last executing test programs: 5m21.165410039s ago: executing program 1 (id=6638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4080) 5m21.082845231s ago: executing program 1 (id=6641): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x20000, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0xa) 5m20.287004866s ago: executing program 1 (id=6656): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x28, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m20.163965048s ago: executing program 1 (id=6660): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x8c48, &(0x7f00000016c0)=ANY=[@ANYBLOB='nojoliet,mode=0x00000000000000e4,dmode=0x0000000000000005,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,cruft,mode=0xfffffffffffffffb,utf8,session=0x0000000000000043,hide,dmode=0x000000000000001f,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x5a7, &(0x7f0000000f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 5m19.825427635s ago: executing program 1 (id=6666): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x4, 0xffffffffffffff9e, 0x0, 0x1, 0x6, 0x29, 0x0, @rand_addr=0x60010100, @private}}}}) 5m19.315337205s ago: executing program 1 (id=6677): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000200)=0x3) 5m19.160235427s ago: executing program 32 (id=6677): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x545d, &(0x7f0000000200)=0x3) 3.555445741s ago: executing program 5 (id=13247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa7) 3.306515286s ago: executing program 5 (id=13254): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r0, 0x1, 0xe, 0x0, 0x0) 3.201756128s ago: executing program 5 (id=13257): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f0000001680)={'\x00', 0x8001, 0x0, 0x200}) 3.11155666s ago: executing program 5 (id=13260): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x10018, &(0x7f0000000880)=ANY=[@ANYBLOB="0010bbbe8b821e4cf6d79d4d501be8af339fd4bbd17d928c6d063cce0ce162684c47d7ced43a8371c6dd5466f6250eb5e73903a3df585d270ff705470b03dfd44956cfbf6b2651360ae7880805ab8f419532c02aa5d40d1ed66a2ca647a20a37040700000000000000c701346399b0848c3fac7e886dbfcbcd51015d261738410cf17d0cea70e5d3c6b7478c07b55e59876f1b7d68782c4d64e37a4327377467b94266cde7f65690b41ccf9c1dca7a081990", @ANYRES16, @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x6fb, &(0x7f0000000180)="$eJzs3U1sHGcdB+DfrNdfQUqdNmkBVSJtpIKISPyhFMIlASHkQ1VV4sCBk5U4jZVNWtlucSogAQpceyjiWg65cULixCWo3JDgyNFwqoToBS65bTWzs/Y6641382VbfZ52dt6Z92Pe97/zuVY0AT63Fk+neTdFFk+/tlEub95ZaG3eWZiss1tJynSz+j+NJMWNpPg4uZjOlC+VK+vyxaDtfFhW/9/mJ0mmO201u+XLRv/8t9df6il9qz3aKG7XU04mGavn/cb7V03t3d6lge11TPakdx9/sZVTBuxUN3Cw39p9bo9SfeDxDhweRee62WcmOVJfJqvrXH12aDzd3j1+I53lAAAAYJ8t/vfE/Cjlp+v5M/dyLxuH/jEeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnqr6/f9FPTW66ZMpuu//n6jXpU4fanf3uwMAAAAAAAAAMITJbuLC7vlfuZd72cjR7nK7qP7m/3K1cLz6/ELeyVqWs5oz2chS1rOe1cwlmelpaGJjaX19dW6ImvO71px/vOMGAAAAAAAAgM+ZX2Rx++//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEBTJWGdWTce76Zk0mkmmkkyU5W4n/+imD4lit5V3n34/AAAA4JFMPUSdieReNnK0u9wuqmf+56vn5am8kxtZz0rW08pyLtfP0OVTf2PzzkJr887C9XLqbbFdG7UbaaTz28PuW/5iVWI6V7JSrTmTS1VnLqdR1Sz9O8n1bp/u71fy80/Lti90/HjInl2u5+XGPuj+ijA50uCekJmk2cj4VkRmq751doJjvVHoj8R3Ph3U6MXOrHn/ltK7pbk0tn75Od7ZQpncM+YXhhzZkXpejufXg365qbz/uyGb3NvU9kZvDyy0FYlGqkjM9+x9z3ciMZXdY5589U9/+KAobly7emXt9OAhHRL37xMLPZF44cF7XxWJH15tHdBINIcv+qPfJpmtInFia+Vivp8f5HRO5o2sZiXvZinrWU5Rj3Sp3p/Lz5kHR+rijqU39urORP29dM6iO/s0vdVIb59O5ntVaikvV3WPZiVF3srlLOfV6r/5zOWbOZdzOd/zDZ8Y2O9qbNVR3yiP+H+l76hv7N75U1+rE2VPf1PPH+DdvaLxOHROCmVcj/XEtZx3z7kzVV7vWXg7Ss9W0Zkc6npURWmPIZc755frRLmNXw6O5j64PxJzPbcAzz14P/99VXStdePa6tWlt3e9uo7X8+1bi1d6cn+19+3PXwas3zvmw+k5j5X7y7OZqs8kxzLe6dpYN++5rbPMjnhVece38hp9eSc6X3fRPVJfH3ikTtT3cP0tzVd5L+yat1DllXdazWb67reSt9Lauh8C4AA78vUjE9P/mf779EfT709fnX5t6ruT35p8cSLjfx3/dnN27JXGi8Uf81F+tv38DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLy1m+9dW2q1lle3E+M9axo7s4ZNdN/ks70me9Qq6jfpDLWJxqj9eRKJ9q3kAHRjde2lJA9f/aftdnvXrGJ17ebUE+hzuSd0XyI4WvXZHXtUlbi4n5H/56i1MjXSkNvPdKI00iZmOnWGKDzZCeZYf1SrRP0VPczLRYFD4ez69bfPrt187xsr15feXH5z+cb4uXPnZ8+fe3Xh7JWV1vJs57OvWvvWQ7zsFzhYti/6+90TAAAAAAAAAAAAYFiP9k8gmkMV3u8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfb4uk076bI3OyZ2XJ5885Cq5y66e2SzST/byfFT5Li4+RiOlNmeporBm3nw5XzY0k+2W6r2S3feEC99uRQo7hdTzmZZKyeP4Id7V165PaKrRGWATvVDRzst88CAAD//0NAA44=") syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) 1.311861024s ago: executing program 4 (id=13300): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x21, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 1.243312046s ago: executing program 4 (id=13303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE}}}]}, 0x38}}, 0x0) 1.159325737s ago: executing program 4 (id=13306): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x3a, 0x30f, 0x0, 0x0, {0x3}, [@nested={0x4}, @nested={0x6, 0x1, 0x0, 0x1, [@generic="23b7753b0805ba5fbec0929bde4c277478db563341123243b24cbf85f144d78e002f48e59539742efa7d8050fa872cbf816f727faecf03e772dce2867120bff12ebf0d2ca5cb86022125d5ef88c6295077482ad62f60390e6cc1dc891d70220955"]}]}, 0x24}}, 0x0) 1.122000688s ago: executing program 0 (id=13307): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13}}) 1.098098119s ago: executing program 4 (id=13308): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x80, 0x0, 0xead, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x66, 0x0, 0x2c, 0x4, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xff}]}}}}}) 1.05124905s ago: executing program 0 (id=13310): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 1.03277378s ago: executing program 4 (id=13311): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$eJzs271u2mAUxvHHxnwU+kFLP6SqQ6eqSzFQibZbeykIXIRiEhSygCIluY8s2XJVuYIwZMsUIoztBIeJYJuE/2/hHB+9+DC8vEcIC8DW+quvMmQoN0u+FMpHFSPtlgAkZOq/3kx9pSmArZG5TrsDAOmY/JMGki6vDtvK5IKx4FMQzOqFIDHzD+aHyYmpz5a/3ijoRXS+OJO+Be9vFJesl4phveRdsyL17yrP6+ZLvdJrvVFZb/VOFb/eCdd/fNwwBADAljBUjeYLF0z977lOLcyzXl5X0T+kc17eCOvz/GeY57282t5zOzF+CgCrMFU9v59H938msv8tf/8DePqGo/FOy3Wd/YSC4PeBRG+6nkDHG9HGWoKsNqINgiWBpYRverG0lPIXE4DY2Qf9gT0cjX/0+q2u03V2m41m80/t96+67Q3+9uL4D+AZuTv00+4EAAAAAAAAAAAAAACs6r0+pN0CAAAAgITE9lyRIelU/LMYAAAAAAAAAAAAAAAAAIAY3AYAAP//XTAW7A==") rmdir(&(0x7f0000000040)='./file0\x00') 940.923112ms ago: executing program 3 (id=13312): prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 940.792022ms ago: executing program 0 (id=13313): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000000c0)={0x1, 0x1, 0x2, 0x1, 0xffffffff, 0x2, 0x0, 0xfffffff8, 0x40, 0x0, 0x4, 0xffffff92, &(0x7f00000001c0)=[0x5], 0x1, 0x0}) 936.185991ms ago: executing program 3 (id=13314): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdb, &(0x7f0000010140), &(0x7f00000001c0)=0x4) 889.265272ms ago: executing program 4 (id=13315): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca2180203010902120001000001000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 878.250673ms ago: executing program 0 (id=13316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000150001000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00a32ca38b0000000a0010"], 0x5c}}, 0x0) 871.246443ms ago: executing program 5 (id=13317): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000500)=ANY=[@ANYBLOB='discard=0x0000000000000009,discard=0x000000000000aff9,noquota,iocharset=macgreek,iocharset=cp775,iocharset=cp874,nodiscard,nointegrity,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00475941b8717767899a562440a76e92f8"], 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) 770.517015ms ago: executing program 3 (id=13319): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a11000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001400000000000030000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 742.999845ms ago: executing program 0 (id=13320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) 630.140567ms ago: executing program 0 (id=13323): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000540)='./bus\x00', 0x200000, &(0x7f0000000640)=ANY=[], 0xff, 0x5507, &(0x7f00000079c0)="$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") mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 581.494488ms ago: executing program 3 (id=13324): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 416.874232ms ago: executing program 2 (id=13326): r0 = socket(0x11, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) 375.901343ms ago: executing program 3 (id=13327): r0 = syz_open_dev$video(&(0x7f0000000b00), 0x9, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000b40)={0x1000000, "983db19fc813ba9909a237a613f89c1f5852efd5cc05d92fba5c0533d3a2b3fc"}) 357.902703ms ago: executing program 2 (id=13328): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="440000001000030528bd70000000000000000100", @ANYRES32=0x0, @ANYBLOB="45030200000200001c0012800b0001006d616373656300000c0002800500030004"], 0x44}, 0x1, 0x0, 0x0, 0x4040080}, 0x44000) 268.872334ms ago: executing program 3 (id=13329): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRESDEC, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) 230.279735ms ago: executing program 2 (id=13330): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffd, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 159.789746ms ago: executing program 2 (id=13331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@polexpire={0xcc, 0x1b, 0x57a500b9b82fd89, 0x0, 0x0, {{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x60}, {0x0, 0x0, 0x0, 0x1}, {}, 0xfffffffc}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) 82.768028ms ago: executing program 2 (id=13332): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000014c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) 624.45µs ago: executing program 5 (id=13333): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000000240)=ANY=[], 0x1, 0x5f96, &(0x7f0000014f00)="$eJzs3V1vHFcZB/BnX7x+KU2jClUh4iJNobSU5j2B8taUCy4ACSSUaxK5bhVIASUB0SoirnKBuODlI8BNb7joFylfAfEBiBRzVQnKoLHPScbjddZp4p1dn99PcmaePTveM/l7PDuemT0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvvj072IuPzr9MDhiM/EIKIfsVzXx6KeuZifP4yII7HZHM9FxGAxol5+859nIs5FxEeHIu5t3FqtHz6zx36cP3Xz+iff/84/fvenO0d++uZPPmi3/+izZz/8/e2Iwz987cNPbj+ZdQcAAIBSVFVV9dJh/tF0fN/vulMAwFTk/X+V5MfVarVa/UTrP/Znqz/qQuumarzbzSIi1pvL1O8ZnI4HgDmzHh933QU6JP+iDSPiqa47Acy0XtcdYF/c27i12kv59pr7g2Nb7fnvlNvyX+/dv79jt+kk7WtMpvXzdScG8ewu/VmeUh9mSc6/387/8lb7KD1vv/Oflt3yH23d+lScnP+gnX/Ltvz/HBFzm39/bP6lyvkPHyX/9cEcb//yBwAAAADg4Mt//z/c8fnfxcdflT152PnfY1PqAwAAAAAAAAA8aY87/t99xv8DAACAmVUfq9f+cujBY7t9Hmh9iH+pF/F06/lAYdLNMitd9wMAAAAAAAAAAAAASjLcuob3Ui9iISKeXlmpqqr+amrXj+pxl593pa8/lKzrX/IAALDlo0Ote/l7EUsRcSl91t/CyspKVS0tr1Qr1fJifj87WlyqlhvHtXlaP7Y42sMb4uGoqr/ZUmO5pknHy5Pa29+vfq1RNdhDx6ajw8ABICK29kb37JEOmKp6Jrp+l8N8sP0fPLZ/9qLrn1MAAABg/1VVVfXSx3kfTef8+113CgCYhqW8/2+fF1Cr1Wq1Wn3w6qZqvNvNIiLWm8vU7xkMxw8Ac2Y9Pu66C3RI/kUbRsSRrjsBzLRe1x1gX9zbuLXaS/n2mvuDNL57vhZkW/7rvc3l8vLjppO0rzGZ1s/XnRjEs7v057kp9WGW5Pz77fwvb7WP0vP2O/9p2S3/ej0Pd9CfruX8B+38Ww5O/v2x+Zcq5z98pPwH8gcAAAAAgBmW//5/2PnfvMoAAAAAAAAAMHfubdxazfe95vP/nx/zvF5zzv2fB0bOv7fn/N3/e5Dk/Pvt/FsX5Awa83ffeJD/vzdurX5w81+fy9OZz39hMKpfe6HXHwzTNT/VwltxNa7FWpza8fzhtvbTO9oXtrWfmdB+dkf7qG5fzu0nYjV+EdfizfvtixMujFqa0F5NaM/5D2z/Rcr5Dxtfdf4rqb3Xmtbuvt/fsd03p+Ne5+Lf/vvizq1r+u7E4P66NdXrd7yD/mz+nzw1il/dWLt+4jdXbt68fjrSZNujZyJNnrCc/0L6yvm/9MJWe/6939xe774/euT8Z8WdGO6a/wuN+Xp9X55y37qQ8x+lr5x/3gON3/7nOf/dt/9XOugPAAAAAAAAAAAAAAAAPExVVZu3iF6MiAvp/p+u7s0EAKbqDz9IM1USarVarVarD2zdVI33erOIpe3LXIiI3477ZgDALPtfRPyz607QGfkXLH/eXz39QtedAabqxrvv/ezKtWtr12903RMAAAAAAAAA4NPK438ea4z/vHkdUGvc6G3jv74Rx+Z2/M/+aLA51nlaoefj4eN/H4+Hj/89nPB6CxPaRxPaFye0L01oH3ujR0PO//mUcc7/aFqxksZ/famD/nQt5388jfWc8/9S63nN/Ku/znP+/W35n7z5zi9P3nj3vVevvnPl7bW3135++tSFc2fPnzt7/vzJt65eWzu19W+HPd5fOf889rXrQMuS88+Zy78sOf8vplr+Zcn5v5hq+Zcl55/f78m/LDn/fOwj/7Lk/F9OtfzLkvP/cqrlX5ac/yupln9Zcv5fSbX8y5LzfzXV8i9Lzv9EquVflpz/yVTLvyw5/3yGS/5lyfnnKxvkX5ac/5lUy78sOf+zqZZ/WXL+51It/7Lk/M+nWv5lyflfSLX8y5Lz/2qq5V+WnP/XUi3/suT8X0u1/MuS8/96quVflpz/N1It/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/nmr5l+XB5/+bmfLMf/4eMQPdMGNm3EzXv5kAAAAAAAAAAAAAgLZpXE7c9ToCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lu7GLnK+wzgZ7/stSHBDYSvOLA2Bgws3l1/gUMMJgkpJW1KSUibltQ49tps4q961wkgVJZCW6IgFam9oBfNl9IoUluBokhNJRohNVJzV64ScRO1EheWCpWDkkqpAludOe/77szs7Mx6vYtnzvn9EP57Z87MvHPmzOw+az0zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Nv00cm/7MuyLP+/9seGLLs4//u6bF/+5ezuC71CAAAA4Hy9XfvzHy9JJ+xbwoXqtvn3a/7j+3Nzc3PZ5986885fz82lM0aybGBtltXOi378q1/O1W8TPJ0N9/XXfd3f4eYHOpw/2OH8oQ7nr+lw/toO5w93OH/BDlhgXfH7mNqVban9dUOxS7PLsqHaeVtaXOrpvrX9/fF3OTV9tcvMDR3OprKj2WQ2vuAyfbX/suzlTflt3ZvF2+qvu62NWZad/fkTB+Ma+sI+3pI13FhN/WP35t3ZyFs/f+Lgd2beuKrV7LgbFqw0y7Zuztf5TJbN/7oq68vWpn0S19lft86NLdY50LDOvtrl8r83r/PsEtcZ7/dwWOerbda5MZz26HVZls1mi27T7OmsP1vfdKtpfw8XR0R+HflD+b5s8JyOk01LOE7yy7x+XeNx0nxMxv2/KeyTwUXWUP9wvPnUmgX7fbnHSX6vu+FYza/7/vxGh4frf7XacKzm2zxx/eLHQMvHrsUxkI7lumNgc6djoH/NQO0Y6J9f8+aGY2BiwWX6s77abZ25vv0xMDZz7OTY9GOP3zp17MCRySOTxyfGd+/csWvnjl27xg5PHZ0cL/48t13aQ9Zn/ekY3Bxea+IxeGPTtvWH5Nw3V+55MNwlz4P8vn/6hnxBF/dnixzj+TbPbD3/50H6vl/3PBisex60fE1t8TwYXMLzIN/m7Nalfc8crPu/1RpW67VwQ90xcCG/H+a3+dBNi78Wbgzrevbmc/1+OLDgGIh3qy889/JT0s97w7eH/bLwuLg6P+OiNdnp6clT2x49MDNzaiIL411xad1j1Xy8rK+7T9mC46X/nI+Xff/w6xuubnH6hrCvhm9p/1jl2+wcbf9Y1V7dG/fnmqzYnw2nbs/CWGHv9v5s9d0s358pS7TZn/k2z9x6/j8LplxS9/o31On1b2BosHj9G0h7Y6jh9W/hQzNQW1mWnb11aa9/Q+H/d/v177Iuef3L99VD29ofA/k2z46d6zEw2Pb177ow+8J6bgqJYbgu979TO3+2OEzrHsuOx83g4FA4bgbjLTYeNzsWXCa/tvy2t44v77jZel3jY9Xwc0sJj5t8X/3NePvjJt/mlYnzf+1YF/9a99qxptMxMDSwJl/vUDoIite7uXXxGNiWHcxOZEezQ+ky+aOc39bo9qUdA2vC/+/2a8eVXXIM5Pvqhe3tj4F8mx/tWNmfnbaGU9I2dT87Nf9+YbHMf/Xg/PU177aVzvz5Oj/2k0+m01pliHybN3aea85ov59uCadc1GI/NT9/FjumD2Xvzn66Mqzz6K72v5vKt7ls9xKPp31Zlr028Vrt913h97vfO/2T7zf83rfV75Rfm3jtvrEHfnou6wcAYPneqf05u6b4WbPuX6yX8u//AAAAQE+Iub8/zET+BwAAgNKIuX8gzET+BwAAgNKIuX8wzKQi+f+R2/e8+PaTWXo3wLkgnh93w/13FtvFjvds+Hpkbl5++ke+PfTiV55c2m33Z1n26/s+0HL7R+6M6yqcjOv8UOPpC1x57ZJu/+EH57erf/+Es3uK64/3Z6mHQewqvzy2vXa9I49N1OYr92W1+cDss08X1198Hbc/s6PY/u/Cm5bsO9zXcPmtYT1bwhwJ7ylz/775/ZDPeLkXN17zb5d+Zv724uX6Nr+3djdf+NPieuN7RD1/abF9vN+Lrf9fv/rdF/PtH72+9fqf7G+9/jPhel8P81d7i+3r9/lX6tb/52H98fbi5bZ964ct1//SFcX2L4Xj4hthNq//7r/64NutHq94O/vuKC4Xb3/8f3fWLhevL15/8/qHn5xo2B/N1//KW8X17P3SLwbqt4+nx9uJHr6j8fjuC49vQ488y7Lv/kXWsJ+zDxeX+5em9cfrO3lH6/Xf0rTOk33X1i4/f382NNyvr/399pb3N65n3z9taLg/z98T9t9bYz/Kr/fMA+F4DOf/36vF9TW/l+lL9zS+3sTtv7GheN7G6xtrWv/zTeufvTbfd53Xf+9bxfpfumttw/r3fTwcT/cWs9P6j3z9kobLf/M7xeNx6sujx09Mn546VLdX65/Ha4fXrb/o4ve895LwWtr89f4TM49MnhoZHxnPspEefMvA1V7/t8L8n2LMrvwtFH76i+K4e+4TxfetG39ZfP18OP3h8HjG749f+9uhhuO1+XGfvauY57v+m8M6luqKr/7XtUva8MznXj79z3/2RvPPBfH+nHz/cO3+vbDp8tp5fa8U5ze/XnXyn+9vfF7/bHC8Nn8Q9utceGfmzZcXt9d8/fG9SZ77VPH8jT/JxctnTe8nsmGg8X6c7/p/Fn6O+eGVja9/8fj4wZNN7+a8IevLlzAbXh+y2eL8uFXc38+dvbzl7cX34clmrzqXZS5q+rHpsaNTx08/OjYzOT0zNv3Y4/uPnTh9fGZ/7b1L93+h0+Xnn9/ra8/vQ5O7d2a1Z/uJYqyyC73+kw8ePHTb+A2HJg8fOH145sGTk6eOHJyePjh5aPqGA4cPT3650+WnDu2d2L5nx23bR49MHdp7+549O/aMTh0/kS+jWFQHu8e/OHr81P7aRab37twzsWvXzvHRYycOTe69bXx89HSny9e+N43ml/7S6KnJowdmpo5Njk5PPT65d2LP7t3bO77747GTh6dHxk6dPj52enry1FhxX0Zmaifn3/s6XZ5qmD4RXu+a9IWfzj97y+70/ri5bz+16FUVmzT+eJq9Gd4LKn5/6/R1zP1DYSYVyf8AAABQBTH3hzf+nz9D/gcAAIDSiLl/bZiJ/A8AAAClEXN/kfyH08e/VyX/r1T//yn9/xr9f/3/bAX6//1116P/r/+v/9+e/r/+f6b/v2wXuj/f6+vX/9f/p7Nu6/+H3J+tyzL//g8AAAAlFXP/+jAT+R8AAABKI+b+i8JM5H8AAAAojZj7Lw4zqUj+9/n/+v/6/+36/3Fbn/+f6f93Q/9/y3/r/y+g/6//n+n/L9uF7s/3+vq7sP+/Tv+fbtNt/f+Y+98TZlKR/A8AAABVEHP/e8NM5H8AAAAojZj7Lwkzkf8BAACgNGLu3xBmUpH8r/+v/6//332f/19/Pfr/+v8+/789/X/9/0z/f9kudH++19ffhf1/n/9P1+m2/n/M/b8RZlKR/A8AAABVEHP/+8JM5H8AAAAojZj7Lw0zkf8BAACgNGLuvyzMpCL5v5r9/9ezLNP/z/T/9f+b1qn/r/+/GvT/9f/b0f/X/+/l9ev/6//TWbf1/2Puf3+YSUXyPwAAAFRBzP2Xh5nI/wAAAFAaMfdfEWYi/wMAAEBpxNx/ZZhJRfJ/Nfv/Pv9f/7+g/9+4Tv1//f/VoP+v/9+O/r/+fy+vX/9f/5/Ouq3/H3P/VWEmFcn/AAAAUAUx918dZiL/AwAAQGnE3P+BMBP5HwAAAEoj5v6NYSYVyf9N/f+39f/1//X/9f/1/wv6/yujt/r//Yueo/9f0P9vtHL9/9n5Bej/98z69f/1/+ms2/r/Mfd/MMykIvkfAAAAqiDm/mvCTOR/AAAAKI2Y+68NM5H/AQAAoDRi7h8JM6lI/vf5//r/+v/6//r/+v+rqbf6/4vT/y/o/zfy+f/6//r/+v+01239/5j7N4WZVCT/AwAAQBXE3L85zET+BwAAgNKIuf+6MBP5HwAAAEoj5v4tYSYVyf/6//r/bfv/Px7IMv1//f9A/1//fzn0//X/29H/1//v5fXr/+v/01m39f9j7r8+zKQi+R8AAACqIOb+G8JM5H8AAAAojZj7bwwzkf8BAACgNGLu3xpmUpH8r/+v/+/z/3u4/z+g/5/p/3et+DzV/9f/b0f/X/+/l9ev/6//T2fd1v+Puf+mMJOK5H8AAACogpj7bw4zkf8BAACgNGLuvyXMRP4HAACA0oi5fzTMpCL5X/9f/1//v4f7/z7/v2H9+v/dSf9f/78d/X/9/15ev/6//j+ddVv/P+b+W8NMKpL/AQAAoApi7t8WZiL/AwAAQGnE3D8WZiL/AwAAQGnE3D8eZlKR/K//r/+v/6//r/+v/7+a9P/1/9vR/9f/7+X16//r/9NZt/X/Y+6fCDOpSP4HAACAKoi5f3uYifwPAAAApRFz/44wE/kfAAAASiPm/p1hJhXJ/z3S/9+WClD6//r/+v/6//r/PUX/X/+/Hf1//f9eXr/+v/4/jfpbnNZt/f+Y+3eFmVQk/wMAAEAVxNy/O8xE/gcAAIDSiLn/tjAT+R8AAABKI+b+28NMKpL/e6T/7/P/9f/1/+vo/+v/9xL9f/3/dlag/1/74U3/f3kudH++19ev/6//T2fd1v+PuX9PmElF8j8AAABUQcz9Hwozkf8BAACgNGLuvyPMRP4HAACAntLqcwijmPs/HGZSkfyv/1/2/v/cWv1//X/