc2313e"}}, 0x48}}, 0x0) 678.984314ms ago: executing program 4 (id=3452): add_key(&(0x7f0000000480)='rxrpc\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 617.827259ms ago: executing program 0 (id=3453): r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x40800, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 503.144179ms ago: executing program 0 (id=3454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 495.810229ms ago: executing program 1 (id=3455): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl818\x00', [0x2efd, 0x5, 0x8, 0x3, 0x3, 0xfffffffe, 0x20000004, 0x10001, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x9, 0x830, 0x2fffd, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) 472.667562ms ago: executing program 4 (id=3456): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x89, &(0x7f0000000180)="$eJzs0qENAjEABdDPrYFgA3a4UQgSHAqCun1YhRHYAIHFQJoWQT0hubyX/Ca/31T0+rwsMyWrKXl1DsfTbrOvZ5ilIcnYUv5A6fexbou23x7n7Sf/fi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MKQdd+/Lt4BAAD//9+0I9A=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 392.228738ms ago: executing program 0 (id=3457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240)=0x2, &(0x7f0000000200)=r1}, 0x20) 269.681988ms ago: executing program 0 (id=3458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x701, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) 217.981202ms ago: executing program 0 (id=3459): r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, &(0x7f0000000000), r1, 0x0, 0xce1a, 0x0) 137.955479ms ago: executing program 0 (id=3460): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f00000001c0)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {}, {@errors_continue}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@discard_size={'discard', 0x3d, 0x5}}, {@errors_remount}, {@grpquota}]}, 0x1, 0x60b9, &(0x7f0000013cc0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw9eDHVY/1OH64Q7Xj3S4frTD9as6XD/W4fpFO2CR1fXfx+R3tin/69r6Ls1uzEby6zYV3OqpgVWDg/F3ObmB/DbzI0ey2exYNpNNNS1fX3YgX/6FDbV1fSSL6xpsWNf62hHy8ycOx20YCPt4U9O6Fu4z+un7svFf/PyJw3915pWbi2bH3dB0f/Xt3LKxtp2fD5fUt3UgW5X2SdzOwYbtXF/wnAw1bedAfrva31u389VlbufQwmZeUa3P+Vg2mP/9pXw/DTf+Wi/tp/Xhsv++Ncuy8wub3brMonVlg9mapksGF56fsfoRWbuP2qH05mx4RcfphmUcp7U5van5OG19TcTnf0O43fAS29D4NP30ydGG5/21+Us5TqPao17qtdJ6DHb7tdIrx2A8Ll7KH/TThcfgpvD4n9i89DFYeOwUHIPpcTccgxs7HYODo0P5NqcnYSC/zcIxuK1p+aF8TQP5fHlz+2Nw8szxU5Nzjz1+++zxQ0dnjs6c2LFt29SOXbv27NkzeWT22MxU/c9L3Nu9b002mF4DG8O+i6+Bd7Us23iozn9jdNH591Jfh2NtXodrW5bt9utwuPXBDVyZF+TiY7r+2rivttPHLgxmS7zG8udn6+W/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNq6/J+Zhlu+K9oG5b+XnB5x+DahmOw9eeR1mOw2z+P9MoxOBaOix9uXfp7wfqwvU9PrPTnkaFFx2B6uOHcU7sk/bw/ticfRcflLbUrrhnNzs7NnL7j0UNnzpzeloVxRbyl4VhpPV7XNDymbNHxOrji43X/7NufvqXg8rVhX43dXvtjbMnnqrbMzjvaP1f5d7fi/dl06fYsjC670vuz6Lt5bX+OZtnXvvfkPd954mvvX3J/1vLm5ycv/2fxlEsbzr8jS5x/Y+5/vb6+dFdPDY0M11+/Q2nvjDSdj5ufquH83DWQr/vVyeWdj0fCf1f6fHxjm/PxupZlu30+Hml9cPF8PNDptx2Xp/X5HAvHybGp9ufj2jLrtq/0mBxuez6+NcyBsP/fHZJCykUNx85Sx21a1/DwSHhcw3ENzcfpjqblR0I2q63rue2XdpxuubV+X0Pp0S24UsfpeMuy3T5O0+++ljpOBzr99u3StD6fY+G4uHFH++O0tsyLOy//3Lk6/rXh3Dna6RgcGRqtbfNIOgjz8302vzoeg3dkh7OT2bFsOr92ND+eBvJ1Tdy5vGNwNPx3pc+V69ocg1talu32MZi+jy117A0ML37wXdD6fI6F4+KZO9sfg7VlPrC7uz+7bgmXpGUafnZt/f3aUr/zuqVlN71Rx8pw2M7v7W7/u9naMsf2rDRntt9Pt4VLrinYT62v36VeU9PZldlP68J2vrJn6f1U257aMl/du8zjaX+WZeceuSv/fW/495W/PfuD55v+3aXo33TOPXLXz6478g8r2X4A+t/r9bGm/r2u4V+mlvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/3CYSUXy/7oPvDL7+rksNfPng3h92g1315eLHdep8PX4/ILa5Xc9O/Nff39ueesezLLstbv/oHD5dXfH7aobD9t58YPNly/y/O3LWvfB+8+l9Tb2178e7j8+nuUeBkUV3Kksy1644cv5esYfvJDPF+8+mM97zj/9VG2ZV/fWv463f/kt9eX/PJR/9x851HT7l8N++EmYUx8t3h/xdt+68O71ux9YWF+83cDG6/OH/cxD9fuN75Pzlafqy8f9vNT2f+dLz32rtvyj7yze/nODxdv/XLjfZ8P8n7fVl298Dmpfx9t9IWx/XF+83R3f/G7h9l/8Yn35Ux+qL3cwzLj+LeHrTR96ZbZxfz06cKjpcWUfri8X1z/1gz/Kr4/3F++/dfvHDlxo2h+tx8eL/1q/n8mW5ePlcT3R37Wsv3Y/jcdnXP9zf3iwaT93Wv/Fe15+W+1+W9d/W8typx7Zmq9/4f6a37HpL77w5cL1xe3Z/zenmh7P/k+F13FY/zMPheMxXP+/F+v31/ruCgc/1Xz+ict/fe25pscTfeQX9fVffO/RfK4aW73mmmuvu/78O2r7LsteWlW/v07rP/qXJ5u2/xs31fdHvD529FvXv5S4/tOfmzhxcu7s7HTaq0/ckL93zsfq2xO394Zwbm39+sDJMw/PnB6fGp/KsvHyvoXeJftmmD+rj/Ptl55fdAbden94Pm/5sxfWbP6XL8XL/+2++uUXPlr/vvWusNxXwuVrw/O3svUv9syGm/LX98CLYQvnF79f8OVYv+k/9yxrwfD4W38uiMf7qbc+nO+H2nX59434ur7M7f/RdP1+vh3263x4Z+aNNy2sr3H5+N4IF+6tv94ve/+F01x8Xv86PN8f/0n9/uN2xcf7o/BzzHfXNZ/v4vHx7XODrfefv4vH+XA+yc7Xr49Lxf194dWbCjcvvg9Jdv7m/Os/Tvdz84oe5lLmHpubPDZ74uyjk2dm5s5Mzj32+IHjJ8+eOHMgfy/PA5/pdPuF89Oa/Pw0PbNrZ5afrU7Wxxvsam//qfsPT++e2jw9c+TQ2SNn7j81c/ro4bm5wzPTc5sPHTky87lOt5+d3rdt+94du7dPHJ2d3rdn794deydmT5ysbUZ9ozrYNfXZiROnD+Q3mdu3c++2O+/cOTVx/OT0zL7dU1MTZzvdPv/eNFG79e9PnJ45dujM7PGZibnZx2f2bdu7a9f2ju8GePzUkbnxydNnT0yenZs5PVl/LONn8otr3/s63Z5ymvv3+s+zrQbqb8SXffK2Xen9WWuefXLJu6ov0vIGoq+E96L5pzed2rOcr2PuHwkzqUj+BwAAgCqIuX80zET+BwAAgNKIuX9VmIn8DwAAAKURc/9YmElF8n/p+v/rzi1r/fr/+v+N+0v/v2L9/3t7rf9fP1/o/3fH5fbv9f8D/X/9f/1//X/9f7qg1/r/MfevzrJK5n8AAACogpj714SZyP8AAABQGjH3XxNmIv8DAABAacTcf22YSUXyv/6//r/+v/6//n/x+vX/+5P+f3v6/x3o/09m1er/n+/m9uv/6/+zWK/1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu5fG2ZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP1vCjOpSP4HAACAKoi5/81hJvI/AAAA9J7hS7tZzP1vCTNZlP8vcQUAAADAVRdz/41ZSxG8Iv/+r/+v/6//r/+v/1+8/uX3/4cy/f/eof/fnv5/B/r/+v/6//r/dFWv9f/z3J+NZW8NM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+/xdmIv8DAABAacTcvy7MpCL5X/9f/1//X/9f/794/T7/vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7bw4zqUj+BwAAgCqIuf+WMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNy/PsykIvlf/7/H+/+xOar/r/+v/6//r/+/LPr/7en/d6D/r/+v/6//T1f1Wv8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox94+HmVQk/+v/93j/3+f/6//r/+v/6/+viP5/e/r/Hej/6//r/+v/01W91v+PuX9DmElF8j8AAABUQcz9G8NM5H8AAAAojZj7bw0zkf8BAACgNGLu3xRmUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/Z5hJRfI/AAAAVEHM/ZvDTOR/AAAAKI2Y+98VZiL/AwAAQGnE3L8lzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P/1//X/9f/pql7r/8fc/+4wk4rkfwAAAKiCmPu3hpnI/wAAAFAaMfffFmYi/wMAAEBpxNw/EWZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7r89zKQi+R8AAACqIOb+O8JM5H8AAAAojZj7J8NM5H8AAAAojZj7p8JMKpL/9f/1//X/9f9X1P9/x8L96v/X6f/3Fv3/9vT/O9D/1/+/6v3/Ef1/SqXX+v8x928LM6lI/gcAAIAqiLl/e5iJ/A8AAAClEXP/jjAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v8+/794/fr//Un/v73u9//jQ9T/1//X//f5//r/LNZr/f+Y++8MM6lI/gcAAIAqiLl/V5iJ/A8AAAClEXP/7jAT+R8AAABKI+b+PWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7fn8/w70//X/9f/1/+mqXuv/x9y/N8ykIvkfAAAAqiDm/veEmcj/AAAAUBox9/9KmIn8DwAAAKURc/+vhplUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+/eFmVQk/wMAAEAVxNz/a2Em8j8AAACURsz97w0zkf8BAACgNGLu3x9mUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/X5hJRfI/AAAAVEHM/XeFmcj/AAAAUBox978/zET+BwAAgNKIuf8DYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/g+GmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3fyTMpCL5X/9f/1//X/9f/794/fr//Un/vz39/w70/0vW/x+/Tv9f/583SlECWuzS+v/XvrbkCi+z/x9z/6+HmVQk/wMAAEAVxNx/d5iJ/A8AAAClEXP/R8NM5H8AAAAojZj7PxZmUpH8r/+v/6//r/+v/1+8fv3//qT/316f9f9/eX24XP+/Tv+/t7e/J/v/P16q/z+/qvX2+v+8ES6t/1+oK/3/mPs/HmZSkfwPAAAAVRBz/yfCTOR/AAAAKI2Y+z8ZZiL/AwAAQGnE3P8bYSYVyf/6/7XtWGgv6//r/+cX6P/r/+v/9y39//b6rP/v8/9b6P/39vb3ZP/f5/9zlfVa/z/m/k+FmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6//7/H/9f/1//f/i9ev/9yf9//b0/zvQ/9f/77X+/3/o/9Pfeq3/H3P//WEmFcn/AAAAUAUx9z8QZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP2fDjOpSP7X/++X/v+4/r/+v/5/y+PR/9f/L6L/357+fwf6//r/vdb/9/n/9Lle6//H3P9gmMny8//YspcEAAAAroqY+38rzKQi//4PAAAAVRBz/2+Hmcj/AAAAUBox9/9OmElF8r/+f7/0/33+f6b/r//f8nj0//X/i1y5/n888+j/6//r/0f6//r/+v+06rX+f8z9vxtmUpH8DwAAAFUQc/9DYSbyPwAAAPSFov8nu1XM/QfCTOR/AAAAKI2Y+w+GmVQk/+v/6//r//do//9PN/7zD7//iYPb9P/1//X/V+SKfv5/7cXv8//1//X/E/1//X/9f1r1Wv8/5v5DYSYVyf8AAABQBTH3/16YifwPAAAApRFz/+EwE/kfAAAASiPm/ukwk4rkf/1//X/9/x7t//fx5//H/aH/36xr/f940tX/L3RF+/8PLPTE9f9X2v8fLbxU/1//v5+3X/9f/5/Feq3/H3P/TJhJRfI/AAAAVEHI/YNH6nPhCvkfAAAASiPm/qNhJvI/AAAAlEbM/Q+HmVQk/+v/6//r/+v/+/z/4vX3bP/f5/+3pf/fXu/0/4vp/+v/9/P26//r/7NYr/X/Y+6fDTOpSP4HAACAKoi5/zNhJvI/AAAAlEbM/Z8NM5H/AQAAoDRi7j8WZlKR/K//r/+v/6//r/9fvH79//6k/9+e/n8H+v/6//r/+v90Va/1/2PuPx5mUpH8DwAAAFUQc/+JMBP5HwAAAEoj5v6TYSbyPwAAAJRGzP2nwkz+j737aN6rLv84fuf/D2MyPAAXbtj7EFjoWh+ACzcudMZxoaPYG8FesfeCvWMBRWzYG9hQ7GLvigU76sRxcl1X8kvO79xJvJOc871er82lwXiiw4Af4T3fJvtf/6//H7b/v5v+f7/v6//1/yPT/8/T/2+h/9f/6//1/+zU0vr/3P0Pjlua7H8AAADoIHf/Q+IW+x8AAACGkbv/srjF/gcAAIBh5O5/aNzSZP+f1P8f2PTs/zPj1f+P1P97/3/f7+v/9f8jO7/9/xX//SOf/l//r/8P+n/9v/6fky2t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+x8Rt9j/AAAAMIzc/Y+MW5rsf+//e/9f/6//1/9Pf1//v07e/5/Xqf+/7JaLH3j7dXe5/ky+r//X/+v/9f/s1tL6/9z9j4pbmux/AAAA6CB3/6PjFvsfAAAAhpG7/zFxi/0PAAAAw8jd/9i4pcn+1//r//X/+n/9//T39f/rpP+f16n/P5vv6//1//p//T+7tbT+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuvzxusf8BAABgGLn7j8QtTfa//v/c9///1v/r/+Pq//X/+v9zT/8/T/+/hf5f/6//1/+zU0vr/3P3XxG3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//3/r/+X/+v/5/+vv5/nfT/885//z/1Z8j96f9X3/9fpP/X/+v/OdEZ9v93zPxheyf9f+7+J8ctTfY/AAAAdJC7/ylxi/0PAAAAw8jd/9S4xf4HAACAYeTuf1rc0mT/6//1//p//b/+f/r7+v910v/PW8z7/wcOTv6w/n/1/b/3//X/+n/2WNr7/7n7nx63NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/+nvz/X/15/w69P/L4v+f95i+v996P/1/2v+9ev/9f+camn9f+7+Z8ctTfY/AAAAdJC7/8q4xf4HAACAYeTuf07cYv8DAADAMHL3PzduabL/p/v/479d/3969P97f/36/+nfP3bV/+e/o/5/tv+/u/f/e9L/z9P/b6H/1//r//fr/w9v+/n6f6Ysrf/P3f+8uKXJ/gcAAIAOcvc/P26x/wEAAGAYuftfELfY/wAAADCM3P0vjFua7H/v/+v/9f/r6/+9/3/MhXz/f3Pe+/+D+v/TpP+fp//fQv+v/9f/e/+fnVpa/5+7/0VxS5P9DwAAAB3k7n9x3GL/AwAAwDqc+PcOnPw3lIbc/S+JW+x/AAAAGEbu/pfGLU32v/5f/6//1//37v8PraT/9/7/6dL/z9P/b3Fh+/8Dg/b/Bwfr/6/a7+cvof+/XP/Pwuzp/284/uMXqv/P3f+yuKXJ/gcAAIAOcve/PG6x/wEAAGAYuftfEbfY/wAAADCM3P2vjFua7P9z3v8f3v/b+n/9v/5f/3/h+/+1vP+v/z9d+v95+v8tvP/v/X/v/+v/2ak9/f8JLlT/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3XxW32P8AAAAwjNz9r4lbmux/7//r//X/+n/9//T39f/rpP+fp//fQv+v/9f/6//ZqaX1/7n7Xxu3NNn/AAAA0EHu/tfFLfY/AAAADCN3/+vjFvsfAAAAhpG7/w1xS5P9r/8/t/1//rj+X/+/0f/r//X/50Xb/v/A1J+JTrVP/3/T/Y/cc++P6P/1//p//b/+nx1YRP9/9Pj/uszd/8a4pcn+BwAAgA5y978pbrH/AQAAYBi5+98ct9j/AAAAMIzc/W+JWwbZ/4e2/Hb9v/f/9f/6f/3/9Pf1/+vUtv8/Td7/30L/r//X/+v/2alF9P8n/PPc/W+NWwbZ/wAAAMCmdv/b4hb7HwAAAIaRu//tcYv9DwAAAMPI3f+OuKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+6+OW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/6//1//p//f/09/X/66T/n6f/32w218z8Aqb6/6N30v/r//X/+n/O0tL6/9z974lbmux/AAAA6CB3/zVxi/0PAAAAw8jdf23cYv8DAADAMHL3vzduabL/9f/6f/2//l//P/19/f866f/n6f+38P6//l//r/9np5bW/+fuf1/c0mT/AwAAQAe5+6+LW+x/AAAAGEbu/vfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nv6//X6dz1/xv9v/5f/7+F/l//r//nZEvr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/4fjlib7X/+v/9f/6//1/9Pf1/+vk/f/5+n/t9D/6//1//p/dmpp/X/u/o/ELU32PwAAAHSQu/+GuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v+9/f9mo//X/+v/jzkP/f+hjf5/5/T/8/T/W+j/x+z//28zUP9/eN+fr/9niZbW/+fu/3jc0mT/AwAAQAe5+z8Rt9j/AAAAMIzc/Z+MW+x/AAAAGEbu/k/FLU32v/5f/+/9f/2//n/6+97/Xyf9/zz9/xb6/zH7f+//6/+5YJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Fvp//b/+X//PTi2t/8/d//m4pcn+BwAAgA5y998Yt9j/AAAAMIzc/TfFLfY/AAAADCN3/xfilib7X/+v/9f/r7P/P6T/1//r/yctpf+/9NJ73Kz/1//r//X/+n/9f3dL6/9z938xbmmy/wEAAKCD3P1filvsfwAAABhG7v4vxy32PwAAAAwjd/9X4pYm+//U/v+izbFC9Zip/j8aNf3/CfT/e3/9+v/p3z+8/6//1/+fe0vp/73/f3a/fv2//n/Nv/4z6v8vOfXn6/8Z0dL6/9z9N8ctTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTuvyVuabL/vf+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//t/7/w+67//r/9mdpfX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/9f/6//1//r/6e/r/9dJ/z9P/7+F/l//r//3/j87tbT+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/d9//X6L/D/r/pfT/99H/n/R9/b/+f2T6//wz+jT9/xb6f/2//l//z04trf/P3X9r3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9r/3/3v1/wc2Hft/7//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/h/FLU32PwAAAKzVve76gFtP91+bu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3NJk/+v/e/X/Pd//1//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/p/FLScMv4Nn/J8SAAAAWJLc/T+PW5r89X8AAADoIHf/L+KWU/b/0dP8u9oBAACApcnd/8u4pclf/9f/L7z/34zf/9+20f/r/4/R/+v/d0H/P+9/7P+PHtD/6/9n6P/1//p/Tra0/j93/6/ilib7HwAAAAa15/9RyN3/67jF/gcAAIBh5O7/Tdxi/wMAAMAwcvf/Nm5psv/1/wvv/8/q/f/D9Y/W0P97//8c9v9XHpr8vv5f/z8y/f887/9vof/X/+v/9f/s1NL6/9z9t8UtTfY/AAAAdJC7/3dxi/0PAAAAw8jd//u4xf4HAACAYeTu/0Pc0mT/6/9H7P/X9f6//t/7/2ff/9/54iM33vt+116t/+e489n/5+8L+n/9v/7/GP2//l//z8mW1v/n7v9j3NJk/wMAAEAHuftvj1vsfwAAABhG7v4/xS32PwAAAAwjd/+f45Ym+1//r/9fSv+f/11fgP7/yPr6/2yKu/f/3v/X/5/K+//z9P9b6P/1//p//T87tbT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/6X0/8n7/8d/nvf/j9H/6//PhP5/nv5/C/2//l//r/9np5bW/+fu/0fc0mT/AwAAQAe5+++IW+x/AAAAGEbu/n/GLfY/AAAADCN3/7/ilib7X/+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//l//r/9np5bW/+fu/08AAAD//6cRdCE=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 2 (id=3461): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/24, 0x18}, 0x6b44}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): (loop4): Remounting filesystem read-only [ 303.515719][T10002] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2234: invalid indirect mapped block 1811939328 (level 0) [ 303.558717][T10002] EXT4-fs (loop4): Remounting filesystem read-only [ 303.578293][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2241'. [ 303.591073][T10002] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2234: invalid indirect mapped block 2185560079 (level 1) [ 303.680847][T10002] EXT4-fs (loop4): Remounting filesystem read-only [ 303.716075][T10002] EXT4-fs (loop4): 1 truncate cleaned up [ 303.735933][T10002] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 303.798309][ T9989] JBD2: Ignoring recovery information on journal [ 304.001188][ T9989] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 304.052155][ T9989] (syz.2.2228,9989,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 304.113001][ T9989] (syz.2.2228,9989,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 304.131911][ T9989] (syz.2.2228,9989,1):ocfs2_mknod:298 ERROR: status = -2 [ 304.169692][ T9989] (syz.2.2228,9989,1):ocfs2_mknod:502 ERROR: status = -2 [ 304.205535][ T9989] (syz.2.2228,9989,1):ocfs2_create:676 ERROR: status = -2 [ 304.436293][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 304.781092][ T5407] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 305.260251][ T5407] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 305.269430][ T5407] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.316791][ T5407] usb 6-1: config 0 descriptor?? [ 305.390024][ T5407] go7007: probe of 6-1:0.0 failed with error -12 [ 305.629396][ T5401] usb 6-1: USB disconnect, device number 6 [ 305.775525][T10054] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 306.174568][T10067] sp0: Synchronizing with TNC [ 306.215909][T10066] [U] è [ 306.527336][T10092] loop2: detected capacity change from 0 to 128 [ 306.586668][T10092] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 307.821887][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2289'. [ 307.929032][ T25] audit: type=1326 audit(1754665985.707:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10121 comm="syz.5.2291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7204182be9 code=0x0 [ 308.131060][T10133] loop1: detected capacity change from 0 to 1024 [ 308.210430][T10135] loop2: detected capacity change from 0 to 512 [ 308.908997][T10139] loop4: detected capacity change from 0 to 2048 [ 309.272023][T10133] EXT4-fs (loop1): Test dummy encryption mode enabled [ 309.279566][T10133] EXT4-fs (loop1): Ignoring removed