last executing test programs: 1m28.432575966s ago: executing program 5 (id=4846): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)=@multiplanar_overlay={0xd, 0x3, 0x4, 0x80, 0xffff, {}, {0x0, 0x2, 0x80, 0x4, 0x80, 0x3}, 0x2400, 0x3, {0x0}, 0x3}) 1m28.007411704s ago: executing program 5 (id=4850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42087}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xd}]}, 0x3c}}, 0x0) 1m27.604284323s ago: executing program 5 (id=4854): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 1m27.083012939s ago: executing program 5 (id=4859): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 1m26.780051233s ago: executing program 5 (id=4867): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 1m26.050100295s ago: executing program 5 (id=4873): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}]}}) 1m25.224898504s ago: executing program 32 (id=4873): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}]}}) 4.967639972s ago: executing program 1 (id=5825): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000500)=0x13, 0x1) 4.662225531s ago: executing program 1 (id=5827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4.241670384s ago: executing program 1 (id=5832): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@cache_fscache}]}}) 3.521693115s ago: executing program 2 (id=5842): r0 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000480)=@ethtool_sset_info={0x37, 0xffffffff, 0x1ff}}) 3.235733334s ago: executing program 2 (id=5847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, 0x0, &(0x7f0000000080)) 3.231633346s ago: executing program 1 (id=5848): r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"18a858aa6d4e81c98d7e13f8ebf75946", 0x0, 0x0, {0x3, 0x4}, {0x7d5e, 0x8001}, 0x5, [0x8001, 0xc, 0x6, 0x2, 0x7fffffffffffffff, 0x8001, 0x1, 0xffffffffffffffff, 0x7, 0x0, 0x1, 0x6, 0x6, 0x5, 0x7fff, 0x81]}) 2.954560544s ago: executing program 2 (id=5851): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2c, @string={0x2c, 0x3, "da2c083acb2917b7c725c3a22c36262c3c46f70dde2ba98c18a5d37bfb328e769e3c0fd684d443426b8a"}}, 0x0, 0x0}, 0x0) 2.877172324s ago: executing program 0 (id=5852): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7ffe, 0x2) ppoll(&(0x7f0000000340)=[{r0, 0x433}], 0x1, 0x0, 0x0, 0x0) 2.651921288s ago: executing program 0 (id=5856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 2.565427292s ago: executing program 6 (id=5857): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000200)=0x0) timer_gettime(r0, &(0x7f0000000000)) 2.487696634s ago: executing program 0 (id=5858): r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x2d41) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000dc0)="1ed832a839", 0x5}, {0x0}], 0x2) 2.382691868s ago: executing program 0 (id=5859): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2.326672695s ago: executing program 6 (id=5860): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f0000007400)=ANY=[], 0x1, 0x6174, &(0x7f0000001280)="$eJzs3b2PHGcdB/Dfvt6LiXNKEQULoYsTXkKIX4MxBEhSQEGTArmhQLYul8jCAWQb5EQWvugaCipqChASJUKUiII/IAUtHRUVlmwkkCsGzd3z+OY2u95zzrezd8/nI51nf/vM7D5z353bWc/MPgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxHe/872znYi4/LN0x0rEp6IX0Y1YquvViFhaXcnz9yPiudhqjmcjYrAQUS+/9c/TEa9GxEfHI+7dv71W331uj/349h///rsfHHvrb38YnP7vn272Xps0361bv/zPn+/sb50BAACgNFVVVZ30Mf9E+nzfbbtTAMBM5Pf/Ksn3H/n6V/986y/z1B+1Wq1Wq2dQN1Xj3WkWEbHRXKbeZ3A4HgAOmY140HYXaJH8i9aPiGNtdwKYa522O8CBuHf/9lon5dtpvh+sbrfnc0F25b/ReXh9x6TpNKPnmMzq9bUZvXhmQn+WZtSHeZLz747mf3m7fZjmO+j8Z2VS/sPtS5+Kk/PvjeY/4ujk3x2bf6ly/v3Hyr8nfwAAAAAAmGP5//9XWj7+u7D/VdmTRx3/XZ1RHwAAAAAAAADgSdvv+H8PGf8PAAAA5lb9Wb32m+M79036Lrb6/kudiKdG5gcKky6WWW67HwAAAAAAAAAAAABQkv72ObyXOhGDiHhqebmqqvqnabR+XPtd/rArff2hZG3/kQcAgG0fHR+5lr8TsRgRl9J3/Q2Wl5eranFpuVqulhby/uxwYbFaanyuzdP6voXhHnaI+8OqfrDFxnJN0z4vT2sffbz6uYZVbw8de0IG6bc5obmlsAEg2X43uucd6Yipqqcn7XzALrb/o8f2z160/ToFAAAADl5VVVUnfZ33iXTMv9t2pwCAmcjv/6PHBQ6kjjjYx5/3emHn9z4X/VGr1Wp1cXVTNd6dZhERG81l6n0Gw/EDwCGzEQ/a7gItkn/R+hHxXNudAOZap+0OcCDu3b+91kn5dprvB2l893wuyK78Nzpby+Xlx02nGT3HZFavr83oxTMT+vPsjPowT3L+3dH8L2+3D9N8B53/rEzKv17PlRb607acf280/xFHJ//u2PxLlfPvP1b+PfkDAAAAAMAcy///v+L4b15lAAAAAAAAADh07t2/vZave83H/z8zZj7Xfx5NOf+O/IuU8++O5P/Fkfl6jdt339zJ/9/3b6/9/ua/Pp2ne81/IT9kJ72yOukV0UnP1Omn6T5XcMTmoDesn2nQ6fb66ZyfavBOXI1rsR5nds3bTb+Pnfazu9rrng52tZ/b1d7/WPv5Xe2D9L0D1VJuPxVr8eO4Fm9vtddtC1PWf3FKezWlPeffs/0XKeffb/zU+S+n9s7ItHb3w+7HtvvmdNzzvHH1s784c/CrM9Vm9B6uW1O9fidb6M+ZiF8/iIif3li/furWlZs3r5+NNDk2bNx7LtLkCcv5D7Z+Fnb+/r+w3Z7/7je317sfDh87/3mxGf2J+b/QuF2v70sz7lsbcv7D9JPzfzu1j9/+D3P+k7f/l1voDwAAAAAAAAAAAAAAADxKVVVbl4i+EREX0vU/bV2bCQDMxvE0ze//9f7A9xvtVaJWq9Vqtfro1E3VeK83i4j4a3OZep/h5+MeDACYZ/+LiH+03QlaI/+C5e/7q6cvtt0ZYKZuvP/BD69cu7Z+/UbbPQEAAAAAAAAAPqk8/udqY/znFyNiZWS+XeO/vhmr+x3/s59vPBxg9AkP9D3BZnfY6zaGG38+tsbnPjVp/O+T8ejxv/tTnm8wpX04pX1hSvvi2Ht30hp7oUdDzv/5xnjndf4nRoZfL2H819Ex70uQ8z/ZeD3X+X9hZL5m/tVv5y7/jb3OuBndXfmfvvneT07feP+DV66+d+Xd9XfXf3T+7Nkz5y9cuHjx4ul3rl5bP7P978H0eg7k/PPY184DLUvOP2cu/7Lk/D+XavmXJef/+VTLvyw5/7y/J/+y5PzzZx/5lyXn/1Kq5V+WnP+XUi3/suT8X061/MuS8/9yquVflpz/K6mWf1ly/qdSLf+y5PxPp3oP+ft6+CMk55+PcNn+y5Lzz2c2yL8sOf9zqZZ/WXL+51Mt/7Lk/F9NtfzLkvP/SqrlX5ac/4VUy78sOf+vplr+Zcn5X0y1/MuS8/9aquVflpz/11Mt/7Lk/F9LtfzLkvP/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/3qq5V+Wne//d8MNN9zIN9r+ywQAAAAAAAAAAAAAjJrF6cRtryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+Zl/stUOIgRCc/A1sEhNCsmTXduIX/k0xAQINUAokFPqC7XrXZsFveO0SKJJNDSUSRkUVVdMLWkCojVpVWBUXtKI0F1Vfrkp7QW8qqkpIjaqAAhJSXyBbzZzneTwzOztn7R2vZ8/z+Uj2b3fmzJwzZ87M7nft7x4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa3f7Guc80iqJo/mn9taUoXtD8eNPkltZlr7veWwgAAACs1k9bfz93U7pg/wpu1LbM373iH7++uLi4WLxv9HfHv7C4mK6YLIrxjUXRui669O/vb7QvE1woJhojbZ+PVKx+tOL6sYrrxyuu31Bx/caK6ycqrl+yA5bYVP48pnVn21sfbil3aXFzMd66bnuPW11obBwZiT/LaWm0brM4fqSYL44Vc8VMx/Llso3W8t+8vbmutxZxXSNt69rWPEJ++InDcRsaYR9v71jX5fuMvv+GYvJHP/zE4T868+ytvWblbui4v3I7776juZ2fCpeU29ooNqZ9ErdzpG07t/V4TkY7trPRul3z4+7tfG6F2zl6eTPXVPdzPlGMtD7+dms/jbX/WC/tp23hsv+6syiK85c3u3uZJesqRorNHZeMXH5+JsojsnkfzUPpxcXYFR2nt6/gOG3O2e2dx2n3ayI+/7eH240tsw3tT9P3P7lhyfN+pcdp1HzUy71Wuo/BQb9WhuUYjMfFt1sP+omex+D28Pg/cdfyx2DPY6fHMZged9sxeEfVMTiyYbS1zelJaLRuc/kY3NGx/GhrTY3WfOau/sfg9Jnjp6YXPvbx184fP3R07ujciV07dszs2r17796900fmj83NlH9f5d4efpuLkfQauCPsu/gaeHXXsu2H6uKXB/c6nOjzOtzSteygX4dj3Q+usTYvyKXHdPnaeLS50ycujhTLvMZaz889q38dpsfd9joca3sd9vya0uN1OLaC12FzmVP3rOx7lrG2P7224Vp9LdjSdgx2fz/SfQwO+vuRYTkGJ8Jx8a/3LP+1YFvY3iemrvT7kdElx2B6uOG9p3lJ+n5/Ym9r9Doub2teccOG4uzC3On7Hj905szpHUUYa+IlbcdK9/G6ue0xFUuO15ErPl73z7/iidt6XL4l7KuJ1zb/mlj2uWouc/99/Z+r1le33vuz49KdRRgDttb7s9dX8+b+TFmyz/5sLvOp6dV/L55yadv77/gy778x9z9fri/d1YXR8bHy9Tua9s54x/tx51M11nrvarTW/dz0yt6Px8OftX4/vrnP+/HWrmUH/X483v3g4vtxo+qnHavT/XxOhOPk2Ez/9+PmMlt3XukxOdb3/fjOMBth/78mJIWUi9qOneWO27SusbHx8LjG4ho6j9NdHcuPh2zWXNdTO6/uOL37zvK+RtOju2ytjtPJrmUHfZym96vljtNG1U/frk738zkRjoubd/U/TpvLPH3/6t87N8UP2947N1Qdg+OjG5rbPJ4OwvL9fnFTPAbvKw4XJ4tjxWzr2g2t46nRWtfUAys7BjeEP2v9Xrm1zzF4d9eygz4G09ex5Y69xtjSBz8A3c/nRDgunnyg/zHYXOZNewb7vevd4ZK0TNv3rt0/X1vuZ163de2ma/kzr+Z2/s2e/j+bbS5zbO+V5sz+++necMkNPfZT9+t3udfUbLE2+2lr2M5n9y6/n5rb01zmC/tWeDztL4ri3Eceav28N/z7yp+f/c7XO/7dpde/6Zz7yEM/uPHI317J9gOw/j1fjs3l17q2f5layb//AwAAAOtCzP0jYSbyPwAAANRGzP3xf4Un8j8AAADURsz9Y2EmmeT/rW96dv75c0Vq5i8G8fq0Gx4pl4sd15nw+eTiZc3LH/rq3I//8tzK1j1SFMVPHvmNnstvfSRuV2kybOelN3devvSG51a0/oOPXV6uvb/+pXD/8fGs9DDoVcGdKYrimzd9rrWeyfdfbM2nHznYmu8+/8SF5jLP7Ss/j7d/5iXl8l8M5d/9Rw513P6ZsB++F+bM23rvj3i7r118zbY97728vni7xh0vbD3sJz9Q3m/8PTmfv1AuH/fzctv/V5996mvN5R9/Ve/tPzfSe/ufCvf71TD/++Xl8u3PQfPzeLtPh+2P64u3u+8r3+q5/Zc+Uy5/6uFyuYNhxvXfHT7f/vCz8+376/HGoY7HVbylXC6uf+Y7v926Pt5fvP/u7Z84cLFjf3QfH0//c3k/013Lx8vjeqK/6Fp/837aj8+4/qd+62DHfq5a/6V3P/Py5v12r//eruVGu27f/Rub/uDTn+u5vrg9+//sVMfj2f+u8DoO63/yA+F4DNf/z6XPdaw3OviuzvefuPyXtpzreDzRW39Urv/S64+25n9M/vj3b3jBjS88/8rmviuKb7+nvL+q9R/9w5Md2//lW+5pPR/x+tjR717/cuL6T3906sTJhbPzs217tfW7c95ebs/GiU2bm9t7U3hv7f78wMkzH5w7PTkzOVMUk/X9FXpX7Sth/qAc56/09vc8Fp7P237vm5vv+qfPxsv/5dHy8otvK79uvTos9/lw+Zby+VtsrHL9T95+S+v13Xi6/Lyjxz4A27b/594VLRgef/f3BfF4P/XSD7b2Q/O61teN+Lpe5fZ/d7a8n2+E/boYfjPzHbdcXl/78vF3I1x8T/l6X/X+C29z8Xn94/B8v+N75f3H7YqP97vh+5hvbe18v4vHxzfOjXTff+u3eJwP7yfF+fL6uFTc3xefu6Xn5sXfQ1Kcv7X1+e+k+7n1ih7mchY+tjB9bP7E2cenz8wtnJle+NjHDxw/efbEmQOt3+V54ENVt7/8/rS59f40O7f7/mJmU1EUJ4uZNXjDujbb3/xoZdt/6rHDs3tm7pqdO3Lo7JEzj52aO3308MLC4bnZhbsOHTky99Gq28/PPrhj575de3ZOHZ2ffXDvvn279k3NnzjZ3Ixyoyrsnvnw1InTB1o3WXjw/n07Hnjg/pmp4ydn5x7cMzMzdbbq9q2vTVPNW//61Om5Y4fOzB+fm1qY//jcgzv27d69s/K3AR4/dWRhcvr02RPTZxfmTk+Xj2XyTOvi5te+qttTTwv/Vn4/261R/iK+4p337k6/n7Xpq59c9q7KRbp+geiz4XfR/MOLTu1dyecx94+HmWSS/wEAACAHMfdvCDOR/wEAAKA2Yu7fGGYi/wMAAEBtxNw/EWaSSf7X/9f/X1n/v7xe/z+v/v+pj5S90vXe/4/9ef3/PFzn/v+q16//r/9fv/7/yvvz63379f/1/1lq2Pr/MfdvKoos8z8AAADkIOb+zWEm8j8AAADURsz9N4SZyP8AAABQGzH3vyDMJJP8r/+/ov7/zqrCVf37/87/r/9frM/+f3xy9P+zccX9+/c+2vGp/n+g/6//r/+v/6//z6qNL3vN9er/x9x/Y5hJJvkfAAAAchBz/wvDTOR/AAAAqI2Y+28KM5H/AQAAoDZi7t8SZpJJ/tf/d/5//X/9/3XU/+8o0q7J+f/bNkb/f32o3/n/f6r/vy76/xP6/+ux/z8+2O0f7v5/5ebr/3NNDNv5/2Puf1GYSSb5HwAAAHIQc/+Lw0zkfwAAAKiNmPtfEmYi/wMAAEBtxNx/c5hJJvlf/1//f4X9/y/p/+v/D0H/v+PxrEn/v+/5/8uP9P+HS/36/87/X6yL/r/z/xfrsf8/4O0f7v7/oM//P/7m7tvr/9PLsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAA1EbM/S8LM5H/AQAAoDZi7t8aZpJJ/tf/1/93/n/9f/3/3uuv7v+X9P+Hi/5/f/r/FfT/9f/1/1fW/+/xza/+P70MW/8/5v5bw0wyyf8AAACQg5j7bwszkf8BAACgNmLu/39hJvI/AAAA1EbM/dvCTDLJ//r/+v/6/3n1/+/doP+v/19v+v/96f9X0P/X/9f/X+H5/5e6kv7/xqo7ozaGrf8fc//Lw0wyyf8AAACQg5j7XxFmIv8DAABAbcTc/8owE/kfAAAAaiPm/skwk0zyv/5/vfr/f/rXT76y0P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/7WEmmeR/AAAAyEHM/XeEmcj/AAAAUBsx998ZZiL/AwAAQG3E3L89zCST/K//X6/+f6T/v4b9/y8+nO5H/7/k/P+96f+vDf3/HtpepPr/FfT/9f+z7//H7371/xmMYev/x9z/qjCTTPI/AAAA5CDm/rvCTOR/AAAAqI2Y+18dZiL/AwAAQG3E3H93mEkm+V//X/9f/9/5//X/e69f/3990v/vT/+/gv6//n/2/X/n/2ewhq3/H3P/a8JMMsn/AAAAkIOY++8JM5H/AQAAoDbi/98s/9+r/A8AAAB1FHP/VJhJJvlf/1//P6f+f0P/X/9f/7/29P/70/+voP+v/6//r//PQA1b/z/m/teGmWSS/wEAACAHMfffF2Yi/wMAAEBtxNw/HWYi/wMAAEBtxNw/E2aSSf7X/9f/z6n/7/z/+v/rof/f0P9fFf3//vT/K+j/6//Xrf9fFPr/XFfD1v+PuX9HmEkm+R8AAAByEHP/zjAT+R8AAABqI+b+XWEm8j8AAADURsz994eZZJL/9f/1//X/9f/1/3uv3/n/1yf9//70/yvo/+v/163/7/z/XGfD1v+Puf+BMJNM8j8AAADkIOb+3WEm8j8AAADURsz9e8JM5H8AAACojZj794aZZJL/9f9r0v//zb/vWLf+v/5/v/UPpv+/Sf8/TP3/4VLT/n/3y+Kq6f9X0P/X/9f/1/9noIat/x9z/74wk0zyPwAAAOQg5v7XhZl05P8Lf7LGmwUAAAAMUMz9/z/MxL//AwAAQG3E3P8zYSaZ5H/9/5r0/7vo/+v/91u/8//r/9dZTfv/A6P/XyHX/n94Q7ve/fnVut7br/+v/89S177/Hz9aWf8/5v4Hw0wyyf8AAACQg5j7fzbMRP4HAACA2oi5//VhJvI/AAAA1EbM/fvDTDLJ//r/+v/6//r/16b///qi2zD2/5sHj/5/vej/96f/XyHX/n9wvfvz63379f/1/1lq2M7/H3P/G8JMMsn/AAAAkIOY+x8KM5H/AQAAoDZi7n9jmIn8DwAAALURc/+bwkwyyf/6//r/+v/6/87/33v9+v/rk/5/f/r/FfT/9f/1//X/Gahh6//H3P/mMJNM8j8AAADkIOb+h8NM5H8AAACojZj73xJmIv8DAABAbcTc/9Ywk0zyv/6//r/+v/6//n/v9ev/r0/6//3p/1fQ/9f/797+1pu9/r/+P1dr2Pr/Mff/XJhJJvkfAAAAchBz/yNhJvI/AAAA1EbM/W8LM5H/AQAAoDZi7n97mEkm+V//X/9f/1//X/+/9/r1/9cn/f/+9P8r6P/r/zv/v/4/AzVs/f+Y+98RZpJJ/gcAAIAcxNz/82Em8j8AAADURsz97wwzkf8BAACgNmLu/4Uwk0zyv/6//r/+v/5/Fv3/5o30/7Og/9+f/n+FHv3/jfr/A+vPbxrIVl6/7a+i/6//z1LD1v+Puf9dYSaZ5H8AAADIQcz97w4zkf8BAACgNmLuf0+YifwPAAAAtRFz/6NhJpnkf/3/LPv/6SHr/5f0/zPo/zv/fzb0//vT/6/g/P/O/6//r//PQA1b/z/m/sfCTDLJ/wAAAJCDmPvfG2Yi/wMAAEBtxNz/i2Em8j8AAADURsz97wszyST/6/9n2f93/v816/+PdRwfOfX/J9qez3Rc6v/r/68B/f/+9P8r6P/r/w9z/z8czZuWub3+P8No2Pr/Mfe/P8wkk/wPAAAAOYi5/5fCTOR/AAAAqI2Y+385zET+BwAAgNqIuf9Xwkwyyf/6//r/+v/O/+/8/73Xr/+/Pun/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfyDMRP4HAACA2oi5/2CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLQv9f/1//X/9f/1//n9UYtv5/zP2Hwkwyyf8AAACQg5j7fy3MRP4HAACA2oi5/3CYifwPAAAAtRFz/2yYSSb5X///Wp3/P16ST///J/r/+v+B/n9v+v9rw/n/+9P/r6D/r/+v/6//z0ANW/8/5v65MJNM8j8AAADUWPpxcMz9R8JM5H8AAACojZj7j4aZyP8AAABQGzH3fzDMJJP8r/9/rfr/zv/fa/v1/2P/f6xjef3/kv6//v8g6P/3p/9fQf9f/1//X/+fgRq2/n/M/fNhJpnkfwAAAMhBzP0fCjOR/wEAAKA2Yu7/cJiJ/A8AAAC1EXP/sTCTTPJ/ffr//1tus/5/x+30/6v7/42iOO/8//r/vdav/78+6f/3p/9fQf9f/1//X/+fgRq2/n/M/cfDTDLJ/wAAAJCDmPtPhJnI/wAAwP+xdx9Nct1VH8f78WNb0gpeAlXsWLGEFW+BLTuq2LChSCYHY3IwweRkggkm5xxNzjlnk3M0yYaqoTw650gz07otadoz9/7P57PgoEHjblmD4Oepb11gGLn77xu32P8AAAAwjNz994tbmuz/cfr//ET9/0r/v4Dn/+/9+fr/0/T/+v9tONDfX3phn3/O/v/Od7ninvp//b/+f5L+X/+v/2e/ufX/ufvvH7c02f8AAADQQe7+B8Qt9j8AAAAMI3f/A+MW+x8AAACGkbv/irilyf7X/+v/9f/6/z39/w36//Ps/++YH9f/z4vn/0/T/2+wnf7//1f6f/2//l//z6659f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAAwjd/9D4hb7HwAAAIaRu/+hcUuT/a//1//r//X/nv+//vU9/3+Z9P/T9P8beP6//l//r/9nq+bW/+fuf1jc0mT/AwAAQAe5+x8et9j/AAAAMIzc/Y+IW+x/AAAAGEbu/kfGLU32v/5f/6//1//r/9e/vv5/ma5bnfkzQf9/kP5/gw39/2ql/59y3v38+l/ect7/Oej/9f8cNLf+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuvzJusf8BAABgGLn7HxO3NNn/+n/9v/5f/6//X//6+v9l8vz/aYfv/+90+/vcq2//7/n/0zz/X/+v/2e/ufX/ufuvilua7H8AAADoIHf/Y+MW+x8AAACGkbv/cXGL/Q8AAADDyN3/+Lilyf7X/7fp/3drF/2//l//r/8fnf5/muf/b7D7x9yp+qH+X/+v/9f/czhz6/9z9z8hbmmy/wEAAKCD3P1PjFvsfwAAABhG7v4nxS32PwAAAAwjd/+T45Ym+1//36b/9/x//b/+X//fgv5/mv5/g1Ge/3+RXzXH3c8f1nG/f/2//p+D5tb/5+5/StzSZP8DAABAB7n7nxq32P8AAAAwjNz9T4tb7H8AAAAYRu7+q+OWJvtf/7+l/v+ygx/T/2+z/89X0P/r//X/+v9p+v9p+v8NRun/L9Jx9/NLf//6f/0/B82t/8/d//S4pcn+BwAAgA5y9z8jbrH/AQAAYBi5+58Zt9j/AAAAMIzc/c+KW5rsf/2/5/9fTP9/b8//1//r//X/M6X/n6b/30D/r//X/+v/2aq59f+5+6+JW5rsfwAAAOggd/+z4xb7HwAAAIaRu/85cYv9DwAAAMPI3f/cuKXJ/tf/6/+X8fx//b/+X/+v/z8/+v9p+v8N9P/6f/2//p+tmlH/f9ZnnVw9L25psv8BAACgg9z9z49b7H8AAAAYRu7+F8Qt9j8AAAAMI3f/C+OWJvtf/z+b/n835xur/z+1Wq30/6um/f+ps34/6+tS/6//PwL6/2n6/w30//p//b/+n62aUf+/++Pc/S+KW5rsfwAAAOggd/+L4xb7HwAAAIaRu/8lcYv9DwAAAMPI3f/SuGWo/X/inP+J/n82/f+usfp/z//f//Ux5/7/1p/k+f/6/xHo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5rb/0z9Oozf53LL7v4XyMAAAAwL9fu/uvJ1cvilqG+/w8AAAC95e5/edxi/wMAAMBCXXPgI7n7XxG3NNn/+v/t9v+Xn/Ux/b/+f//Xx5z7/20//1//f5D+/2jo/6fp/zfQ/+v/9f/6f7Zqbv1/7v5Xxi1N9j8AAAB0kLv/urjF/gcAAIBh5O5/Vdxi/wMAAMAwcve/Om5psv/1/57/r//X/+v/17++/n+Z9P/T9P8b6P/1/8fb/58482/1/4zhAvr/nZ2dK2/z/j93/2vilib7HwAAADrI3f/auGXP/r9+/7ejAAAAgAXJ3X993OL7/wAAADCM3P2vi1ua7H/9f9P+P7/U9f+79P/6/3Wvr/9fJv3/NP3/Bvp//b/n/+v/2aq5Pf8/d//r45Ym+x8AAAA6yN3/hrjF/gcAAIBh5O5/Y9xi/wMAAMAwcve/KW5psv/1/037f8//1//r/4+6/79lpf8/Eovo/0+d+/Xn3v9fpf/X/09o1//f/a57fqj/1/9z0Nz6/9z9b45bmux/AAAA6CB3/1viFvsfAAAAhpG7/61xi/0PAAAAw8jd/7a46dIm+1//r//X/+v/9f/rX/+In/9/+Wq10v9vwSL6/wlz7/89/1//P6Vd/7+P/l//z0Fz6/9z9789bmmy/wEAAKCD3P3viFvsfwAAABhG7v53xi32PwAAAAwjd/+74pYm+1//r//X/194/3/zzs6O/n9B/f9Vi+j/Pf9/S/T/0/T/G+j/9f/6f/0/R+K4+v/c/e+OW5rsfwAAAOggd/974hb7HwAAAIaRu/+9cYv9DwAAAMPI3f++uKXJ/tf/6//1/57/f2J2/f/JPX+9Js//1/9vif5/2hz7/7P/DNH/6/+X/P4H6f+v0f+zTXN7/n/u/vfHLU32PwAAAHSQu/8Dcesf3dr/AAAAMIzc/R+MW+x/AAAAGEbu/g/FLU32v/5f/6//1/8P//x//X8r+v9pc+z/z6b/1/8v+f0P0v97/j9bNbf+P3f/h+OWJvsfAAAAOsjd/5G4xf4HAACAYeTu/2jcYv8DAADAMHL33xC3NNn/+n/9v/5f/6//P/17qP8fg/5/2tH0/6f0//r/6uf/L/5boP/X/2/6fMY0t/4/d//H4pYm+x8AAAA6yN3/8bjF/gcAAIBh5O7/RNxi/wMAAMAiXbrmY7n7Pxm3NNn/+n/9v/5f/6//X//6+v9l0v9P8/z/DfT/F9jP32HPj5b2/P/9//ul/9f/s31z6/9z938qbmmy/wEAAKCD3P2fjlvsfwAAABhG7v7PxC32PwAAAAwjd/9n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/8f6/Pylv3/9v/6fg+bW/+fu/1zc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGMbu7s+4rOH+1//r//X/+n/9//rX1/8vk/5/mv5/A/2//l//r/9nq+bW/39x97NOrr4UtzTZ/wAAANBB7v4vxy32PwAAAAwjd/9X4hb7HwAAAIaRu/+rcUuT/a//1/8vo//f2dm5Uv+v/9/76znT/9+o/6fo/6fp/zfQ/+v/9f/6f7Zqbv1/7v6vxS1N9j8AAAB0kLv/63GL/Q8AAADDyN3/jbjF/gcAAIBh5O7/ZtzSZP/r/2fQ/5/U/3v+v/5/5fn/+v8t0f9P0/9vMGL/f/L8f/nH3c8f1nG/f/2//p+D5tb/5+7/VtzSZP8DAABAB7n7vx232P8AAAAwjNz934lb7H8AAAAYRu7+78YtTfa//v/o+v9b/951ef7/qdX696//1//r//X/tzX9/zT9/wYj9v8X4Lj7+aW/f/2//p+D5tb/5+7/XtzSZP8DAABAB7n7vx+32P8AAAAwjNz9P4hb7H8AAAAYRu7+H8YtTfa//n8Gz/8fsP/3/P/1Xx/6/1n3/5fo/8eg/5+m/99A/6//1/9vqf/Pr2b9f3dz6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAABhG7v6fxC32PwAAAAwjd/+NcctZ+39d2z0K/b/+X/+v/9f/r399/f8y6f+nnW//f2J1uP4/6f/1//r/rv2/5/9z2tz6/9z9P41bfP8fAAAAFueyc3w8d//P4hb7HwAAAIaRu//ncYv9DwAAAMPI3f+LuOWmS47rLR0p/b/+X/+v/9f/r399/f8y6f+nef7/Bovv/3d2ds7z/4ets6V+/m76/zH6/9VK/8/hza3/z93/y7jF9/8BAABgGLn7fxW32P8AAAAwjNz9v45b7H8AAAAYRu7+38QtTfa//l//f8j+fzfN1P+fpv8/Tf+/nv7/aOj/p+n/N1h8/384x93PL/39j9b/e/4/2zC3/j93/2/jlib7HwAAADrI3f+7uMX+BwAAgGHk7v993GL/AwAAwDBy9/8hbmmy/4+t/4+/1fr/xff/nv+v/9f/6/9nRf8/Tf+/gf5f/6//1/+zVXPr/3P3/zFuabL/AQAAoIPc/X+KW+x/AAAAGEbu/j/HLfY/AAAADCN3/1/ilib73/P/9f/6f/2//n/96+v/l0n/P03/v179Run/9f/6f/0/WzW3/j93/1/jlib7HwAAADrI3f+3uMX+BwAAgGHk7r8pbrH/AQAAYBi5+/8etzTZ//p//b/+X/+v/1//+vr/ZdL/TzvO/v8et9v8sp7/f+z9f74F/b/+X//PVsyt/8/d/4+4pcn+BwAAgA5y9/8zbrH/AQAAYBi5+/8Vt9j/AAAAMIzc/f+OW5rs/w39/4n6ifr/Sfr/ve9f/7/+60P/r//X/9/29P/TPP9/A/2/5//r//X/bNXc+v/c/TfHLU32PwAAAHSQu/+WuMX+BwAAgGHk7v9P3GL/AwAAwDBy9/83bmmy/z3/X/+v/9f/6//Xv77+f5n0/9P0/xvo//X/+n/9P1s1t/4/d///AgAA//+XbGLE") truncate(&(0x7f0000000000)='./file1\x00', 0x103000) 2.272318554s ago: executing program 0 (id=5862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002200)={0xb0, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x98, 0x38, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid}, @nested={0x8c, 0x87, 0x0, 0x1, [@typed={0x19, 0x151, 0x0, 0x0, @binary="91018c2efba0c17412e0b64aa197ff87b5cda32c15"}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x7f}, @typed={0x5d, 0x12d, 0x0, 0x0, @binary="3214522eed17b91d91395488f6602dbfdd330f4d42ac45f23a8e9dea126c1f79c2c21eb6e104e6bc87807ca4cd229658aa91c32ac310162a721bdf335d9a2b73123c8629a8c3349e0fa9e18530e2e28272c63be62de347179a"}]}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.954825713s ago: executing program 0 (id=5865): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f76800090501"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.586576145s