9//br1/9fXfr/+v/t+Px//f9eXr/+v/4/nXVb/z/m/r1hJhXJ/wAAAFAFMfffGWYi/wMAAEBpxNx/V5iJ/A8AAAClEXP/vjCTiuR//f+y9/99/r/+v/5/p/Xr/68u/X/9/3b0/3uz/x9+bNH/76L+f34M6f/Tjbqt/x9z/91hJhXJ/wAAAFAFMfd/JMxE/gcAAIDSiLn/o2Em8j8AAACURsz9HwszqUj+1//X/9f/1//X/+/c/1+n/79s+v+r1v+vvRTq/xf0/5fnQvfnu379zd+gmnRT/9/n/9Otuq3/H3P/PWEmFcn/AAAAUAUx9388zET+BwAAgNKIuf83w0zkfwAAACiNmPvvDTOpSP7X/9f/1//X/9f/9/n/q0n/3+f/t6P/r//fy+vX/9f/p7Nu6//H3P9bYSYVyf8AAABQBTH33xdmIv8DAABAacTc/4kwE/kfAAAAesyaRc+Juf+3w0wqkv97r/8/0pP9//50/fr/+v/6//r/+v8rSf9f/z/T/1+2C92f7/X16//r/9NZt/X/Y+7/nTCTiuR/AAAAqIKY+z8ZZiL/AwAAQGnE3P+7YSbyPwAAAJRGzP33h5lUJP+vdP+/+fLt+Px//f9M/1//X/9f//886f/r/2f6/8t2ofvzvb5+/X/9fzrrtv5/zP2/F2ZSkfwPAAAAVRBz/wNhJvI/AAAAdKlHzvkSMfd/KsxE/gcAAIDSiLn/02EmFcn/vff5//r/+v/6//r/+v+9RP9f/78d/X/9/15ev/6//j+ddVv/P+b+B8NMKpL/AQAAoApi7v9MmIn8DwAAAKURc//vh5nI/wAAAFAaMff/QZhJRfK//r/+v/6//r/+v/7/atL/X9j/z1/D9P8L+v/6/728fv1//X8667b+f8z9nw0zqUj+BwAAgCqIuf8Pw0zkfwAAACiNmPv/KMxE/gcAAIDSiLn/oTCTiuR//X/9f/1//X/9f/3/1aT/7/P/29H/1//v5fXr/+v/01m39f9j7v9cmElF8j8AAABUQcz9fxxmIv8DAABAacTcvz/MRP4HAACA0oi5/+Ewk4rkf/3/pfX/m/vCzfT/W69f/1//X/9f/1//X/+/Hf1//f9eXr/+v/4/nXVb/z/m/gNhJvsabwYAAADoXTH3fz7MpCL//g8AAABVEHP/wTAT+R8AAABKI+b+Q2EmFcn/+v8+/1//X/9f/1//fzXp/+v/t6P/r//fy+vX/9f/p7Nu6//H3D8ZZlKR/A8AAABVEHP/4TAT+R8AAABKI+b+I2Em8j8AAACURsz9j4SZVCT/6//r/+v/V7b//+r3mtap/6//vxr0//X/29H/1//v5fXr/+v/01m39f9j7p8KM6lI/gcAAIAqiLn/C2Em8j8AAACURsz9Xwwzkf8BAACgNGLuPxpmUpH8r/+v/6//X9n+/9I+/3/d/O3q/+v/L4f+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/cfCTCqS/wEAAKAKYu4/HmYi/wMAAEBpxNx/IsxE/gcAAIDSiLn/ZJhJRfK//v+59f/7FukGLqX///Uh/X/9/x7s/9fR/9f/Xw79f/3/dvT/9f97ef36//r/dNZt/f+Y+/8kzKQi+R8AAACqIOb+U2Em8j8AAACURsz902Em8j8AAACURsz9M2EmFcn/+v8+/1//X/9f/1//fzXp/+v/t6P/r////+zd565nZRXH8T+DIxDjPXALXoEvvACvwcTEK7A3sGNX7L1hb9gVe++9995R7DXRMLPWGjnO2fvMzPnPefazPp8XLD2Q8CCjyS/4zd7y+/X/+n/Wjdb/5+6/b9zSZP8DAABAB7n77xe32P8AAAAwjdz9949b7H8AAACYRu7+B8QtTfa//l//r//X/+v/9f/7pP/X/y/R/+v/t/x+/b/+n3Wj9f+5+x8YtzTZ/wAAANBB7v4HxS32PwAAAEwjd/+D4xb7HwAAAKaRu/8hcUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+h8YtTfY/AAAAdJC7/2Fxi/0PAAAA08jd//C4xf4HAACAaeTuvy5uabL/9f/6f/3/Bvv/O11c/3+l/l//fwL0//r/Jfp//f+W36//1/+zbrT+P3f/9XFLk/0PAAAAHeTuf0TcYv8DAADANHL3PzJusf8BAABgGrn7HxW3NNn/+n/9v/5/g/2/7//r/zfkzPvjf+N2+n/9/wH6f/3/lt+v/9f/s260/j93/6Pjlib7HwAAADrI3f+YuMX+BwAAgGnk7n9s3GL/AwAAwDRy9z8ubmmy//X/+n/9v/5f/6//3yff/9f/L9H/6/+3/H79v/6fdXvv/+95w5l71P4/d/8NcUuT/Q8AAAAd5O5/fNxi/wMAAMA0cvc/IW6x/wEAAGAaufufGLc02f/6f/3/uf7/P1fo//X/+v9zP9f/Hw/9v/5/if5f/7/l9+v/9f+s23v/v9L7H/z3ufufFLc02f8AAADQQe7+J8ct9j8AAABMI3f/U+IW+x8AAACmkbv/qXFLk/2v/9f/+/6//l//r//fJ/3/sP3/wf/q3ZH+/0j0//r/w/r/ux/h/fp/Ohit/8/d/7S4pcn+BwAAgA5y9z89brH/AQAAYBq5+2+MW+x/AAAAmEbu/mfELU32v/5f/6//1//fsf8/1bL/v/1n+v/90P8P2/8v0/8fif5f/+/7//p/lo3W/+fuf2bc0mT/AwAAQAe5+58Vt9j/AAAAMI3c/c+OW+x/AAAAmEbu/ufELU32v/5f/6//1/9f0vf/r5yj/6/v/1917uf6/+Oh/9f/L9H/6/+3/H79v/6fdaP1/7n7nxu3NNn/AAAAML1Tu9r9z4tb7H8AAACYRu7+58ct9j8AAABMI3f/C+KWJvtf/6//1//r/y+p/5/k+//V//v+/7HT/+v/lxy1/9/p/+uvRf8/zvv1//p/1o3W/+fuf2Hc0mT/AwAAQAe5+18Ut9j/AAAAMI3c/S+OW+x/AAAAmEbu/pfELU32v/5f/6//1//r//X/+6T/1/8v8f1//f+W36//1/+zbrT+P3f/S+OWJvsfAAAAOsjd/7K4xf4HAACAaeTuf3ncYv8DAADANHL3vyJuObj/T13OV10++n/9v/5f/6//1//vk/5f/79E/3/+/v/qQ/58+v+x3q//1/+zbrT+P3f/TXGLf/4PAAAA08jd/8q4xf4HAACAaeTuf1XcYv8DAADANHL3vzpuabL/D+v/b7vL2d+v/z8a/f/536//1//r//X/+n/9/xL9v+//b/n9+n/9P+tG6/9z978mbmmy/wEAAKCD3P2vjVvsfwAAAJhG7v7XxS32PwAAAEwjd//r45Ym+//4v/9/rf5f/6//j6v/1//r//X/+v9l+n/9/5bfr//X/7NutP4/d/8b4pYm+x8AAAA6yN3/xrjF/gcAAIBp5O5/U9xi/wMAAMA0cve/OW5psv+Pv//3/X/9/wX2/6f0/0n/H39f9f/6/wug/9f/7/T/F+2k+/mtv1//r/9n3Wj9f+7+m89MvX77HwAAADq4+cxvr969JW6x/wEAAGAaufvfGrfY/wAAADCN3P1vi1ua7H/9v/7/xPt/3/8v+v/4+6r/1/9fAP2//n+n/79oJ93Pb/39+n/9P+tG6/9z9789bmmy/wEAAKCD3P3viFvsfwAAAJhG7P6z/+d3+x8AAACm9M4zv7169664pcn+b9z/X3up/f81//Ov9f/nf7/+/1j6/5sP/trT/+v/t0T/r/9fov/X/2/5/eP0//GD6/T/jGe0/j93/7vjlib7HwAAADrI3f+euMX+BwAAgGnk7r8lbrH/AQAAYBq5+98btzTZ/437/0m+/3+vW+MF+v95+3/f/4+r/9f/n4/+X/+/0/9ftJPu57f+/nH6f9//Z1yj9f+5+98XtzTZ/wAAANBB7v73xy32PwAAAEwjd/8H4hb7HwAAAKaRu/+DcUuT/a//33r/7/v/+n/9v/5/bPp//f8S/b/+f8vv1//r/1k3Wv+fu/9DcUuT/Q8AAAAd5O7/cNxi/wMAAMA0cvd/JG6x/wEAAGAaufs/Grc02f/6f/3/vvr/2/8k+v+t9f/3uO2i+v/r9f87/f+h9P/6/yX6f/3/lt+v/9f/s260/j93/8filib7HwAAADrI3f/xuMX+BwAAgGnk7v9E3GL/AwAAwDRy938ybrjbXU/uScfr9CE/j95c/6//9/1//b/v/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/Km7xz/8BAABgGrn7Px232P8AAAAwjdz9n4lb7H8AAACYRu7+z8YtTfa//l//r//fbP9/jf7/ju/X/49J/6//X6L/1/9v+f36f/0/60br/3P3fy5uabL/AQAAoIPc/Z+PW+x/AAAAmEbu/i/ELfY/AAAATCN3/xfjlib7X/+v/9f/b7b/9/3/A+/X/49J/6//X6L/1/9v+f36f/0/60br/3P3fyluabL/AQAAoIPc/V+OW+x/AAAAmEbu/q/ELfY/AAAATCN3/1fjlib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P1fi1ua7H8AAADoIHf/1+MW+x8AAACmkbv/G3GL/Q8AAADTyN3/zbilyf6fuf9f+sP0/2fp//X/O/2//n/P9P/6/yX6f/3/lt+v/9f/s260/j93/7filib7HwAAADrI3f/tuMX+BwAAgGnk7v9O3GL/AwAAwDRy9383bmmy/2fu/5fo/8/S/+v/d/p//f+e6f/1/0v0//r/Lb9f/6//Z90J9f+nd4f0/7n7vxe3NNn/AAAA0EHu/u/HLfY/AAAATCN3/w/iFvsfAAAAppG7/4dxyzz7/963LPxO/f+x9/9nfhHp//X/u7b9/xX1n4D+X/+/0/+v9v/Zt+v/9f87/f/m3q//1/+zbrTv/+fu/1HcMs/+BwAAgPZy9/84brH/AQAAYBq5+38St9j/AAAAMI3c/T+NW5rs/8vZ/x9sbift/33/X/8/cv9/5c73//X/l5n+3/f/l+j/9f9bfr/+X//PutH6/9z9P4tbmux/AAAA6CB3/8/jFvsfAAAAppG7/xdxi/0PAAAA08jd/8u4pcn+9/1//b/+v1X/fxm+/3/u5/p//f9O/6//X6H/1/9v+f3Z/+evO/2//p//N1r/n7v/V3FLk/0PAAAAHeTu/3XcYv8DAADANHL3/yZusf8BAABgGrn7fxu3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L7ff9f/8+60fr/3P23xi1N9j8AAAB0kLv/d3GL/Q8AAADTyN3/+7jF/gcAAIBp5O6/LW5psv/1//r/Kfv/q/T/+n/9/yj0//r/Jfp//f+W36//1/+zbrT+P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f/6/wvv/0/XX/ew/b/v/+v/9f/DmLf/v7P+fzv9/33yjx+t/7/xprM/1v9v8/36f/0/60br/3P3/yVuabL/AQAAoIPc/X+NW+x/AAAAmEbu/r/FLfY/AAAATCN3/9/jlib7X/+v/5/y+//6f/2//n8Y8/b/vv+/of6/jNb/+/7/tt+v/9f/s260/j93/z/ilib7HwAAAGZxeuH35e7/Z9xi/wMAAMA0cvf/K26x/wEAAGAaufv/Hbc02f/6f/2//l//r//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/28AAAD//yo9MTA=") truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) 0s ago: executing program 2 (id=13334): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x4, 0x0, 0x4, 0x0, 0x4002}) kernel console output (not intermixed with test programs): volume at offset 0x3fffffc8c00 [ 924.198896][T30150] loop3: detected capacity change from 0 to 64 [ 924.235153][T30132] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 924.266280][T30132] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 924.341174][T30150] Trying to free block not in datazone [ 924.370822][T30150] Trying to free block not in datazone [ 924.409833][T30150] Trying to free block not in datazone [ 924.442148][ T4986] usb 5-1: string descriptor 0 read error: -22 [ 924.443161][T30154] libceph: resolve '40.' (ret=-3): failed [ 924.448857][ T4986] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=6f.51 [ 924.463562][T30150] Trying to free block not in datazone [ 924.469026][T30150] Trying to free block not in datazone [ 924.488809][ T4986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.497772][T30150] minix_free_block (loop3:6): bit already cleared [ 924.504601][T30150] Trying to free block not in datazone [ 924.518190][T30150] Trying to free block not in datazone [ 924.571125][ T4986] ums-onetouch 5-1:4.206: USB Mass Storage device detected [ 924.791863][ T5104] usb 5-1: USB disconnect, device number 57 [ 925.177756][T30203] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 925.243623][ T4240] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 925.312174][T30213] cgroup: noprefix used incorrectly [ 925.390420][T30219] x_tables: duplicate underflow at hook 4 [ 925.409161][T30223] netlink: 'syz.4.11353': attribute type 1 has an invalid length. [ 925.542141][T30233] loop3: detected capacity change from 0 to 256 [ 925.588406][T30237] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 925.644563][T30233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 925.695198][T30245] loop2: detected capacity change from 0 to 64 [ 925.714984][ T4240] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 925.730444][ T4240] usb 6-1: config 0 has no interface number 0 [ 925.749568][ T4240] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 925.767381][ T4240] usb 6-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 925.795459][ T4240] usb 6-1: config 0 interface 110 has no altsetting 0 [ 925.978758][T30262] loop2: detected capacity change from 0 to 16 [ 926.015634][T30265] kAFS: unparsable volume name [ 926.016832][T30262] erofs: (device loop2): mounted with root inode @ nid 36. [ 926.035240][ T4240] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 926.064859][ T4240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.074168][T30262] attempt to access beyond end of device [ 926.074168][T30262] loop2: rw=0, want=15300821032, limit=16 [ 926.086698][ T4240] usb 6-1: Product: syz [ 926.096793][ T4240] usb 6-1: Manufacturer: syz [ 926.105457][ T4240] usb 6-1: SerialNumber: syz [ 926.121505][T30262] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 926.139115][ T4240] usb 6-1: config 0 descriptor?? [ 926.644245][ T5020] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 926.652055][T30300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11391'. [ 926.679305][ T4240] usb 6-1: USB disconnect, device number 23 [ 926.957131][T30325] x_tables: duplicate entry at hook 2 [ 927.113081][T30329] loop0: detected capacity change from 0 to 4096 [ 927.181240][T30329] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 927.194302][T30329] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 927.215695][T30329] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 927.223693][T30339] loop2: detected capacity change from 0 to 4096 [ 927.227893][T30329] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 927.249580][T30329] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 927.276184][T30329] ntfs: volume version 3.1. [ 927.284192][T30329] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 927.307877][T30329] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 927.325138][ T5020] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 927.369936][ T5020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.378276][T30344] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 927.384751][T30339] NILFS error (device loop2): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 927.403224][ T4986] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 927.421925][T30329] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 927.439289][ T5020] usb 4-1: Product: syz [ 927.443484][ T5020] usb 4-1: Manufacturer: syz [ 927.459747][T30329] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 927.482141][ T5020] usb 4-1: SerialNumber: syz [ 927.493041][T30339] Remounting filesystem read-only [ 927.500452][ T5020] usb 4-1: config 0 descriptor?? [ 927.513245][T30329] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 927.607366][ T5020] ch341 4-1:0.0: ch341-uart converter detected [ 927.670498][ T4986] usb 5-1: Using ep0 maxpacket: 32 [ 927.805062][ T4986] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.825078][T30364] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11422'. [ 927.841464][ T4986] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.841783][ T5020] usb 4-1: short control message received (0 < 2) [ 927.879480][T30364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11422'. [ 927.906497][ T5020] usb 4-1: failed to receive control message: -5 [ 927.906730][T30364] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11422'. [ 927.912935][ T5020] ch341-uart: probe of ttyUSB0 failed with error -5 [ 927.991307][ T4986] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 928.030028][ T4986] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 928.050385][ T4986] usb 5-1: Product: syz [ 928.054591][ T4986] usb 5-1: Manufacturer: syz [ 928.131207][ T4986] hub 5-1:4.0: USB hub found [ 928.177758][T18679] usb 4-1: USB disconnect, device number 47 [ 928.193542][T18679] ch341 4-1:0.0: device disconnected [ 928.324044][T30389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11432'. [ 928.366517][ T4986] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 928.572230][T30404] syz.0.11437[30404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 928.572322][T30404] syz.0.11437[30404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 928.637962][T30406] loop0: detected capacity change from 0 to 512 [ 928.661939][T30408] loop2: detected capacity change from 0 to 8 [ 928.752579][T30406] EXT4-fs (loop0): #blocks per group too big: 294912 [ 928.766187][T18679] usb 5-1: USB disconnect, device number 58 [ 928.977295][T30420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11441'. [ 929.009200][T30385] loop5: detected capacity change from 0 to 32768 [ 929.024004][T30420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11441'. [ 929.156151][T30385] XFS (loop5): Mounting V5 Filesystem [ 929.204435][T30440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 929.211859][T30440] IPv6: NLM_F_CREATE should be set when creating new route [ 929.219092][T30440] IPv6: NLM_F_CREATE should be set when creating new route [ 929.226421][T30440] IPv6: NLM_F_CREATE should be set when creating new route [ 929.306053][T18679] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 929.354665][T30450] netlink: 'syz.4.11449': attribute type 21 has an invalid length. [ 929.399486][T30450] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11449'. [ 929.486392][T30385] XFS (loop5): Ending clean mount [ 929.506828][T30385] XFS (loop5): Quotacheck needed: Please wait. [ 929.573413][T18679] usb 3-1: Using ep0 maxpacket: 8 [ 929.680268][T30385] XFS (loop5): Quotacheck: Done. [ 929.701816][T18679] usb 3-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 929.733203][T18679] usb 3-1: config 1 interface 0 has no altsetting 0 [ 929.741449][T30461] loop3: detected capacity change from 0 to 4096 [ 929.787844][T19820] XFS (loop5): Unmounting Filesystem [ 929.904902][T18679] usb 3-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 929.913979][T18679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.979572][T18679] usb 3-1: Product: syz [ 929.983777][T18679] usb 3-1: Manufacturer: syz [ 930.007555][T30477] cgroup: release_agent respecified [ 930.012941][T18679] usb 3-1: SerialNumber: syz [ 930.313625][T30492] loop4: detected capacity change from 0 to 256 [ 930.369477][T30492] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 930.388210][T18679] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input85 [ 930.439643][ T3545] bcm5974 3-1:1.0: could not read from device [ 930.468182][T30492] attempt to access beyond end of device [ 930.468182][T30492] loop4: rw=524288, want=408, limit=256 [ 930.469035][T18679] usb 3-1: USB disconnect, device number 58 [ 930.486054][ T4986] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 930.492774][ T3545] bcm5974 3-1:1.0: could not read from device [ 930.535879][ T3545] bcm5974 3-1:1.0: could not read from device [ 930.557555][T30492] attempt to access beyond end of device [ 930.557555][T30492] loop4: rw=524288, want=664, limit=256 [ 930.584826][T30492] attempt to access beyond end of device [ 930.584826][T30492] loop4: rw=0, want=288, limit=256 [ 930.632915][T30496] syz.5.11468[30496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.633007][T30496] syz.5.11468[30496] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.666397][T30480] loop0: detected capacity change from 0 to 32768 [ 930.674269][T30496] loop5: detected capacity change from 0 to 512 [ 930.707335][T30480] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 930.750270][ T4986] usb 4-1: Using ep0 maxpacket: 8 [ 930.757753][T30496] EXT4-fs (loop5): #blocks per group too big: 294912 [ 930.770379][T30480] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 930.800695][T30480] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 930.892110][T30480] OCFS2: File system is now read-only. [ 930.920081][T30480] (syz.0.11463,30480,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 930.961335][T30480] (syz.0.11463,30480,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 930.963335][ T4986] usb 4-1: unable to get BOS descriptor or descriptor too short [ 931.035620][T30480] (syz.0.11463,30480,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 931.072137][T30480] (syz.0.11463,30480,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 931.080866][ T4986] usb 4-1: config 15 has an invalid interface number: 162 but max is 0 [ 931.080894][ T4986] usb 4-1: config 15 has no interface number 0 [ 931.080924][ T4986] usb 4-1: config 15 interface 162 has no altsetting 0 [ 931.121854][T30509] loop4: detected capacity change from 0 to 4096 [ 931.129237][T30480] (syz.0.11463,30480,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 