orlov option [ 309.342898][T10135] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 309.372273][T10135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 309.388627][T10135] System zones: 1-12 [ 309.406889][T10135] EXT4-fs (loop2): orphan cleanup on readonly fs [ 309.430653][T10135] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2295: invalid indirect mapped block 12 (level 1) [ 309.452760][T10133] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,min_batch_time=0x0000000000000005,data_err=abort,,errors=continue. Quota mode: writeback. [ 309.537951][T10135] EXT4-fs (loop2): Remounting filesystem read-only [ 309.550589][T10135] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2295: invalid indirect mapped block 2 (level 2) [ 309.651027][T10143] loop5: detected capacity change from 0 to 32768 [ 309.679157][T10135] EXT4-fs (loop2): Remounting filesystem read-only [ 309.687360][T10135] EXT4-fs (loop2): 1 truncate cleaned up [ 309.699042][T10135] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,i_version. Quota mode: none. [ 310.728379][T10143] ERROR: (device loop5): diAllocAG: ipimap->i_size is wrong [ 310.728379][T10143] [ 310.757821][T10143] ERROR: (device loop5): remounting filesystem as read-only [ 310.770433][T10143] ialloc: diAlloc returned -5! [ 310.786955][T10153] device vlan3 entered promiscuous mode [ 310.837609][T10153] device wlan1 entered promiscuous mode [ 311.275542][T10158] loop2: detected capacity change from 0 to 32768 [ 311.303991][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®: Trying to join cluster "lock_nolock", "#ãvúSÖñ^Ñ°Õ~oó»Á$®" [ 311.315073][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®: Now mounting FS (format 1801)... [ 311.383251][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: fatal: filesystem consistency error [ 311.383251][T10158] inode = 1 19 [ 311.383251][T10158] function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 115 [ 311.403210][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: about to withdraw this file system [ 311.411841][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: Journal recovery skipped for jid 0 until next mount. [ 311.422014][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: Glock dequeues delayed: 0 [ 311.429994][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: File system withdrawn [ 311.437475][T10158] CPU: 1 PID: 10158 Comm: syz.2.2304 Not tainted 5.15.189-syzkaller #0 [ 311.443113][T10139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.445710][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.445759][T10158] Call Trace: [ 311.445767][T10158] [ 311.445776][T10158] dump_stack_lvl+0x168/0x230 [ 311.445800][T10158] ? kobject_uevent_env+0x371/0x890 [ 311.445821][T10158] ? show_regs_print_info+0x20/0x20 [ 311.445839][T10158] ? load_image+0x3b0/0x3b0 [ 311.445859][T10158] ? kobject_uevent_env+0x371/0x890 [ 311.445886][T10158] gfs2_withdraw+0x111b/0x1460 [ 311.445923][T10158] ? gfs2_lm+0x220/0x220 [ 311.445942][T10158] ? _raw_spin_unlock+0x24/0x40 [ 311.445963][T10158] ? gfs2_glock_nq+0xcb0/0x1550 [ 311.445984][T10158] ? gfs2_consist_inode_i+0xc0/0xe0 [ 311.446005][T10158] gfs2_jdesc_check+0x137/0x290 [ 311.446025][T10158] check_journal_clean+0x151/0x300 [ 311.446046][T10158] ? gfs2_trans_remove_revoke+0x370/0x370 [ 311.446067][T10158] ? check_journal_clean+0x10d/0x300 [ 311.446085][T10158] ? __rwlock_init+0x140/0x140 [ 311.446106][T10158] ? do_raw_spin_unlock+0x11d/0x230 [ 311.446126][T10158] ? _raw_spin_unlock+0x24/0x40 [ 311.446143][T10158] ? gfs2_jdesc_find+0xa7/0xc0 [ 311.446162][T10158] init_journal+0x179c/0x2220 [ 311.446193][T10158] ? end_bio_io_page+0x100/0x100 [ 311.446211][T10158] ? vsnprintf+0x1905/0x1a00 [ 311.446239][T10158] ? snprintf+0xd7/0x120 [ 311.446260][T10158] ? init_journal+0x710/0x2220 [ 311.446278][T10158] ? vscnprintf+0x80/0x80 [ 311.446297][T10158] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 311.446318][T10158] init_inodes+0xdb/0x320 [ 311.446339][T10158] gfs2_fill_super+0x1701/0x1f50 [ 311.446370][T10158] ? gfs2_reconfigure+0xcd0/0xcd0 [ 311.446391][T10158] ? gfs2_glock_nq_num+0x82/0x1b0 [ 311.446408][T10158] ? preempt_count_add+0x8d/0x190 [ 311.446437][T10158] ? sb_set_blocksize+0xa5/0xe0 [ 311.446459][T10158] get_tree_bdev+0x3f1/0x610 [ 311.446479][T10158] ? gfs2_reconfigure+0xcd0/0xcd0 [ 311.446499][T10158] gfs2_get_tree+0x4d/0x1e0 [ 311.446519][T10158] vfs_get_tree+0x88/0x270 [ 311.446538][T10158] do_new_mount+0x24a/0xa40 [ 311.446564][T10158] __se_sys_mount+0x2d6/0x3c0 [ 311.446587][T10158] ? __x64_sys_mount+0xc0/0xc0 [ 311.446608][T10158] ? lockdep_hardirqs_on+0x94/0x140 [ 311.446625][T10158] ? __x64_sys_mount+0x1c/0xc0 [ 311.446645][T10158] do_syscall_64+0x4c/0xa0 [ 311.446663][T10158] ? clear_bhb_loop+0x30/0x80 [ 311.446678][T10158] ? clear_bhb_loop+0x30/0x80 [ 311.446695][T10158] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.446715][T10158] RIP: 0033:0x7f68519fd38a [ 311.446733][T10158] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.446749][T10158] RSP: 002b:00007f684fc62e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 311.446769][T10158] RAX: ffffffffffffffda RBX: 00007f684fc62ef0 RCX: 00007f68519fd38a [ 311.446784][T10158] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f684fc62eb0 [ 311.446797][T10158] RBP: 0000200000000400 R08: 00007f684fc62ef0 R09: 0000000000200001 [ 311.446809][T10158] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 311.446821][T10158] R13: 00007f684fc62eb0 R14: 00000000000125bb R15: 0000200000000f00 [ 311.446847][T10158] [ 311.446887][T10158] gfs2: fsid=#ãvúSÖñ^Ñ°Õ~oó»Á$®.s: Error checking journal for spectator mount. [ 312.736111][T10184] netlink: 'syz.0.2317': attribute type 298 has an invalid length. [ 312.744229][T10186] netlink: 'syz.1.2318': attribute type 2 has an invalid length. [ 312.917336][T10192] program syz.0.2321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.071059][T10197] loop0: detected capacity change from 0 to 64 [ 313.144085][T10194] xt_CT: No such helper "netbios-ns" [ 313.329665][T10197] hfs: keylen 94 too large [ 314.009810][ T4482] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.491843][ T4482] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.499958][ T4482] usb 2-1: config 0 has no interface number 0 [ 314.524160][ T4482] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.556955][ T4482] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.592296][ T4482] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 314.617433][ T4482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.655509][ T4482] usb 2-1: config 0 descriptor?? [ 315.089277][T10223] loop2: detected capacity change from 0 to 32768 [ 315.116567][T10235] loop5: detected capacity change from 0 to 512 [ 315.188642][ T4482] prodikeys 0003:041E:2801.0023: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input1 [ 315.210931][ T4482] hid_prodikeys: hid-prodikeys: failed to find output report [ 315.210931][ T4482] [ 315.315117][T10241] loop0: detected capacity change from 0 to 1024 [ 315.399804][ T4482] usb 2-1: USB disconnect, device number 17 [ 315.742220][T10254] device geneve0 entered promiscuous mode [ 315.748615][T10254] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 316.425056][T10235] EXT4-fs (loop5): Test dummy encryption mode enabled [ 316.431902][T10235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 316.502833][T10277] loop1: detected capacity change from 0 to 256 [ 316.515154][T10235] EXT4-fs (loop5): 1 truncate cleaned up [ 316.520810][T10235] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 316.733072][ T144] hfsplus: b-tree write err: -5, ino 4 [ 316.903798][T10235] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 316.946818][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.953159][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.970578][T10287] ptrace attach of "./syz-executor exec"[4193] was attempted by " [ 317.013296][T10235] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 13: comm syz.5.2339: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 317.228994][T10291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.503269][T10293] loop2: detected capacity change from 0 to 32768 [ 318.003769][T10306] loop4: detected capacity change from 0 to 1024 [ 318.579426][T10293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 318.579445][T10293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 318.717922][T10293] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 318.741025][T10293] gfs2: fsid=syz:syz.0: gfs2_check_dirent: name length is greater than space in dirent (not first in block) [ 318.752562][T10293] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 318.752562][T10293] inode = 4 2075 [ 318.752562][T10293] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 318.771082][T10293] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 318.778307][T10293] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 318.787101][T10293] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 318.793738][T10293] gfs2: fsid=syz:syz.0: File system withdrawn [ 318.799802][T10293] CPU: 1 PID: 10293 Comm: syz.2.2363 Not tainted 5.15.189-syzkaller #0 [ 318.808037][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.818089][T10293] Call Trace: [ 318.821370][T10293] [ 318.824301][T10293] dump_stack_lvl+0x168/0x230 [ 318.828983][T10293] ? kobject_uevent_env+0x371/0x890 [ 318.834185][T10293] ? show_regs_print_info+0x20/0x20 [ 318.839390][T10293] ? load_image+0x3b0/0x3b0 [ 318.843896][T10293] ? kobject_uevent_env+0x371/0x890 [ 318.849105][T10293] gfs2_withdraw+0x111b/0x1460 [ 318.852314][T10316] loop0: detected capacity change from 0 to 4096 [ 318.853880][T10293] ? gfs2_lm+0x220/0x220 [ 318.864416][T10293] ? load_image+0x3b0/0x3b0 [ 318.868934][T10293] ? gfs2_consist_inode_i+0xc0/0xe0 [ 318.874145][T10293] gfs2_dirent_scan+0x525/0x650 [ 318.879004][T10293] ? gfs2_dirent_search+0x7e0/0x7e0 [ 318.884208][T10293] ? gfs2_dirent_search+0x7e0/0x7e0 [ 318.889413][T10293] gfs2_dirent_search+0x2dd/0x7e0 [ 318.894448][T10293] ? __might_sleep+0xf0/0xf0 [ 318.899039][T10293] ? gfs2_dir_search+0x220/0x220 [ 318.903978][T10293] ? _raw_spin_unlock+0x24/0x40 [ 318.908831][T10293] ? gfs2_glock_nq+0xcb0/0x1550 [ 318.913691][T10293] gfs2_dir_search+0x49/0x220 [ 318.918377][T10293] gfs2_lookupi+0x45c/0x5e0 [ 318.922892][T10293] ? gfs2_lookup_simple+0xf0/0xf0 [ 318.927917][T10293] ? gfs2_lookupi+0x3fe/0x5e0 [ 318.932594][T10293] ? crc32_le_base+0x755/0xcf0 [ 318.937358][T10293] ? sprintf+0xd6/0x120 [ 318.941521][T10293] gfs2_lookup_simple+0xa3/0xf0 [ 318.946376][T10293] ? gfs2_lookup_by_inum+0xf0/0xf0 [ 318.951496][T10293] init_journal+0x1252/0x2220 [ 318.956189][T10293] ? end_bio_io_page+0x100/0x100 [ 318.961144][T10293] ? snprintf+0xd7/0x120 [ 318.965389][T10293] ? init_journal+0x710/0x2220 [ 318.970156][T10293] ? vscnprintf+0x80/0x80 [ 318.974485][T10293] ? gfs2_glock_nq_num+0x17a/0x1b0 [ 318.979605][T10293] init_inodes+0xdb/0x320 [ 318.983935][T10293] gfs2_fill_super+0x1701/0x1f50 [ 318.988885][T10293] ? gfs2_reconfigure+0xcd0/0xcd0 [ 318.993913][T10293] ? gfs2_glock_nq_num+0x82/0x1b0 [ 318.998937][T10293] ? preempt_count_add+0x8d/0x190 [ 319.003972][T10293] ? sb_set_blocksize+0xa5/0xe0 [ 319.008827][T10293] get_tree_bdev+0x3f1/0x610 [ 319.013419][T10293] ? gfs2_reconfigure+0xcd0/0xcd0 [ 319.018447][T10293] gfs2_get_tree+0x4d/0x1e0 [ 319.022954][T10293] vfs_get_tree+0x88/0x270 [ 319.027373][T10293] do_new_mount+0x24a/0xa40 [ 319.031886][T10293] __se_sys_mount+0x2d6/0x3c0 [ 319.036568][T10293] ? __x64_sys_mount+0xc0/0xc0 [ 319.041334][T10293] ? lockdep_hardirqs_on+0x94/0x140 [ 319.046529][T10293] ? __x64_sys_mount+0x1c/0xc0 [ 319.051299][T10293] do_syscall_64+0x4c/0xa0 [ 319.055714][T10293] ? clear_bhb_loop+0x30/0x80 [ 319.060388][T10293] ? clear_bhb_loop+0x30/0x80 [ 319.065068][T10293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.070972][T10293] RIP: 0033:0x7f68519fd38a [ 319.075386][T10293] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.094992][T10293] RSP: 002b:00007f684fc62e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 319.103409][T10293] RAX: ffffffffffffffda RBX: 00007f684fc62ef0 RCX: 00007f68519fd38a [ 319.111370][T10293] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007f684fc62eb0 [ 319.119330][T10293] RBP: 0000200000000100 R08: 00007f684fc62ef0 R09: 0000000000200001 [ 319.127288][T10293] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 319.135242][T10293] R13: 00007f684fc62eb0 R14: 000000000001260a R15: 00002000000000c0 [ 319.143207][T10293] [ 319.146340][T10293] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 319.560142][T10324] sp0: Synchronizing with TNC [ 319.874562][T10332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2380'. [ 319.941519][T10316] NILFS (loop0): invalid segment: Checksum error in segment payload [ 319.949540][T10316] NILFS (loop0): trying rollback from an earlier position [ 320.071885][T10316] NILFS (loop0): recovery complete [ 320.106949][T10338] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.475005][ T144] hfsplus: b-tree write err: -5, ino 4 [ 320.843923][T10340] loop5: detected capacity change from 0 to 1764 [ 321.397119][T10346] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2384'. [ 321.961739][ T4816] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 322.021403][T10360] loop1: detected capacity change from 0 to 8192 [ 322.033399][T10340] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 322.213735][T10366] fido_id[10366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 322.476992][ T4816] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 322.503537][ T4816] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.530429][ T4816] usb 3-1: config 0 interface 0 has no altsetting 0 [ 322.551697][ T4816] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 322.576218][ T4816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.620446][ T4816] usb 3-1: config 0 descriptor?? [ 322.629738][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2402'. [ 322.656890][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2402'. [ 322.675850][T10378] netlink: 'syz.4.2402': attribute type 12 has an invalid length. [ 323.132346][T10388] loop4: detected capacity change from 0 to 8192 [ 323.133639][ T4816] logitech 0003:046D:C24F.0024: unbalanced collection at end of report description [ 323.166305][ T4816] logitech 0003:046D:C24F.0024: parse failed [ 323.183588][ T4816] logitech: probe of 0003:046D:C24F.0024 failed with error -22 [ 323.365202][ T4816] usb 3-1: USB disconnect, device number 16 [ 323.367390][T10360] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 323.423320][T10360] REISERFS (device loop1): using ordered data mode [ 323.453523][T10360] reiserfs: using flush barriers [ 323.518919][T10360] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 323.579817][T10360] REISERFS (device loop1): checking transaction log (loop1) [ 323.884159][T10360] REISERFS (device loop1): Using tea hash to sort names [ 323.891634][T10360] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 323.931927][T10360] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 324.135665][T10411] loop2: detected capacity change from 0 to 4096 [ 324.251663][T10421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 324.695287][T10388] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 