ago: executing program 3 (id=5868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a01"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.556795232s ago: executing program 4 (id=5869): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0xd, 0x1, 0xc7, 0x0}) 1.344352273s ago: executing program 3 (id=5870): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0x401, @private0, 0xc}}]}, 0x38}}, 0x20000000) 1.270839326s ago: executing program 4 (id=5871): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x1, 0x1}, 0x3d9fa54c6a19dfe2) 1.122667419s ago: executing program 1 (id=5872): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x9, 0x0, 0x0) 1.100832113s ago: executing program 3 (id=5873): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) 1.0823647s ago: executing program 4 (id=5874): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) 1.025352207s ago: executing program 2 (id=5875): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @string=&(0x7f0000000140)}}) 932.00681ms ago: executing program 6 (id=5876): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x128, 0x1170, 0x1170, 0x0, 0x1170, 0x290, 0x1398, 0x1398, 0x290, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x5}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x3, 0x2}}, @common=@ah={{0x30}, {[0x4d6, 0x4d3], 0x9, 0xb}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 837.829253ms ago: executing program 3 (id=5877): r0 = syz_open_dev$radio(&(0x7f0000003040), 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000003080)={0x8000, "c3904a7167fbd71029d59003b8bb21b37e3d5d9a0da31a8dfe99e96462d3a4c7", 0x400, 0x86, 0xe, 0x2, 0x4}) 724.74337ms ago: executing program 4 (id=5878): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0xffffffff, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x2], [0x0, 0x4, 0xfffffffd, 0x37d7, 0x3ff], [0xffffffff, 0x20000232, 0x9, 0x0, 0x1, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x8, 0x4}, {}, {0x0, 0x1}, {0x400000, 0xfffffffe}, {0xfffffffe}, {0x0, 0x3}, {0xf, 0x5}, {0x0, 0x405}, {}, {0x8}]}) 650.10167ms ago: executing program 2 (id=5879): r0 = syz_open_dev$video4linux(&(0x7f0000006bc0), 0x6, 0x80000) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000006c00)={0x1, 0x0, {0x5, 0x3, 0x0, 0x6}}) 592.831856ms ago: executing program 6 (id=5880): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x70bd28, 0x25dfdbfe, {0x81, 0x0, 0x80, 0xfd}}, 0x1c}}, 0x884) 546.372252ms ago: executing program 3 (id=5881): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) 395.341843ms ago: executing program 4 (id=5882): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) 393.920089ms ago: executing program 2 (id=5883): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000240)='./file1\x00', 0x2004018, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 262.53984ms ago: executing program 6 (id=5884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000008100000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xc2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x37}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 218.848727ms ago: executing program 3 (id=5885): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x808808, &(0x7f0000000340)=ANY=[], 0x1, 0x2e2, &(0x7f0000000900)="$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") sync() 150.720908ms ago: executing program 4 (id=5886): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010000, &(0x7f0000000080)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@utf8no}, {@utf8}, {@numtail}, {@fat=@showexec}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@fat=@nocase}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) 142.124072ms ago: executing program 1 (id=5887): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x2a00845, &(0x7f00000002c0)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x2000008, 0xe, 0x40000006}) 0s ago: executing program 6 (id=5888): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) kernel console output (not intermixed with test programs): usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 531.945225][ T24] usb 1-1: SerialNumber: syz [ 532.090220][T15978] loop4: detected capacity change from 0 to 2048 [ 532.291827][ T6070] usb 1-1: USB disconnect, device number 98 [ 532.498763][T15984] loop2: detected capacity change from 0 to 4096 [ 532.590278][T15986] loop4: detected capacity change from 0 to 1764 [ 532.790918][T15976] loop5: detected capacity change from 0 to 32768 [ 532.830961][T15976] jfs_mount: Failed to read AGGREGATE_I [ 532.836825][T15976] Mount JFS Failure: -5 [ 534.151060][T15990] (syz.2.4544,15990,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 534.221418][T15990] (syz.2.4544,15990,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 534.255090][T15993] (syz.4.4545,15993,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 534.306997][T15993] (syz.4.4545,15993,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 534.403389][T15996] (syz.0.4547,15996,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 534.442150][T15996] (syz.0.4547,15996,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 535.023593][T16009] set_capacity_and_notify: 4 callbacks suppressed [ 535.023616][T16009] loop0: detected capacity change from 0 to 4096 [ 535.087320][T16009] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 535.334618][T16000] loop1: detected capacity change from 0 to 32768 [ 535.383235][T16000] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4549 (16000) [ 535.476662][T16000] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 535.523791][T16000] BTRFS info (device loop1): using blake2b checksum algorithm [ 535.684783][T16000] BTRFS info (device loop1): enabling ssd optimizations [ 535.742863][T16000] BTRFS info (device loop1): turning on async discard [ 535.788311][T16000] BTRFS info (device loop1): enabling free space tree [ 535.901889][T16007] loop4: detected capacity change from 0 to 32768 [ 535.988707][ T5954] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 536.005738][T16007] (syz.4.4551,16007,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 536.058075][T16007] (syz.4.4551,16007,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 537.148226][T16005] loop2: detected capacity change from 0 to 65536 [ 537.234042][T16005] (syz.2.4550,16005,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 537.284928][T16005] (syz.2.4550,16005,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 537.510529][T16030] loop4: detected capacity change from 0 to 32768 [ 537.541764][T16030] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4555 (16030) [ 537.626859][T16030] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 537.671039][T16030] BTRFS info (device loop4): using xxhash64 checksum algorithm [ 537.918627][T16030] BTRFS info (device loop4): enabling ssd optimizations [ 537.964335][T16030] BTRFS info (device loop4): turning on async discard [ 538.010770][T16030] BTRFS info (device loop4): enabling free space tree [ 538.094388][T16011] loop0: detected capacity change from 0 to 65536 [ 538.150181][T16011] (syz.0.4553,16011,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 538.205679][T16011] (syz.0.4553,16011,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 538.287553][ T5964] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 538.673713][T16038] loop2: detected capacity change from 0 to 32768 [ 538.706212][T16038] BTRFS: device fsid cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4558 (16038) [ 538.773233][T16038] BTRFS info (device loop2): first mount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 538.825496][T16038] BTRFS info (device loop2): using crc32c checksum algorithm [ 539.016175][T16038] BTRFS info (device loop2): enabling ssd optimizations [ 539.058056][T16038] BTRFS info (device loop2): turning on async discard [ 539.109860][T16038] BTRFS info (device loop2): enabling free space tree [ 539.255904][T16071] loop4: detected capacity change from 0 to 128 [ 539.289236][ T5953] BTRFS info (device loop2): last unmount of filesystem cd9941ec-5f77-48ee-8e7d-6f6f8a5e5a08 [ 539.721674][T16077] loop4: detected capacity change from 0 to 1 [ 539.765906][T16077] syz.4.4561: attempt to access beyond end of device [ 539.765906][T16077] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 539.827954][T16077] SQUASHFS error: Failed to read block 0x0: -5 [ 539.878498][T16077] unable to read squashfs_super_block [ 539.946817][T16075] loop2: detected capacity change from 0 to 4096 [ 540.080374][T16075] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 540.181833][T16075] ntfs3(loop2): ino=1a, mi_enum_attr [ 540.210181][T16075] ntfs3(loop2): ino=1a, mi_enum_attr [ 540.236091][T16075] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 540.308474][T16079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.391306][T16081] set_capacity_and_notify: 1 callbacks suppressed [ 540.391326][T16081] loop1: detected capacity change from 0 to 2048 [ 540.472756][T16081] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.713707][T16083] loop4: detected capacity change from 0 to 256 [ 540.733976][T16085] loop3: detected capacity change from 0 to 128 [ 540.758288][T16083] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 540.801588][T16083] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 540.813215][T16085] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 540.839788][T16083] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 540.843927][T16087] loop2: detected capacity change from 0 to 1024 [ 540.870731][T16083] UDF-fs: Scanning with blocksize 512 failed [ 540.909858][T16085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.930898][T16087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.973676][T16083] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 540.981695][T16091] loop5: detected capacity change from 0 to 512 [ 541.037851][T16083] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.043721][T16091] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 541.107974][T16091] UDF-fs: Scanning with blocksize 512 failed [ 541.110420][T16089] loop1: detected capacity change from 0 to 4096 [ 541.144269][T16091] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 541.173449][T16089] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 541.215432][T16091] UDF-fs: Scanning with blocksize 1024 failed [ 541.229867][T16089] UDF-fs: Scanning with blocksize 512 failed [ 541.270554][T16091] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 541.284592][T16091] UDF-fs: Scanning with blocksize 2048 failed [ 541.339978][T16089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.351917][T16091] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 541.388679][T16094] loop3: detected capacity change from 0 to 128 [ 541.409595][T16095] loop2: detected capacity change from 0 to 128 [ 541.431629][T16094] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 541.438008][T16091] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.458382][T16095] ufs: You didn't specify the type of your ufs filesystem [ 541.458382][T16095] [ 541.458382][T16095] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 541.458382][T16095] [ 541.458382][T16095] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 541.508248][T16097] loop4: detected capacity change from 0 to 128 [ 541.522223][T16073] loop0: detected capacity change from 0 to 32768 [ 541.545649][T16094] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.563107][T16095] ufs: ufstype=old is supported read-only [ 541.610877][T16095] ufs: ufs_fill_super(): bad magic number [ 541.620221][T16073] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 541.715442][T16073] dlm: no local IP address has been set [ 541.770019][T16073] dlm: cannot start dlm midcomms -107 [ 541.836462][T16073] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 542.432024][T16117] omfs: Invalid superblock (7b3184f9) [ 544.012254][T16123] XFS (loop0): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 544.094318][T16123] XFS (loop0): Log size 516 blocks too small, minimum size is 636 blocks [ 544.149097][T16123] XFS (loop0): AAIEEE! Log failed size checks. Abort! [ 544.204744][T16123] XFS (loop0): log mount failed [ 544.382176][T16122] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 544.470808][T16125] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 544.698707][T16125] XFS (loop4): Ending clean mount [ 544.882150][ T5964] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 546.226441][T16147] set_capacity_and_notify: 6 callbacks suppressed [ 546.226463][T16147] loop0: detected capacity change from 0 to 32768 [ 546.310190][T16147] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 546.488139][T16147] XFS (loop0): Ending clean mount [ 546.582267][ T5949] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 547.489087][T16149] loop2: detected capacity change from 0 to 65536 [ 547.533408][T16149] XFS (loop2): Deprecated V4 format (crc=0) not supported by kernel. [ 548.866679][T16178] loop0: detected capacity change from 0 to 32768 [ 548.901011][T16178] (syz.0.4594,16178,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 548.933748][T16178] (syz.0.4594,16178,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 549.422653][T16195] loop4: detected capacity change from 0 to 8 [ 549.870720][T16202] comedi comedi1: pcm3724: I/O base address or length out of range [ 551.778399][T16217] loop4: detected capacity change from 0 to 40427 [ 551.814438][T16217] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 551.850196][T16217] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 551.863536][T16242] loop3: detected capacity change from 0 to 8 [ 551.894103][T16217] F2FS-fs (loop4): invalid crc value [ 552.233802][T16250] loop3: detected capacity change from 0 to 1024 [ 552.292270][T16217] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 552.363326][T16217] F2FS-fs (loop4): Start checkpoint disabled! [ 552.375431][T16226] loop5: detected capacity change from 0 to 40427 [ 552.444739][T16217] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 552.481653][T16217] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 552.520416][T16217] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 552.837964][T16226] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 552.884620][T16226] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 553.511075][T16285] loop2: detected capacity change from 0 to 64 [ 553.909486][T16295] loop3: detected capacity change from 0 to 8 [ 553.979584][T16295] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 554.264589][T16301] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4640'. [ 554.525478][T16311] netlink: 'syz.5.4656': attribute type 1 has an invalid length. [ 554.596456][T16279] loop1: detected capacity change from 0 to 32768 [ 554.652208][T16317] loop0: detected capacity change from 0 to 512 [ 554.682633][T16279] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 554.708480][T16317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 554.717549][T16317] System zones: 1-20 [ 554.748925][T16317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.847049][T16279] XFS (loop1): Ending clean mount [ 555.087295][ T5954] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 555.111121][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.411530][T16347] warning: `syz.1.4668' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 555.850212][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 555.955138][T16365] pimreg: entered allmulticast mode [ 556.035118][T16366] loop0: detected capacity change from 0 to 2048 [ 556.096809][T16366] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 556.165082][T16366] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.554006][T16382] loop3: detected capacity change from 0 to 1024 [ 556.599418][T16382] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 556.814467][T16390] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4690'. [ 556.856851][T16390] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4690'. [ 557.002089][T16398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4692'. [ 557.264631][T16406] qrtr: Invalid version 178 [ 557.329920][T16409] loop5: detected capacity change from 0 to 256 [ 558.008497][T16437] loop5: detected capacity change from 0 to 1024 [ 558.120188][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4717'. [ 558.326729][T16451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4719'. [ 558.462844][T16459] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 558.502955][T16454] loop5: detected capacity change from 0 to 2048 [ 558.525988][T16460] loop2: detected capacity change from 0 to 128 [ 558.553301][T16454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.589592][T16460] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 558.714919][T16460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 559.232910][T16480] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.356115][T16483] loop5: detected capacity change from 0 to 2048 [ 559.416247][T16486] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 559.527397][T16483] NILFS (loop5): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 559.566534][T16494] loop3: detected