931.138622][T30480] (syz.0.11463,30480,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 931.160613][T30480] (syz.0.11463,30480,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 931.169648][T30516] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 931.192839][T30509] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 931.226773][T30480] (syz.0.11463,30480,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 931.252063][ T4986] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7c.ce [ 931.272913][ T4986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.301616][T30480] (syz.0.11463,30480,1):ocfs2_mknod:298 ERROR: status = -5 [ 931.309087][ T4986] usb 4-1: Product: syz [ 931.313413][ T4986] usb 4-1: Manufacturer: syz [ 931.318258][T30480] (syz.0.11463,30480,1):ocfs2_mknod:502 ERROR: status = -5 [ 931.339690][ T4986] usb 4-1: SerialNumber: syz [ 931.343868][T30480] (syz.0.11463,30480,1):ocfs2_create:676 ERROR: status = -5 [ 931.399521][T30524] libceph: resolve '40.' (ret=-3): failed [ 931.417938][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 931.467543][T30526] 8021q: adding VLAN 0 to HW filter on device bond3 [ 931.583390][ T5022] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 931.666229][ T4986] usb 4-1: USB disconnect, device number 48 [ 931.709241][T30540] loop4: detected capacity change from 0 to 256 [ 931.757900][T30544] dlm: no local IP address has been set [ 931.770110][T30544] dlm: cannot start dlm midcomms -107 [ 931.773924][T30540] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 931.871921][ T5022] usb 6-1: Using ep0 maxpacket: 8 [ 931.946878][T18840] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 932.021648][ T5022] usb 6-1: config 4 has an invalid interface number: 244 but max is 0 [ 932.030191][ T5022] usb 6-1: config 4 has no interface number 0 [ 932.036426][ T5022] usb 6-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 932.047547][ T5022] usb 6-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 932.057434][ T5022] usb 6-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 932.067279][ T5022] usb 6-1: config 4 interface 244 has no altsetting 0 [ 932.181936][ T5020] Bluetooth: hci0: command 0x0405 tx timeout [ 932.235416][ T5022] usb 6-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 932.241979][T30554] libceph: resolve '40.' (ret=-3): failed [ 932.244901][ T5022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.258992][ T5022] usb 6-1: Product: syz [ 932.263170][ T5022] usb 6-1: Manufacturer: syz [ 932.268565][ T5022] usb 6-1: SerialNumber: syz [ 932.307840][T30557] x_tables: unsorted underflow at hook 1 [ 932.369021][T18840] usb 1-1: config index 0 descriptor too short (expected 65207, got 72) [ 932.512391][T30572] Cannot find del_set index 3 as target [ 932.556319][T18840] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 932.580914][T18840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.589575][T18840] usb 1-1: Product: syz [ 932.593752][T18840] usb 1-1: Manufacturer: syz [ 932.598367][T18840] usb 1-1: SerialNumber: syz [ 932.620813][ T5022] ipheth 6-1:4.244: Unable to find endpoints [ 932.653416][T18840] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 932.662066][ T5022] usb 6-1: USB disconnect, device number 24 [ 932.673914][ T5020] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 932.685434][ T4240] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 932.930208][ T5020] usb 5-1: Using ep0 maxpacket: 16 [ 932.940999][ T4240] usb 3-1: Using ep0 maxpacket: 16 [ 933.058683][ T5020] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 933.066963][ T5020] usb 5-1: config 0 has no interface number 0 [ 933.073364][ T4240] usb 3-1: config 1 has an invalid interface number: 223 but max is 0 [ 933.082318][ T5020] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 933.093802][ T4240] usb 3-1: config 1 has no interface number 0 [ 933.099893][ T4240] usb 3-1: config 1 interface 223 has no altsetting 0 [ 933.107421][ T5020] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 933.213099][T30584] loop5: detected capacity change from 0 to 4096 [ 933.283366][ T5020] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 933.292441][ T5020] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 933.300782][ T5019] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 933.310041][ T4240] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=42.53 [ 933.323874][ T4240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.332588][ T4240] usb 3-1: Product: syz [ 933.337003][ T5020] usb 5-1: Manufacturer: syz [ 933.341735][ T5020] usb 5-1: SerialNumber: syz [ 933.352585][ T4240] usb 3-1: Manufacturer: syz [ 933.357218][ T4240] usb 3-1: SerialNumber: syz [ 933.365787][ T5020] usb 5-1: config 0 descriptor?? [ 933.390304][T30561] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 933.425259][ T4240] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.223/input/input88 [ 933.646455][ T3545] bcm5974 3-1:1.223: could not read from device [ 933.661459][ T4240] usb 3-1: USB disconnect, device number 59 [ 933.667867][ T5020] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 933.678652][ T5020] usbtouchscreen: probe of 5-1:0.214 failed with error -71 [ 933.678813][ T3545] bcm5974 3-1:1.223: could not read from device [ 933.693317][ T3545] bcm5974 3-1:1.223: could not read from device [ 933.696480][ T5020] usb 5-1: USB disconnect, device number 59 [ 933.759745][T18840] usb 1-1: USB disconnect, device number 68 [ 934.039800][T30606] loop5: detected capacity change from 0 to 256 [ 934.079913][T30608] x_tables: unsorted underflow at hook 3 [ 934.130077][T30610] loop3: detected capacity change from 0 to 4096 [ 934.180897][T30610] __ntfs_error: 7 callbacks suppressed [ 934.180913][T30610] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 934.219354][T30606] FAT-fs (loop5): Directory bread(block 64) failed [ 934.244766][T30606] FAT-fs (loop5): Directory bread(block 65) failed [ 934.254778][T30606] FAT-fs (loop5): Directory bread(block 66) failed [ 934.269245][T30606] FAT-fs (loop5): Directory bread(block 67) failed [ 934.275970][T30610] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 934.296420][T30614] device bridge2 entered promiscuous mode [ 934.304937][T30606] FAT-fs (loop5): Directory bread(block 68) failed [ 934.334072][T30610] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 934.355322][T30606] FAT-fs (loop5): Directory bread(block 69) failed [ 934.361947][T30606] FAT-fs (loop5): Directory bread(block 70) failed [ 934.390990][T30618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 934.398314][T30618] IPv6: NLM_F_CREATE should be set when creating new route [ 934.405577][T30618] IPv6: NLM_F_CREATE should be set when creating new route [ 934.416351][ T5019] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 934.417974][T30610] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 934.423703][ T5019] ath9k_htc: Failed to initialize the device [ 934.448296][T30606] FAT-fs (loop5): Directory bread(block 71) failed [ 934.465362][T30606] FAT-fs (loop5): Directory bread(block 72) failed [ 934.488556][T18840] usb 1-1: ath9k_htc: USB layer deinitialized [ 934.501661][T30606] FAT-fs (loop5): Directory bread(block 73) failed [ 934.535018][T30610] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 934.610892][T30625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11529'. [ 934.633229][T30610] ntfs: volume version 3.1. [ 934.648597][T30610] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 934.698730][T30610] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 934.794181][T30610] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 934.850505][T30610] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 934.870531][T30610] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 934.918123][T30639] netlink: 332 bytes leftover after parsing attributes in process `syz.4.11535'. [ 935.373269][T30661] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11545'. [ 935.453128][T18679] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 935.709926][T18679] usb 1-1: Using ep0 maxpacket: 16 [ 935.838444][T18679] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 935.846767][T18679] usb 1-1: config 0 has no interface number 0 [ 935.884467][T18679] usb 1-1: config 0 interface 148 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 935.934183][T18679] usb 1-1: config 0 interface 148 has no altsetting 0 [ 936.116330][T18679] usb 1-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00 [ 936.125448][T18679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.135257][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.158843][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.179860][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.180931][T18679] usb 1-1: Product: syz [ 936.210840][T18679] usb 1-1: Manufacturer: syz [ 936.213922][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.225750][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.231978][T18679] usb 1-1: SerialNumber: syz [ 936.246730][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.264690][T30719] netlink: 192 bytes leftover after parsing attributes in process `syz.4.11574'. [ 936.273111][T18679] usb 1-1: config 0 descriptor?? [ 936.319517][T30650] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 936.341532][T18679] ums-sddr09 1-1:0.148: USB Mass Storage device detected [ 936.392622][T18679] scsi host1: usb-storage 1-1:0.148 [ 936.741159][T18679] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 937.214128][T30779] loop5: detected capacity change from 0 to 4096 [ 937.217367][T18679] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 937.243074][T18679] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 937.505791][T18679] usb 5-1: string descriptor 0 read error: -22 [ 937.512304][T18679] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 937.525167][T18679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.708928][T30735] usb 1-1: reset high-speed USB device number 69 using dummy_hcd [ 937.730244][T18705] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 937.837303][T18679] cdc_ncm 5-1:1.0: bind() failure [ 937.850508][T18679] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 937.864720][T18679] cdc_ncm 5-1:1.1: bind() failure [ 937.892450][T18679] usb 5-1: USB disconnect, device number 60 [ 938.042358][T30803] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 938.116599][T18705] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 938.134804][T18705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.166722][T18705] usb 6-1: config 0 descriptor?? [ 938.212471][T18705] cp210x 6-1:0.0: cp210x converter detected [ 938.336339][T30812] sctp: [Deprecated]: syz.0.11617 (pid 30812) Use of int in max_burst socket option. [ 938.336339][T30812] Use struct sctp_assoc_value instead [ 938.459989][T18705] usb 6-1: cp210x converter now attached to ttyUSB0 [ 938.461626][T30820] netlink: 'syz.4.11621': attribute type 13 has an invalid length. [ 938.649209][ T4986] usb 1-1: USB disconnect, device number 69 [ 938.675968][T18840] usb 6-1: USB disconnect, device number 25 [ 938.716041][T18840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 938.724090][T18840] cp210x 6-1:0.0: device disconnected [ 939.043178][T30852] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 939.089199][T30853] loop4: detected capacity change from 0 to 256 [ 939.089199][T30856] loop3: detected capacity change from 0 to 128 [ 939.095276][T30852] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 939.112635][T30856] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 939.128975][T30853] exfat: Deprecated parameter 'namecase' [ 939.147490][T30853] exfat: Deprecated parameter 'namecase' [ 939.157910][T30853] exfat: Deprecated parameter 'utf8' [ 939.161606][T30859] loop2: detected capacity change from 0 to 22 [ 939.185912][T30853] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 939.221625][T30859] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 939.266714][T30859] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 939.510639][T30872] loop5: detected capacity change from 0 to 128 [ 939.919410][T30890] loop5: detected capacity change from 0 to 4096 [ 939.997626][T30901] loop3: detected capacity change from 0 to 1024 [ 940.047851][T30908] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 940.048264][T30890] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 940.155650][T30890] NILFS (loop5): mounting fs with errors [ 940.511035][T30928] loop5: detected capacity change from 0 to 64 [ 940.528523][T30931] netlink: 'syz.0.11675': attribute type 1 has an invalid length. [ 940.543726][T30931] __nla_validate_parse: 22 callbacks suppressed [ 940.543744][T30931] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.11675'. [ 940.734285][T18679] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 940.766000][T30947] loop5: detected capacity change from 0 to 8 [ 940.840472][T30951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11685'. [ 940.862707][T30951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11685'. [ 940.874842][T30951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11685'. [ 940.900846][T30943] loop0: detected capacity change from 0 to 4096 [ 940.937849][T30947] SQUASHFS error: Failed to read block 0x636: -5 [ 940.945121][T30947] SQUASHFS error: Unable to read metadata cache entry [634] [ 940.964098][T30947] SQUASHFS error: Unable to read metadata cache entry [634] [ 940.970499][T30943] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 940.991197][T18679] usb 3-1: Using ep0 maxpacket: 8 [ 941.007911][T30947] SQUASHFS error: Unable to read directory block [629:0] [ 941.119377][T18679] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 941.127419][T18679] usb 3-1: config 0 has no interface number 0 [ 941.157269][T18679] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 941.175582][T30962] netlink: 'syz.4.11691': attribute type 10 has an invalid length. [ 941.193266][T18679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.218402][T30962] device netdevsim0 entered promiscuous mode [ 941.227116][T18679] usb 3-1: config 0 descriptor?? [ 941.278471][T30962] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 941.311724][T18840] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 941.491117][T30980] loop5: detected capacity change from 0 to 1024 [ 941.501871][ T4240] usb 3-1: USB disconnect, device number 60 [ 941.576391][T30980] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,user_xattr,,errors=continue. Quota mode: writeback. [ 941.601244][T30983] loop4: detected capacity change from 0 to 4096 [ 941.611634][T18840] usb 4-1: Using ep0 maxpacket: 8 [ 941.628276][T30983] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 941.693056][T30983] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 941.760786][T18840] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 941.782076][T18840] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 941.790117][T18840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.825746][T18840] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 941.845678][T18840] usb 4-1: config 0 has no interface number 0 [ 941.859263][T18840] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.888899][T18840] usb 4-1: config 0 interface 150 has no altsetting 0 [ 941.892094][T30974] loop0: detected capacity change from 0 to 32768 [ 941.899843][T18840] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 941.918201][T18840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.934010][T18840] usb 4-1: config 0 descriptor?? [ 941.965182][T30974] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 941.965182][T30974] [ 941.979413][T30974] ialloc: diAlloc returned -5! [ 942.127550][T30992] netlink: 220 bytes leftover after parsing attributes in process `syz.4.11702'. [ 942.161426][T30994] loop2: detected capacity change from 0 to 16 [ 942.231617][T30994] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 942.238323][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 942.238338][ T26] audit: type=1400 audit(1756953835.358:62): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=30997 comm="syz.0.11708" [ 942.348191][T31004] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 942.495190][T31011] loop0: detected capacity change from 0 to 256 [ 942.515337][T18840] usb 4-1: USB disconnect, device number 49 [ 942.548719][T31003] loop4: detected capacity change from 0 to 4096 [ 942.597813][T31003] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 942.639956][T31003] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 942.655590][T31003] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 