324.722536][T10388] REISERFS (device loop4): using ordered data mode [ 324.744205][T10388] reiserfs: using flush barriers [ 324.782895][T10388] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 324.879600][T10388] REISERFS (device loop4): checking transaction log (loop4) [ 324.951648][T10388] REISERFS (device loop4): Using r5 hash to sort names [ 324.984031][T10388] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 325.073731][T10451] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.087867][T10451] team0: Port device bond1 added [ 325.196766][T10454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'. [ 325.230604][T10454] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2439'. [ 325.250657][T10454] netlink: 'syz.0.2439': attribute type 6 has an invalid length. [ 325.283701][T10454] netlink: 'syz.0.2439': attribute type 5 has an invalid length. [ 325.307999][T10454] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2439'. [ 325.459801][T10456] loop0: detected capacity change from 0 to 1024 [ 325.815162][T10466] loop5: detected capacity change from 0 to 128 [ 326.013015][T10470] loop1: detected capacity change from 0 to 4096 [ 326.577851][T10472] tmpfs: Bad value for 'mpol' [ 327.157582][T10484] loop4: detected capacity change from 0 to 256 [ 327.648740][ T4195] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 327.661073][ T4195] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 327.714783][T10466] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 328.030354][T10496] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.061432][ T4495] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 328.254524][T10484] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 328.589369][ T4495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.600482][ T4495] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.636200][ T4495] usb 3-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00 [ 328.679034][ T4495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.716044][ T4495] usb 3-1: config 0 descriptor?? [ 329.058425][T10512] loop1: detected capacity change from 0 to 1024 [ 329.217726][ T4495] hid (null): report_id 0 is invalid [ 329.227163][ T4495] itetech 0003:06CB:2968.0025: report_id 0 is invalid [ 329.258324][ T4495] itetech 0003:06CB:2968.0025: item 0 0 1 8 parsing failed [ 329.276211][T10508] loop0: detected capacity change from 0 to 32768 [ 329.290533][ T4495] itetech: probe of 0003:06CB:2968.0025 failed with error -22 [ 329.443686][ T4495] usb 3-1: USB disconnect, device number 17 [ 329.550534][T10522] loop5: detected capacity change from 0 to 8 [ 329.552002][T10524] loop4: detected capacity change from 0 to 64 [ 330.060615][T10512] EXT4-fs (loop1): Ignoring removed orlov option [ 330.077296][T10512] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 330.132034][T10528] tipc: Enabled bearer , priority 10 [ 330.232369][T10512] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,resgid=0x0000000000000000,nomblk_io_submit,sysvgroups,,errors=continue. Quota mode: none. [ 330.612376][T10522] SQUASHFS error: Unable to read directory block [1d0:0] [ 331.128678][ T4816] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 331.266846][T10508] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 331.298675][T10508] BTRFS info (device loop0): turning off barriers [ 331.305978][T10508] BTRFS info (device loop0): setting nodatasum [ 331.325802][T10508] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 331.351345][T10508] BTRFS info (device loop0): use zstd compression, level 3 [ 331.358558][T10508] BTRFS info (device loop0): using free space tree [ 331.382652][T10508] BTRFS info (device loop0): has skinny extents [ 331.456634][ T4816] usb 3-1: Using ep0 maxpacket: 16 [ 331.620034][ T4816] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 331.620063][ T4816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.721851][T10564] loop5: detected capacity change from 0 to 128 [ 331.849041][ T4816] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 331.863432][ T4816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.884911][ T4816] usb 3-1: Product: syz [ 331.889090][ T4816] usb 3-1: Manufacturer: syz [ 331.909917][ T4816] usb 3-1: SerialNumber: syz [ 331.920563][ T4816] usb 3-1: config 0 descriptor?? [ 331.990506][ T4816] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 332.359512][ T4247] Bluetooth: hci2: command 0x0401 tx timeout [ 332.652694][ T4816] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 332.659749][ T4816] gspca_pac7302: probe of 3-1:0.0 failed with error -71 [ 332.717659][ T4816] usb 3-1: USB disconnect, device number 18 [ 333.257123][T10508] BTRFS error (device loop0): open_ctree failed: -12 [ 333.264086][T10604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 333.377238][T10607] loop1: detected capacity change from 0 to 1024 [ 334.436683][T10607] hfsplus: bad catalog entry type [ 334.509208][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 334.683437][T10627] loop5: detected capacity change from 0 to 1024 [ 335.707775][T10647] loop1: detected capacity change from 0 to 1024 [ 335.898943][T10627] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 335.932052][T10627] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.066779][T10644] loop0: detected capacity change from 0 to 32768 [ 336.525515][T10657] loop2: detected capacity change from 0 to 64 [ 337.212993][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 337.280625][T10644] JBD2: Ignoring recovery information on journal [ 337.479074][T10644] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 337.647407][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 337.957484][T10668] loop5: detected capacity change from 0 to 32768 [ 339.069290][T10699] syz.0.2544 (10699): /proc/10698/oom_adj is deprecated, please use /proc/10698/oom_score_adj instead. [ 339.137456][T10701] program syz.1.2546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.268296][T10707] loop1: detected capacity change from 0 to 512 [ 340.433829][T10707] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2548: Invalid inode bitmap blk 4 in block_group 0 [ 340.478563][T10707] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 340.589716][T10707] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 340.620658][T10707] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2548: Invalid inode bitmap blk 4 in block_group 0 [ 340.694206][T10707] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 341.216948][T10757] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2571'. [ 341.231795][T10757] netlink: 'syz.5.2571': attribute type 3 has an invalid length. [ 341.320168][T10761] netlink: 'syz.5.2573': attribute type 2 has an invalid length. [ 341.429803][T10759] loop4: detected capacity change from 0 to 4096 [ 341.917012][T10766] netlink: 'syz.5.2575': attribute type 1 has an invalid length. [ 341.930534][T10766] netlink: 'syz.5.2575': attribute type 2 has an invalid length. [ 342.282406][T10783] ptrace attach of "./syz-executor exec"[4193] was attempted by ""[10783] [ 342.575957][T10801] netlink: 'syz.5.2590': attribute type 9 has an invalid length. [ 342.584682][T10805] loop0: detected capacity change from 0 to 1024 [ 342.588581][T10803] loop2: detected capacity change from 0 to 512 [ 342.726573][T10809] loop1: detected capacity change from 0 to 512 [ 342.832485][T10811] sp0: Synchronizing with TNC [ 342.839892][T10810] [U] è [ 343.646078][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 343.660321][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 343.675798][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 343.696696][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 343.725031][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 343.743238][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 343.762785][T10809] EXT4-fs (loop1): Test dummy encryption mode enabled [ 343.769585][T10809] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 343.779695][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 343.791819][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 343.858146][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 343.885658][T10759] ntfs3: loop4: try to read out of volume at offset 0x3fffffe0c00 [ 343.905130][T10803] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 344.001925][T10803] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.046610][T10809] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.2592: bad orphan inode 131083 [ 344.088963][ T1596] hfsplus: b-tree write err: -5, ino 4 [ 344.152987][T10809] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 344.585973][T10831] loop5: detected capacity change from 0 to 256 [ 345.426325][T10838] loop1: detected capacity change from 0 to 4096 [ 345.534238][T10842] loop0: detected capacity change from 0 to 512 [ 345.678029][ T4246] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 346.047214][ T4246] usb 3-1: Using ep0 maxpacket: 16 [ 346.243207][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.254228][ T4246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.292090][ T4246] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 346.301168][ T4246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.305877][T10844] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.340743][ T4246] usb 3-1: config 0 descriptor?? [ 346.408816][T10842] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 346.560025][T10842] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.2608: invalid block [ 346.610666][T10851] loop4: detected capacity change from 0 to 128 [ 346.640764][T10842] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2608: invalid indirect mapped block 10 (level 1) [ 346.699918][T10842] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2608: invalid indirect mapped block 8 (level 1) [ 346.756486][T10842] EXT4-fs (loop0): 1 truncate cleaned up [ 346.778853][T10842] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 346.869676][ T4246] sony 0003:054C:05C4.0026: unbalanced collection at end of report description [ 346.895484][ T4246] sony 0003:054C:05C4.0026: parse failed [ 346.901169][ T4246] sony: probe of 0003:054C:05C4.0026 failed with error -22 [ 347.096119][ T5407] usb 3-1: USB disconnect, device number 19 [ 347.534803][T10853] loop1: detected capacity change from 0 to 256 [ 347.604557][T10855] netlink: 'syz.5.2610': attribute type 16 has an invalid length. [ 347.700825][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.744857][T10851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 347.753089][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.760493][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.790416][T10851] System zones: 1-3, 19-19, 35-36 [ 347.803057][T10851] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 347.844642][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.870507][T10858] loop5: detected capacity change from 0 to 4096 [ 347.877028][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.879266][T10851] ext4 filesystem being mounted at /549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 347.906479][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.946321][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.966101][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 347.990329][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.013161][T10851] EXT4-fs warning (device loop4): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 348.020259][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.031689][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.039091][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.074585][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.111257][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.120094][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.164798][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.173470][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.180878][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.203005][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.210426][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.246058][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.269238][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.302114][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.309532][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.352055][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.383783][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.391198][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.422282][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.429706][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.450078][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.474175][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.508254][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.541469][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.555302][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.581444][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.594681][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.613422][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.620837][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.659841][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.667503][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.696564][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.732674][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.740210][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.776244][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.789501][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.809043][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.829263][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.849560][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.867600][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.893751][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.901188][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.934742][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.953520][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.960919][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.991474][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 348.998893][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.025115][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.052647][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.060088][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.085611][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.093334][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.100732][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.125660][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.153851][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.172510][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.180052][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.193364][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.207441][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.231780][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.239197][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.277208][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.286367][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.311058][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.324271][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.344608][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.368899][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.381657][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.401949][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.409368][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.443398][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.450824][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.481022][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.494577][ T4246] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 349.519640][ T4246] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.03 Device [syz1] on syz1 [ 350.318142][T10858] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 351.003140][T10903] loop4: detected capacity change from 0 to 8 [ 351.679625][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 351.875060][T10921] loop0: detected capacity change from 0 to 256 [ 352.235577][T10903] SQUASHFS error: lzo decompression failed, data probably corrupt [ 352.251016][T10903] SQUASHFS error: Failed to read block 0x91: -5 [ 352.275860][T10903] SQUASHFS error: Unable to read metadata cache entry [8f] [ 352.308085][T10903] SQUASHFS error: Unable to read inode 0x11f [ 352.355568][T10929] loop1: detected capacity change from 0 to 1024 [ 352.551577][ T5407] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 352.853018][T10921] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.871063][ T5407] usb 3-1: Using ep0 maxpacket: 16 [ 353.008839][ T5407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.036658][ T5407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.062078][ T5407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 353.101774][ T5407] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.138044][ T5407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.182365][ T5407] usb 3-1: config 0 descriptor?? [ 353.391755][T10935] netlink: 12320 bytes leftover after parsing attributes in process `syz.5.2650'. [ 353.520152][T10929] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.674257][ T5407] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 353.681574][ T5407] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 353.703503][ T5407] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 353.733683][ T5407] microsoft 0003:045E:07DA.0028: No inputs registered, leaving [ 353.790749][ T5407] microsoft 0003:045E:07DA.0028: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 353.825512][T10947] program syz.5.2655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.831720][ T5407] microsoft 0003:045E:07DA.0028: no inputs found [ 353.859475][ T5407] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway [ 353.906972][ T5407] usb 3-1: USB disconnect, device number 20 [ 353.914004][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2656'. [ 354.347413][T10951] loop0: detected capacity change from 0 to 4096 [ 354.751648][T10963] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 354.771529][T10963] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan2: link becomes ready [ 355.426715][T10975] loop1: detected capacity change from 0 to 4096 [ 355.618565][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2671'. [ 355.773658][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2672'. [ 356.132702][T10980] loop2: detected capacity change from 0 to 32768 [ 356.881348][ T4816] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 356.987191][T10992] loop4: detected capacity change from 0 to 32768 [ 357.269110][T10980] [ 357.269110][T10980] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 357.269110][T10980] [ 357.337740][ T4816] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 357.347874][ T4193] [ 357.347874][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 357.347874][ T4193] [ 357.352525][ T4816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.383967][ T4193] [ 357.383967][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 357.383967][ T4193] [ 357.387516][ T4816] usb 6-1: config 0 descriptor?? [ 357.802082][T11002] loop0: detected capacity change from 0 to 32768 [ 357.894452][T10975] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 357.918248][T10975] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 357.939115][ T4816] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x0 [ 357.960650][ T4816] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x0 [ 357.964457][T10975] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 357.982932][ T4816] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x0 [ 357.990257][ T4816] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x0 [ 358.003908][T10975] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 358.036831][ T4816] magicmouse 0003:05AC:0269.0029: unknown main item tag 0x0 [ 358.046540][T10975] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 358.086051][ T4816] magicmouse 0003:05AC:0269.0029: hidraw0: USB HID v0.04 Device [HID 05ac:0269] on usb-dummy_hcd.5-1/input0 [ 358.091515][T10975] ntfs: volume version 3.1. [ 358.186181][ T4246] usb 6-1: USB disconnect, device number 7 [ 358.223233][T10975] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 358.279703][T10975] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 358.307155][T10992] XFS (loop4): Mounting V5 Filesystem [ 358.336623][T10975] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 358.371842][T10975] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 358.401336][T10975] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 358.747656][T11014] Zero length message leads to an empty skb [ 358.851172][T11019] loop2: detected capacity change from 0 to 256 [ 358.992630][T11020] loop5: detected capacity change from 0 to 8192 [ 359.058953][T11002] JBD2: Ignoring recovery information on journal [ 359.219012][T11002] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 359.488498][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 359.800382][T11019] exfat: Deprecated parameter 'utf8' [ 360.062629][T10992] XFS (loop4): Ending clean mount [ 360.065506][T11019] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 360.135644][T10992] XFS (loop4): Quotacheck needed: Please wait. [ 360.261907][T10992] XFS (loop4): Quotacheck: Done. [ 360.331496][ T4185] XFS (loop4): Unmounting Filesystem [ 360.616622][T11025] loop1: detected capacity change from 0 to 2048 [ 361.742018][T11025] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 361.752012][ T4495] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 361.859629][T11029] loop0: detected capacity change from 0 to 32768 [ 361.866534][T11025] attempt to access beyond end of device [ 361.866534][T11025] loop1: rw=524288, want=33554432, limit=2048 [ 361.878192][T11034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.069455][ T4495] usb 3-1: Using ep0 maxpacket: 32 [ 362.202443][ T4495] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 362.211655][ T4495] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.227802][ T4495] usb 3-1: config 0 descriptor?? [ 362.288578][ T4495] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 362.351751][T11040] loop5: detected capacity change from 0 to 2048 [ 362.761690][T11029] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 362.798472][T11029] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 362.881148][T11029] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 362.940765][ T4247] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 362.953318][ T4247] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 362.961339][ T4495] gspca_vc032x: reg_w err -71 [ 362.966048][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 362.993517][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.011458][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.016767][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.033579][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.038907][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.062283][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.067584][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.079745][ T4247] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 363.090567][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.095359][ T4247] gfs2: fsid=syz:syz.0: jid=0: Done [ 363.101077][T11029] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 363.105693][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.131304][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.147129][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.163150][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.192553][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.199154][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.211082][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.238081][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.244781][ T4495] gspca_vc032x: I2c Bus Busy Wait 00 [ 363.262008][ T4495] gspca_vc032x: Unknown sensor... [ 363.267081][ T4495] vc032x: probe of 3-1:0.0 failed with error -22 [ 363.360292][ T4495] usb 3-1: USB disconnect, device number 21 [ 363.566919][T11052] loop1: detected capacity change from 0 to 2048 [ 363.594179][T11040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.329444][T11070] loop4: detected capacity change from 0 to 128 [ 364.679487][T11052] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18881, location=18881 [ 365.229572][T11084] loop5: detected capacity change from 0 to 2048 [ 365.350175][T11070] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 365.488559][T11070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.263092][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2719'. [ 366.382496][ T4247] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 366.394592][T11092] loop2: detected capacity change from 0 to 256 [ 366.500750][T11084] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.787297][ T4247] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 366.799680][ T4247] usb 2-1: config 0 has no interface number 0 [ 366.812976][ T4247] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 366.843776][ T4247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.882486][ T4247] usb 2-1: config 0 descriptor?? [ 367.156239][ T4247] usb 2-1: USB disconnect, device number 18 [ 367.407890][T11104] loop4: detected capacity change from 0 to 8192 [ 367.519587][T11092] exfat: Deprecated parameter 'namecase' [ 367.538248][T11092] exfat: Deprecated parameter 'utf8' [ 367.560332][T11092] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 367.803737][T11092] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 368.046706][T11127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2735'. [ 368.319901][T11137] loop0: detected capacity change from 0 to 256 [ 368.343988][T11133] loop5: detected capacity change from 0 to 8192 [ 368.484538][T11141] loop1: detected capacity change from 0 to 1024 [ 368.566749][T11104] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 368.583428][T11104] REISERFS (device loop4): using ordered data mode [ 368.589956][T11104] reiserfs: using flush barriers [ 368.629013][T11104] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 368.652964][T11104] REISERFS (device loop4): checking transaction log (loop4) [ 368.719582][T11104] REISERFS (device loop4): Using r5 hash to sort names [ 368.728620][T11104] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 369.049577][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2736'. [ 369.084256][T11144] device dummy0 entered promiscuous mode [ 369.123547][T11144] device dummy0 left promiscuous mode [ 369.463639][T11133] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 369.477723][T11133] REISERFS (device loop5): using ordered data mode [ 369.494490][T11133] reiserfs: using flush barriers [ 369.549332][T11133] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 369.622638][T11133] REISERFS (device loop5): checking transaction log (loop5) [ 369.648805][ T144] hfsplus: b-tree write err: -5, ino 4 [ 369.720592][T11133] REISERFS (device loop5): Using r5 hash to sort names [ 369.727883][T11133] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 370.346544][T11137] FAT-fs (loop0): Directory bread(block 64) failed [ 370.360587][T11137] FAT-fs (loop0): Directory bread(block 65) failed [ 370.373374][T11137] FAT-fs (loop0): Directory bread(block 66) failed [ 370.379911][T11137] FAT-fs (loop0): Directory bread(block 67) failed [ 370.464270][T11148] fido_id[11148]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 370.486601][T11137] FAT-fs (loop0): Directory bread(block 68) failed [ 370.496645][T11137] FAT-fs (loop0): Directory bread(block 69) failed [ 370.503792][T11150] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2744'. [ 370.526313][T11137] FAT-fs (loop0): Directory bread(block 70) failed [ 370.538666][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2744'. [ 370.562176][T11137] FAT-fs (loop0): Directory bread(block 71) failed [ 370.590207][T11137] FAT-fs (loop0): Directory bread(block 72) failed [ 370.597056][T11150] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2744'. [ 370.612001][T11137] FAT-fs (loop0): Directory bread(block 73) failed [ 370.716902][ T4495] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 370.858893][T11151] fido_id[11151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 370.876863][T11154] [U] ùÿ [ 371.122061][ T4495] usb 6-1: Using ep0 maxpacket: 16 [ 371.197644][T11161] fido_id[11161]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 371.245760][T11167] loop4: detected capacity change from 0 to 512 [ 371.437543][T11167] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2755: iget: bad extended attribute block 1 [ 371.506367][T11171] loop2: detected capacity change from 0 to 2048 [ 371.521318][T11167] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2755: couldn't read orphan inode 15 (err -117) [ 371.581329][T11167] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 371.636819][ T4495] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 371.655298][ T4495] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.702370][ T4495] usb 6-1: Product: syz [ 371.706567][ T4495] usb 6-1: Manufacturer: syz [ 371.754202][ T4495] usb 6-1: SerialNumber: syz [ 371.779684][ T4495] usb 6-1: config 0 descriptor?? [ 371.858719][ T4495] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 371.915027][T11171] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 371.932869][T11171] NILFS (loop2): mounting unchecked fs [ 372.029603][ T4568] udevd[4568]: incorrect nilfs2 checksum on /dev/loop2 [ 372.088266][ T4495] ssu100: probe of 6-1:0.0 failed with error -71 [ 372.116602][ T4568] udevd[4568]: incorrect nilfs2 checksum on /dev/loop2 [ 372.119569][ T4495] usb 6-1: USB disconnect, device number 8 [ 372.237757][T11171] NILFS (loop2): recovery complete [ 372.310891][T11186] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 372.513476][ T4495] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 372.522063][ T4495] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 372.547005][T11188] loop1: detected capacity change from 0 to 2048 [ 372.557818][ T4494] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 