capacity change from 0 to 1024 [ 559.596530][T16483] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=16) [ 559.653467][T16483] Remounting filesystem read-only [ 559.682228][T16483] NILFS (loop5): error -5 truncating bmap (ino=16) [ 559.725848][T16497] program syz.4.4741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.781362][ T24] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 559.857145][ T5963] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 559.981974][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 560.024123][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.061513][ T24] usb 1-1: Product: syz [ 560.071644][ T24] usb 1-1: Manufacturer: syz [ 560.081327][ T24] usb 1-1: SerialNumber: syz [ 560.148415][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 560.205562][T16513] IPv6: Can't replace route, no match found [ 560.304913][ T29] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 560.637892][ T24] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 560.698750][T16525] [U]  [ 560.760084][ T6077] usb 1-1: USB disconnect, device number 99 [ 560.829019][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 560.855444][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.880502][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.914320][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 560.939970][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.961655][ T24] usb 6-1: Product: syz [ 560.972431][ T24] usb 6-1: Manufacturer: syz [ 560.988427][ T24] usb 6-1: SerialNumber: syz [ 561.026025][ T24] usb 6-1: 0:2 : does not exist [ 561.233041][ T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 561.251981][T16538] loop1: detected capacity change from 0 to 4096 [ 561.264879][T16538] ntfs3(loop1): ino=3, Correct links count -> 2. [ 561.393031][ T24] usb 6-1: USB disconnect, device number 100 [ 561.406702][ T6070] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 561.482819][ T29] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 561.504521][T16548] overlayfs: conflicting options: nfs_export=on,index=off [ 561.517915][ T29] ath9k_htc: Failed to initialize the device [ 561.530258][ T6077] usb 1-1: ath9k_htc: USB layer deinitialized [ 561.545129][T16552] loop3: detected capacity change from 0 to 512 [ 561.582556][T16551] loop0: detected capacity change from 0 to 512 [ 561.591606][T16552] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 561.627950][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 561.630829][ T6070] usb 5-1: Using ep0 maxpacket: 8 [ 561.701757][T16552] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 561.727009][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 561.733494][ C0] EXT4-fs (loop3): initial error at time 1778073018: ext4_mb_generate_buddy:1317 [ 561.742668][ C0] EXT4-fs (loop3): last error at time 1778073018: ext4_mb_generate_buddy:1317 [ 561.748920][T16551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.776555][ T6070] usb 5-1: config 64 has an invalid interface number: 19 but max is 0 [ 561.797761][ T6070] usb 5-1: config 64 has no interface number 0 [ 561.802298][T16552] Quota error (device loop3): write_blk: dquota write failed [ 561.804621][ T6070] usb 5-1: config 64 interface 19 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.824809][ T6070] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 561.838561][ T6070] usb 5-1: config 64 interface 19 altsetting 0 endpoint 0x8F has invalid maxpacket 8522, setting to 1024 [ 561.851338][ T6070] usb 5-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 561.863001][ T6070] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.876954][T16551] ext4 filesystem being mounted at /777/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.891205][T16552] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 561.923927][ T6070] usb 5-1: probing VID:PID(2201:012C) [ 561.935471][T16552] Quota error (device loop3): write_blk: dquota write failed [ 561.963044][ T6070] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 8F [ 561.980628][T16552] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 562.006990][ T6070] usb 5-1: vub300 ignoring EndPoint(0) 8F [ 562.029918][T16552] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4769: Failed to acquire dquot type 1 [ 562.030365][ T6070] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 562.101485][T16552] loop3: lost filesystem error report for type 5 error -28 [ 562.102381][T16552] EXT4-fs (loop3): 1 truncate cleaned up [ 562.138495][ T6070] vub300 5-1:64.19: probe with driver vub300 failed with error -22 [ 562.165001][T16552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.197319][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.255128][ T6070] usb 5-1: USB disconnect, device number 94 [ 562.368478][T16552] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 562.506289][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.875485][T16583] loop5: detected capacity change from 0 to 4096 [ 562.897047][T16583] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 562.993716][T16583] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 563.024321][T16583] ntfs3(loop5): ino=19, mi_enum_attr [ 563.064346][T16589] loop1: detected capacity change from 0 to 4096 [ 563.108421][T16589] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 563.154627][T16583] ntfs3(loop5): failed to convert "c46c" to cp863 [ 563.231569][T16583] ntfs3(loop5): ino=20, mi_enum_attr [ 563.251007][T16589] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 563.771252][T16611] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 563.852726][T16611] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 564.354274][T16637] loop3: detected capacity change from 0 to 512 [ 564.375769][T16637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 564.437179][T16637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.478254][T16637] ext4 filesystem being mounted at /663/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 564.645107][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.082180][T16669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4823'. [ 565.150739][T16670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 565.159621][T16669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4823'. [ 566.144906][T16665] loop0: detected capacity change from 0 to 32768 [ 566.184602][T16665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4821 (16665) [ 566.271913][T16665] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 566.307637][T16719] Cannot find add_set index 2 as target [ 566.313915][T16665] BTRFS info (device loop0): using sha256 checksum algorithm [ 566.463623][ T31] audit: type=1326 audit(1778073023.148:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 566.506303][ T31] audit: type=1326 audit(1778073023.148:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 566.532320][T16665] BTRFS info (device loop0): enabling ssd optimizations [ 566.549388][T16665] BTRFS info (device loop0): turning on async discard [ 566.566112][T16665] BTRFS info (device loop0): enabling free space tree [ 566.572984][ T31] audit: type=1326 audit(1778073023.166:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 566.671928][ T31] audit: type=1326 audit(1778073023.166:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 566.757429][ T31] audit: type=1326 audit(1778073023.166:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 566.851134][ T31] audit: type=1326 audit(1778073023.166:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16733 comm="syz.4.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 567.082393][ T5949] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.906500][T16775] loop4: detected capacity change from 0 to 4096 [ 567.992516][ T6077] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 568.059630][T16788] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.214486][ T6077] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.256981][ T6077] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.326876][ T6077] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 568.338312][ T6077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.365326][ T6077] usb 1-1: SerialNumber: syz [ 568.400914][ T6077] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 568.445723][ T6077] usb-storage 1-1:1.0: USB Mass Storage device detected [ 568.475886][ T6077] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 568.498795][ T6077] scsi host1: usb-storage 1-1:1.0 [ 568.883151][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.125206][T16791] loop1: detected capacity change from 0 to 32768 [ 569.149497][T16791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4869 (16791) [ 569.196743][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.263178][T16791] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 569.295666][T16791] BTRFS info (device loop1): using sha256 checksum algorithm [ 569.416124][T16791] BTRFS info (device loop1): enabling ssd optimizations [ 569.441035][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.452070][T16791] BTRFS info (device loop1): turning on async discard [ 569.478361][T16791] BTRFS info (device loop1): enabling free space tree [ 569.551201][T16837] syz.4.4877 uses obsolete (PF_INET,SOCK_PACKET) [ 569.771869][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.808784][ T5954] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 569.906526][T16845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4879'. [ 569.968758][ T6101] usb 1-1: USB disconnect, device number 100 [ 570.054493][ T4937] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 570.069894][ T4937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 570.080322][ T4937] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 570.091720][ T4937] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 570.103783][ T4937] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 570.416226][T16860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4881'. [ 570.930367][T16870] loop4: detected capacity change from 0 to 1764 [ 571.026478][T16874] loop2: detected capacity change from 0 to 512 [ 571.091163][ T48] bridge_slave_1: left allmulticast mode [ 571.099687][T16870] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 571.105013][T16874] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 571.138475][ T48] bridge_slave_1: left promiscuous mode [ 571.164844][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.188543][T16874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 571.216484][T16874] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 571.234458][ T48] bridge_slave_0: left allmulticast mode [ 571.244907][T16874] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 571.256677][T16874] EXT4-fs (loop2): 1 truncate cleaned up [ 571.262987][ T48] bridge_slave_0: left promiscuous mode [ 571.270493][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.281693][T16874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.329602][T16874] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 571.511367][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.900405][T16899] loop1: detected capacity change from 0 to 2048 [ 571.935445][T16899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 572.116700][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.155848][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.176565][ T48] bond0 (unregistering): Released all slaves [ 572.243584][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4906'. [ 572.344505][ T4937] Bluetooth: hci4: command tx timeout [ 572.569649][T16921] netlink: 'syz.3.4910': attribute type 8 has an invalid length. [ 572.768088][T16926] ieee802154 phy0 wpan0: encryption failed: -90 [ 572.798062][ T6084] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 572.896645][T16934] loop3: detected capacity change from 0 to 512 [ 572.927284][T16934] EXT4-fs: Ignoring removed oldalloc option [ 572.981117][T16934] EXT4-fs (loop3): Test dummy encryption mode enabled [ 572.991238][ T6084] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 573.035457][ T6084] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 573.099283][ T6084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.132205][T16928] loop1: detected capacity change from 0 to 8192 [ 573.138808][T16934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.161366][ T6084] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 573.305448][T16928] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 573.307627][T16934] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 573.360653][T16928] FAT-fs (loop1): Filesystem has been set read-only [ 573.420260][T16943] loop0: detected capacity change from 0 to 4096 [ 573.471202][T16943] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 573.567619][T16943] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 573.629865][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.776431][T16953] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 574.032416][ T48] hsr_slave_0: left promiscuous mode [ 574.049402][T16962] loop4: detected capacity change from 0 to 64 [ 574.071702][ T48] hsr_slave_1: left promiscuous mode [ 574.104567][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.145712][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.178480][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.192449][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.393946][ T48] veth1_macvtap: left promiscuous mode [ 574.433553][ T48] veth0_macvtap: left promiscuous mode [ 574.461062][ T48] veth1_vlan: left promiscuous mode [ 574.482834][ T48] veth0_vlan: left promiscuous mode [ 574.529989][ T6084] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 574.553317][ T6084] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 574.561798][ T6084] stv0680 3-1:4.0: last error: 86, command = 0x78 [ 574.569109][ T4937] Bluetooth: hci4: command tx timeout [ 574.588141][ T6084] usb 3-1: USB disconnect, device number 117 [ 574.595769][T16971] loop0: detected capacity change from 0 to 512 [ 574.632992][T16971] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 575.240369][T16980] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4932'. [ 575.439366][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'. [ 575.752845][ T48] team0 (unregistering): Port device team_slave_1 removed [ 575.808658][ T48] team0 (unregistering): Port device team_slave_0 removed [ 575.883808][ T6101] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 576.102671][ T6101] usb 1-1: unable to get BOS descriptor or descriptor too short [ 576.136282][ T6101] usb 1-1: not running at top speed; connect to a high speed hub [ 576.159948][ T6101] usb 1-1: config 139 has an invalid interface number: 196 but max is 0 [ 576.179120][ T6101] usb 1-1: config 139 has no interface number 0 [ 576.191939][ T6101] usb 1-1: config 139 interface 196 has no altsetting 0 [ 576.206586][ T6101] usb 1-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=73.39 [ 576.220771][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.234520][ T6101] usb 1-1: Product: syz [ 576.239266][ T6101] usb 1-1: Manufacturer: syz [ 576.243958][ T6101] usb 1-1: SerialNumber: syz [ 576.292645][T16960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.316565][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 576.427993][T16969] hmac(sha224): entered promiscuous mode [ 576.508469][ T6101] gspca_main: spca501-2.14.0 probing 0733:0401 [ 576.547337][ T6101] gspca_spca501: reg write: error -71 [ 576.556371][ T6101] spca501 1-1:139.196: Reg write failed for 0x00,0xaa,0x00 [ 576.565030][ T6101] spca501 1-1:139.196: probe with driver spca501 failed with error -22 [ 576.681263][ T6101] usb 1-1: USB disconnect, device number 101 [ 576.727696][T17016] loop3: detected capacity change from 0 to 4096 [ 576.736392][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4949'. [ 576.772464][T17021] loop2: detected capacity change from 0 to 256 [ 576.795150][ T4937] Bluetooth: hci4: command tx timeout [ 576.801158][T17016] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 576.852538][T17021] FAT-fs (loop2): Directory bread(block 64) failed [ 576.859580][T17021] FAT-fs (loop2): Directory bread(block 65) failed [ 576.866267][T17021] FAT-fs (loop2): Directory bread(block 66) failed [ 576.874302][T17021] FAT-fs (loop2): Directory bread(block 67) failed [ 576.882810][T17021] FAT-fs (loop2): Directory bread(block 68) failed [ 576.918031][T17021] FAT-fs (loop2): Directory bread(block 69) failed [ 576.941153][T17021] FAT-fs (loop2): Directory bread(block 70) failed [ 576.960111][T17021] FAT-fs (loop2): Directory bread(block 71) failed [ 576.985240][T17021] FAT-fs (loop2): Directory bread(block 72) failed [ 577.014659][T17021] FAT-fs (loop2): Directory bread(block 73) failed [ 577.069858][ T6084] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 577.255167][ T6084] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 577.315962][ T6084] usb 5-1: config 0 interface 0 has no altsetting 0 [ 577.341630][T17030] loop1: detected capacity change from 0 to 1024 [ 577.349295][ T6084] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 577.378479][ T6084] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 577.423474][ T6084] usb 5-1: Product: syz [ 577.423500][ T6084] usb 5-1: Manufacturer: syz [ 577.423520][ T6084] usb 5-1: SerialNumber: syz [ 577.438515][ T6084] usb 5-1: config 0 descriptor?? [ 577.473962][ T6084] usb 5-1: selecting invalid altsetting 0 [ 577.768198][ T6084] usb 5-1: USB disconnect, device number 95 [ 577.897138][T10117] udevd[10117]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.198844][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.229112][ T6101] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 578.249669][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.274525][T16846] bridge_slave_0: entered allmulticast mode [ 578.289027][ T30] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 578.314001][T16846] bridge_slave_0: entered promiscuous mode [ 578.321380][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4961'. [ 578.352581][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.364410][T17061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4961'. [ 578.379619][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.398858][T16846] bridge_slave_1: entered allmulticast mode [ 578.415643][T16846] bridge_slave_1: entered promiscuous mode [ 578.422251][ T6101] usb 3-1: Using ep0 maxpacket: 32 [ 578.434890][ T6101] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 578.453777][ T6101] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 578.473371][ T30] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 578.484280][ T6101] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 578.519462][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 578.524981][ T6101] usb 3-1: config 1 has no interface number 0 [ 578.570493][ T6101] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.574274][ T30] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 8306, setting to 1024 [ 578.623118][ T6101] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.653327][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.660928][ T30] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 578.689579][ T6101] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 578.721657][ T30] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 578.740695][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 578.743067][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.765166][ T6101] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 578.765657][ T30] usb 2-1: SerialNumber: syz [ 578.787123][ T6101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.901701][ T6101] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 578.946997][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 579.003691][T16846] team0: Port device team_slave_0 added [ 579.030119][ T4937] Bluetooth: hci4: command tx timeout [ 579.048547][T16846] team0: Port device team_slave_1 added [ 579.079573][ T6101] snd_usb_pod 3-1:1.1: cannot start listening: -90 [ 579.093475][ T30] usbtest 2-1:1.0: Linux user mode ISO test driver [ 579.101367][ T6101] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 579.109067][ T6101] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 579.128159][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.128170][ T30] usbtest 2-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 579.143136][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.201416][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.225366][ T30] usb 2-1: USB disconnect, device number 100 [ 579.250030][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.273319][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.338932][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.377218][ T6101] usb 3-1: USB disconnect, device number 118 [ 579.579609][T16846] hsr_slave_0: entered promiscuous mode [ 579.594637][T16846] hsr_slave_1: entered promiscuous mode [ 579.633241][T17073] loop4: detected capacity change from 0 to 32768 [ 579.691508][T17073] JBD2: Ignoring recovery information on journal [ 579.888292][T17073] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 580.318696][ T5964] ocfs2: Unmounting device (7,4) on (node local) [ 580.615076][T17124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.249149][T16846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 581.257879][T17142] Driver unsupported XDP return value 0 on prog (id 338) dev N/A, expect packet loss! [ 581.264390][T17145] netlink: 'syz.1.4994': attribute type 1 has an invalid length. [ 581.319403][T17145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4994'. [ 581.423969][T16846] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 581.469472][T16846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 581.602729][T16846] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 581.661765][T16846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 581.718548][T16846] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 581.748457][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 581.764695][T17156] loop1: detected capacity change from 0 to 64 [ 581.769597][T16846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 581.844301][T16846] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.904236][T17156] syz.1.4999: attempt to access beyond end of device [ 581.904236][T17156] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 581.989766][T17160] loop2: detected capacity change from 0 to 4096 [ 581.995638][T17156] Buffer I/O error on dev loop1, logical block 512, async page read [ 582.025828][T17160] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 582.048779][T17156] syz.1.4999: attempt to access beyond end of device [ 582.048779][T17156] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 582.048820][T17156] Buffer I/O error on dev loop1, logical block 56576, async page read [ 582.137601][T17160] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 582.250889][T17160] ntfs3(loop2): ino=19, mi_enum_attr [ 582.421467][T17160] ntfs3(loop2): failed to convert "c46c" to cp863 [ 582.462845][T17160] ntfs3(loop2): ino=20, mi_enum_attr [ 582.492350][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.633114][T17181] xt_CT: No such helper "snmp_trap" [ 582.642206][T16846] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.722848][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.730073][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.809286][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.816532][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.073757][T17202] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 583.134379][T17209] netlink: 276 bytes leftover after parsing attributes in process `syz.2.5017'. [ 583.351596][T17217] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 583.591156][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5022'. [ 583.878092][T17237] overlay: Bad value for 'workdir' [ 583.985536][T17239] loop0: detected capacity change from 0 to 736 [ 584.514061][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 584.773587][T17269] netlink: 'syz.0.5034': attribute type 10 has an invalid length. [ 584.810755][T17269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5034'. [ 584.847489][T17269] bridge0: port 3(team0) entered blocking state [ 584.896525][T17269] bridge0: port 3(team0) entered disabled state [ 584.922156][T17269] team0: entered allmulticast mode [ 584.951939][T17269] team_slave_0: entered allmulticast mode [ 584.980390][T17269] team_slave_1: entered allmulticast mode [ 585.009677][T17269] team0: entered promiscuous mode [ 585.033666][T17269] team_slave_0: entered promiscuous mode [ 585.065026][T17269] team_slave_1: entered promiscuous mode [ 585.087284][T17269] bridge0: port 3(team0) entered blocking state [ 585.096092][T17269] bridge0: port 3(team0) entered forwarding state [ 585.157020][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5042'. [ 585.252179][T17279] hmac(sha224): entered promiscuous mode [ 585.306065][T16846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.349620][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.357054][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.398841][T17287] loop1: detected capacity change from 0 to 1024 [ 585.465663][T17287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.538189][T17298] loop3: detected capacity change from 0 to 2048 [ 585.568480][T17287] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.5043: missing EA_INODE flag [ 585.585598][T17298] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 585.624166][T17287] EXT4-fs (loop1): Remounting filesystem read-only [ 585.655722][T17287] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 585.919968][ T5954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.950790][T17307] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 586.283843][T17274] loop4: detected capacity change from 0 to 32768 [ 586.362601][T17274] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 586.462675][T17274] XFS (loop4): Ending clean mount [ 586.517903][T17274] XFS (loop4): Quotacheck needed: Please wait. [ 586.663029][T16846] veth0_vlan: entered promiscuous mode [ 586.728571][T16846] veth1_vlan: entered promiscuous mode [ 586.774684][T17274] XFS (loop4): Quotacheck: Done. [ 586.883930][T17340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5063'. [ 586.946843][T16846] veth0_macvtap: entered promiscuous mode [ 586.964983][T16846] veth1_macvtap: entered promiscuous mode [ 587.040624][T16846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.053068][ T5964] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 587.076300][T16846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.112274][ T37] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.176658][ T37] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.201727][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.246674][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.385605][T17314] loop2: detected capacity change from 0 to 32768 [ 587.419398][T17314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5051 (17314) [ 587.519259][T17314] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 587.572584][T17314] BTRFS info (device loop2): using sha256 checksum algorithm [ 587.748056][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.779152][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.881437][T17314] BTRFS info (device loop2): enabling ssd optimizations [ 587.918892][T17314] BTRFS info (device loop2): turning on async discard [ 587.939769][T17314] BTRFS info (device loop2): enabling free space tree [ 587.980274][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.012274][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.069502][T17314] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same [ 588.332697][ T5953] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 588.553945][T17394] loop1: detected capacity change from 0 to 1024 [ 588.636498][T17394] hfsplus: (loop1): Attributes File (cnid 0x8) map record invalid or bitmap corruption detected, forcing read-only. [ 588.698302][T17394] hfsplus: Run fsck.hfsplus to repair. [ 588.922014][T17409] netlink: zone id is out of range [ 588.962529][T17409] netlink: zone id is out of range [ 589.003028][T17409] netlink: zone id is out of range [ 589.029696][T17409] netlink: zone id is out of range [ 589.054144][T17409] netlink: zone id is out of range [ 589.099428][T17409] netlink: zone id is out of range [ 589.127091][T17409] netlink: zone id is out of range [ 589.165321][T17409] netlink: zone id is out of range [ 589.196227][T17409] netlink: zone id is out of range [ 589.226332][T17409] netlink: zone id is out of range [ 589.383278][T17423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5080'. [ 589.572073][T17429] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5081'. [ 589.738131][T17434] loop3: detected capacity change from 0 to 1024 [ 589.855063][T17434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.039055][T17434] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.5085: missing EA_INODE flag [ 590.095886][T17434] EXT4-fs (loop3): Remounting filesystem read-only [ 590.210949][ T6101] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 590.226927][ T6070] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 590.268960][T17458] 8021q: VLANs not supported on lo [ 590.316503][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.413830][ T6101] usb 5-1: Using ep0 maxpacket: 32 [ 590.419068][ T6070] usb 3-1: Using ep0 maxpacket: 32 [ 590.451094][ T6101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.475499][ T6070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 590.507300][ T6101] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.526897][ T6070] usb 3-1: config 6 has an invalid interface number: 118 but max is 0 [ 590.548618][T17464] libceph: resolve '400' (ret=-3): failed [ 590.553557][ T6101] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 590.565762][ T6070] usb 3-1: config 6 has no interface number 0 [ 590.587207][ T6070] usb 3-1: config 6 interface 118 has no altsetting 0 [ 590.604675][ T6101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.633206][ T6070] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=89.62 [ 590.656391][ T6101] usb 5-1: config 0 descriptor?? [ 590.675316][ T6070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.698862][ T6101] hub 5-1:0.0: USB hub found [ 590.712688][ T6070] usb 3-1: Product: syz [ 590.730511][ T6070] usb 3-1: Manufacturer: syz [ 590.750481][ T6070] usb 3-1: SerialNumber: syz [ 590.906549][T17438] loop1: detected capacity change from 0 to 32768 [ 590.950426][ T6101] hub 5-1:0.0: 1 port detected [ 591.042348][ T6070] gspca_main: mars-2.14.0 probing 093a:050f [ 591.105000][ T6070] usb 3-1: USB disconnect, device number 119 [ 591.178589][ T6101] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 591.223352][ T6101] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 591.285653][ T6101] usbhid 5-1:0.0: can't add hid device: -71 [ 591.318898][ T6101] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 591.397085][ T6101] usb 5-1: USB disconnect, device number 96 [ 591.875209][T17501] loop6: detected capacity change from 0 to 256 [ 591.931004][T17501] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 591.975593][T17509] loop1: detected capacity change from 0 to 256 [ 591.998310][T17501] FAT-fs (loop6): error, corrupted file size (i_pos 196, 16779264) [ 592.036850][T17501] FAT-fs (loop6): Filesystem has been set read-only [ 592.681438][T17535] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5125'. [ 592.731193][T17535] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5125'. [ 592.866988][T17532] loop1: detected capacity change from 0 to 4096 [ 592.908052][T17541] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5128'. [ 592.953243][T17532] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 593.047868][T17532] ntfs3(loop1): ino=1a, mi_enum_attr [ 593.074677][T17532] ntfs3(loop1): ino=1a, mi_enum_attr [ 593.103378][T17532] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 593.268382][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 593.268403][ T31] audit: type=1800 audit(1778073048.214:33): pid=17532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5124" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 593.625570][T17527] loop4: detected capacity change from 0 to 32768 [ 593.642853][T17554] loop6: detected capacity change from 0 to 4096 [ 593.670278][T17554] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 593.683100][T17527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5122 (17527) [ 593.758358][T17527] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 593.777279][T17554] ntfs3(loop6): ino=19, mi_enum_attr [ 593.783113][T17527] BTRFS info (device loop4): using sha256 checksum algorithm [ 593.797529][T17554] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 593.812933][T17554] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 593.990228][T17527] BTRFS info (device loop4): enabling ssd optimizations [ 594.043673][T17527] BTRFS info (device loop4): turning on async discard [ 594.081667][T17527] BTRFS info (device loop4): enabling free space tree [ 594.238260][T17593] xt_addrtype: ipv6 does not support BROADCAST matching [ 594.374992][ T5964] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 594.530890][ T6084] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 594.712787][T17608] netlink: 'syz.1.5154': attribute type 10 has an invalid length. [ 594.745055][ T6084] usb 1-1: Using ep0 maxpacket: 8 [ 594.797759][ T6084] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 594.831077][ T6084] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 594.874302][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.875485][T17608] team0: Port device syz_tun added [ 594.915915][ T6084] usb 1-1: Product: syz [ 594.951508][ T6084] usb 1-1: Manufacturer: syz [ 594.966551][ T6084] usb 1-1: SerialNumber: syz [ 594.988638][T17616] netlink: 'syz.6.5157': attribute type 39 has an invalid length. [ 594.990006][ T6084] usb 1-1: config 0 descriptor?? [ 595.069269][ T6084] gspca_main: sq930x-2.14.0 probing 2770:930c [ 595.436475][T17630] ipt_REJECT: ECHOREPLY no longer supported. [ 595.495254][ T6084] gspca_sq930x: ucbus_write failed -71 [ 595.531953][ T6084] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 595.585004][ T6084] usb 