942.852581][T18679] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 942.873191][ T5669] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 942.902624][ T4196] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 942.926334][ T4196] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 942.993791][T31028] loop0: detected capacity change from 0 to 64 [ 943.262960][T18679] usb 6-1: config index 0 descriptor too short (expected 65207, got 72) [ 943.439451][T18679] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 943.448551][T18679] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.512236][T18679] usb 6-1: Product: syz [ 943.516853][T18679] usb 6-1: Manufacturer: syz [ 943.521712][T18679] usb 6-1: SerialNumber: syz [ 943.603421][T18679] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 943.765307][T31077] rdma_rxe: ignoring netdev event = 8 for lo [ 943.856109][ T5104] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 944.134335][ T5104] usb 5-1: Using ep0 maxpacket: 32 [ 944.262429][T18679] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 944.267602][ T5104] usb 5-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config [ 944.267641][ T5104] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 944.298994][T31113] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11764'. [ 944.348080][ T5104] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 944.366832][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 944.384117][T31119] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 944.389253][ T5104] usb 5-1: SerialNumber: syz [ 944.455526][T31123] loop3: detected capacity change from 0 to 128 [ 944.660417][T31137] loop3: detected capacity change from 0 to 256 [ 944.712982][T18705] usb 6-1: USB disconnect, device number 26 [ 944.724347][T31137] exfat: Deprecated parameter 'namecase' [ 944.730193][T31137] exfat: Deprecated parameter 'namecase' [ 944.737983][ T5104] usb 5-1: USB disconnect, device number 61 [ 944.781948][T31137] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 944.937604][T31153] netlink: 'syz.0.11783': attribute type 11 has an invalid length. [ 945.068103][T31162] loop2: detected capacity change from 0 to 2048 [ 945.170136][T31162] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 945.438250][T18679] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 945.445372][T18679] ath9k_htc: Failed to initialize the device [ 945.467978][T18705] usb 6-1: ath9k_htc: USB layer deinitialized [ 945.645400][ T4240] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 945.725100][T31205] loop4: detected capacity change from 0 to 256 [ 945.966173][T31211] loop5: detected capacity change from 0 to 4096 [ 945.994962][T31211] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 946.075158][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 946.103578][T31211] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 946.105759][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.149975][ T4240] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 946.185691][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.225656][ T4240] usb 4-1: config 0 descriptor?? [ 946.301188][ T4240] xbox_remote_probe: endpoint_in message size==0? [ 946.499700][T31207] loop0: detected capacity change from 0 to 32768 [ 946.577518][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11813'. [ 946.627062][ T4240] usbhid 4-1:0.0: can't add hid device: -71 [ 946.633411][ T4240] usbhid: probe of 4-1:0.0 failed with error -71 [ 946.665246][T31219] loop2: detected capacity change from 0 to 4096 [ 946.676111][ T4240] usb 4-1: USB disconnect, device number 50 [ 946.709452][T31225] loop5: detected capacity change from 0 to 2364 [ 946.768718][T31219] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 947.194200][T31249] loop3: detected capacity change from 0 to 164 [ 947.358893][T31256] loop0: detected capacity change from 0 to 16 [ 947.395769][T31256] erofs: (device loop0): mounted with root inode @ nid 36. [ 947.474175][T31256] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 947.545805][T31256] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -57 in[61, 4035] out[1851] [ 947.626106][T31256] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 947.739165][T31272] loop4: detected capacity change from 0 to 2048 [ 947.811454][T31272] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 948.095831][T31239] loop5: detected capacity change from 0 to 32768 [ 948.255497][T31239] ERROR: (device loop5): diNewExt: no free extents [ 948.255497][T31239] [ 948.266282][T31298] loop4: detected capacity change from 0 to 256 [ 948.320943][T31302] loop0: detected capacity change from 0 to 256 [ 948.328811][T31239] ERROR: (device loop5): remounting filesystem as read-only [ 948.341117][T31239] ialloc: diAlloc returned -5! [ 948.502616][T31310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11857'. [ 948.709033][T31321] ip6t_srh: unknown srh match flags 4001 [ 948.813406][T31329] Restarting kernel threads ... done. [ 948.946467][T31340] loop5: detected capacity change from 0 to 64 [ 949.034687][T31337] loop4: detected capacity change from 0 to 4096 [ 949.048711][T31346] loop2: detected capacity change from 0 to 2048 [ 949.082861][T31340] hfs: unable to load iocharset "Sp" [ 949.087617][T31346] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 949.093281][T31340] hfs: unable to parse mount options [ 949.119708][T31346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 949.184393][T31337] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 949.280743][T31337] ntfs3: loop4: failed to convert "c46c" to iso8859-14 [ 949.684664][T31363] loop2: detected capacity change from 0 to 4096 [ 949.787269][T31363] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 949.918036][T31388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11894'. [ 949.919609][T31387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11893'. [ 949.959288][T31388] openvswitch: netlink: Actions may not be safe on all matching packets [ 950.007666][T31387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11893'. [ 950.090762][T31387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11893'. [ 950.101092][T31355] loop0: detected capacity change from 0 to 32768 [ 950.121130][T31393] Restarting kernel threads ... done. [ 950.128415][T31395] loop2: detected capacity change from 0 to 1024 [ 950.194218][T31355] JBD2: Ignoring recovery information on journal [ 950.317838][T31355] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 950.431465][T31395] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 950.450261][T31395] ext4 filesystem being mounted at /2469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 950.739014][T31355] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 950.809990][T31442] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11917'. [ 950.834075][T31355] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 950.886560][T31355] OCFS2: File system is now read-only. [ 950.900706][T31355] (syz.0.11878,31355,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 950.912164][T31355] (syz.0.11878,31355,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 950.920198][T31355] (syz.0.11878,31355,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 950.957317][T31355] (syz.0.11878,31355,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 950.980925][T31450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11922'. [ 950.982891][T31355] (syz.0.11878,31355,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 951.008063][T31453] program syz.4.11923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 951.011163][T31355] (syz.0.11878,31355,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 951.083000][T31355] (syz.0.11878,31355,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 951.108877][T31355] (syz.0.11878,31355,0):ocfs2_symlink:1941 ERROR: status = -30 [ 951.154455][T31355] (syz.0.11878,31355,0):ocfs2_symlink:2065 ERROR: status = -30 [ 951.248125][ T4194] ocfs2: Unmounting device (7,0) on (node local) [ 951.359324][T31465] loop2: detected capacity change from 0 to 4096 [ 951.520076][T31483] loop4: detected capacity change from 0 to 16 [ 951.578411][T31483] erofs: (device loop4): mounted with root inode @ nid 36. [ 951.625487][ T4190] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[9000] [ 951.628047][T18679] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 951.667740][T31483] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 951.780717][ T26] audit: type=1800 audit(1756953844.291:63): pid=31483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11938" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 951.908506][T31496] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 952.056388][T18679] usb 4-1: Using ep0 maxpacket: 8 [ 952.124213][T31505] loop2: detected capacity change from 0 to 512 [ 952.184407][T18679] usb 4-1: config 4 has an invalid interface number: 244 but max is 0 [ 952.192688][T18679] usb 4-1: config 4 has no interface number 0 [ 952.238461][T18679] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7 [ 952.263270][T18679] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 952.275639][T18679] usb 4-1: config 4 interface 244 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0 [ 952.291314][T31505] EXT4-fs (loop2): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 952.319663][T31518] loop0: detected capacity change from 0 to 1024 [ 952.320850][T18679] usb 4-1: config 4 interface 244 has no altsetting 0 [ 952.326648][T31505] ext4 filesystem being mounted at /2478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 952.416966][T31518] hfsplus: invalid extended attribute record [ 952.529897][T18679] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa [ 952.545982][T18679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.560643][ T5669] hfsplus: b-tree write err: -5, ino 4 [ 952.575388][T31526] netlink: 'syz.5.11957': attribute type 6 has an invalid length. [ 952.575788][T18679] usb 4-1: Product: syz [ 952.588242][T18679] usb 4-1: Manufacturer: syz [ 952.593521][T18679] usb 4-1: SerialNumber: syz [ 952.654324][ T5104] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 952.886208][T31544] loop5: detected capacity change from 0 to 1024 [ 952.943398][T18679] ipheth 4-1:4.244: Unable to find endpoints [ 952.952573][T18679] usb 4-1: USB disconnect, device number 51 [ 953.039249][ T5104] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 953.071649][ T5104] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.101402][ T5104] usb 5-1: config 0 has no interface number 0 [ 953.112313][ T5104] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 953.124246][ T5104] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 953.134883][ T5104] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 953.173097][ T5104] usb 5-1: config 0 interface 52 has no altsetting 0 [ 953.180416][ T4986] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 953.281618][T31564] device sit0 entered promiscuous mode [ 953.315390][T31564] netlink: 'syz.2.11975': attribute type 1 has an invalid length. [ 953.345144][T31564] netlink: 'syz.2.11975': attribute type 3 has an invalid length. [ 953.348238][T31568] loop5: detected capacity change from 0 to 2048 [ 953.373762][ T5104] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 953.386878][ T5104] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 953.395928][T31569] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 953.406729][ T5104] usb 5-1: Product: syz [ 953.410916][ T5104] usb 5-1: Manufacturer: syz [ 953.416055][ T5104] usb 5-1: SerialNumber: syz [ 953.423016][ T5104] usb 5-1: config 0 descriptor?? [ 953.447631][ T4986] usb 1-1: Using ep0 maxpacket: 32 [ 953.581507][ T4986] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.597498][T31578] loop2: detected capacity change from 0 to 256 [ 953.600713][ T4986] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 953.614293][ T4986] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 953.630629][T31579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11981'. [ 953.639685][ T4986] usb 1-1: config 0 interface 0 has no altsetting 0 [ 953.646604][ T4986] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 953.649146][T31578] exfat: Deprecated parameter 'namecase' [ 953.666030][ T4986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.676250][ T4986] usb 1-1: config 0 descriptor?? [ 953.682881][T31578] exfat: Deprecated parameter 'namecase' [ 953.709748][T31578] exfat: Deprecated parameter 'utf8' [ 953.718836][T31581] xt_nfacct: accounting object `syz1' does not exist [ 953.724739][ T5104] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 953.764435][ T5104] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 953.764544][T31578] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 953.791898][T31583] netlink: 'syz.5.11983': attribute type 2 has an invalid length. [ 953.955833][ T26] audit: type=1400 audit(1756953846.321:64): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A2F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=31589 comm="syz.3.11986" [ 953.988930][T18840] usb 5-1: USB disconnect, device number 62 [ 954.055023][ T4986] usbhid 1-1:0.0: can't add hid device: -71 [ 954.061036][ T4986] usbhid: probe of 1-1:0.0 failed with error -71 [ 954.102519][ T4986] usb 1-1: USB disconnect, device number 70 [ 954.151216][T31602] loop3: detected capacity change from 0 to 8 [ 954.197474][T31607] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11995'. [ 954.233558][T31602] SQUASHFS error: Failed to read block 0x636: -5 [ 954.249493][T31602] SQUASHFS error: Unable to read metadata cache entry [634] [ 954.260931][T31602] SQUASHFS error: Unable to read metadata cache entry [634] [ 954.283808][T31602] SQUASHFS error: Unable to read directory block [629:0] [ 954.718303][ T4240] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 954.788617][T31637] netlink: 4176 bytes leftover after parsing attributes in process `syz.0.12012'. [ 954.803554][ T4986] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 955.071318][ T4986] usb 6-1: Using ep0 maxpacket: 8 [ 955.145532][ T4240] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 955.173733][ T4240] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 955.187977][T18840] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 955.198921][ T4986] usb 6-1: config 8 has an invalid interface number: 125 but max is 0 [ 955.207186][ T4986] usb 6-1: config 8 has no interface number 0 [ 955.305844][ T4240] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 955.327482][ T4240] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 955.335816][ T4240] usb 4-1: Manufacturer: syz [ 955.344512][ T4240] usb 4-1: config 0 descriptor?? [ 955.392332][ T4986] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 955.414140][ T4240] igorplugusb 4-1:0.0: endpoint incorrect [ 955.417800][ T4986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.439411][T31675] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.462179][ T4986] usb 6-1: Product: syz [ 955.480342][ T4986] usb 6-1: Manufacturer: syz [ 955.496361][ T4986] usb 6-1: SerialNumber: syz [ 955.553697][ T4986] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 955.622922][T31686] loop2: detected capacity change from 0 to 64 [ 955.644705][ T4240] usb 4-1: USB disconnect, device number 52 [ 955.651298][T18840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.669312][T18840] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 955.697818][T18840] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 955.717527][T18840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.740328][T18840] usb 5-1: config 0 descriptor?? [ 955.868160][T31700] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12032'. [ 956.071626][T18840] Bluetooth: Can't get state to change to load ram patch err [ 956.092543][T18840] Bluetooth: Loading patch file failed [ 956.100982][T18840] ath3k: probe of 5-1:0.0 failed with error -121 [ 956.161066][ T4986] gspca_m5602: Failed to find a sensor [ 956.166594][ T4986] ALi m5602 6-1:8.125: ALi m5602 webcam failed [ 956.223952][ T4986] usb 6-1: USB disconnect, device number 27 [ 956.307621][ T5019] usb 5-1: USB disconnect, device number 63 [ 956.334399][T31729] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 956.363470][T31732] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12042'. [ 956.424546][T31734] loop3: detected capacity change from 0 to 512 [ 956.619714][T31734] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 956.667552][T31734] ext4 filesystem being mounted at /2421/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 956.718858][T31755] netlink: 448 bytes leftover after parsing