372.856648][T11195] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.329450][ T4232] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.523613][ T4232] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 373.756912][T11194] loop5: detected capacity change from 0 to 32768 [ 373.878193][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2772'. [ 373.907633][T11206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'. [ 374.206909][ T25] kauditd_printk_skb: 4 callbacks suppressed [ 374.206923][ T25] audit: type=1800 audit(1754666051.977:15): pid=11194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2766" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 374.549377][T11220] loop2: detected capacity change from 0 to 512 [ 374.620132][T11220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 374.776907][T11220] EXT4-fs (loop2): 1 truncate cleaned up [ 374.785834][T11220] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,journal_dev=0x0000000000000003,block_validity,lazytime,nombcache,usrjquota=,,errors=continue. Quota mode: none. [ 374.875612][T11220] EXT4-fs error (device loop2): ext4_get_parent:1910: comm syz.2.2767: inode #2: comm syz.2.2767: iget: illegal inode # [ 374.920585][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2780'. [ 375.372150][T11239] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 375.507405][T11243] loop0: detected capacity change from 0 to 512 [ 375.718089][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'. [ 375.915962][T11221] loop5: detected capacity change from 0 to 1024 [ 376.006649][T11251] loop1: detected capacity change from 0 to 4096 [ 376.415884][T11253] loop2: detected capacity change from 0 to 4096 [ 376.599019][T11243] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2785: invalid indirect mapped block 10 (level 1) [ 376.651395][T11243] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2785: invalid indirect mapped block 8 (level 1) [ 376.703986][T11243] EXT4-fs (loop0): 1 truncate cleaned up [ 376.716924][T11243] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 376.917642][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.003258][T11221] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 377.157535][T11221] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,dioread_nolock,. Quota mode: none. [ 377.214382][T11221] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.239874][T11261] loop4: detected capacity change from 0 to 64 [ 377.744665][T11253] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 377.785911][T11251] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 377.964445][ T4195] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 378.388662][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.395020][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.624413][ T4193] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 378.633577][T11281] loop5: detected capacity change from 0 to 512 [ 378.677917][ T4193] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 378.686770][ T4193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 379.956384][T11281] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,noblock_validity,,errors=continue. Quota mode: writeback. [ 380.038024][T11281] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.109741][ T5401] kernel read not supported for file /dsp (pid: 5401 comm: kworker/1:15) [ 381.224263][T11325] loop2: detected capacity change from 0 to 1024 [ 381.296042][T11300] loop4: detected capacity change from 0 to 40427 [ 382.188302][T11351] loop5: detected capacity change from 0 to 2048 [ 382.446752][T11300] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 382.500886][T11300] F2FS-fs (loop4): invalid crc value [ 382.625695][T11300] F2FS-fs (loop4): Found nat_bits in checkpoint [ 382.667210][T11325] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 382.807222][T11325] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 382.836215][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.843722][T11349] loop0: detected capacity change from 0 to 32768 [ 383.059547][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 383.351231][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 383.511948][ T13] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.519960][ T13] usb 2-1: config 0 has no interface number 0 [ 383.564170][T11351] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 383.651285][T11370] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.764982][ T13] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 383.774924][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.800778][ T13] usb 2-1: Product: syz [ 383.805120][ T13] usb 2-1: Manufacturer: syz [ 383.809718][ T13] usb 2-1: SerialNumber: syz [ 383.853555][ T13] usb 2-1: config 0 descriptor?? [ 383.917028][ T13] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 383.932182][ T13] usb 2-1: selecting invalid altsetting 1 [ 383.945370][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 383.997409][ T13] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.020437][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 384.041228][ T13] usb 2-1: media controller created [ 384.062808][T11349] [ 384.062808][T11349] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 384.062808][T11349] [ 384.084961][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.100729][T11349] ERROR: (device loop0): diWrite: ixpxd invalid [ 384.100729][T11349] [ 384.120929][T11363] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 384.141733][T11349] ERROR: (device loop0): txCommit: [ 384.141733][T11349] [ 384.190986][T11371] jfs_mkdir: dtSearch returned -17 [ 384.223286][ T13] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 384.251572][ T13] zl10353_read_register: readreg error (reg=127, ret==-71) [ 384.335664][ T4182] [ 384.335664][ T4182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 384.335664][ T4182] [ 384.356049][ T13] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 384.403758][ T4182] [ 384.403758][ T4182] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 384.403758][ T4182] [ 384.493302][ T13] usb 2-1: USB disconnect, device number 19 [ 384.668236][T11379] loop2: detected capacity change from 0 to 512 [ 385.265221][T11393] loop1: detected capacity change from 0 to 2048 [ 386.046930][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 386.415942][T11435] loop0: detected capacity change from 0 to 1024 [ 386.653583][T11393] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 386.744754][T11444] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 387.199600][T11379] EXT4-fs (loop2): Ignoring removed bh option [ 387.217901][T11379] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.251964][T11443] loop4: detected capacity change from 0 to 32768 [ 387.261037][T11379] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 387.355532][T11379] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 387.406123][T11379] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 387.445658][T11379] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 387.739206][T11435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 388.273481][T11443] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.2876 (11443) [ 388.324086][T11443] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 388.361592][T11443] BTRFS info (device loop4): using free space tree [ 388.385523][T11443] BTRFS info (device loop4): has skinny extents [ 388.610967][T11472] loop1: detected capacity change from 0 to 1024 [ 388.731766][T11480] loop5: detected capacity change from 0 to 512 [ 388.810656][T11443] BTRFS info (device loop4): enabling ssd optimizations [ 389.519131][ T4247] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 389.610675][T11502] loop0: detected capacity change from 0 to 128 [ 389.940268][ T4247] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 389.949491][ T4247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.987303][ T4247] usb 3-1: config 0 descriptor?? [ 390.065183][T11472] hfsplus: bad catalog entry type [ 390.123763][T11480] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2887: inode #1: comm syz.5.2887: iget: illegal inode # [ 390.127377][ T154] hfsplus: b-tree write err: -5, ino 4 [ 390.165753][T11480] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2887: error while reading EA inode 1 err=-117 [ 390.231372][T11480] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.2887: inode #1: comm syz.5.2887: iget: illegal inode # [ 390.274740][T11480] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.2887: error while reading EA inode 1 err=-117 [ 390.324334][T11480] EXT4-fs (loop5): 1 orphan inode deleted [ 390.330087][T11480] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 390.530129][ T4247] [drm:udl_init] *ERROR* Selecting channel failed [ 390.557135][ T4247] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 390.600355][ T4247] [drm] Initialized udl on minor 2 [ 390.644935][ T4247] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.661922][ T4247] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 390.712131][ T4816] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.739342][ T4247] usb 3-1: USB disconnect, device number 22 [ 390.753910][ T4816] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 390.772106][ T4816] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 390.871848][T11509] loop4: detected capacity change from 0 to 1024 [ 390.913945][T11502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.930617][T11502] ext4 filesystem being mounted at /512/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.156940][T11512] loop2: detected capacity change from 0 to 512 [ 392.208774][ T1596] hfsplus: b-tree write err: -5, ino 4 [ 392.250905][ T4232] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 392.464604][T11512] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 392.509135][T11512] ext4 filesystem being mounted at /606/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.675382][T11518] loop1: detected capacity change from 0 to 32768 [ 392.689015][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 392.769277][T11512] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 392.796820][T11512] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 392.859062][T11535] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 392.877898][ T4232] usb 6-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 392.896650][ T4232] usb 6-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 392.906685][T11535] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 392.923896][ T4232] usb 6-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.931335][T11512] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.2900: Failed to acquire dquot type 1 [ 392.943249][T11535] EXT4-fs error (device loop2): ext4_acquire_dquot:6207: comm syz.2.2900: Failed to acquire dquot type 1 [ 392.997402][ T4232] usb 6-1: config 0 interface 0 has no altsetting 0 [ 393.069933][T11518] XFS (loop1): Mounting V5 Filesystem [ 393.284843][ T4232] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 393.304147][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.328444][ T4232] usb 6-1: Product: syz [ 393.347309][ T4232] usb 6-1: Manufacturer: syz [ 393.366701][T11533] loop0: detected capacity change from 0 to 32768 [ 393.367143][ T4232] usb 6-1: SerialNumber: syz [ 393.412189][ T4232] usb 6-1: config 0 descriptor?? [ 393.489364][ T4232] usb 6-1: no audio or video endpoints found [ 393.740420][ T4232] usb 6-1: USB disconnect, device number 9 [ 394.189134][T11551] loop4: detected capacity change from 0 to 64 [ 394.503127][T11557] program syz.5.2914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.795921][T11533] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 395.052259][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 395.160789][T11581] loop2: detected capacity change from 0 to 512 [ 395.204288][T11518] XFS (loop1): Ending clean mount [ 395.296422][ T4195] XFS (loop1): Unmounting Filesystem [ 395.411899][ T4247] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 395.768269][ T4247] usb 6-1: Using ep0 maxpacket: 32 [ 395.899887][ T4247] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 395.909408][ T4247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.965251][ T4247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.985827][ T4247] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 396.000065][ T4247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.025599][ T4247] usb 6-1: config 0 descriptor?? [ 396.402813][T11581] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 396.451435][T11581] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 396.528596][ T4247] logitech 0003:046D:C29C.002A: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 396.604678][T11581] EXT4-fs (loop2): 1 truncate cleaned up [ 396.610344][T11581] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 396.731590][ T4247] logitech 0003:046D:C29C.002A: no inputs found [ 396.778309][ T4247] usb 6-1: USB disconnect, device number 10 [ 396.778447][T11581] EXT4-fs (loop2): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 396.914117][T11581] EXT4-fs (loop2): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 397.063349][T11595] fido_id[11595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 397.111500][T11596] loop0: detected capacity change from 0 to 4096 [ 397.700409][ T4247] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 397.844410][T11609] futex_wake_op: syz.4.2937 tries to shift op by 32; fix this program [ 398.239765][ T4247] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 398.251295][ T4247] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 398.286558][ T4247] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 398.307912][ T4247] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 398.330394][ T4247] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 398.520325][ T4247] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 398.534831][ T4247] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 398.565451][ T4247] usb 6-1: Product: syz [ 398.585689][ T4247] usb 6-1: Manufacturer: syz [ 398.651944][ T4247] cdc_wdm 6-1:1.0: skipping garbage [ 398.667389][ T4247] cdc_wdm 6-1:1.0: skipping garbage [ 398.700188][ T4247] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 398.734471][ T4247] cdc_wdm 6-1:1.0: Unknown control protocol [ 398.828757][T11635] loop2: detected capacity change from 0 to 128 [ 399.479334][T11652] loop1: detected capacity change from 0 to 4096 [ 399.520398][T11652] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 399.588193][ T4232] usb 6-1: USB disconnect, device number 11 [ 399.662500][T11652] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 399.689670][T11652] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 399.737512][T11652] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 399.768275][T11596] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 399.802466][T11596] ntfs3: loop0: failed to convert name for inode 1e. [ 399.845821][T11652] ntfs: volume version 3.1. [ 400.131278][ T4325] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 400.168284][ T4195] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 400.875210][T11660] loop5: detected capacity change from 0 to 32768 [ 400.905758][T11660] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2961 (11660) [ 400.968635][T11660] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 400.990486][T11660] BTRFS info (device loop5): using free space tree [ 401.003550][T11660] BTRFS info (device loop5): has skinny extents [ 401.436643][T11660] BTRFS info (device loop5): enabling ssd optimizations [ 402.162463][T11689] loop4: detected capacity change from 0 to 1024 [ 402.461988][T11687] loop1: detected capacity change from 0 to 32768 [ 402.906864][T11695] netlink: 'syz.2.2968': attribute type 1 has an invalid length. [ 402.929075][T11695] netlink: 'syz.2.2968': attribute type 2 has an invalid length. [ 402.960339][T11695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2968'. [ 403.246133][T11713] nbd: must specify a size in bytes for the device [ 403.585697][T11723] loop0: detected capacity change from 0 to 4096 [ 403.886425][T11687] XFS (loop1): Mounting V5 Filesystem [ 403.951604][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 404.499494][T11687] XFS (loop1): Ending clean mount [ 404.547698][T11687] XFS (loop1): Quotacheck needed: Please wait. [ 404.618930][T11743] loop2: detected capacity change from 0 to 32768 [ 404.697350][T11687] XFS (loop1): Quotacheck: Done. [ 404.808476][ T4195] XFS (loop1): Unmounting Filesystem [ 405.097263][T11723] ntfs3: loop0: ino=3, Correct links count -> 2. [ 405.707894][T11743] XFS (loop2): Mounting V5 Filesystem [ 406.084457][T11757] loop4: detected capacity change from 0 to 16 [ 406.137950][T11757] erofs: (device loop4): erofs_superblock_csum_verify: invalid checksum 0xbbaa231a, 0xe73df4ff expected [ 406.162809][T11723] ntfs3: loop0: failed to convert "0080" to macgreek [ 406.182694][ T4174] udevd[4174]: incorrect erofs checksum on /dev/loop4 [ 406.223276][T11723] ntfs3: loop0: failed to convert name for inode 1e. [ 406.377029][T11743] XFS (loop2): Ending clean mount [ 406.510343][ T4193] XFS (loop2): Unmounting Filesystem [ 406.734487][T11763] loop1: detected capacity change from 0 to 64 [ 407.492173][T11767] loop4: detected capacity change from 0 to 256 [ 407.868276][T11773] loop0: detected capacity change from 0 to 1024 [ 408.237377][T11781] loop5: detected capacity change from 0 to 16 [ 408.375538][T11782] loop2: detected capacity change from 0 to 4096 [ 408.540406][T11767] exfat: Deprecated parameter 'utf8' [ 408.698268][T11767] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 409.162160][T11781] erofs: (device loop5): erofs_superblock_csum_verify: invalid checksum 0xbbaa231a, 0xe73df4ff expected [ 409.405760][T11782] ntfs3: loop2: ino=3, Correct links count -> 2. [ 410.087140][T11791] loop0: detected capacity change from 0 to 65 [ 410.308189][T11782] ntfs3: loop2: failed to convert "0080" to macgreek [ 410.346106][T11782] ntfs3: loop2: failed to convert name for inode 1e. [ 410.443315][T11786] loop4: detected capacity change from 0 to 32768 [ 411.084520][T11791] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 411.510425][T11818] loop2: detected capacity change from 0 to 512 [ 411.534335][T11786] XFS (loop4): Mounting V5 Filesystem [ 412.233647][T11806] loop1: detected capacity change from 0 to 32768 [ 412.267225][T11786] XFS (loop4): Ending clean mount [ 412.275631][T11819] loop5: detected capacity change from 0 to 32768 [ 412.362775][ T4185] XFS (loop4): Unmounting Filesystem [ 413.108675][T11818] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 413.147885][T11818] ext4 filesystem being mounted at /635/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.268760][T11832] netlink: 822 bytes leftover after parsing attributes in process `syz.0.3020'. [ 413.296791][T11832] bridge: RTM_NEWNEIGH with unconfigured vlan 265 on bridge0 [ 413.401456][T11835] loop0: detected capacity change from 0 to 64 [ 413.613560][T11819] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt [ 413.613560][T11819] [ 413.648658][T11819] ERROR: (device loop5): remounting filesystem as read-only [ 414.865529][T11852] loop1: detected capacity change from 0 to 1024 [ 414.971323][ T4481] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 415.247787][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3025'. [ 415.268927][T11854] netlink: 'syz.5.3025': attribute type 2 has an invalid length. [ 415.294082][T11854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3025'. [ 415.350797][ T4481] usb 3-1: Using ep0 maxpacket: 32 [ 415.539161][ T4481] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 415.547385][ T4481] usb 3-1: config 0 has no interface number 0 [ 415.770820][ T4481] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 415.801300][ T4481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.809314][ T4481] usb 3-1: Product: syz [ 415.854760][ T4481] usb 3-1: Manufacturer: syz [ 415.859386][ T4481] usb 3-1: SerialNumber: syz [ 415.891429][ T4481] usb 3-1: config 0 descriptor?? [ 415.961622][ T4481] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) driver version 1.00 [ 416.176968][ T4481] etas_es58x 3-1:0.2: Product info: 424242424242 [ 416.271677][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 417.309401][T11879] loop5: detected capacity change from 0 to 32768 [ 417.474263][T11892] loop4: detected capacity change from 0 to 4096 [ 417.619168][ T5408] usb 3-1: USB disconnect, device number 23 [ 417.642387][ T5408] etas_es58x 3-1:0.2: Disconnecting syz syz [ 417.767697][ T3853] etas_es58x 3-1:0.2: es58x_alloc_rx_urbs: Could not setup any rx URBs [ 418.184799][T11913] loop1: detected capacity change from 0 to 512 [ 418.347093][T11903] loop2: detected capacity change from 0 to 32768 [ 418.587776][T11879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.3042 (11879) [ 418.655102][T11879] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 418.677289][T11879] BTRFS info (device loop5): turning on flush-on-commit [ 418.709190][T11879] BTRFS info (device loop5): using free space tree [ 418.725223][T11879] BTRFS info (device loop5): has skinny extents [ 418.749427][T11892] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 418.770447][T11892] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 418.808567][T11892] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 418.834123][T11892] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 418.881835][T11892] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 418.958338][T11892] ntfs: volume version 3.1. [ 419.051515][T11892] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 419.078442][T11892] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 419.121166][T11892] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 419.147763][T11892] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 419.185506][T11892] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 419.218262][T11879] BTRFS info (device loop5): enabling ssd optimizations [ 419.242323][T11879] BTRFS info (device loop5): checking UUID tree [ 419.292932][T11913] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 419.421552][T11913] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3052: bg 0: block 5: invalid block bitmap [ 419.534102][T11913] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 419.606440][T11913] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3052: invalid indirect mapped block 3 (level 2) [ 419.661842][T11913] EXT4-fs (loop1): 2 truncates cleaned up [ 419.667600][T11913] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,grpquota,,errors=continue. Quota mode: writeback. [ 419.767236][T11903] [ 419.767236][T11903] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 419.767236][T11903] [ 420.126518][ T4206] ERROR: (device loop2): diWrite: ixpxd invalid [ 420.126518][ T4206] [ 420.164435][ T4206] ERROR: (device loop2): txCommit: [ 420.164435][ T4206] [ 420.180927][ T4206] jfs_write_inode: jfs_commit_inode failed! [ 420.192812][ T4193] [ 420.192812][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 420.192812][ T4193] [ 420.206295][T11941] loop0: detected capacity change from 0 to 32768 [ 420.229798][ T4193] [ 420.229798][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 420.229798][ T4193] [ 421.539054][T11959] loop5: detected capacity change from 0 to 1024 [ 422.025582][T11949] loop1: detected capacity change from 0 to 32768 [ 422.646062][T11972] loop4: detected capacity change from 0 to 128 [ 422.668266][T11970] loop2: detected capacity change from 0 to 4096 [ 423.323672][T11949] XFS (loop1): Mounting V5 Filesystem [ 423.653066][T11970] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 423.788978][T11972] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 423.861888][T11993] hugetlbfs: Bad value 'ßø' for mount option 'size' [ 423.861888][T11993] [ 423.863084][T11992] loop0: detected capacity change from 0 to 256 [ 423.971073][T11949] XFS (loop1): Ending clean mount [ 423.999684][T11995] loop5: detected capacity change from 0 to 164 [ 424.055903][T11949] XFS (loop1): Quotacheck needed: Please wait. [ 424.182323][T11949] XFS (loop1): Quotacheck: Done. [ 424.285022][ T4195] XFS (loop1): Unmounting Filesystem [ 425.005466][T11995] Unable to read rock-ridge attributes [ 425.068678][T11995] Unable to read rock-ridge attributes [ 425.130715][T11995] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 426.290920][T12015] loop5: detected capacity change from 0 to 8192 [ 427.068659][T12027] loop0: detected capacity change from 0 to 4096 [ 427.302616][T12037] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3096'. [ 427.336721][T12015] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 427.346291][T12015] REISERFS (device loop5): using ordered data mode [ 427.386352][T12015] reiserfs: using flush barriers [ 427.424611][T12015] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.498631][T12015] REISERFS (device loop5): checking transaction log (loop5) [ 427.581385][T12015] REISERFS (device loop5): Using r5 hash to sort names [ 427.588544][T12015] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 427.625377][T12015] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 427.707073][T12015] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 427.764305][T12015] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 427.811121][T12015] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 427.825419][T12030] loop1: detected capacity change from 0 to 32768 [ 428.052144][T12044] loop2: detected capacity change from 0 to 1024 [ 428.929240][ T4182] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 428.938532][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3100'. [ 428.947653][ T4182] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 429.096054][T12030] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 429.129400][T12044] hfsplus: trying to free free bnode 0(1) [ 429.133371][T12051] loop4: detected capacity change from 0 to 1024 [ 429.178140][ T4206] hfsplus: b-tree write err: -5, ino 4 [ 429.447507][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 430.133820][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3099'. [ 430.164012][T12070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3099'. [ 430.189981][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 430.209979][T12070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3099'. [ 430.349268][ T4206] hfsplus: b-tree write err: -5, ino 4 [ 430.648327][ T4483] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 430.745114][T12082] loop0: detected capacity change from 0 to 1764 [ 430.746492][T12083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.970158][T12089] loop1: detected capacity change from 0 to 128 [ 431.108591][ T4483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 431.130518][T12093] tmpfs: Bad value for 'mpol' [ 431.130564][ T4483] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 431.173284][ T4483] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 431.182597][ T4483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.216651][ T4483] usb 3-1: config 0 descriptor?? [ 431.270799][T12072] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 431.724842][ T4483] glorious 0003:22D4:1503.002B: item fetching failed at offset 0/7 [ 431.733310][ T4483] glorious: probe of 0003:22D4:1503.002B failed with error -22 [ 431.978679][T12082] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 432.008100][ T4487] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 432.015858][T12089] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 432.025565][ T4483] usb 3-1: USB disconnect, device number 24 [ 432.494636][ T4487] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.502684][ T4487] usb 6-1: config 0 has no interface number 0 [ 432.509487][ T4487] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.518750][ T5408] Bluetooth: hci2: command 0x0401 tx timeout [ 432.558121][ T4487] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.594968][ T4487] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 432.615913][ T4487] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.634495][ T4487] usb 6-1: config 0 descriptor?? [ 433.166729][ T4487] prodikeys 0003:041E:2801.002C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 433.167168][ T4487] hid_prodikeys: hid-prodikeys: failed to find output report [ 433.167168][ T4487] [ 433.415234][ T5408] usb 6-1: USB disconnect, device number 12 [ 433.847594][T12118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3129'. [ 434.156425][T12120] fido_id[12120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 434.923960][T12154] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 435.373513][T12170] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3160'. [ 435.406448][T12170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3160'. [ 435.426749][T12170] netlink: 'syz.1.3160': attribute type 5 has an invalid length. [ 435.451309][T12170] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3160'. [ 436.162031][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3166'. [ 436.843164][T12201] loop1: detected capacity change from 0 to 32768 [ 436.843798][T12212] loop4: detected capacity change from 0 to 2048 [ 436.976173][T12216] loop5: detected capacity change from 0 to 512 [ 437.041740][T12204] loop2: detected capacity change from 0 to 32768 [ 437.142697][T12201] JBD2: Ignoring recovery information on journal [ 437.284260][T12201] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 437.540817][ T4195] ocfs2: Unmounting device (7,1) on (node local) [ 437.728880][T12224] tipc: Started in network mode [ 437.739044][T12224] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 437.762779][T12224] tipc: Enabled bearer , priority 12 [ 438.075545][T12216] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 438.083830][T12216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 438.143173][T12216] System zones: 0-1, 15-15, 18-18, 34-34 [ 438.168230][T12216] EXT4-fs (loop5): orphan cleanup on readonly fs [ 438.183312][T12204] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 438.192026][T12216] __quota_error: 6 callbacks suppressed [ 438.192039][T12216] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 438.252005][T12212] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 438.261741][T12230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.272707][T12216] EXT4-fs warning (device loop5): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 438.315797][T12216] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 