1-1: USB disconnect, device number 102 [ 595.880750][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5171'. [ 597.116200][T17682] loop3: detected capacity change from 0 to 256 [ 597.204765][T17687] loop4: detected capacity change from 0 to 256 [ 597.221837][T17641] loop6: detected capacity change from 0 to 32768 [ 597.280932][T17641] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 597.319672][T17687] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 597.354713][T17641] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 597.745068][T17641] XFS (loop6): Ending clean mount [ 597.831733][T17710] bridge2: entered allmulticast mode [ 597.933810][T16846] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 598.041969][ T31] audit: type=1326 audit(1778073052.685:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.150454][ T31] audit: type=1326 audit(1778073052.713:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.245182][ T31] audit: type=1326 audit(1778073052.713:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.354450][ T31] audit: type=1326 audit(1778073052.713:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.417940][ T31] audit: type=1326 audit(1778073052.713:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.488252][ T31] audit: type=1326 audit(1778073052.713:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.551248][ T31] audit: type=1326 audit(1778073052.713:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.611556][ T31] audit: type=1326 audit(1778073052.713:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17714 comm="syz.2.5202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 598.618981][T17727] loop1: detected capacity change from 0 to 4096 [ 598.645533][ T6056] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 598.704124][T17727] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 598.804794][T17727] ntfs3(loop1): ino=19, mi_enum_attr [ 598.832055][ T6056] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 598.859694][ T6056] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.880363][T17727] ntfs3(loop1): failed to convert "c46c" to cp866 [ 598.895548][ T6056] usb 3-1: config 0 descriptor?? [ 598.906969][T17727] ntfs3(loop1): ino=20, mi_enum_attr [ 598.917431][ T6056] cp210x 3-1:0.0: cp210x converter detected [ 599.386983][ T6056] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 599.421590][ T6056] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 599.477308][ T6056] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 599.519042][ T6056] usb 3-1: cp210x converter now attached to ttyUSB0 [ 599.583389][ T6056] usb 3-1: USB disconnect, device number 120 [ 599.666564][ T6056] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 599.711591][ T6056] cp210x 3-1:0.0: device disconnected [ 599.854530][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5220'. [ 600.010143][T17735] loop6: detected capacity change from 0 to 32768 [ 600.549174][ T24] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 600.731067][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 600.763609][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 600.772724][T17794] 9p: Unknown access argument 18446744073709551615: -34 [ 600.800068][ T24] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 600.840549][ T24] usb 3-1: config 0 has no interface number 0 [ 600.872156][ T24] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 600.931165][ T24] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 600.983594][ T24] usb 3-1: config 0 interface 88 has no altsetting 0 [ 601.018059][ T24] usb 3-1: string descriptor 0 read error: -22 [ 601.029618][ T24] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 601.075007][ T24] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 601.163967][ T24] usb 3-1: config 0 descriptor?? [ 601.277037][ T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input47 [ 601.425893][ T24] input: failed to attach handler mousedev to device input47, error: -5 [ 601.492163][ T24] usb 3-1: USB disconnect, device number 121 [ 601.627522][T17820] loop1: detected capacity change from 0 to 2048 [ 601.718180][T17820] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 601.736579][ T6056] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 601.764116][T17820] NILFS (loop1): mounting unchecked fs [ 601.776301][ T6560] udevd[6560]: incorrect nilfs2 checksum on /dev/loop1 [ 601.836896][T17820] NILFS (loop1): recovery complete [ 601.871940][T17830] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.964498][ T6056] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 602.001964][ T6056] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 602.048562][ T6056] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 602.106204][ T6056] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 602.151936][ T6056] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.189243][T17815] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 602.445076][ T31] audit: type=1326 audit(1778073056.800:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17848 comm="syz.3.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524899cdd9 code=0x7ffc0000 [ 602.568312][ T31] audit: type=1326 audit(1778073056.809:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17848 comm="syz.3.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524899cdd9 code=0x7ffc0000 [ 602.594985][T17847] loop6: detected capacity change from 0 to 4096 [ 602.661035][ T31] audit: type=1326 audit(1778073056.847:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17848 comm="syz.3.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f524899cdd9 code=0x7ffc0000 [ 602.694161][ T6056] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 602.734727][ T6056] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input48 [ 602.790004][T17860] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 602.815601][ T31] audit: type=1326 audit(1778073056.847:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17848 comm="syz.3.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524899cdd9 code=0x7ffc0000 [ 602.904273][ T6056] usb 5-1: USB disconnect, device number 97 [ 602.910281][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 602.939789][ T31] audit: type=1326 audit(1778073056.847:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17848 comm="syz.3.5257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524899cdd9 code=0x7ffc0000 [ 603.004505][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5264'. [ 603.224434][T17876] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5268'. [ 603.591642][T17888] netlink: 'syz.0.5272': attribute type 16 has an invalid length. [ 603.634767][T17888] netlink: 'syz.0.5272': attribute type 17 has an invalid length. [ 603.666911][T17891] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5274'. [ 603.760546][T17888] bridge0: port 3(team0) entered disabled state [ 603.889722][T17888] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.944755][T17888] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.023920][T17905] loop3: detected capacity change from 0 to 128 [ 604.050797][T17906] loop2: detected capacity change from 0 to 512 [ 604.068994][T17906] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 604.085669][T17905] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 604.130008][T17905] FAT-fs (loop3): Filesystem has been set read-only [ 604.152031][ T801] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 604.169856][T17906] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 604.192535][T17906] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 604.206033][T17906] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.5280: Failed to acquire dquot type 1 [ 604.218682][T17906] loop2: lost filesystem error report for type 5 error -5 [ 604.225747][T17906] EXT4-fs (loop2): 1 truncate cleaned up [ 604.232985][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 604.233009][ C1] EXT4-fs (loop2): last error at time 1778073058: ext4_acquire_dquot:7034 [ 604.295132][T17906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 604.396854][T17914] xt_CT: No such helper "netbios-ns" [ 604.414230][ T801] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 604.448721][ T801] usb 5-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config [ 604.505758][ T801] usb 5-1: config 0 has no interface number 0 [ 604.525499][ T801] usb 5-1: too many endpoints for config 0 interface 104 altsetting 54: 52, using maximum allowed: 30 [ 604.562414][ T801] usb 5-1: config 0 interface 104 altsetting 54 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 604.606518][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 604.627922][ T801] usb 5-1: config 0 interface 104 has no altsetting 0 [ 604.648852][ T801] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 604.689002][ T801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.716873][ T801] usb 5-1: Product: syz [ 604.738553][ T801] usb 5-1: Manufacturer: syz [ 604.760067][ T801] usb 5-1: SerialNumber: syz [ 604.795597][ T801] usb 5-1: config 0 descriptor?? [ 605.097266][ T801] usb 5-1: USB disconnect, device number 98 [ 605.398440][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5296'. [ 605.452771][T17945] loop0: detected capacity change from 0 to 4096 [ 605.490492][T17945] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 605.625847][T17945] ntfs3(loop0): ino=19, mi_enum_attr [ 605.725805][T17945] ntfs3(loop0): failed to convert "c46c" to cp866 [ 605.771701][T17945] ntfs3(loop0): ino=20, mi_enum_attr [ 606.071722][T17973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5305'. [ 606.114692][T17973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5305'. [ 606.532489][T17993] net_ratelimit: 77 callbacks suppressed [ 606.532512][T17993] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 606.783166][T18000] loop1: detected capacity change from 0 to 512 [ 606.815909][ T6101] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 606.866084][T18005] netlink: 'syz.4.5318': attribute type 10 has an invalid length. [ 606.910037][T18000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.963494][T18005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.986666][T18005] team0: Port device bond0 added [ 607.017519][T18000] ext4 filesystem being mounted at /904/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.047453][ T6101] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 607.078691][ T6101] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 607.133009][ T6101] usb 1-1: config 0 has no interface number 0 [ 607.167812][ T6101] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12336, setting to 64 [ 607.226245][ T6101] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.259003][ T5954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.290464][ T6101] usb 1-1: config 0 interface 52 has no altsetting 0 [ 607.313865][ T6101] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 607.357657][ T6101] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 607.384430][ T6101] usb 1-1: Manufacturer: syz [ 607.431184][ T6101] usb 1-1: config 0 descriptor?? [ 607.451439][T18023] loop6: detected capacity change from 0 to 128 [ 607.468927][ T6101] hub 1-1:0.52: bad descriptor, ignoring hub [ 607.474964][ T6101] hub 1-1:0.52: probe with driver hub failed with error -5 [ 607.538268][T18023] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 607.552909][T18027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.570790][T18023] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 607.773617][ T6101] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input49 [ 607.908058][T16846] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 607.955289][ T6101] usb 1-1: Failed to suspend device, error -71 [ 608.006664][ T6101] usb 1-1: USB disconnect, device number 103 [ 608.057564][T18039] loop4: detected capacity change from 0 to 1024 [ 608.163242][T18039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 608.354794][ T801] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 608.478497][ T5964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 608.548993][ T801] usb 3-1: Using ep0 maxpacket: 16 [ 608.560752][ T801] usb 3-1: unable to get BOS descriptor or descriptor too short [ 608.589904][ T801] usb 3-1: config 4 has an invalid interface number: 237 but max is 0 [ 608.620957][ T801] usb 3-1: config 4 has no interface number 0 [ 608.649845][ T801] usb 3-1: config 4 interface 237 altsetting 229 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 608.702553][ T801] usb 3-1: config 4 interface 237 altsetting 229 endpoint 0xB has invalid maxpacket 608, setting to 64 [ 608.714253][T18065] xt_cluster: node mask cannot exceed total number of nodes [ 608.743449][ T801] usb 3-1: config 4 interface 237 has no altsetting 0 [ 608.751623][ T31] audit: type=1326 audit(1778073062.692:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 608.820500][ T801] usb 3-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=cd.ca [ 608.820538][ T801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.820564][ T801] usb 3-1: Product: syz [ 608.820584][ T801] usb 3-1: Manufacturer: syz [ 608.820604][ T801] usb 3-1: SerialNumber: syz [ 608.872543][ T31] audit: type=1326 audit(1778073062.692:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.084796][ T801] hub 3-1:4.237: bad descriptor, ignoring hub [ 609.104826][ T801] hub 3-1:4.237: probe with driver hub failed with error -5 [ 609.123636][ T31] audit: type=1326 audit(1778073062.692:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.154942][ T801] sierra 3-1:4.237: Sierra USB modem converter detected [ 609.191322][ T801] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 609.219676][ T31] audit: type=1326 audit(1778073062.730:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.280364][ T801] usb 3-1: Sierra USB modem converter now attached to ttyUSB1 [ 609.311596][ T31] audit: type=1326 audit(1778073062.730:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.372370][ T801] usb 3-1: USB disconnect, device number 122 [ 609.415401][ T31] audit: type=1326 audit(1778073062.730:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.502600][ T801] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 609.514224][T18085] program syz.6.5342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 609.560658][ T31] audit: type=1326 audit(1778073062.730:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.607521][ T801] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 609.662439][ T801] sierra 3-1:4.237: device disconnected [ 609.692032][ T31] audit: type=1326 audit(1778073062.730:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18064 comm="syz.0.5337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffbbb79cdd9 code=0x7ffc0000 [ 609.828833][ T31] audit: type=1326 audit(1778073062.982:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.4.