attributes in process `syz.2.12050'. [ 957.221101][T31793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12067'. [ 957.291783][T31793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12067'. [ 957.393542][T31806] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12075'. [ 957.472552][T31806] netlink: 80 bytes leftover after parsing attributes in process `syz.4.12075'. [ 957.612211][T31824] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 957.658002][T31823] xt_bpf: check failed: parse error [ 957.663676][T31821] loop3: detected capacity change from 0 to 4096 [ 957.719858][T31821] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 957.867229][T31821] overlayfs: bad mount option "redirect_dir=follow:/" [ 958.312548][T31856] netlink: 'syz.0.12098': attribute type 14 has an invalid length. [ 958.554351][T31817] loop2: detected capacity change from 0 to 32768 [ 958.815866][T31835] loop4: detected capacity change from 0 to 32768 [ 958.828537][T31876] loop5: detected capacity change from 0 to 4096 [ 958.905618][T31876] ntfs: volume version 3.1. [ 958.929749][ T4986] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 958.944977][T31835] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 958.944977][T31835] [ 958.957833][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.957874][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.963059][ T4270] kworker/dying (4270) used greatest stack depth: 19816 bytes left [ 959.037066][T31835] ialloc: diAlloc returned -5! [ 959.159535][T31894] libceph: resolve '4.' (ret=-3): failed [ 959.191712][T31890] loop2: detected capacity change from 0 to 8192 [ 959.362143][T31890] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 959.407378][T31890] REISERFS (device loop2): using ordered data mode [ 959.415107][T31890] reiserfs: using flush barriers [ 959.427985][T31890] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 959.486072][ T4986] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 959.495144][ T4986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.507348][T31890] REISERFS (device loop2): checking transaction log (loop2) [ 959.585435][ T4986] usb 1-1: Product: syz [ 959.585458][ T4986] usb 1-1: Manufacturer: syz [ 959.585473][ T4986] usb 1-1: SerialNumber: syz [ 959.587232][ T4986] usb 1-1: config 0 descriptor?? [ 959.633925][ T4986] usb 1-1: selecting invalid altsetting 3 [ 959.633950][ T4986] comedi comedi5: could not set alternate setting 3 in high speed [ 959.633965][ T4986] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 959.647430][ T4986] usbdux: probe of 1-1:0.0 failed with error -22 [ 959.692617][T31913] netlink: 'syz.4.12127': attribute type 30 has an invalid length. [ 959.732793][T31890] REISERFS (device loop2): Using tea hash to sort names [ 959.733082][T31890] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 959.753015][T31915] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 959.753037][T31915] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 959.852740][ T4986] usb 1-1: USB disconnect, device number 71 [ 960.201213][T31937] __nla_validate_parse: 5 callbacks suppressed [ 960.201231][T31937] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.12139'. [ 960.255200][T31941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12141'. [ 960.264493][T31941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12141'. [ 960.265517][T31937] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 960.345901][T31947] loop5: detected capacity change from 0 to 128 [ 960.477390][T31947] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,noload,,errors=continue. Quota mode: none. [ 960.533678][T31947] ext4 filesystem being mounted at /931/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 960.591685][T31947] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.12143: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 960.865057][T31983] loop0: detected capacity change from 0 to 64 [ 960.901663][T31986] loop4: detected capacity change from 0 to 1024 [ 960.928864][T31983] Trying to free block not in datazone [ 960.959898][T31983] minix_free_block (loop0:21): bit already cleared [ 961.006544][T31986] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 961.257929][T31984] loop2: detected capacity change from 0 to 32768 [ 961.398093][T31995] loop0: detected capacity change from 0 to 4096 [ 961.411261][T31984] XFS (loop2): Mounting V5 Filesystem [ 961.440492][T32004] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.577269][T31984] XFS (loop2): Ending clean mount [ 961.617476][T31984] XFS (loop2): Quotacheck needed: Please wait. [ 961.738510][T31984] XFS (loop2): Quotacheck: Done. [ 961.851639][ T4193] XFS (loop2): Unmounting Filesystem [ 961.869719][ T5104] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 961.966088][T32021] loop0: detected capacity change from 0 to 4096 [ 961.990032][T32021] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 962.039621][T32027] affs: No valid root block on device nbd3 [ 962.125405][T32021] ntfs3: loop0: failed to convert "076c" to cp949 [ 962.151077][ T5104] usb 6-1: Using ep0 maxpacket: 8 [ 962.324619][ T5104] usb 6-1: unable to get BOS descriptor or descriptor too short [ 962.429793][ T5104] usb 6-1: config 4 interface 0 has no altsetting 0 [ 962.705869][ T5104] usb 6-1: string descriptor 0 read error: -22 [ 962.713473][ T5104] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 962.734411][ T5104] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 962.791283][ T5104] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 962.795901][T32056] loop4: detected capacity change from 0 to 4096 [ 962.808247][ T5104] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 962.842809][ T5104] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 962.860846][T32056] NILFS (loop4): mounting unchecked fs [ 962.868846][ T5104] usb 6-1: media controller created [ 962.879612][T32056] NILFS (loop4): recovery required for readonly filesystem [ 962.911808][T32056] NILFS (loop4): write access will be enabled during recovery [ 962.914965][ T5104] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 962.935906][T32056] NILFS (loop4): invalid segment: Checksum error in segment payload [ 962.970991][T32056] NILFS (loop4): trying rollback from an earlier position [ 962.996950][T32056] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 963.001318][T32037] loop3: detected capacity change from 0 to 40427 [ 963.006206][T32062] netlink: 'syz.2.12192': attribute type 21 has an invalid length. [ 963.020995][T32062] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12192'. [ 963.052240][T32037] F2FS-fs (loop3): invalid crc value [ 963.085265][T32037] F2FS-fs (loop3): Found nat_bits in checkpoint [ 963.112363][T32056] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 963.241290][T32037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 963.256686][ T5104] usb 6-1: USB disconnect, device number 28 [ 963.353220][T32070] loop2: detected capacity change from 0 to 512 [ 963.461873][T32070] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,noquota,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue. Quota mode: writeback. [ 963.491746][T32070] ext4 filesystem being mounted at /2535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 963.769880][T32095] NILFS (nullb0): couldn't find nilfs on the device [ 963.889047][T32093] loop0: detected capacity change from 0 to 4096 [ 964.020592][T32093] ntfs: (device loop0): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 964.101936][T32093] ntfs: volume version 3.1. [ 964.160014][T32113] openvswitch: netlink: Message has 4 unknown bytes. [ 964.355957][T32122] loop5: detected capacity change from 0 to 1024 [ 964.553095][T32130] syz.3.12222 uses old SIOCAX25GETINFO [ 964.705040][T32091] loop4: detected capacity change from 0 to 32768 [ 964.769085][T32144] loop3: detected capacity change from 0 to 1764 [ 964.824232][T32150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12230'. [ 964.851156][T32091] JBD2: Ignoring recovery information on journal [ 964.889048][T32144] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 964.997706][T32153] loop2: detected capacity change from 0 to 64 [ 965.047166][T32091] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 965.135139][T32151] loop0: detected capacity change from 0 to 4096 [ 965.197771][T32091] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 965.254508][T32091] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 965.270042][T32151] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 965.310902][T32091] OCFS2: File system is now read-only. [ 965.334234][T32091] (syz.4.12205,32091,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 965.342298][T32091] (syz.4.12205,32091,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 965.359913][T32151] overlayfs: bad mount option "redirect_dir=follow:/" [ 965.391542][T32091] (syz.4.12205,32091,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 965.450996][T32091] (syz.4.12205,32091,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 965.459639][T32091] (syz.4.12205,32091,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 965.546290][T32091] (syz.4.12205,32091,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 965.555875][T32172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 965.631509][T32091] (syz.4.12205,32091,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 965.668241][T32091] (syz.4.12205,32091,0):ocfs2_symlink:1941 ERROR: status = -30 [ 965.729874][T32091] (syz.4.12205,32091,0):ocfs2_symlink:2065 ERROR: status = -30 [ 965.762802][T32177] loop2: detected capacity change from 0 to 1764 [ 965.813833][T32177] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 965.849396][ T4196] ocfs2: Unmounting device (7,4) on (node local) [ 966.031222][T32191] loop3: detected capacity change from 0 to 64 [ 966.093780][T32191] hfs: request for non-existent node 16777216 in B*Tree [ 966.119122][T32191] hfs: request for non-existent node 16777216 in B*Tree [ 966.317887][T32202] overlayfs: missing 'lowerdir' [ 966.426032][T32212] loop3: detected capacity change from 0 to 128 [ 966.557341][T32212] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 966.563151][T32225] loop2: detected capacity change from 0 to 512 [ 966.590786][T32212] ext4 filesystem being mounted at /2476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.683642][T32225] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 966.739413][T32234] loop4: detected capacity change from 0 to 512 [ 966.825705][T32225] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 966.861076][T32225] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 966.906188][T32225] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 966.922372][T32234] EXT4-fs (loop4): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 966.973905][T32234] ext4 filesystem being mounted at /2624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 967.211246][T32260] loop0: detected capacity change from 0 to 256 [ 967.303692][T32266] netlink: 676 bytes leftover after parsing attributes in process `syz.5.12287'. [ 967.323698][T32268] IPv6: sit2: Disabled Multicast RS [ 967.352382][T32270] netlink: 236 bytes leftover after parsing attributes in process `syz.4.12289'. [ 967.396124][T32260] FAT-fs (loop0): Directory bread(block 64) failed [ 967.413930][T32260] FAT-fs (loop0): Directory bread(block 65) failed [ 967.429112][T32260] FAT-fs (loop0): Directory bread(block 66) failed [ 967.446652][T32260] FAT-fs (loop0): Directory bread(block 67) failed [ 967.482167][T32260] FAT-fs (loop0): Directory bread(block 68) failed [ 967.488816][T32260] FAT-fs (loop0): Directory bread(block 69) failed [ 967.519062][T32260] FAT-fs (loop0): Directory bread(block 70) failed [ 967.590725][T32260] FAT-fs (loop0): Directory bread(block 71) failed [ 967.608332][T32260] FAT-fs (loop0): Directory bread(block 72) failed [ 967.617293][T32284] loop5: detected capacity change from 0 to 128 [ 967.625527][T32260] FAT-fs (loop0): Directory bread(block 73) failed [ 967.954655][T32303] overlayfs: missing 'workdir' [ 968.172176][T32319] loop2: detected capacity change from 0 to 2048 [ 968.188912][T32323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12315'. [ 968.291746][T32319] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 968.358239][T32337] netlink: 'syz.3.12322': attribute type 12 has an invalid length. [ 968.382709][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12320'. [ 968.464711][T32339] loop2: detected capacity change from 0 to 4096 [ 968.693130][T32339] ntfs3: loop2: ino=5, "/" directory corrupted [ 968.700941][T32339] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 968.774619][T32353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12329'. [ 968.873916][T32357] loop4: detected capacity change from 0 to 64 [ 968.952064][T32361] loop0: detected capacity change from 0 to 256 [ 969.384760][T32381] loop4: detected capacity change from 0 to 1024 [ 969.419247][T32345] loop3: detected capacity change from 0 to 32768 [ 969.531678][T32345] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 969.591254][T32394] netlink: 'syz.0.12348': attribute type 3 has an invalid length. [ 969.593085][T32345] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 969.642179][T32396] cgroup: noprefix used incorrectly [ 969.660730][T32345] ocfs2: Unmounting device (7,3) on (node local) [ 969.727283][T18679] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 969.754445][T32401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12351'. [ 969.824459][T32401] device macsec0 left promiscuous mode [ 969.850345][T32401] bridge0: port 3(macsec0) entered disabled state [ 969.868928][T32401] device bridge_slave_1 left promiscuous mode [ 969.883469][T32401] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.898016][T32401] device bridge_slave_0 left promiscuous mode [ 969.906246][T32401] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.986482][T18679] usb 3-1: Using ep0 maxpacket: 8 [ 970.112212][T18679] usb 3-1: config 8 has an invalid interface number: 125 but max is 0 [ 970.134110][T18679] usb 3-1: config 8 has no interface number 0 [ 970.294798][T32429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12364'. [ 970.304719][T18679] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 970.333092][T18679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.361522][T18679] usb 3-1: Product: syz [ 970.365727][T18679] usb 3-1: Manufacturer: syz [ 970.405017][T18679] usb 3-1: SerialNumber: syz [ 970.477571][T18679] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 970.529343][T32440] loop5: detected capacity change from 0 to 1024 [ 970.660608][T32440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 970.668173][T32444] loop4: detected capacity change from 0 to 8192 [ 970.768670][T32444] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 970.802036][T32444] REISERFS (device loop4): using ordered data mode [ 970.803998][T32428] loop3: detected capacity change from 0 to 32768 [ 970.822706][T32444] reiserfs: using flush barriers [ 970.861941][T32444] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 970.882934][T32444] REISERFS (device loop4): checking transaction log (loop4) [ 971.095957][T18679] gspca_m5602: Failed to find a sensor [ 971.106706][T18679] ALi m5602 3-1:8.125: ALi m5602 webcam failed [ 971.135961][T18679] usb 3-1: USB disconnect, device number 61 [ 971.156678][T32444] REISERFS (device loop4): Using tea hash to sort names [ 971.171485][T32444] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 971.181377][ T4986] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 971.374248][T18705] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 971.390203][T32455] loop4: detected capacity change from 0 to 128 [ 971.448395][ T4986] usb 6-1: Using ep0 maxpacket: 32 [ 971.576979][ T4986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.758596][ T4986] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 971.767894][ T4986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.776308][ T4986] usb 6-1: Product: syz [ 971.780587][ T4986] usb 6-1: Manufacturer: syz [ 971.785176][ T4986] usb 6-1: SerialNumber: syz [ 971.791406][ T4986] usb 6-1: config 0 descriptor?? [ 971.845841][ T4986] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 971.929710][ T5104] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 971.972456][T18705] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 971.981574][T18705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.990079][T18705] usb 4-1: Product: syz [ 971.994433][T18705] usb 4-1: Manufacturer: syz [ 971.999166][T18705] usb 4-1: SerialNumber: syz [ 972.048518][T18705] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 