438.336663][T12212] Remounting filesystem read-only [ 438.355325][T12212] NILFS (loop4): mounting fs with errors [ 438.363114][T12216] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3173: bg 0: block 40: padding at end of block bitmap is not set [ 438.416070][T12216] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 438.431835][T12232] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 438.446612][T12216] EXT4-fs (loop5): 1 truncate cleaned up [ 438.449248][T12232] Remounting filesystem read-only [ 438.453496][T12216] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.468720][T12232] NILFS (loop4): error -5 reading inode: ino=15 [ 438.469029][T12204] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 438.592378][T12216] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 438.779994][ T4813] tipc: Node number set to 15444650 [ 438.785304][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 438.829038][T12238] netlink: 'syz.2.3180': attribute type 1 has an invalid length. [ 438.855337][T12238] netlink: 'syz.2.3180': attribute type 2 has an invalid length. [ 438.969934][T12242] netlink: 'syz.2.3181': attribute type 16 has an invalid length. [ 438.978878][T12240] xt_socket: unknown flags 0xd0 [ 439.376787][T12252] loop1: detected capacity change from 0 to 512 [ 439.793266][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 439.806158][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.812477][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.091123][T12268] loop5: detected capacity change from 0 to 8 [ 440.970821][T12254] loop2: detected capacity change from 0 to 32768 [ 441.051323][T12252] EXT4-fs (loop1): Ignoring removed bh option [ 441.057440][T12252] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 441.115241][T12252] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 441.246375][T12252] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 441.279420][T12252] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 441.314778][T12252] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 441.417062][T12290] loop4: detected capacity change from 0 to 4096 [ 442.199400][T12254] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3187 (12254) [ 442.287931][T12254] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 442.296713][T12254] BTRFS info (device loop2): using free space tree [ 442.326990][T12254] BTRFS info (device loop2): has skinny extents [ 442.633741][T12320] syz.5.3210 (12320): drop_caches: 4 [ 442.677945][T12254] BTRFS error (device loop2): open_ctree failed: -12 [ 442.852442][ T4174] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by udevd (4174) [ 443.246204][T12300] loop0: detected capacity change from 0 to 32768 [ 443.813927][T12357] netlink: 'syz.1.3226': attribute type 1 has an invalid length. [ 443.885430][T12361] loop5: detected capacity change from 0 to 1024 [ 444.231887][ T25] audit: type=1800 audit(1754666122.017:16): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3203" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=34 res=0 errno=0 [ 444.328764][ T4813] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 444.587646][T12300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3209 (12300) [ 444.641903][T12300] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 444.650617][T12300] BTRFS info (device loop0): turning on flush-on-commit [ 444.701209][T12300] BTRFS info (device loop0): using free space tree [ 444.710871][T12300] BTRFS info (device loop0): has skinny extents [ 444.742167][T12324] loop2: detected capacity change from 0 to 32768 [ 444.980194][ T4813] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 444.999788][ T4813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.033995][ T4813] usb 2-1: Product: syz [ 445.038184][ T4813] usb 2-1: Manufacturer: syz [ 445.064405][ T4813] usb 2-1: SerialNumber: syz [ 445.089847][ T4813] usb 2-1: config 0 descriptor?? [ 445.125680][T12300] BTRFS info (device loop0): enabling ssd optimizations [ 445.133584][T12361] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 445.167180][ T4813] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 445.180681][T12300] BTRFS info (device loop0): checking UUID tree [ 445.197808][ T4813] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 445.212439][T12300] BTRFS warning (device loop0): failed to start uuid_rescan task [ 445.237084][T12300] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 445.238497][ T4813] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 445.399451][ T4482] usb 2-1: USB disconnect, device number 20 [ 445.579844][T12300] BTRFS error (device loop0): open_ctree failed: -4 [ 445.960378][T12396] loop4: detected capacity change from 0 to 736 [ 446.613374][T12409] loop5: detected capacity change from 0 to 512 [ 446.768196][T12401] loop1: detected capacity change from 0 to 32768 [ 447.385926][T12413] futex_wake_op: syz.2.3253 tries to shift op by 32; fix this program [ 447.536447][T12417] loop2: detected capacity change from 0 to 2048 [ 447.824548][T12409] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.856021][T12409] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.874257][T12401] XFS (loop1): Mounting V5 Filesystem [ 448.066600][T12409] EXT4-fs error (device loop5): ext4_empty_dir:3145: inode #12: block 32: comm syz.5.3232: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 448.169984][T12409] EXT4-fs warning (device loop5): ext4_empty_dir:3147: inode #12: comm syz.5.3232: directory missing '.' [ 448.305116][T12429] loop4: detected capacity change from 0 to 64 [ 448.494616][T12401] XFS (loop1): Ending clean mount [ 448.610595][ T4195] XFS (loop1): Unmounting Filesystem [ 448.878199][T12417] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 448.887958][T12439] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 448.944923][T12417] Remounting filesystem read-only [ 448.976339][T12417] NILFS (loop2): mounting fs with errors [ 449.047845][T12440] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 449.082597][T12440] Remounting filesystem read-only [ 449.087651][T12440] NILFS (loop2): error -5 reading inode: ino=15 [ 449.640906][T12442] loop0: detected capacity change from 0 to 8192 [ 450.607512][T12442] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 450.646034][T12442] REISERFS (device loop0): using ordered data mode [ 450.731324][T12442] reiserfs: using flush barriers [ 450.786410][T12469] loop4: detected capacity change from 0 to 1024 [ 450.841155][T12442] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 450.907636][T12442] REISERFS (device loop0): checking transaction log (loop0) [ 450.995414][T12476] loop1: detected capacity change from 0 to 2048 [ 451.011132][T12442] REISERFS (device loop0): Using r5 hash to sort names [ 451.021507][T12442] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 451.050807][T12442] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 451.091768][T12442] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 451.130333][T12442] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 451.168074][T12442] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 451.276103][T12478] loop5: detected capacity change from 0 to 512 [ 451.393444][T12458] loop2: detected capacity change from 0 to 32768 [ 452.138999][T12476] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 452.148836][T12479] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 452.201297][T12476] Remounting filesystem read-only [ 452.218425][T12476] NILFS (loop1): mounting fs with errors [ 452.280774][T12476] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 452.296621][T12476] Remounting filesystem read-only [ 452.307149][T12476] NILFS (loop1): error -5 reading inode: ino=15 [ 452.358456][T12478] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 452.381610][T12478] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 452.431052][T12478] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.3268: corrupted inode contents [ 452.501733][T12478] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.3268: mark_inode_dirty error [ 452.554151][T12478] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.3268: corrupted inode contents [ 452.655405][T12458] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 452.665100][T12484] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.3268: corrupted inode contents [ 452.710596][T12484] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.3268: mark_inode_dirty error [ 452.766145][T12484] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.3268: corrupted inode contents [ 452.811317][T12484] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.3268: mark_inode_dirty error [ 452.867612][T12484] EXT4-fs error (device loop5): ext4_do_update_inode:5204: inode #2: comm syz.5.3268: corrupted inode contents [ 452.903155][T12484] EXT4-fs error (device loop5): ext4_dirty_inode:6040: inode #2: comm syz.5.3268: mark_inode_dirty error [ 453.042076][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 453.199814][T12469] hfsplus: trying to free free bnode 0(1) [ 453.298442][ T4206] hfsplus: b-tree write err: -5, ino 4 [ 453.881069][T12511] loop1: detected capacity change from 0 to 4096 [ 454.136279][T12505] loop0: detected capacity change from 0 to 32768 [ 454.505228][T12523] loop5: detected capacity change from 0 to 512 [ 454.965440][T12543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.286669][T12505] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.3281 (12505) [ 455.311529][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3301'. [ 455.707547][T12523] EXT4-fs (loop5): Ignoring removed bh option [ 455.726442][T12523] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 455.806428][T12523] EXT4-fs (loop5): 1 truncate cleaned up [ 455.812614][T12523] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 456.183343][T12505] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 456.192300][T12505] BTRFS info (device loop0): using free space tree [ 456.232161][T12505] BTRFS info (device loop0): has skinny extents [ 456.314947][ T25] audit: type=1800 audit(1754666134.097:17): pid=12563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3283" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=34 res=0 errno=0 [ 457.066147][T12597] loop2: detected capacity change from 0 to 2048 [ 457.334112][T12599] loop5: detected capacity change from 0 to 4096 [ 457.758268][T12505] BTRFS error (device loop0): open_ctree failed: -12 [ 457.875333][T12603] loop1: detected capacity change from 0 to 2048 [ 458.113851][T12604] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.460427][T12606] loop4: detected capacity change from 0 to 256 [ 458.817283][ T8493] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 458.826924][ T8493] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 459.057229][T12612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 459.080309][T12603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.630493][T12606] exfat: Deprecated parameter 'utf8' [ 460.377834][T12614] loop2: detected capacity change from 0 to 32768 [ 460.492540][T12618] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 461.083438][T12629] loop0: detected capacity change from 0 to 1024 [ 461.316836][T12606] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 461.411314][T12636] loop5: detected capacity change from 0 to 1024 [ 461.483386][T12614] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 461.492448][T12614] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 461.631341][T12614] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 461.681510][ T4489] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 461.688303][ T4489] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 461.794834][ T4489] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 106ms [ 461.816911][ T4489] gfs2: fsid=syz:syz.0: jid=0: Done [ 461.839136][T12614] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 462.007903][ T5400] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 462.396750][ T4325] hfsplus: b-tree write err: -5, ino 4 [ 462.499118][ T5400] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 462.520617][ T5400] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.544292][T12647] loop4: detected capacity change from 0 to 4096 [ 462.555958][ T5400] usb 2-1: config 0 interface 0 has no altsetting 0 [ 462.568109][ T5400] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 462.588365][ T5400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.626759][ T5400] usb 2-1: config 0 descriptor?? [ 462.758860][ T4206] hfsplus: b-tree write err: -5, ino 4 [ 463.128811][ T5400] logitech 0003:046D:C24F.002D: unbalanced collection at end of report description [ 463.148710][ T5400] logitech 0003:046D:C24F.002D: parse failed [ 463.155635][ T5400] logitech: probe of 0003:046D:C24F.002D failed with error -22 [ 463.387554][ T7] usb 2-1: USB disconnect, device number 21 [ 463.777155][T12647] NILFS (loop4): invalid segment: Checksum error in segment payload [ 463.830563][T12647] NILFS (loop4): trying rollback from an earlier position [ 463.997953][T12647] NILFS (loop4): recovery complete [ 464.088121][T12674] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 465.515880][T12698] loop1: detected capacity change from 0 to 32768 [ 465.628115][T12746] loop5: detected capacity change from 0 to 256 [ 465.676326][T12748] loop2: detected capacity change from 0 to 512 [ 465.989782][T12752] loop4: detected capacity change from 0 to 2048 [ 466.540549][T12698] XFS (loop1): Mounting V5 Filesystem [ 466.828808][T12748] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.3386: iget: bad extended attribute block 1 [ 466.880556][T12748] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.3386: couldn't read orphan inode 15 (err -117) [ 466.965488][T12748] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 467.249287][T12698] XFS (loop1): Ending clean mount [ 467.326363][T12769] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 467.448179][ T4195] XFS (loop1): Unmounting Filesystem [ 467.591424][T12746] FAT-fs (loop5): Directory bread(block 64) failed [ 467.601052][T12746] FAT-fs (loop5): Directory bread(block 65) failed [ 467.625959][T12746] FAT-fs (loop5): Directory bread(block 66) failed [ 467.632923][T12746] FAT-fs (loop5): Directory bread(block 67) failed [ 467.665209][T12746] FAT-fs (loop5): Directory bread(block 68) failed [ 467.672013][T12746] FAT-fs (loop5): Directory bread(block 69) failed [ 467.678629][T12746] FAT-fs (loop5): Directory bread(block 70) failed [ 467.702059][T12746] FAT-fs (loop5): Directory bread(block 71) failed [ 467.711964][T12746] FAT-fs (loop5): Directory bread(block 72) failed [ 467.739068][T12746] FAT-fs (loop5): Directory bread(block 73) failed [ 467.944308][T12773] loop0: detected capacity change from 0 to 512 [ 468.490547][T12777] loop2: detected capacity change from 0 to 4096 [ 469.165766][T12773] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 469.180663][T12790] loop1: detected capacity change from 0 to 1024 [ 469.187203][T12773] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.563594][T12781] loop4: detected capacity change from 0 to 32768 [ 469.747890][T12783] loop5: detected capacity change from 0 to 32768 [ 470.406356][T12790] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 470.441989][T12781] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.3396 (12781) [ 470.569560][T12790] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nojournal_checksum,resuid=0x0000000000000000,errors=remount-ro,discard,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000001,noinit_itable,nomblk_io_submit,grpquota,inode_readahead_blks=0x0000000000040000,. Quota mode: writeback. [ 470.711257][ T25] audit: type=1800 audit(1754666148.487:18): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3394" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=34 res=0 errno=0 [ 470.822783][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.830196][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.856320][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.874837][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.894587][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.902557][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.920730][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.944557][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.952814][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.960483][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 470.985167][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.011892][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.022713][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.030101][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.073347][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.080759][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.111895][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.119305][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.154003][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.174138][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.221092][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.229885][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.248780][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.281794][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.289200][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.336903][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.346200][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.375034][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.402171][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.409575][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.434631][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.452977][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.460490][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.466490][T12781] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 471.483531][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.490940][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.502119][T12781] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 471.505657][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.526574][T12781] BTRFS info (device loop4): use zstd compression, level 3 [ 471.539211][T12781] BTRFS info (device loop4): using free space tree [ 471.560972][T12781] BTRFS info (device loop4): has skinny extents [ 471.573933][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.589658][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.621048][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.645815][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.658780][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.683142][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.690591][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.715723][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.745466][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.789833][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.801269][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.818284][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.859085][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.886927][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.921283][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.947981][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.982497][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.989911][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 471.998628][T12817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3400'. [ 472.032021][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.039430][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.085506][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.092966][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.100424][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.121518][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.145193][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.157976][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.181376][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.188824][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.201477][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.208874][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.249156][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.272134][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.285830][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.309156][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.344801][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.370582][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.384345][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.406514][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.438426][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.451253][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.478513][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.496157][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.514384][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.535347][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.584356][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.588851][T12822] loop2: detected capacity change from 0 to 512 [ 472.617820][T12823] loop1: detected capacity change from 0 to 512 [ 472.624188][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.631656][T12783] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.3393 (12783) [ 472.671986][ T5400] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 472.696219][ T5400] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.03 Device [syz1] on syz1 [ 473.523245][T12783] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 473.556457][T12783] BTRFS info (device loop5): using free space tree [ 473.570389][T12783] BTRFS info (device loop5): has skinny extents [ 473.631478][T12823] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.3401: iget: bad extended attribute block 1 [ 473.691410][T12822] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.3402: invalid block [ 473.713383][T12823] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.3401: couldn't read orphan inode 15 (err -117) [ 473.766781][T12823] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 473.785673][T12822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3402: invalid indirect mapped block 10 (level 1) [ 473.834998][T12822] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3402: invalid indirect mapped block 8 (level 1) [ 473.908623][T12822] EXT4-fs (loop2): 1 truncate cleaned up [ 473.920011][T12822] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 474.569872][T12781] BTRFS error (device loop4): open_ctree failed: -12 [ 475.084077][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3406'. [ 475.379193][T12861] loop2: detected capacity change from 0 to 1024 [ 475.396014][T12859] tipc: Started in network mode [ 475.401063][T12859] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 475.422685][T12859] tipc: Enabled bearer , priority 10 [ 475.571316][T12783] BTRFS error (device loop5): open_ctree failed: -12 [ 475.938544][T12867] loop0: detected capacity change from 0 to 256 [ 476.468291][T11500] tipc: Node number set to 10005162 [ 476.634404][ T4206] hfsplus: b-tree write err: -5, ino 4 [ 477.016514][T12883] loop4: detected capacity change from 0 to 256 [ 477.941153][T12896] loop5: detected capacity change from 0 to 512 [ 478.218005][T12906] device vlan2 entered promiscuous mode [ 478.239882][T12906] device wlan1 entered promiscuous mode [ 478.333747][T12910] loop1: detected capacity change from 0 to 1024 [ 478.553864][T12917] syz.2.3440[12917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.553955][T12917] syz.2.3440[12917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.747675][T12920] netlink: 'syz.2.3441': attribute type 41 has an invalid length. [ 478.781620][T12883] FAT-fs (loop4): Directory bread(block 64) failed [ 478.788171][T12883] FAT-fs (loop4): Directory bread(block 65) failed [ 478.811952][T12883] FAT-fs (loop4): Directory bread(block 66) failed [ 478.854366][T12883] FAT-fs (loop4): Directory bread(block 67) failed [ 478.877399][T12883] FAT-fs (loop4): Directory bread(block 68) failed [ 478.899810][T12883] FAT-fs (loop4): Directory bread(block 69) failed [ 478.927520][T12883] FAT-fs (loop4): Directory bread(block 70) failed [ 478.963642][T12883] FAT-fs (loop4): Directory bread(block 71) failed [ 479.022006][T12883] FAT-fs (loop4): Directory bread(block 72) failed [ 479.028557][T12883] FAT-fs (loop4): Directory bread(block 73) failed [ 479.318802][T12896] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.3416: Invalid inode bitmap blk 4 in block_group 0 [ 479.367895][T12896] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 479.393360][T12933] loop2: detected capacity change from 0 to 512 [ 479.462710][T12896] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 479.511636][T12896] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.3416: Invalid inode bitmap blk 4 in block_group 0 [ 479.542903][T12896] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem [ 480.655933][T12910] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 480.719553][T12933] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3447: inode #1: comm syz.2.3447: iget: illegal inode # [ 480.802276][T12933] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3447: error while reading EA inode 1 err=-117 [ 480.890182][T12933] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.3447: inode #1: comm syz.2.3447: iget: illegal inode # [ 480.897805][T12953] loop4: detected capacity change from 0 to 65 [ 480.942585][T12933] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.3447: error while reading EA inode 1 err=-117 [ 480.992414][T12933] EXT4-fs (loop2): 1 orphan inode deleted [ 480.998224][T12933] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 481.202638][T12933] EXT4-fs (loop2): re-mounted. Opts: usrquota,usrjquota="data=ordered,noload,noinit_itable,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 481.378217][T12942] loop5: detected capacity change from 0 to 32768 [ 481.822603][T12961] loop0: detected capacity change from 0 to 32768 [ 482.031835][T12963] comedi comedi0: pcl818: I/O port conflict (0x2efd,16) [ 482.038882][T12963] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 482.050598][T12963] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 482.059000][T12963] CPU: 0 PID: 12963 Comm: syz.1.3455 Not tainted 5.15.189-syzkaller #0 [ 482.067231][T12963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.077279][T12963] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 482.082825][T12963] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6d 7d 4a fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c 7d 4a fa 4d 8b 24 24 48 83 c3 [ 482.102426][T12963] RSP: 0018:ffffc9000313fa10 EFLAGS: 00010206 [ 482.108496][T12963] RAX: 0000000000000005 RBX: ffff888022eec180 RCX: 0000000000080000 [ 482.116462][T12963] RDX: ffffc90003e23000 RSI: 00000000000029a2 RDI: 00000000000029a3 [ 482.124427][T12963] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10054c8226 [ 482.132398][T12963] R10: ffffed10054c8226 R11: 1ffff110054c8225 R12: 0000000000000028 [ 482.140366][T12963] R13: dffffc0000000000 R14: ffff88802a641000 R15: dffffc0000000000 [ 482.148342][T12963] FS: 00007f18468be6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 482.157272][T12963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.163852][T12963] CR2: 0000001b32423ffc CR3: 0000000022166000 CR4: 00000000003506f0 [ 482.171821][T12963] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 482.179783][T12963] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 482.187748][T12963] Call Trace: [ 482.191018][T12963] [ 482.193945][T12963] pcl818_detach+0x62/0xd0 [ 482.198360][T12963] comedi_device_detach+0x12d/0x6e0 [ 482.203570][T12963] comedi_device_attach+0x55d/0x650 [ 482.208776][T12963] comedi_unlocked_ioctl+0x5ec/0xe90 [ 482.214074][T12963] ? comedi_poll+0x8b0/0x8b0 [ 482.218687][T12963] ? bpf_lsm_file_ioctl+0x5/0x10 [ 482.223618][T12963] ? security_file_ioctl+0x7c/0xa0 [ 482.228731][T12963] ? comedi_poll+0x8b0/0x8b0 [ 482.233319][T12963] __se_sys_ioctl+0xfa/0x170 [ 482.237916][T12963] do_syscall_64+0x4c/0xa0 [ 482.242339][T12963] ? clear_bhb_loop+0x30/0x80 [ 482.247017][T12963] ? clear_bhb_loop+0x30/0x80 [ 482.251694][T12963] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.257587][T12963] RIP: 0033:0x7f1848656be9 [ 482.262001][T12963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.281601][T12963] RSP: 002b:00007f18468be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 482.290013][T12963] RAX: ffffffffffffffda RBX: 00007f184887dfa0 RCX: 00007f1848656be9 [ 482.297980][T12963] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003 [ 482.305948][T12963] RBP: 00007f18486d9e19 R08: 0000000000000000 R09: 0000000000000000 [ 482.313915][T12963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.321879][T12963] R13: 00007f184887e038 R14: 00007f184887dfa0 R15: 00007ffccdebd0c8 [ 482.329851][T12963] [ 482.332876][T12963] Modules linked in: [ 482.407602][T12953] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 482.803352][T12963] ---[ end trace f51c3302d4bfed17 ]--- [ 482.808831][T12963] RIP: 0010:pcl818_ai_cancel+0x65/0x3e0 [ 482.839580][T12963] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 6d 7d 4a fa 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 4c 7d 4a fa 4d 8b 24 24 48 83 c3 [ 482.928483][T12963] RSP: 0018:ffffc9000313fa10 EFLAGS: 00010206 [ 482.941912][T12963] RAX: 0000000000000005 RBX: ffff888022eec180 RCX: 0000000000080000 [ 482.949900][T12963] RDX: ffffc90003e23000 RSI: 00000000000029a2 RDI: 00000000000029a3 [ 483.018747][T12963] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10054c8226 [ 483.051574][T12963] R10: ffffed10054c8226 R11: 1ffff110054c8225 R12: 0000000000000028 [ 483.061109][T12963] R13: dffffc0000000000 R14: ffff88802a641000 R15: dffffc0000000000 [ 483.103516][T12963] FS: 00007f18468be6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 483.128170][T12963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.135427][T12963] CR2: 00007f184689cf98 CR3: 0000000022166000 CR4: 00000000003506f0 [ 483.157870][T12963] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.189301][T12963] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.213291][T12963] Kernel panic - not syncing: Fatal exception [ 483.219538][T12963] Kernel Offset: disabled [ 483.223848][T12963] Rebooting in 86400 seconds..