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 609.892869][T18096] netlink: 'syz.4.5346': attribute type 2 has an invalid length. [ 609.922394][T18096] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5346'. [ 609.950469][ T31] audit: type=1326 audit(1778073062.992:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18072 comm="syz.4.5340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 610.335336][T18066] loop3: detected capacity change from 0 to 32768 [ 610.383560][T18066] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5336 (18066) [ 610.462949][T18066] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 610.523322][T18066] BTRFS info (device loop3): using sha256 checksum algorithm [ 610.755365][T18066] BTRFS info (device loop3): enabling ssd optimizations [ 610.770201][T18066] BTRFS info (device loop3): turning on async discard [ 610.802066][T18066] BTRFS info (device loop3): enabling free space tree [ 610.835868][T18122] loop4: detected capacity change from 0 to 4096 [ 610.890691][T18122] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 610.956123][T18145] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5356'. [ 611.048221][T18122] ntfs3(loop4): ino=19, mi_enum_attr [ 611.100949][ T5951] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 611.156319][T18122] ntfs3(loop4): failed to convert "c46c" to cp866 [ 611.164737][T18122] ntfs3(loop4): ino=20, mi_enum_attr [ 611.516115][T18157] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5364'. [ 611.652823][T18115] loop2: detected capacity change from 0 to 32768 [ 611.743261][ T29] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 611.959749][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 611.984089][ T29] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 612.026377][ T29] usb 4-1: config 0 interface 0 has no altsetting 0 [ 612.078646][ T29] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 612.120085][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.166923][ T29] usb 4-1: Product: syz [ 612.187806][ T29] usb 4-1: Manufacturer: syz [ 612.212897][ T29] usb 4-1: SerialNumber: syz [ 612.248118][ T29] usb 4-1: config 0 descriptor?? [ 612.301524][ T29] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 612.401213][T18179] openvswitch: netlink: IP tunnel dst address not specified [ 612.434032][T18182] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 612.518103][ T29] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 612.560582][ T29] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 612.727812][ T29] usb 4-1: USB disconnect, device number 77 [ 612.972069][T18204] netlink: 180 bytes leftover after parsing attributes in process `syz.6.5388'. [ 613.007715][T18204] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5388'. [ 613.141779][T18209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5390'. [ 613.526950][T18220] bond0: Error: Cannot enslave bond to itself. [ 613.854670][T18232] loop3: detected capacity change from 0 to 1024 [ 614.019756][T18240] loop0: detected capacity change from 0 to 64 [ 615.225253][T18279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5422'. [ 615.275686][T18279] netlink: 276 bytes leftover after parsing attributes in process `syz.0.5422'. [ 615.304885][T18278] bond1: option lacp_active: invalid value (8) [ 615.327581][T18278] bond1 (unregistering): Released all slaves [ 615.416591][T18238] loop6: detected capacity change from 0 to 32768 [ 615.452531][T18238] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5402 (18238) [ 615.525286][T18238] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 615.577875][T18238] BTRFS info (device loop6): using sha256 checksum algorithm [ 615.780421][T18307] loop4: detected capacity change from 0 to 128 [ 615.815800][T18238] BTRFS info (device loop6): enabling ssd optimizations [ 615.856595][T18238] BTRFS info (device loop6): turning on async discard [ 615.921251][T18238] BTRFS info (device loop6): enabling free space tree [ 615.928672][T18307] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.959300][T18312] loop2: detected capacity change from 0 to 2048 [ 615.969707][T18307] ext4 filesystem being mounted at /843/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 616.107169][ T5964] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.147638][T18319] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.285684][T16846] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.560848][T18329] netlink: 'syz.4.5441': attribute type 61 has an invalid length. [ 616.623658][T18331] misc userio: Invalid payload size [ 616.726673][ T29] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 616.953549][ T29] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 616.971385][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.001835][ T29] usb 1-1: config 0 descriptor?? [ 617.218479][T18352] loop4: detected capacity change from 0 to 64 [ 617.459499][T18351] loop6: detected capacity change from 0 to 4096 [ 617.467786][ T29] ath6kl: Failed to submit usb control message: -71 [ 617.493636][ T29] ath6kl: unable to send the bmi data to the device: -71 [ 617.521144][T18351] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 617.528507][ T29] ath6kl: Unable to send get target info: -71 [ 617.583317][ T29] ath6kl: Failed to init ath6kl core: -71 [ 617.606315][T18351] ntfs3(loop6): ino=1a, mi_enum_attr [ 617.618289][ T29] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 617.641760][T18351] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 617.707558][ T29] usb 1-1: USB disconnect, device number 104 [ 617.761963][T18365] loop3: detected capacity change from 0 to 256 [ 617.843634][T18365] FAT-fs (loop3): Directory bread(block 64) failed [ 617.874311][T18365] FAT-fs (loop3): Directory bread(block 65) failed [ 617.892819][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'. [ 617.893851][T18369] gtp0: entered promiscuous mode [ 617.909887][T18365] FAT-fs (loop3): Directory bread(block 66) failed [ 617.913662][T18369] gtp0: entered allmulticast mode [ 617.933392][T18365] FAT-fs (loop3): Directory bread(block 67) failed [ 617.963880][T18365] FAT-fs (loop3): Directory bread(block 68) failed [ 618.003614][T18365] FAT-fs (loop3): Directory bread(block 69) failed [ 618.026608][T18365] FAT-fs (loop3): Directory bread(block 70) failed [ 618.047880][T18365] FAT-fs (loop3): Directory bread(block 71) failed [ 618.071027][T18375] netlink: 'syz.6.5459': attribute type 21 has an invalid length. [ 618.089110][T18365] FAT-fs (loop3): Directory bread(block 72) failed [ 618.112426][T18375] netlink: 'syz.6.5459': attribute type 1 has an invalid length. [ 618.124589][T18365] FAT-fs (loop3): Directory bread(block 73) failed [ 618.141502][T18375] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5459'. [ 618.787353][T18399] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 618.828028][T18395] loop3: detected capacity change from 0 to 4096 [ 618.966723][T18395] ntfs3(loop3): ino=19, mi_enum_attr [ 619.173970][ T6070] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 619.325104][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.341329][T18421] loop3: detected capacity change from 0 to 512 [ 619.356894][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.372743][ T6070] usb 5-1: unable to get BOS descriptor or descriptor too short [ 619.404635][T18421] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5481: inode has both inline data and extents flags [ 619.429320][ T6070] usb 5-1: not running at top speed; connect to a high speed hub [ 619.465682][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.480017][T18426] loop0: detected capacity change from 0 to 1024 [ 619.482227][ T6070] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 619.488351][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 619.502082][T18421] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 619.509572][T18421] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5481: couldn't read orphan inode 15 (err -117) [ 619.515337][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.518825][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 619.518848][ C0] EXT4-fs (loop3): initial error at time 1778073072: ext4_orphan_get:1397: inode 15 [ 619.518887][ C0] EXT4-fs (loop3): last error at time 1778073072: ext4_orphan_get:1397: inode 15 [ 619.558159][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.558189][ T6070] usb 5-1: Product: syz [ 619.558206][ T6070] usb 5-1: Manufacturer: syz [ 619.558222][ T6070] usb 5-1: SerialNumber: syz [ 619.574532][T18421] loop3: lost filesystem error report for type 5 error -117 [ 619.579433][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.613647][T18421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.663752][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.672255][ T6070] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 619.696627][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.707997][ T29] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 619.721235][ T29] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 619.740071][ T29] usb 7-1: config 220 interface 0 has no altsetting 0 [ 619.771733][T18419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5482'. [ 619.800138][ T29] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 619.813362][ T5951] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.820677][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.832319][T18405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.860760][ T29] usb 7-1: Product: syz [ 619.871684][T18405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.878039][ T29] usb 7-1: Manufacturer: syz [ 619.921324][ T29] usb 7-1: SerialNumber: syz [ 619.983416][T18419] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.990858][T18419] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.021670][T18433] loop0: detected capacity change from 0 to 512 [ 620.042393][T18433] EXT4-fs: Ignoring removed i_version option [ 620.067643][ T6070] usb 5-1: USB disconnect, device number 99 [ 620.106714][T18433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.120319][T18433] ext4 filesystem being mounted at /907/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.209533][ T29] uvcvideo 7-1:220.0: probe with driver uvcvideo failed with error -22 [ 620.229749][ T29] usb 7-1: USB disconnect, device number 2 [ 620.352600][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.421322][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.461057][T18419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.481830][T18419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.533928][T18441] binfmt_misc: register: failed to install interpreter file ./file2 [ 620.856071][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.905131][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.948195][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.989018][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.103728][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 621.103749][ T31] audit: type=1326 audit(1778073074.253:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18456 comm="syz.2.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.235068][ T31] audit: type=1326 audit(1778073074.253:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18456 comm="syz.2.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.311784][ T31] audit: type=1326 audit(1778073074.290:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18456 comm="syz.2.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.344111][ T31] audit: type=1326 audit(1778073074.290:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18456 comm="syz.2.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.367445][ T31] audit: type=1326 audit(1778073074.468:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.2.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.402549][ T31] audit: type=1326 audit(1778073074.468:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.2.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.429004][ T31] audit: type=1326 audit(1778073074.477:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.2.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.471555][ T31] audit: type=1326 audit(1778073074.477:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.2.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.569386][ T31] audit: type=1326 audit(1778073074.477:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.2.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2a79cdd9 code=0x7ffc0000 [ 621.622755][ T6084] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 621.634239][ T31] audit: type=1326 audit(1778073074.524:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18469 comm="syz.2.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fae2a75d60e code=0x7ffc0000 [ 621.815610][ T6084] usb 5-1: Using ep0 maxpacket: 16 [ 621.831755][ T6084] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 621.863066][ T6084] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 621.903188][ T6084] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 621.928331][ T6084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.952844][ T6084] usb 5-1: Product: syz [ 621.964419][ T6084] usb 5-1: Manufacturer: syz [ 621.972323][ T6084] usb 5-1: SerialNumber: syz [ 622.007555][ T6056] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 622.031993][ T6084] usb 5-1: 0:2 : does not exist [ 622.058766][T18490] loop6: detected capacity change from 0 to 64 [ 622.197661][ T6056] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 622.228366][ T6056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.260799][ T6056] usb 4-1: Product: syz [ 622.275445][ T6056] usb 4-1: Manufacturer: syz [ 622.285357][ T6056] usb 4-1: SerialNumber: syz [ 622.305648][ T6056] usb 4-1: config 0 descriptor?? [ 622.340781][ T6056] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 078 [ 622.457614][ T6084] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 622.628011][ T6084] usb 5-1: USB disconnect, device number 100 [ 622.670904][T18479] loop2: detected capacity change from 0 to 32768 [ 622.713214][T18479] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5508 (18479) [ 622.764315][T18479] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 622.793636][ T6056] (null): failure reading functionality [ 622.798212][T18479] BTRFS info (device loop2): using sha256 checksum algorithm [ 622.815880][ T6056] i2c i2c-1: failure reading functionality [ 622.851331][ T6056] i2c i2c-1: connected i2c-tiny-usb device [ 622.886390][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.910691][ T6056] usb 4-1: USB disconnect, device number 78 [ 623.024421][T18479] BTRFS info (device loop2): enabling ssd optimizations [ 623.038591][T18524] loop6: detected capacity change from 0 to 1024 [ 623.079731][T18479] BTRFS info (device loop2): turning on async discard [ 623.111784][T18479] BTRFS info (device loop2): enabling free space tree [ 623.164497][T18524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 623.321356][T18536] loop1: detected capacity change from 0 to 2048 [ 623.342921][T18538] loop4: detected capacity change from 0 to 164 [ 623.355890][ T5953] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 623.421819][T18536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.494880][T16846] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 623.495993][T18536] ext4 filesystem being mounted at /948/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.585469][T18538] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 624.019339][T18536] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.5529: corrupted xattr block 128: overlapping e_value [ 624.181173][T18536] EXT4-fs (loop1): Remounting filesystem read-only [ 624.501675][ T5954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.702254][ T30] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 624.837503][T18573] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 624.865740][T18543] loop0: detected capacity change from 0 to 32768 [ 624.902697][ T30] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 624.948856][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.991128][ T30] usb 3-1: Product: syz [ 625.018701][ T30] usb 3-1: Manufacturer: syz [ 625.040322][ T30] usb 3-1: SerialNumber: syz [ 625.069835][ T30] usb 3-1: config 0 descriptor?? [ 625.094240][T18579] netlink: 'syz.1.5549': attribute type 6 has an invalid length. [ 625.118944][T18579] __nla_validate_parse: 138 callbacks suppressed [ 625.118963][T18579] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5549'. [ 625.495338][T18593] netlink: 'syz.1.5556': attribute type 21 has an invalid length. [ 625.528167][T18593] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5556'. [ 625.538544][ T30] usb 3-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 625.563521][T18593] netlink: 'syz.1.5556': attribute type 5 has an invalid length. [ 625.582814][ T30] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 625.593692][T18593] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5556'. [ 625.611639][ T30] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 625.673184][ T30] usb 3-1: USB disconnect, device number 123 [ 626.191231][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5567'. [ 626.230745][T18616] netlink: 'syz.6.5567': attribute type 2 has an invalid length. [ 626.258674][T18616] netlink: 'syz.6.5567': attribute type 1 has an invalid length. [ 626.528267][T18627] loop2: detected capacity change from 0 to 128 [ 626.860740][T18639] loop2: detected capacity change from 0 to 64 [ 627.042590][T18605] loop0: detected capacity change from 0 to 32768 [ 627.076511][T18605] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5560 (18605) [ 627.131857][T18605] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 627.186840][T18605] BTRFS info (device loop0): using sha256 checksum algorithm [ 627.359848][T18605] BTRFS info (device loop0): turning off barriers [ 627.401796][T18605] BTRFS info (device loop0): enabling free space tree [ 627.643174][ T5949] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 627.918888][T18678] loop4: detected capacity change from 0 to 4096 [ 627.925550][T18619] loop1: detected capacity change from 0 to 40427 [ 627.969195][T18678] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 628.001139][T18619] F2FS-fs (loop1): Wrong segment_count / block_count (64 > 16384) [ 628.040964][T18619] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 628.088592][T18678] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 628.189884][T18678] ntfs3(loop4): ino=5, "/" indx_read_ra [ 628.580323][T18619] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 628.656432][T18619] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 628.695802][T18619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 628.847232][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5601'. [ 629.372374][T18725] netlink: 'syz.4.5611': attribute type 2 has an invalid length. [ 629.418515][T18725] netlink: 'syz.4.5611': attribute type 2 has an invalid length. [ 629.532865][T18722] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 629.750240][T18734] No source specified [ 629.987597][T18743] loop6: detected capacity change from 0 to 764 [ 630.062260][T18743] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 630.141539][T18743] Symlink component flag not implemented [ 630.162193][T18749] ptrace attach of "./syz-executor exec"[5951] was attempted by "./syz-executor exec"[18749] [ 630.214287][T18743] Symlink component flag not implemented (7) [ 630.659820][ T6056] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 630.869370][ T6056] usb 2-1: unable to get BOS descriptor or descriptor too short [ 630.909137][ T6056] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.953227][ T6056] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 630.999361][ T6056] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 631.049058][ T6056] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 631.080815][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.114960][ T6056] usb 2-1: Product: syz [ 631.132156][ T6056] usb 2-1: Manufacturer: syz [ 631.154834][ T6056] usb 2-1: SerialNumber: syz [ 631.386267][T18788] loop3: detected capacity change from 0 to 24 [ 631.427840][T18788] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 631.544969][T18788] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 631.661391][ T6056] usb 2-1: USB disconnect, device number 101 [ 631.925389][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.991268][T18769] loop2: detected capacity change from 0 to 32768 [ 632.043173][T18769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5627 (18769) [ 632.113132][T18769] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 632.129793][T18769] BTRFS info (device loop2): using sha256 checksum algorithm [ 632.266416][T18769] BTRFS info (device loop2): enabling ssd optimizations [ 632.321203][T18769] BTRFS info (device loop2): turning on async discard [ 632.368048][ T30] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 632.368987][T18829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5646'. [ 632.382343][T18769] BTRFS info (device loop2): enabling free space tree [ 632.589057][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.610455][ T5953] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 632.655852][ T30] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 632.723879][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 632.779978][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.809194][ T30] usb 5-1: Product: syz [ 632.860324][ T30] usb 5-1: Manufacturer: syz [ 632.876466][ T30] usb 5-1: SerialNumber: syz [ 632.937456][ T30] cdc_ncm 5-1:1.0: skipping garbage [ 632.962080][ T30] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 633.017187][ T30] cdc_ncm 5-1:1.0: bind() failure [ 633.117696][T18854] netlink: 'syz.3.5654': attribute type 1 has an invalid length. [ 633.127470][ T30] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 633.140338][ T30] cdc_ncm 5-1:1.1: bind() failure [ 633.193726][ T30] usb 5-1: USB disconnect, device number 101 [ 633.450503][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 633.450525][ T31] audit: type=1326 audit(1778073085.794:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18857 comm="syz.0.5656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbbb79cdd9 code=0x0 [ 634.190175][T18878] loop2: detected capacity change from 0 to 1024 [ 634.213318][T18838] loop6: detected capacity change from 0 to 32768 [ 634.226318][T18878] EXT4-fs: Ignoring removed nobh option [ 634.253969][T18878] EXT4-fs: Ignoring removed bh option [ 634.314879][T18878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.406772][T18845] loop1: detected capacity change from 0 to 32768 [ 634.446596][T18845] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 634.609661][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.713127][T18845] XFS (loop1): Ending clean mount [ 634.777350][T18845] XFS (loop1): Quotacheck needed: Please wait. [ 635.077948][T18845] XFS (loop1): Quotacheck: Done. [ 635.235089][T18904] dlm: no locking on control device [ 635.254418][ T5954] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 635.356063][T18908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 635.409479][T18874] loop4: detected capacity change from 0 to 40427 [ 635.465897][T18873] loop3: detected capacity change from 0 to 32768 [ 635.494271][T18874] F2FS-fs (loop4): Corrupted extension count (33554469 + 1 > 64) [ 635.530030][T18873] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5661 (18873) [ 635.548125][T18874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 635.600264][T18874] F2FS-fs (loop4): invalid crc value [ 635.625876][T18873] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 635.680416][T18873] BTRFS info (device loop3): using sha256 checksum algorithm [ 635.843453][T18874] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 635.941836][T18874] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 635.949148][T18874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 636.043331][T18873] BTRFS info (device loop3): enabling ssd optimizations [ 636.077290][T18873] BTRFS info (device loop3): turning on async discard [ 636.085252][T18873] BTRFS info (device loop3): enabling free space tree [ 636.096015][T18874] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 636.306851][ T5951] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 636.879465][ T30] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 637.114925][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 637.128095][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 637.198499][ T30] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 637.232252][ T30] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 637.259215][ T30] usb 4-1: Product: syz [ 637.278473][ T30] usb 4-1: Manufacturer: syz [ 637.298420][ T30] usb 4-1: SerialNumber: syz [ 637.603849][ T30] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 637.612383][T18960] loop4: detected capacity change from 0 to 4096 [ 637.634304][T18960] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 637.643551][ T30] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 637.668554][ T30] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 637.680814][T18960] ntfs3(loop4): ino=3, mi_enum_attr [ 637.705989][ T30] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 637.819381][ T30] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 637.859560][ T30] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 637.881736][T18968] xt_connbytes: Forcing CT accounting to be enabled [ 637.915767][ T30] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 637.953399][T18968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 637.977747][ T30] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 637.979201][T18970] loop6: detected capacity change from 0 to 8 [ 638.024594][ T30] usb 4-1: USB disconnect, device number 79 [ 638.077757][ T30] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 638.134819][ T30] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 638.186657][ T30] visor 4-1:1.0: device disconnected [ 638.298568][T18951] loop1: detected capacity change from 0 to 32768 [ 638.342081][T18951] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5687 (18951) [ 638.355415][T18978] sctp: [Deprecated]: syz.6.5699 (pid 18978) Use of struct sctp_assoc_value in delayed_ack socket option. [ 638.355415][T18978] Use struct sctp_sack_info instead [ 638.403353][T18951] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.456872][T18951] BTRFS info (device loop1): using sha256 checksum algorithm [ 638.546208][T18956] loop0: detected capacity change from 0 to 32768 [ 638.584139][T18956] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 722891e8-38ff-44d1-9d6f-d2cfd351b5ae [ 638.612430][T18956] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5689 (18956) [ 638.731569][T18956] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.766097][T18951] BTRFS info (device loop1): enabling ssd optimizations [ 638.787138][T18956] BTRFS info (device loop0): using sha256 checksum algorithm [ 638.793431][T18951] BTRFS info (device loop1): turning on async discard [ 638.825400][T18951] BTRFS info (device loop1): enabling free space tree [ 638.951728][T18956] BTRFS info (device loop0): rebuilding free space tree [ 639.155145][ T5954] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 639.194341][T18956] BTRFS info (device loop0): enabling ssd optimizations [ 639.210360][T18956] BTRFS info (device loop0): using spread ssd allocation scheme [ 639.257772][T18956] BTRFS info (device loop0): turning on async discard [ 639.272655][T19029] netlink: 'syz.4.5709': attribute type 1 has an invalid length. [ 639.297648][T18956] BTRFS info (device loop0): enabling free space tree [ 639.309749][T19032] netlink: 'syz.2.5711': attribute type 10 has an invalid length. [ 639.354305][T18956] BTRFS info (device loop0): force clearing of disk cache [ 639.432606][T19032] team0: Port device geneve0 added [ 639.687804][ T5949] BTRFS info (device loop0): last unmount of filesystem 722891e8-38ff-44d1-9d6f-d2cfd351b5ae [ 639.870527][T19046] loop2: detected capacity change from 0 to 1024 [ 639.968764][T19046] hfsplus: extend alloc file! (16384,256,150995124) [ 640.225023][ T31] audit: type=1326 audit(1778073092.135:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 640.362403][ T31] audit: type=1326 audit(1778073092.164:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 640.490157][ T31] audit: type=1326 audit(1778073092.164:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 640.577369][ T31] audit: type=1326 audit(1778073092.164:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 640.683239][ T31] audit: type=1326 audit(1778073092.164:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 640.754563][T19064] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 640.825433][ T31] audit: type=1326 audit(1778073092.164:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 640.901697][ T31] audit: type=1326 audit(1778073092.164:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 641.023920][ T31] audit: type=1326 audit(1778073092.164:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19054 comm="syz.4.5722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa75bd9cdd9 code=0x7ffc0000 [ 641.238426][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5734'. [ 641.426711][ T6056] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 641.427289][T19086] loop2: detected capacity change from 0 to 256 [ 641.527813][T19086] FAT-fs (loop2): Directory bread(block 64) failed [ 641.550547][T19086] FAT-fs (loop2): Directory bread(block 65) failed [ 641.567780][T19086] FAT-fs (loop2): Directory bread(block 66) failed [ 641.580495][T19045] loop6: detected capacity change from 0 to 32768 [ 641.586697][T19086] FAT-fs (loop2): Directory bread(block 67) failed [ 641.605312][ T6056] usb 2-1: Using ep0 maxpacket: 32 [ 641.609479][T19086] FAT-fs (loop2): Directory bread(block 68) failed [ 641.630870][ T6056] usb 2-1: config 139 has an invalid interface number: 49 but max is 0 [ 641.653700][T19086] FAT-fs (loop2): Directory bread(block 69) failed [ 641.671550][T19045] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.681983][T19086] FAT-fs (loop2): Directory bread(block 70) failed [ 641.687583][ T6056] usb 2-1: config 139 has no interface number 0 [ 641.702159][T19086] FAT-fs (loop2): Directory bread(block 71) failed [ 641.713223][T19086] FAT-fs (loop2): Directory bread(block 72) failed [ 641.739483][ T6056] usb 2-1: config 139 interface 49 has no altsetting 0 [ 641.751753][T19086] FAT-fs (loop2): Directory bread(block 73) failed [ 641.790135][ T6056] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 641.808328][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.823879][ T6056] usb 2-1: Product: syz [ 641.828274][ T6056] usb 2-1: Manufacturer: syz [ 641.832953][ T6056] usb 2-1: SerialNumber: syz [ 641.925655][T19045] XFS (loop6): Ending clean mount [ 642.093458][T16846] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 642.113403][ T6056] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244) [ 642.158657][ T6056] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 642.176620][T19080] loop3: detected capacity change from 0 to 32768 [ 642.183575][ T6056] usbhid 2-1:139.49: couldn't find an input interrupt endpoint [ 642.198897][T19080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5733 (19080) [ 642.244891][T19102] loop0: detected capacity change from 0 to 1024 [ 642.263889][ T6056] usb 2-1: USB disconnect, device number 102 [ 642.334225][T19080] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.377418][T19102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.406462][T19080] BTRFS info (device loop3): using sha256 checksum algorithm [ 642.428041][T19111] loop2: detected capacity change from 0 to 512 [ 642.462652][T19111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 642.592857][T19111] EXT4-fs (loop2): 1 truncate cleaned up [ 642.613445][T19128] netlink: 'syz.4.5746': attribute type 1 has an invalid length. [ 642.621445][T19128] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5746'. [ 642.646660][T19080] BTRFS info (device loop3): enabling ssd optimizations [ 642.698041][T19111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.715029][T19080] BTRFS info (device loop3): turning on async discard [ 642.756640][T19080] BTRFS info (device loop3): enabling free space tree [ 642.774967][ T5949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.776179][T19111] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.2.5744: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 642.867914][T19135] loop4: detected capacity change from 0 to 1024 [ 642.925879][T19111] EXT4-fs (loop2): Remounting filesystem read-only [ 642.946560][T19135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.958840][T19111] EXT4-fs warning (device loop2): ext4_rename_delete:3739: inode #2: comm syz.2.5744: Deleting old file: nlink 4, error=-117 [ 643.105390][T19135] EXT4-fs warning (device loop4): ext4_rmdir:3192: inode #11: comm syz.4.5748: empty directory 'file1' has too many links (111) [ 643.149207][ T5951] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 643.408234][ T5953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.460090][ T5964] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.656459][T19153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5751'. [ 643.692569][T19155] comedi comedi1: multiq3: a I/O base address must be specified [ 643.945798][T19161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5757'. [ 644.033135][ T6056] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 644.225040][ T6056] usb 5-1: Using ep0 maxpacket: 16 [ 644.259968][ T6056] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 644.285488][ T6056] usb 5-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 644.331972][ T6056] usb 5-1: config 0 has no interface number 0 [ 644.360265][ T6056] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 644.362423][T19177] sg_write: data in/out 205056/608 bytes for SCSI command 0x9-- guessing data in; [ 644.362423][T19177] program syz.1.5766 not setting count and/or reply_len properly [ 644.397939][ T6056] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.440314][ T6056] usb 5-1: Product: syz [ 644.464259][ T6056] usb 5-1: Manufacturer: syz [ 644.482454][ T6056] usb 5-1: SerialNumber: syz [ 644.522907][ T6056] usb 5-1: config 0 descriptor?? [ 644.563030][ T6056] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 644.591855][T19185] loop2: detected capacity change from 0 to 8 [ 644.614605][ T6056] uvcvideo 5-1:0.105: No valid video chain found. [ 644.827081][ T6070] usb 5-1: USB disconnect, device number 102 [ 644.901883][T19185] SQUASHFS error: xz decompression failed, data probably corrupt [ 644.951055][T19185] SQUASHFS error: Failed to read block 0x60: -5 [ 645.007359][T19185] SQUASHFS error: xz decompression failed, data probably corrupt [ 645.069381][T19185] SQUASHFS error: Failed to read block 0x60: -5 [ 645.108939][ T31] audit: type=1800 audit(1778073096.709:90): pid=19185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5770" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 645.321693][T19205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5779'. [ 645.340035][T19205] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5779'. [ 645.369879][T19205] netlink: 'syz.1.5779': attribute type 5 has an invalid length. [ 645.402864][T19205] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5779'. [ 646.267748][T19198] loop3: detected capacity change from 0 to 32768 [ 646.309837][T19198] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5775 (19198) [ 646.404279][T19198] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 646.455766][T19198] BTRFS info (device loop3): using sha256 checksum algorithm [ 646.607201][T19198] BTRFS info (device loop3): enabling ssd optimizations [ 646.668441][T19198] BTRFS info (device loop3): turning on async discard [ 646.723678][T19198] BTRFS info (device loop3): enabling free space tree [ 646.760399][T19209] loop0: detected capacity change from 0 to 32768 [ 646.800386][T19209] BTRFS warning: excessive commit interval 65536, use with care [ 646.856374][T19209] BTRFS info: device /dev/loop0 (7:0) using temp-fsid f7e27cf2-d785-44ca-8f08-6fe471123e74 [ 646.915584][T19209] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5783 (19209) [ 647.014656][ T5951] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.068672][T19209] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.113125][T19209] BTRFS info (device loop0): using sha256 checksum algorithm [ 647.217084][T19277] loop1: detected capacity change from 0 to 2048 [ 