972.314536][ T4986] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 972.321564][ T4986] gspca_pac7302: probe of 6-1:0.0 failed with error -71 [ 972.330476][ T4986] usb 6-1: USB disconnect, device number 29 [ 972.496322][ T5104] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 972.505434][ T5104] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.513713][ T5104] usb 3-1: Product: syz [ 972.518105][ T5104] usb 3-1: Manufacturer: syz [ 972.522729][ T5104] usb 3-1: SerialNumber: syz [ 972.528928][ T5104] usb 3-1: config 0 descriptor?? [ 972.573374][ T5104] usb 3-1: selecting invalid altsetting 3 [ 972.579179][ T5104] comedi comedi5: could not set alternate setting 3 in high speed [ 972.590635][ T5104] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 972.599760][ T5104] usbdux: probe of 3-1:0.0 failed with error -22 [ 972.656624][T18705] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 972.796449][ T4986] usb 3-1: USB disconnect, device number 62 [ 972.871908][T32471] loop5: detected capacity change from 0 to 64 [ 973.114773][T18840] usb 4-1: USB disconnect, device number 53 [ 973.283251][T32492] netlink: 'syz.4.12397': attribute type 3 has an invalid length. [ 973.304855][T32492] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.12397'. [ 973.438162][T32501] device ip6erspan0 entered promiscuous mode [ 973.446244][T32503] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12401'. [ 973.464615][T32503] netlink: 44 bytes leftover after parsing attributes in process `syz.5.12401'. [ 973.477655][T32503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12401'. [ 973.517704][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12402'. [ 973.527563][T32507] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12402'. [ 973.746940][T18705] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 973.753944][T18705] ath9k_htc: Failed to initialize the device [ 973.778004][T18840] usb 4-1: ath9k_htc: USB layer deinitialized [ 973.803455][T32526] netlink: 'syz.3.12411': attribute type 30 has an invalid length. [ 973.811863][T32523] cgroup: name respecified [ 973.949618][T32535] loop5: detected capacity change from 0 to 512 [ 974.088309][T32535] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 974.088309][T32535] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 974.088309][T32535] [ 974.149780][T32535] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 974.205231][T32556] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12426'. [ 974.239065][T32535] EXT4-fs error (device loop5): ext4_fill_super:4841: inode #2: comm syz.5.12414: casefold flag without casefold feature [ 974.269588][T32535] EXT4-fs (loop5): get root inode failed [ 974.281844][T32535] EXT4-fs (loop5): mount failed [ 974.294440][T32564] autofs4:pid:32564:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 974.307882][T32564] autofs4:pid:32564:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 974.417263][T32570] netlink: 'syz.0.12433': attribute type 22 has an invalid length. [ 974.446762][T32570] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 974.546483][T32576] x_tables: duplicate underflow at hook 3 [ 974.560883][T32579] netlink: 'syz.2.12438': attribute type 10 has an invalid length. [ 974.589150][T32579] netlink: 'syz.2.12438': attribute type 49 has an invalid length. [ 974.641376][T32584] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12440'. [ 974.951922][T32557] loop3: detected capacity change from 0 to 32768 [ 975.020333][T32557] XFS: attr2 mount option is deprecated. [ 975.079669][T32619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12456'. [ 975.164703][T32557] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 975.327416][T32557] XFS (loop3): Quotacheck needed: Please wait. [ 975.527630][T32557] XFS (loop3): Quotacheck: Done. [ 975.574783][T32649] netlink: 180 bytes leftover after parsing attributes in process `syz.0.12468'. [ 975.660500][ T4183] XFS (loop3): Unmounting Filesystem [ 975.827365][T32658] loop5: detected capacity change from 0 to 1024 [ 975.854833][T32663] kAFS: Can only specify source 'none' with -o dyn [ 975.917663][T32665] AppArmor: change_hat: Invalid input '' [ 976.010517][T32669] nfs4: Bad value for 'source' [ 976.219039][T32677] loop5: detected capacity change from 0 to 64 [ 976.345007][T32677] Trying to free block not in datazone [ 976.350592][T32677] minix_free_block (loop5:21): bit already cleared [ 976.422565][T32685] loop0: detected capacity change from 0 to 256 [ 976.526222][T32659] loop4: detected capacity change from 0 to 32768 [ 976.679548][T32659] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 976.730645][T32659] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 976.752340][T32702] device netdevsim0 left promiscuous mode [ 976.758335][T32702] bridge0: port 3(netdevsim0) entered disabled state [ 976.767750][T32702] device bridge_slave_1 left promiscuous mode [ 976.775238][T32702] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.846786][T32702] device bridge_slave_0 left promiscuous mode [ 976.856300][T32659] ocfs2: Unmounting device (7,4) on (node local) [ 976.874071][T32702] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.018350][T18840] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 977.260745][T32724] loop2: detected capacity change from 0 to 1024 [ 977.322583][T32727] loop4: detected capacity change from 0 to 4096 [ 977.368190][T32724] EXT4-fs error (device loop2): ext4_map_blocks:739: inode #3: block 1: comm syz.2.12504: lblock 1 mapped to illegal pblock 1 (length 1) [ 977.420990][T32727] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 977.462500][T32724] Quota error (device loop2): write_blk: dquota write failed [ 977.476638][T32727] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 977.520657][T32724] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 977.538438][T32727] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 977.574884][T32724] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.12504: Failed to acquire dquot type 0 [ 977.606245][T32727] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 977.627945][T18840] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 977.630331][T32727] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 977.638669][T32724] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.12504: Freeing blocks not in datazone - block = 0, count = 4096 [ 977.680976][T18840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.683101][T32730] loop3: detected capacity change from 0 to 40427 [ 977.688997][T18840] usb 6-1: Product: syz [ 977.689016][T18840] usb 6-1: Manufacturer: syz [ 977.689028][T18840] usb 6-1: SerialNumber: syz [ 977.709988][T32724] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.12504: Invalid inode bitmap blk 0 in block_group 0 [ 977.717308][T32727] ntfs: volume version 3.1. [ 977.730275][T32724] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 977.735122][T32727] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 977.740682][T32724] EXT4-fs (loop2): 1 orphan inode deleted [ 977.754572][ T5669] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 977.768269][T32730] F2FS-fs (loop3): invalid crc value [ 977.783277][T18840] usb 6-1: config 0 descriptor?? [ 977.792307][T32727] ntfs: (device loop4): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 977.793329][T32724] EXT4-fs (loop2): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 977.809042][ T5669] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 977.828552][ T5669] EXT4-fs error (device loop2): ext4_release_dquot:6245: comm kworker/u4:7: Failed to release dquot type 0 [ 977.879947][T32724] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 977.941809][T32730] F2FS-fs (loop3): Found nat_bits in checkpoint [ 978.009653][T32730] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 978.109045][T18840] cx82310_eth: probe of 6-1:0.0 failed with error -22 [ 978.168065][T32740] autofs4:pid:32740:autofs_fill_super: called with bogus options [ 978.241623][T18840] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 978.290994][T18840] usb 6-1: USB disconnect, device number 30 [ 978.480090][T32755] loop4: detected capacity change from 0 to 256 [ 978.543806][T32755] exfat: Deprecated parameter 'namecase' [ 978.578539][T32755] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 978.809724][ T309] netlink: 'syz.4.12527': attribute type 1 has an invalid length. [ 978.847196][ T309] __nla_validate_parse: 4 callbacks suppressed [ 978.847213][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12527'. [ 979.144335][ T333] NILFS (nullb0): couldn't find nilfs on the device [ 979.175829][ T339] netlink: 'syz.2.12540': attribute type 2 has an invalid length. [ 979.300156][ T347] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12544'. [ 979.349760][ T351] xt_l2tp: v2 tid > 0xffff: 262144 [ 979.355370][ T352] trusted_key: encrypted_key: insufficient parameters specified [ 979.481451][ T359] loop3: detected capacity change from 0 to 64 [ 979.854206][ T383] loop5: detected capacity change from 0 to 64 [ 979.926137][T18840] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 979.964473][ T383] hfs: request for non-existent node 16777216 in B*Tree [ 979.972538][ T385] loop0: detected capacity change from 0 to 1764 [ 979.987763][ T383] hfs: request for non-existent node 16777216 in B*Tree [ 980.058400][ T385] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 980.081734][ T387] loop4: detected capacity change from 0 to 4096 [ 980.147284][ T389] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.12563'. [ 980.204013][T18840] usb 3-1: Using ep0 maxpacket: 16 [ 980.218924][ T392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12564'. [ 980.247943][T18840] usb 3-1: too many configurations: 178, using maximum allowed: 8 [ 980.262224][ T377] loop3: detected capacity change from 0 to 32768 [ 980.338286][ T377] JBD2: Ignoring recovery information on journal [ 980.365796][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 980.406202][ T377] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 980.439776][ T387] ntfs: volume version 3.1. [ 980.443369][ T377] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 980.460251][ T377] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 980.470420][ T377] OCFS2: File system is now read-only. [ 980.476301][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 980.486118][ T377] (syz.3.12554,377,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 980.497147][ T377] (syz.3.12554,377,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 980.505193][ T377] (syz.3.12554,377,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 980.513866][ T377] (syz.3.12554,377,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 980.522731][ T377] (syz.3.12554,377,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 980.535259][ T377] (syz.3.12554,377,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 980.544453][ T377] (syz.3.12554,377,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 980.582441][ T377] (syz.3.12554,377,1):ocfs2_symlink:1941 ERROR: status = -30 [ 980.604847][ T377] (syz.3.12554,377,1):ocfs2_symlink:2065 ERROR: status = -30 [ 980.615114][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 980.709474][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 980.728267][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 980.856272][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 980.963193][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 981.091406][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 981.167083][ T425] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.12578'. [ 981.208922][T18840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 981.260527][ T427] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12580'. [ 981.403734][T18840] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 981.432895][T18840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 981.462971][T18840] usb 3-1: Product: syz [ 981.478989][T18840] usb 3-1: Manufacturer: syz [ 981.483630][T18840] usb 3-1: SerialNumber: syz [ 981.520707][T18840] usb 3-1: config 0 descriptor?? [ 981.655137][ T453] netlink: 'syz.4.12594': attribute type 24 has an invalid length. [ 981.682986][ T409] loop0: detected capacity change from 0 to 40427 [ 981.800448][ T409] F2FS-fs (loop0): invalid crc value [ 981.827557][ T409] F2FS-fs (loop0): Found nat_bits in checkpoint [ 981.909880][ T409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 982.172848][ T478] IPv6: sit2: Disabled Multicast RS [ 982.459481][ T490] vivid-000: disconnect [ 982.460787][ T488] netlink: 'syz.5.12610': attribute type 10 has an invalid length. [ 982.477068][ T489] vivid-000: reconnect [ 982.494944][ T488] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.12610'. [ 982.521826][ T488] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 982.578246][ T492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.607698][ T492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.868331][ T500] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12614'. [ 982.894575][ T4986] usb 3-1: USB disconnect, device number 63 [ 983.303772][ T520] loop0: detected capacity change from 0 to 512 [ 983.332166][ T524] netlink: 168 bytes leftover after parsing attributes in process `syz.5.12629'. [ 983.376049][ T522] loop3: detected capacity change from 0 to 2048 [ 983.452804][ T533] dlm: plock device version mismatch: kernel (1.2.0), user (1952804395.1769107551.1915428975) [ 983.465932][ T520] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 983.508324][ T520] ext4 filesystem being mounted at /2463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 983.520767][ T522] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 983.530933][ T535] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.584243][ T522] Remounting filesystem read-only [ 983.640968][ T522] NILFS (loop3): the device already has a read-only mount. [ 983.977834][T18705] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 984.227199][ T578] cgroup: noprefix used incorrectly [ 984.245025][T18705] usb 3-1: Using ep0 maxpacket: 8 [ 984.369070][ T583] loop0: detected capacity change from 0 to 4096 [ 984.432687][T18705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 984.472078][ T583] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 984.502771][ T593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.534843][ T5019] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 984.535164][T18705] usb 3-1: config 4 interface 0 has no altsetting 0 [ 984.572904][ T593] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 984.584943][ T593] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 984.824541][T18705] usb 3-1: string descriptor 0 read error: -22 [ 984.832152][T18705] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 984.854583][ T5019] usb 5-1: Using ep0 maxpacket: 16 [ 984.861273][T18705] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 984.870249][ T4986] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 984.934022][T18705] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 984.967514][T18705] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 985.004356][T18705] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 985.013019][T18705] usb 3-1: media controller created [ 985.025794][ T5019] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.057594][ T5019] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 985.065219][T18705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 985.089002][ T5019] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.091367][ T622] loop0: detected capacity change from 0 to 512 [ 985.132332][ T5019] usb 5-1: config 0 interface 0 has no altsetting 0 [ 985.150783][ T622] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 985.268322][ T622] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 985.299697][ T622] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 985.340081][ T622] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 985.357194][ T5019] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 985.367303][ T5019] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.379739][ T5019] usb 5-1: Product: syz [ 985.385484][ T5019] usb 5-1: Manufacturer: syz [ 985.399597][ T5019] usb 5-1: SerialNumber: syz [ 985.413661][ T5019] usb 5-1: config 0 descriptor?? [ 985.455306][ T4986] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 985.479019][ T5022] usb 3-1: USB disconnect, device number 64 [ 985.481519][ T4986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.500080][ T4986] usb 6-1: Product: syz [ 985.504438][ T4986] usb 6-1: Manufacturer: syz [ 985.521997][ T4986] usb 6-1: SerialNumber: syz [ 985.599133][ T4986] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 985.675800][ T642] loop0: detected capacity change from 0 to 4096 [ 985.748008][ T642] ntfs: volume version 3.1. [ 985.763388][T18840] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 985.844225][ T651] netlink: 'syz.0.12673': attribute type 1 has an invalid length. [ 986.006607][ T5022] usb 5-1: USB disconnect, device number 64 [ 986.049499][ T663] loop0: detected capacity change from 0 to 128 [ 986.180089][T18840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.198212][T18840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.211617][ T671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12679'. [ 986.213168][T18840] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.226925][ T4986] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 986.239360][T18840] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.282462][T18840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.308465][T18840] usb 4-1: config 0 descriptor?? [ 986.375878][T18840] hub 4-1:0.0: USB hub found [ 986.481263][ T684] xt_connbytes: Forcing CT accounting to be enabled [ 986.487978][ T684] --map-set only usable from mangle table [ 986.577013][ T688] loop4: detected capacity change from 0 to 1024 [ 986.602681][ T690] netlink: ct family unspecified [ 986.607844][T18840] hub 4-1:0.0: 14 ports detected [ 986.611913][ T690] openvswitch: netlink: Actions may not be safe on all matching packets [ 986.640198][T18840] hub 4-1:0.0: insufficient power available to use all downstream ports [ 986.677851][T18705] usb 6-1: USB disconnect, device number 31 [ 986.688749][ T688] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 986.832385][T18840] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 986.838876][T18840] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 986.897710][T18840] usb 4-1: USB disconnect, device number 54 [ 987.046156][ T5020] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 987.064345][ T700] loop4: detected capacity change from 0 to 32768 [ 987.173389][ T702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12691'. [ 987.184633][ T702] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12691'. [ 987.194607][ T702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12691'. [ 987.319533][ T5020] usb 3-1: Using ep0 maxpacket: 32 [ 987.355103][ T710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12694'. [ 987.431041][ T4986] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 987.438053][ T4986] ath9k_htc: Failed to initialize the device [ 987.479259][ T5020] usb 3-1: config 254 has an invalid interface number: 156 but max is 0 [ 987.479550][T18705] usb 6-1: ath9k_htc: USB layer deinitialized [ 987.498824][ T5020] usb 3-1: config 254 contains an unexpected descriptor of type 0x1, skipping [ 987.542003][ T5020] usb 3-1: config 254 has no interface number 0 [ 987.569839][ T5020] usb 3-1: config 254 interface 156 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 1024 [ 987.617561][ T5020] usb 3-1: config 254 interface 156 has no altsetting 0 [ 987.837355][ T5020] usb 3-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice=1a.be [ 987.848037][ T5020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.873159][ T5020] usb 3-1: Product: syz [ 987.877804][ T5020] usb 3-1: Manufacturer: syz [ 987.882947][ T5020] usb 3-1: SerialNumber: syz [ 987.933715][ T696] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 988.045767][ T752] netlink: 'syz.5.12715': attribute type 30 has an invalid length. [ 988.081029][ T754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 988.083137][ T5022] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 988.108451][ T754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 988.111942][ T756] loop5: detected capacity change from 0 to 16 [ 988.129567][ T754] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 988.145890][ T756] erofs: (device loop5): mounted with root inode @ nid 36. [ 988.171912][ T756] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 988.200899][ T4190] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -20 in[4096, 0] out[8192] [ 988.227904][ T756] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress -20 in[4096, 0] out[4096] [ 988.247785][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 988.247798][ T26] audit: type=1800 audit(1756953878.396:65): pid=756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.12717" name="file3" dev="loop5" ino=9895604650073 res=0 errno=0 [ 988.284343][ T5020] usb-storage 3-1:254.156: USB Mass Storage device detected [ 988.348119][ T762] loop4: detected capacity change from 0 to 8 [ 988.386177][ T5020] zr364xx 3-1:254.156: Zoran 364xx compatible webcam plugged [ 988.401374][ T764] netlink: 'syz.5.12719': attribute type 12 has an invalid length. [ 988.413304][ T5020] zr364xx 3-1:254.156: model 0595:4343 detected [ 988.433108][ T5020] usb 3-1: 320x240 mode selected [ 988.447687][ T5020] zr364xx 3-1:254.156: Could not find bulk-in endpoint [ 988.454680][ T5020] zr364xx: probe of 3-1:254.156 failed with error -12 [ 988.462492][ T762] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 988.481783][ T4184] udevd[4184]: incorrect cramfs checksum on /dev/loop4 [ 988.500100][ T762] cramfs: Error -3 while decompressing! [ 988.532157][ T5022] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 988.540274][ T5022] usb 4-1: config 0 has no interface number 0 [ 988.561135][ T762] cramfs: ffffffff961ee068(26)->ffff88806a7ed000(4096) [ 988.568406][ T5020] usb 3-1: USB disconnect, device number 65 [ 988.574547][ T4184] udevd[4184]: incorrect cramfs checksum on /dev/loop4 [ 988.578881][ T5022] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 988.596261][ T762] cramfs: Error -3 while decompressing! [ 988.601875][ T762] cramfs: ffffffff961ee082(26)->ffff88805b891000(4096) [ 988.627471][ T762] cramfs: Error -3 while decompressing! [ 988.647155][ T762] cramfs: ffffffff961ee068(26)->ffff88806a7ed000(4096) [ 988.658227][ T26] audit: type=1800 audit(1756953878.779:66): pid=762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12720" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 988.820760][ T5022] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 988.829876][ T5022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.868031][ T5022] usb 4-1: Product: syz [ 988.872231][ T5022] usb 4-1: Manufacturer: syz [ 988.908765][ T5022] usb 4-1: SerialNumber: syz [ 988.929304][ T5022] usb 4-1: config 0 descriptor?? [ 988.960002][ T730] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 988.982015][ T5022] ums-karma 4-1:0.46: USB Mass Storage device detected [ 989.057426][ T791] loop2: detected capacity change from 0 to 4096 [ 989.081556][ T5022] ums-karma: probe of 4-1:0.46 failed with error -5 [ 989.098920][ T791] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 989.160072][ T793] loop5: detected capacity change from 0 to 2048 [ 989.220650][ T793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.310239][T18679] usb 4-1: USB disconnect, device number 55 [ 989.327581][ T4193] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 989.337453][ T4193] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 989.374991][ T4193] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 989.442238][ T801] loop4: detected capacity change from 0 to 4096 [ 989.704021][ T815] device veth0_vlan left promiscuous mode [ 989.840465][ T817] loop2: detected capacity change from 0 to 22 [ 989.913743][ T823] cgroup: name respecified [ 989.943896][ T817] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 989.997889][ T817] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 990.034371][ T817] MTD: Couldn't look up './file0': -13 [ 990.058210][ T817] ./file0: Can't open blockdev [ 990.082969][ T833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12750'. [ 990.109911][ T833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12750'. [ 990.149293][ T805] loop5: detected capacity change from 0 to 32768 [ 990.206213][ T839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12757'. [ 990.216610][ T805] XFS: attr2 mount option is deprecated. [ 990.226487][ T839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12757'. [ 990.368397][ T860] netlink: 'syz.4.12764': attribute type 3 has an invalid length. [ 990.377668][ T805] XFS (loop5): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 990.443595][ T805] XFS (loop5): Quotacheck needed: Please wait. [ 990.468089][ T870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12767'. [ 990.664983][ T805] XFS (loop5): Quotacheck: Done. [ 990.710434][ T881] netlink: 'syz.3.12773': attribute type 22 has an invalid length. [ 990.721199][T19820] XFS (loop5): Unmounting Filesystem [ 990.747920][ T881] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 990.985325][ T891] loop3: detected capacity change from 0 to 1024 [ 991.183362][T18705] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 991.368794][ T910] tmpfs: Bad value for 'mpol' [ 991.431522][ T916] loop3: detected capacity change from 0 to 47 [ 991.441819][T18705] usb 5-1: Using ep0 maxpacket: 8 [ 991.569849][T18705] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.600340][T18705] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 991.631975][T18705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.674060][T18705] usb 5-1: config 0 descriptor?? [ 991.711585][ T933] device vlan1 entered promiscuous mode [ 991.935161][T18705] usb 5-1: USB disconnect, device number 65 [ 992.294295][ T941] loop3: detected capacity change from 0 to 32768 [ 992.348915][ T955] loop2: detected capacity change from 0 to 764 [ 992.558830][ T941] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.12801 (941) [ 992.625354][ T941] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 992.643717][ T959] netlink: 'syz.4.12810': attribute type 10 has an invalid length. [ 992.664540][ T941] BTRFS info (device loop3): enabling ssd optimizations [ 992.679475][ T959] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12810'. [ 992.690060][ T941] BTRFS info (device loop3): not using ssd optimizations [ 992.706166][ T941] BTRFS info (device loop3): turning off barriers [ 992.764168][ T941] BTRFS info (device loop3): using free space tree [ 992.781892][ T941] BTRFS info (device loop3): has skinny extents [ 992.910942][ T990] loop5: detected capacity change from 0 to 256 [ 993.018312][ T990] exfat: Deprecated parameter 'namecase' [ 993.082232][ T990] exfat: Deprecated parameter 'utf8' [ 993.088038][ T990] exfat: Deprecated parameter 'namecase' [ 993.093919][ T990] exfat: Deprecated parameter 'utf8' [ 993.110760][ T990] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 993.694088][ T1020] netlink: 'syz.4.12832': attribute type 2 has an invalid length. [ 993.866698][ T4986] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 994.070398][ T1046] xt_CT: No such helper "netbios-ns" [ 994.142079][ T1063] netlink: 232 bytes leftover after parsing attributes in process `syz.4.12845'. [ 994.251784][ T4986] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x73, skipping [ 994.444408][ T4986] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 994.465267][ T4986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.505981][ T4986] usb 4-1: Product: syz [ 994.512143][ T4986] usb 4-1: Manufacturer: syz [ 994.527665][ T4986] usb 4-1: SerialNumber: syz [ 994.553632][ T4986] usb 4-1: config 0 descriptor?? [ 994.564676][ T1095] loop2: detected capacity change from 0 to 4096 [ 994.616963][ T4986] pegasus_notetaker 4-1:0.0: Invalid number of endpoints [ 994.648193][ T4986] pegasus_notetaker: probe of 4-1:0.0 failed with error -22 [ 994.755938][ T1095] ntfs: (device loop2): parse_options(): NLS character set cpS not found. Using previous one iso8859-2. [ 994.859161][ T1095] ntfs: volume version 3.1. [ 994.903262][ T5020] usb 4-1: USB disconnect, device number 56 [ 994.940039][ T1106] loop5: detected capacity change from 0 to 8192 [ 995.035908][ T1092] loop4: detected capacity change from 0 to 32768 [ 995.059936][ T1106] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 995.075608][ T1106] REISERFS (device loop5): using ordered data mode [ 995.082459][ T1106] reiserfs: using flush barriers [ 995.100336][ T1106] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 995.134207][ T1106] REISERFS (device loop5): checking transaction log (loop5) [ 995.170118][ T1106] REISERFS (device loop5): Using r5 hash to sort names [ 995.209856][ T1106] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 995.276758][ T1118] loop0: detected capacity change from 0 to 64 [ 995.314874][ T1106] REISERFS warning (device loop5): reiserfs-15100 reiserfs_get_unused_objectid: no more object ids [ 995.961850][ T1159] netlink: 256 bytes leftover after parsing attributes in process `syz.2.12883'. [ 996.034665][ T1167] nft_compat: unsupported protocol 1 [ 996.385209][ T1211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12904'. [ 996.414848][ T1213] loop4: detected capacity change from 0 to 1024 [ 996.442236][ T1217] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12907'. [ 996.484375][ T1213] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 996.502915][ T1213] EXT4-fs (loop4): invalid journal inode [ 996.520415][ T1213] EXT4-fs (loop4): can't get journal size [ 996.552906][ T1213] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 996.580275][ T1221] netlink: 568 bytes leftover after parsing attributes in process `syz.2.12909'. [ 996.997045][ T1244] xt_l2tp: wrong L2TP version: 0 [ 997.227573][ T1259] bond0: Error: Cannot enslave bond to itself. [ 997.280686][ T1263] device wlan0 entered promiscuous mode [ 997.501860][ T1276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12936'. [ 997.511054][ T1276] openvswitch: netlink: EtherType 0 is less than min 600 [ 997.638180][ T1280] device netdevsim0 entered promiscuous mode [ 997.692704][ T1280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 998.083907][ T1264] loop4: detected capacity change from 0 to 32768 [ 998.213560][ T1317] SET target dimension over the limit! [ 998.399676][ T4722] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 998.758797][ T1343] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 998.816578][ T4722] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 998.837838][ T4722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.843887][ T1351] loop0: detected capacity change from 0 to 64 [ 998.854422][ T1349] loop4: detected capacity change from 0 to 764 [ 998.862231][ T4722] usb 4-1: config 0 descriptor?? [ 998.902990][ T4722] cp210x 4-1:0.0: cp210x converter detected [ 998.940898][ T1349] Symlink component flag not implemented [ 998.941698][ T1325] loop2: detected capacity change from 0 to 32768 [ 998.985202][ T1349] Symlink component flag not implemented [ 999.008577][ T1349] Symlink component flag not implemented (129) [ 999.015495][ T1349] Symlink component flag not implemented (6) [ 999.024862][ T1325] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt [ 999.024862][ T1325] [ 999.090517][ T1325] ERROR: (device loop2): remounting filesystem as read-only [ 999.124324][ T1325] jfs_lookup: dtSearch returned -5 [ 999.372372][ T4722] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 999.377709][ T1362] device bond4 entered promiscuous mode [ 999.393697][ T4722] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 999.415449][ T4722] usb 4-1: cp210x converter now attached to ttyUSB0 [ 999.434181][ T4722] usb 4-1: USB disconnect, device number 57 [ 999.462293][ T1362] 8021q: adding VLAN 0 to HW filter on device bond4 [ 999.469845][ T4722] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 999.478044][ T4722] cp210x 4-1:0.0: device disconnected [ 999.807955][ T1389] netlink: 'syz.0.12990': attribute type 10 has an invalid length. [ 999.828495][ T1389] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12990'. [ 999.830284][ T1354] loop5: detected capacity change from 0 to 32768 [ 999.849836][ T1389] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 999.934816][ T1397] loop2: detected capacity change from 0 to 1024 [ 999.982598][ T1354] XFS (loop5): Mounting V5 Filesystem [ 1000.050663][ T1414] loop3: detected capacity change from 0 to 16 [ 1000.081908][ T1397] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,data_err=ignore,,errors=continue. Quota mode: writeback. [ 1000.104653][ T1414] erofs: (device loop3): mounted with root inode @ nid 36. [ 1000.294478][ T1354] XFS (loop5): Ending clean mount [ 1000.360043][ T1354] XFS (loop5): Quotacheck needed: Please wait. [ 1000.494276][ T1354] XFS (loop5): Quotacheck: Done. [ 1000.718442][T19820] XFS (loop5): Unmounting