647.357138][T19277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.429970][T19209] BTRFS info (device loop0): enabling ssd optimizations [ 647.484542][T19209] BTRFS info (device loop0): turning on async discard [ 647.519836][T19277] EXT4-fs error (device loop1): ext4_find_extent:904: inode #2: comm syz.1.5803: inode has invalid extent depth: 7 [ 647.555705][T19209] BTRFS info (device loop0): enabling free space tree [ 647.862660][T19271] loop6: detected capacity change from 0 to 32768 [ 647.911897][T19271] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5800 (19271) [ 647.997090][T19271] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 648.054076][T19271] BTRFS info (device loop6): using sha256 checksum algorithm [ 648.230260][ T5954] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.255730][ T5949] BTRFS info (device loop0): last unmount of filesystem f7e27cf2-d785-44ca-8f08-6fe471123e74 [ 648.337722][T19271] BTRFS info (device loop6): enabling ssd optimizations [ 648.346950][T19271] BTRFS info (device loop6): turning on async discard [ 648.353917][T19271] BTRFS info (device loop6): enabling free space tree [ 648.511964][T16846] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 648.712068][T19341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.744865][T19340] netlink: 'syz.0.5811': attribute type 1 has an invalid length. [ 648.834263][T19340] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5811'. [ 649.130092][T19351] loop2: detected capacity change from 0 to 764 [ 649.517450][T19361] netlink: 'syz.3.5821': attribute type 11 has an invalid length. [ 649.568045][T19361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5821'. [ 650.030573][T19312] loop4: detected capacity change from 0 to 32768 [ 650.107487][T19312] [ 650.107487][T19312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 650.107487][T19312] [ 650.380079][ T5964] [ 650.380079][ T5964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 650.380079][ T5964] [ 650.432319][ T5964] [ 650.432319][ T5964] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 650.432319][ T5964] [ 650.789185][T19393] netlink: 'syz.0.5834': attribute type 1 has an invalid length. [ 650.861953][T19396] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 651.038806][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.112725][T19402] loop0: detected capacity change from 0 to 64 [ 651.131001][T19404] x_tables: duplicate entry at hook 1 [ 651.429036][T19411] loop4: detected capacity change from 0 to 16 [ 651.515027][T19411] erofs (device loop4): mounted with root inode @ nid 36. [ 651.665059][T19411] erofs (device loop4): readahead error at folio 3 @ nid 89 [ 651.759498][T19411] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 651.792057][T19411] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 651.824562][T19411] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 651.855666][T19411] erofs (device loop4): read error -22 @ 0 of nid 89 [ 651.886762][ T31] audit: type=1800 audit(1778073103.050:91): pid=19411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5843" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 652.013750][T19433] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 652.043144][T19432] loop3: detected capacity change from 0 to 128 [ 652.103290][T19432] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.104531][ T24] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 652.139174][T19432] ext4 filesystem being mounted at /849/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 652.293787][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 652.317768][ T24] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 652.346443][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.378913][ T24] usb 3-1: Product: syz [ 652.402028][ T24] usb 3-1: Manufacturer: syz [ 652.424720][ T24] usb 3-1: SerialNumber: syz [ 652.444765][ T5951] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 652.456828][ T24] usb 3-1: config 0 descriptor?? [ 652.685433][T19420] loop1: detected capacity change from 0 to 32768 [ 652.708527][ T24] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 652.721901][T19420] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5848 (19420) [ 652.744847][ T24] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 652.805518][T19420] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 652.854308][T19420] BTRFS info (device loop1): using sha256 checksum algorithm [ 652.988999][ T24] usb 3-1: USB disconnect, device number 124 [ 653.000482][T19420] BTRFS info (device loop1): enabling ssd optimizations [ 653.043765][T19420] BTRFS info (device loop1): turning on async discard [ 653.050773][ T6056] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 653.072862][T19420] BTRFS info (device loop1): enabling free space tree [ 653.225697][T19479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5868'. [ 653.270936][ T6056] usb 1-1: Using ep0 maxpacket: 8 [ 653.290496][ T6056] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.327285][ T6056] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.356993][ T6056] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 653.408046][ T6056] usb 1-1: config 0 interface 0 has no altsetting 0 [ 653.439257][ T6056] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 653.464687][ T6056] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.469585][T19448] loop6: detected capacity change from 0 to 32768 [ 653.494205][ T6056] usb 1-1: Product: syz [ 653.507925][ T6056] usb 1-1: Manufacturer: syz [ 653.514764][ T6056] usb 1-1: SerialNumber: syz [ 653.533510][ T5954] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.537618][ T6056] usb 1-1: config 0 descriptor?? [ 653.576506][T19448] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 653.595882][ T6056] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 653.821655][ T6056] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 653.869100][ T6056] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 653.923757][ T6056] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 654.125235][ T6056] usb 1-1: USB disconnect, device number 105 [ 654.525250][T19508] loop2: detected capacity change from 0 to 2048 [ 654.574965][T19508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.580615][T19513] loop3: detected capacity change from 0 to 64 [ 654.609084][T19518] loop4: detected capacity change from 0 to 256 [ 654.640811][T19516] loop1: detected capacity change from 0 to 512 [ 654.666689][T19518] FAT-fs (loop4): Directory bread(block 64) failed [ 654.690042][T19508] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1408) [ 654.702876][T19518] FAT-fs (loop4): Directory bread(block 65) failed [ 654.713564][T19518] FAT-fs (loop4): Directory bread(block 66) failed [ 654.753358][T19518] FAT-fs (loop4): Directory bread(block 67) failed [ 654.768921][T19508] ------------[ cut here ]------------ [ 654.777232][T19508] ret [ 654.777249][T19508] WARNING: fs/udf/namei.c:214 at udf_fiiter_add_entry+0x1a78/0x20c0, CPU#0: syz.2.5883/19508 [ 654.791885][T19508] Modules linked in: [ 654.797062][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.2.5883 Not tainted syzkaller #0 PREEMPT(full) [ 654.806606][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.816756][T19508] RIP: 0010:udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.823017][T19508] Code: 00 00 e8 2b d3 6d fe 44 89 f1 41 d3 ec 41 01 dc 44 89 64 24 58 e9 ec fb ff ff e8 13 d3 6d fe e9 be fe ff ff e8 09 d3 6d fe 90 <0f> 0b 90 e9 b9 f8 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 81 e6 ff ff [ 654.843154][T19508] RSP: 0018:ffffc9000a7bf360 EFLAGS: 00010283 [ 654.849535][T19508] RAX: ffffffff8357d927 RBX: fffff520014f7e90 RCX: 0000000000080000 [ 654.857580][T19508] RDX: ffffc900132e6000 RSI: 0000000000007a72 RDI: 0000000000007a73 [ 654.865616][T19508] RBP: ffffc9000a7bf770 R08: ffff888065d9fee3 R09: 1ffff1100cbb3fdc [ 654.873718][T19508] R10: dffffc0000000000 R11: ffffed100cbb3fdd R12: f8f8f8f8f8f8f8f8 [ 654.881714][T19508] R13: ffff888065c033c0 R14: 00000000ffffff8b R15: ffffc9000a7bf9c0 [ 654.889758][T19508] FS: 00007fae2b5c66c0(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 654.899579][T19508] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.906773][T19508] CR2: 00007fd63fd7e000 CR3: 000000007ca42000 CR4: 0000000000350ef0 [ 654.914766][T19508] Call Trace: [ 654.918130][T19508] [ 654.921076][T19508] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.926331][T19508] ? __pfx_udf_fiiter_add_entry+0x10/0x10 [ 654.932265][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.938027][T19508] ? kfree+0x4d/0x640 [ 654.938350][T19518] FAT-fs (loop4): Directory bread(block 68) failed [ 654.942066][T19508] udf_rename+0x7bf/0xdf0 [ 654.949446][T19518] FAT-fs (loop4): Directory bread(block 69) failed [ 654.953380][T19508] ? arch_stack_walk+0xfb/0x150 [ 654.953441][T19508] ? __pfx_udf_rename+0x10/0x10 [ 654.969935][T19508] ? stack_trace_save+0xa9/0x100 [ 654.970764][T19518] FAT-fs (loop4): Directory bread(block 70) failed [ 654.974901][T19508] ? __pfx_stack_trace_save+0x10/0x10 [ 654.974957][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.974993][T19508] ? check_path+0x21/0x40 [ 654.975026][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975064][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975098][T19508] ? add_lock_to_list+0xc7/0x100 [ 654.975158][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975191][T19508] ? __lock_acquire+0x6b5/0x2cf0 [ 654.975262][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975299][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975337][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975371][T19508] ? do_raw_spin_unlock+0xf5/0x210 [ 654.975417][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975451][T19508] ? try_break_deleg+0x5b/0x180 [ 654.975489][T19508] ? __pfx_udf_rename+0x10/0x10 [ 654.975529][T19508] vfs_rename+0xa96/0xeb0 [ 654.975575][T19508] ? __pfx_vfs_rename+0x10/0x10 [ 654.975605][T19508] ? do_raw_spin_unlock+0xf5/0x210 [ 654.975651][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975690][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975723][T19508] ? security_path_rename+0x17d/0x460 [ 654.975772][T19508] filename_renameat2+0x539/0x9c0 [ 654.975802][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975851][T19508] ? __pfx_filename_renameat2+0x10/0x10 [ 654.975890][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.975932][T19508] ? getname_long+0xbc/0x130 [ 654.975967][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.976002][T19508] ? do_getname+0x151/0x250 [ 654.976032][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.976065][T19508] __se_sys_rename+0x55/0x2c0 [ 654.976098][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.976130][T19508] do_syscall_64+0x15f/0xf80 [ 654.976164][T19508] ? trace_irq_disable+0x3b/0x140 [ 654.976215][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.976244][T19508] RIP: 0033:0x7fae2a79cdd9 [ 654.976271][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.976296][T19508] RSP: 002b:00007fae2b5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 654.976327][T19508] RAX: ffffffffffffffda RBX: 00007fae2aa15fa0 RCX: 00007fae2a79cdd9 [ 654.976350][T19508] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0 [ 654.976371][T19508] RBP: 00007fae2a832d69 R08: 0000000000000000 R09: 0000000000000000 [ 654.976391][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.976415][T19508] R13: 00007fae2aa16038 R14: 00007fae2aa15fa0 R15: 00007ffea88d53a8 [ 654.976459][T19508] [ 654.976475][T19508] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 654.976495][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.2.5883 Not tainted syzkaller #0 PREEMPT(full) [ 654.976526][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.976544][T19508] Call Trace: [ 654.976556][T19508] [ 654.976568][T19508] vpanic+0x56c/0xa60 [ 654.976602][T19508] ? __pfx__printk+0x10/0x10 [ 654.976641][T19508] ? __pfx_vpanic+0x10/0x10 [ 654.976671][T19508] ? is_bpf_text_address+0x292/0x2b0 [ 654.976701][T19508] ? is_bpf_text_address+0x26/0x2b0 [ 654.976741][T19508] panic+0xc5/0xd0 [ 654.976772][T19508] ? __pfx_panic+0x10/0x10 [ 654.976824][T19508] __warn+0x315/0x4c0 [ 654.976855][T19508] ? udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.976895][T19508] ? udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.976935][T19508] __report_bug+0x29a/0x540 [ 654.976975][T19508] ? udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.977013][T19508] ? __pfx___report_bug+0x10/0x10 [ 654.977050][T19508] ? kasan_quarantine_put+0xbb/0x1f0 [ 654.977088][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.977121][T19508] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.977152][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.977190][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.977223][T19508] ? kfree+0x1c5/0x640 [ 654.977256][T19508] ? udf_fiiter_load_bhs+0x445/0x510 [ 654.977298][T19508] ? udf_fiiter_init+0x4ce/0x5e0 [ 654.977340][T19508] ? udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.977378][T19508] report_bug+0x16a/0x220 [ 654.977415][T19508] ? udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.977451][T19508] ? udf_fiiter_add_entry+0x1a7a/0x20c0 [ 654.977488][T19508] handle_bug+0x9c/0x200 [ 654.977527][T19508] exc_invalid_op+0x1a/0x50 [ 654.977564][T19508] asm_exc_invalid_op+0x1a/0x20 [ 654.977591][T19508] RIP: 0010:udf_fiiter_add_entry+0x1a78/0x20c0 [ 654.977630][T19508] Code: 00 00 e8 2b d3 6d fe 44 89 f1 41 d3 ec 41 01 dc 44 89 64 24 58 e9 ec fb ff ff e8 13 d3 6d fe e9 be fe ff ff e8 09 d3 6d fe 90 <0f> 0b 90 e9 b9 f8 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 81 e6 ff ff [ 654.977653][T19508] RSP: 0018:ffffc9000a7bf360 EFLAGS: 00010283 [ 654.977679][T19508] RAX: ffffffff8357d927 RBX: fffff520014f7e90 RCX: 0000000000080000 [ 654.977700][T19508] RDX: ffffc900132e6000 RSI: 0000000000007a72 RDI: 0000000000007a73 [ 654.977720][T19508] RBP: ffffc9000a7bf770 R08: ffff888065d9fee3 R09: 1ffff1100cbb3fdc [ 654.977742][T19508] R10: dffffc0000000000 R11: ffffed100cbb3fdd R12: f8f8f8f8f8f8f8f8 [ 654.977764][T19508] R13: ffff888065c033c0 R14: 00000000ffffff8b R15: ffffc9000a7bf9c0 [ 654.977795][T19508] ? udf_fiiter_add_entry+0x1a77/0x20c0 [ 654.977839][T19508] ? lockdep_hardirqs_on+0x7a/0x110 [ 654.977904][T19508] ? __pfx_udf_fiiter_add_entry+0x10/0x10 [ 654.978004][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978037][T19508] ? kfree+0x4d/0x640 [ 654.978083][T19508] udf_rename+0x7bf/0xdf0 [ 654.978116][T19508] ? arch_stack_walk+0xfb/0x150 [ 654.978164][T19508] ? __pfx_udf_rename+0x10/0x10 [ 654.978197][T19508] ? stack_trace_save+0xa9/0x100 [ 654.978239][T19508] ? __pfx_stack_trace_save+0x10/0x10 [ 654.978286][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978319][T19508] ? check_path+0x21/0x40 [ 654.978351][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978389][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978426][T19508] ? add_lock_to_list+0xc7/0x100 [ 654.978484][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978516][T19508] ? __lock_acquire+0x6b5/0x2cf0 [ 654.978583][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978619][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978655][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978687][T19508] ? do_raw_spin_unlock+0xf5/0x210 [ 654.978726][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978758][T19508] ? try_break_deleg+0x5b/0x180 [ 654.978795][T19508] ? __pfx_udf_rename+0x10/0x10 [ 654.978832][T19508] vfs_rename+0xa96/0xeb0 [ 654.978877][T19508] ? __pfx_vfs_rename+0x10/0x10 [ 654.978904][T19508] ? do_raw_spin_unlock+0xf5/0x210 [ 654.978949][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.978985][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.979017][T19508] ? security_path_rename+0x17d/0x460 [ 654.979063][T19508] filename_renameat2+0x539/0x9c0 [ 654.979093][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.979141][T19508] ? __pfx_filename_renameat2+0x10/0x10 [ 654.979178][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.979218][T19508] ? getname_long+0xbc/0x130 [ 654.979252][T19508] ? srso_alias_return_thunk+0x5/0xfbef5 [ 654.979284][T19508] ? do_getname+0x151/0x250 [ 654.979315][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.979345][T19508] __se_sys_rename+0x55/0x2c0 [ 654.979377][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.979407][T19508] do_syscall_64+0x15f/0xf80 [ 654.979444][T19508] ? trace_irq_disable+0x3b/0x140 [ 654.979493][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.979521][T19508] RIP: 0033:0x7fae2a79cdd9 [ 654.979544][T19508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.979567][T19508] RSP: 002b:00007fae2b5c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 654.979594][T19508] RAX: ffffffffffffffda RBX: 00007fae2aa15fa0 RCX: 00007fae2a79cdd9 [ 654.979616][T19508] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0 [ 654.979635][T19508] RBP: 00007fae2a832d69 R08: 0000000000000000 R09: 0000000000000000 [ 654.979653][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.979671][T19508] R13: 00007fae2aa16038 R14: 00007fae2aa15fa0 R15: 00007ffea88d53a8 [ 654.979711][T19508] [ 654.984548][T19508] Kernel Offset: disabled