Filesystem [ 1000.828804][ T1453] netlink: 332 bytes leftover after parsing attributes in process `syz.2.13012'. [ 1000.909918][ T1454] loop4: detected capacity change from 0 to 2048 [ 1001.004302][ T1458] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1001.108776][ T1454] attempt to access beyond end of device [ 1001.108776][ T1454] loop4: rw=0, want=5629499534213192, limit=2048 [ 1001.179868][ T1454] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0) [ 1001.373907][ T1469] netlink: 'syz.2.13018': attribute type 12 has an invalid length. [ 1001.437336][ T1473] netlink: 'syz.4.13020': attribute type 1 has an invalid length. [ 1001.817177][ T1497] loop3: detected capacity change from 0 to 16 [ 1001.928831][ T1497] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1001.944226][ T5020] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1002.040237][ T1497] cramfs: Error -3 while decompressing! [ 1002.052518][ T1497] cramfs: ffffffff961edf28(453)->ffff888052da4000(4096) [ 1002.146715][ T1518] xt_CT: No such helper "snmp_trap" [ 1002.251927][ T1532] loop5: detected capacity change from 0 to 1024 [ 1002.355383][ T1532] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1002.395842][ T1541] loop3: detected capacity change from 0 to 8 [ 1002.400413][ T1532] EXT4-fs (loop5): invalid journal inode [ 1002.402239][ T5020] usb 5-1: config 6 has an invalid interface number: 223 but max is 1 [ 1002.417225][ T5020] usb 5-1: config 6 has an invalid interface number: 168 but max is 1 [ 1002.433671][ T1532] EXT4-fs (loop5): can't get journal size [ 1002.434782][ T1543] loop0: detected capacity change from 0 to 22 [ 1002.448298][ T5020] usb 5-1: config 6 has no interface number 0 [ 1002.451736][ T1532] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 1002.454813][ T5020] usb 5-1: config 6 has no interface number 1 [ 1002.494701][ T1543] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1002.516009][ T1543] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1002.556060][ T5020] usb 5-1: config 6 interface 223 has no altsetting 0 [ 1002.563733][ T5020] usb 5-1: config 6 interface 168 has no altsetting 0 [ 1002.563967][ T1543] MTD: Couldn't look up './file0': -13 [ 1002.581708][ T1543] ./file0: Can't open blockdev [ 1002.633060][ T4722] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1002.647652][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.804435][ T5020] usb 5-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=93.a4 [ 1002.813548][ T5020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.863397][ T5020] usb 5-1: Product: syz [ 1002.867609][ T5020] usb 5-1: Manufacturer: syz [ 1002.872897][ T5020] usb 5-1: SerialNumber: syz [ 1003.053660][ T1568] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13066'. [ 1003.065472][ T4722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1003.133570][ T1574] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13068'. [ 1003.145634][ T4722] usb 3-1: not running at top speed; connect to a high speed hub [ 1003.253300][ T4722] usb 3-1: config 7 has an invalid interface number: 68 but max is 0 [ 1003.292172][ T4722] usb 3-1: config 7 has no interface number 0 [ 1003.295487][ T5020] usb 5-1: USB disconnect, device number 66 [ 1003.304591][ T4722] usb 3-1: config 7 interface 68 has no altsetting 0 [ 1003.520481][ T4722] usb 3-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=9d.96 [ 1003.546852][ T4722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.555626][ T4722] usb 3-1: Product: syz [ 1003.566139][ T4722] usb 3-1: Manufacturer: syz [ 1003.573926][ T4722] usb 3-1: SerialNumber: syz [ 1003.813063][ T1606] loop0: detected capacity change from 0 to 1024 [ 1003.860846][ T1606] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1003.872557][ T5104] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1003.892344][ T1606] EXT4-fs (loop0): invalid journal inode [ 1003.899072][ T1606] EXT4-fs (loop0): can't get journal size [ 1003.904288][ T1596] loop3: detected capacity change from 0 to 32768 [ 1003.908972][ T1606] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,noauto_da_alloc,nombcache,,errors=continue. Quota mode: writeback. [ 1003.948820][ T4722] usb 3-1: USB disconnect, device number 66 [ 1004.049355][ T1596] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1004.166433][ T5104] usb 6-1: Using ep0 maxpacket: 32 [ 1004.189505][ T4183] (syz-executor,4183,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1004.263924][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 1004.290292][ T5104] usb 6-1: config 254 has an invalid interface number: 156 but max is 0 [ 1004.302738][ T5104] usb 6-1: config 254 contains an unexpected descriptor of type 0x1, skipping [ 1004.349219][ T5104] usb 6-1: config 254 has no interface number 0 [ 1004.363378][ T1633] netlink: 'syz.0.13096': attribute type 10 has an invalid length. [ 1004.377386][ T5104] usb 6-1: config 254 interface 156 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1004.388500][ T1633] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1004.415402][ T1635] device vlan1 entered promiscuous mode [ 1004.428899][ T5104] usb 6-1: config 254 interface 156 has no altsetting 0 [ 1004.527678][ T1641] loop2: detected capacity change from 0 to 64 [ 1004.532950][ T1639] loop3: detected capacity change from 0 to 64 [ 1004.550613][ T1643] openvswitch: netlink: Actions may not be safe on all matching packets [ 1004.606138][ T5104] usb 6-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice=1a.be [ 1004.638883][ T5104] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.658903][ T5104] usb 6-1: Product: syz [ 1004.664705][ T5104] usb 6-1: Manufacturer: syz [ 1004.686472][ T5104] usb 6-1: SerialNumber: syz [ 1004.728543][ T1595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1005.039339][ T5104] usb-storage 6-1:254.156: USB Mass Storage device detected [ 1005.121988][ T5104] zr364xx 6-1:254.156: Zoran 364xx compatible webcam plugged [ 1005.145234][ T5104] zr364xx 6-1:254.156: model 0595:4343 detected [ 1005.151635][ T5104] usb 6-1: 320x240 mode selected [ 1005.196998][ T5104] zr364xx 6-1:254.156: Could not find bulk-in endpoint [ 1005.216436][ T5104] zr364xx: probe of 6-1:254.156 failed with error -12 [ 1005.244507][ T5104] usb 6-1: USB disconnect, device number 32 [ 1005.256648][ T1673] loop3: detected capacity change from 0 to 764 [ 1005.415279][ T1681] loop4: detected capacity change from 0 to 256 [ 1005.419074][ T1679] loop0: detected capacity change from 0 to 1024 [ 1005.466611][ T1681] exfat: Deprecated parameter 'namecase' [ 1005.472522][ T1681] exfat: Deprecated parameter 'utf8' [ 1005.481402][ T1681] exfat: Deprecated parameter 'namecase' [ 1005.487629][ T1681] exfat: Deprecated parameter 'utf8' [ 1005.550732][ T1681] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1005.678763][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1006.113833][ T1709] loop5: detected capacity change from 0 to 64 [ 1006.203813][ T1709] Bad inode number on dev loop5: 6 is out of range [ 1006.358074][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13139'. [ 1006.540877][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13143'. [ 1006.694640][ T1739] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 1006.741117][ T1741] ipt_CLUSTERIP: Please specify destination IP [ 1006.758054][ T1739] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 1006.912400][ T1712] loop0: detected capacity change from 0 to 32768 [ 1006.969967][ T1749] futex_wake_op: syz.2.13154 tries to shift op by 32; fix this program [ 1006.973268][ T5022] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1007.031445][ T1712] XFS (loop0): Mounting V5 Filesystem [ 1007.184297][ T1712] XFS (loop0): Ending clean mount [ 1007.199994][ T1765] loop2: detected capacity change from 0 to 128 [ 1007.248996][ T4194] XFS (loop0): Unmounting Filesystem [ 1007.444149][ T5022] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1007.459445][ T5022] usb 4-1: config 0 has no interface number 1 [ 1007.466921][ T5022] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1007.482164][ T5022] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1007.601706][ T1743] loop4: detected capacity change from 0 to 32768 [ 1007.631668][ T5022] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1007.633158][ T1769] loop2: detected capacity change from 0 to 256 [ 1007.647275][ T5022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1007.656952][ T5022] usb 4-1: SerialNumber: syz [ 1007.691619][ T5022] usb 4-1: config 0 descriptor?? [ 1007.693031][ T1769] exfat: Deprecated parameter 'namecase' [ 1007.793642][ T1743] XFS (loop4): Mounting V5 Filesystem [ 1007.808601][ T1769] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d) [ 1007.882338][ T1769] exFAT-fs (loop2): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 1007.976011][ T1743] XFS (loop4): Ending clean mount [ 1007.999902][ T5022] usb 4-1: Found UVC 0.00 device (0002:0000) [ 1008.006913][ T5022] usb 4-1: No valid video chain found. [ 1008.054445][ T5022] usb 4-1: USB disconnect, device number 58 [ 1008.063518][ T4196] XFS (loop4): Unmounting Filesystem [ 1008.223670][ T1789] loop2: detected capacity change from 0 to 256 [ 1008.339948][ T1789] FAT-fs (loop2): Directory bread(block 64) failed [ 1008.368192][ T1789] FAT-fs (loop2): Directory bread(block 65) failed [ 1008.382059][ T1789] FAT-fs (loop2): Directory bread(block 66) failed [ 1008.389392][ T1789] FAT-fs (loop2): Directory bread(block 67) failed [ 1008.422470][ T1789] FAT-fs (loop2): Directory bread(block 68) failed [ 1008.435616][ T1789] FAT-fs (loop2): Directory bread(block 69) failed [ 1008.445749][ T1789] FAT-fs (loop2): Directory bread(block 70) failed [ 1008.459454][ T1789] FAT-fs (loop2): Directory bread(block 71) failed [ 1008.466296][ T1789] FAT-fs (loop2): Directory bread(block 72) failed [ 1008.534100][ T1789] FAT-fs (loop2): Directory bread(block 73) failed [ 1008.782231][ T1814] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.13178'. [ 1008.843778][ T1814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.872621][ T1818] loop5: detected capacity change from 0 to 64 [ 1008.898627][ T1822] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1008.929399][ T1822] netlink: 104 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1008.956234][ T1822] netlink: 81 bytes leftover after parsing attributes in process `syz.4.13165'. [ 1008.959407][ T1826] loop2: detected capacity change from 0 to 64 [ 1009.115375][ T1835] netlink: 'syz.0.13189': attribute type 12 has an invalid length. [ 1009.200400][ T1841] nft_compat: unsupported protocol 1 [ 1009.416070][ T1857] netlink: 'syz.0.13199': attribute type 1 has an invalid length. [ 1009.450528][ T1857] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.13199'. [ 1009.592009][ T1865] netlink: 568 bytes leftover after parsing attributes in process `syz.0.13202'. [ 1009.793741][ T1875] loop2: detected capacity change from 0 to 1024 [ 1009.987698][ T1839] loop5: detected capacity change from 0 to 32768 [ 1010.036884][T20056] hfsplus: b-tree write err: -5, ino 4 [ 1010.209874][ T1852] loop4: detected capacity change from 0 to 40427 [ 1010.364535][ T1852] F2FS-fs (loop4): invalid crc value [ 1010.419186][ T1852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1010.552360][ T1899] netlink: 'syz.2.13218': attribute type 21 has an invalid length. [ 1010.560590][ T1898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13219'. [ 1010.596255][ T1852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1010.604417][ T1899] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13218'. [ 1010.728800][ T1903] loop3: detected capacity change from 0 to 64 [ 1010.898661][ T1871] loop0: detected capacity change from 0 to 32768 [ 1010.999614][ T1915] openvswitch: netlink: Key type 2832 is out of range max 29 [ 1011.040358][ T1871] read_mapping_page failed! [ 1011.045685][ T1871] ERROR: (device loop0): txCommit: [ 1011.045685][ T1871] [ 1011.057352][ T1871] ERROR: (device loop0): remounting filesystem as read-only [ 1011.393488][ T1935] device wlan0 entered promiscuous mode [ 1011.414698][ T1934] loop3: detected capacity change from 0 to 1024 [ 1011.428706][ T1925] loop5: detected capacity change from 0 to 4096 [ 1011.436562][ T1935] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1011.564083][ T1934] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1011.579862][ T1934] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1011.643029][ T1934] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1011.681639][ T1934] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1011.696587][ T1949] device netdevsim0 entered promiscuous mode [ 1011.711408][ T1949] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1011.801636][ T1934] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,sysvgroups,nomblk_io_submit,bsddf,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 1011.860619][ T1963] __nla_validate_parse: 2 callbacks suppressed [ 1011.860638][ T1963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13251'. [ 1011.897054][ T1963] openvswitch: netlink: EtherType 0 is less than min 600 [ 1011.921256][ T1965] netlink: 'syz.4.13253': attribute type 30 has an invalid length. [ 1011.986678][ T1965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13253'. [ 1012.026177][ T1965] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1012.067995][ T1965] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1012.088765][ T1979] loop3: detected capacity change from 0 to 8 [ 1012.215336][ T1983] loop5: detected capacity change from 0 to 1024 [ 1012.227586][ T1979] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1012.251101][ T1979] SQUASHFS error: Failed to read block 0x1dd: -5 [ 1012.258855][ T1979] SQUASHFS error: Unable to read metadata cache entry [1db] [ 1012.292531][ T1979] SQUASHFS error: Unable to read inode 0xa7 [ 1012.555956][T18679] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1012.613366][ T5020] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1012.722290][ T2016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13274'. [ 1012.821077][T18679] usb 3-1: Using ep0 maxpacket: 16 [ 1012.870049][ T2022] loop0: detected capacity change from 0 to 256 [ 1012.906713][ T5020] usb 6-1: Using ep0 maxpacket: 16 [ 1012.973715][ T2022] FAT-fs (loop0): Directory bread(block 64) failed [ 1012.991327][ T2022] FAT-fs (loop0): Directory bread(block 65) failed [ 1013.034963][ T2022] FAT-fs (loop0): Directory bread(block 66) failed [ 1013.047530][ T2031] loop4: detected capacity change from 0 to 64 [ 1013.052566][ T2022] FAT-fs (loop0): Directory bread(block 67) failed [ 1013.063959][ T2022] FAT-fs (loop0): Directory bread(block 68) failed [ 1013.067402][ T5020] usb 6-1: config 0 has an invalid descriptor of length 141, skipping remainder of the config [ 1013.079055][ T2022] FAT-fs (loop0): Directory bread(block 69) failed [ 1013.092072][ T2030] loop3: detected capacity change from 0 to 1024 [ 1013.098247][ T2022] FAT-fs (loop0): Directory bread(block 70) failed [ 1013.100199][ T5020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 33216, setting to 1024 [ 1013.115054][ T2022] FAT-fs (loop0): Directory bread(block 71) failed [ 1013.118715][ T5020] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1013.144411][T18679] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1013.154590][ T5020] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1013.177134][T18679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.185911][ T2022] FAT-fs (loop0): Directory bread(block 72) failed [ 1013.195662][T18679] usb 3-1: Product: syz [ 1013.211147][ T2022] FAT-fs (loop0): Directory bread(block 73) failed [ 1013.218360][T18679] usb 3-1: Manufacturer: syz [ 1013.223085][T18679] usb 3-1: SerialNumber: syz [ 1013.283676][T18679] r8152-cfgselector 3-1: config 0 descriptor?? [ 1013.296562][ T5020] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1013.336741][ T5020] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1013.345222][ T5020] usb 6-1: Manufacturer: syz [ 1013.362241][ T5020] usb 6-1: config 0 descriptor?? [ 1013.393487][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13286'. [ 1013.403101][ T1983] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1013.521429][ T2040] loop4: detected capacity change from 0 to 256 [ 1013.601639][ T2040] exFAT-fs (loop4): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d) [ 1013.731543][ T5020] usb 6-1: USB disconnect, device number 33 [ 1013.745526][ T2054] [U] [ 1013.749180][ T2054] [U] [ 1013.751891][ T2054] [U] [ 1013.754587][ T2054] [U] [ 1013.781004][ T2054] [U] [ 1013.783755][ T2054] [U] [ 1013.786471][ T2054] [U] [ 1013.789173][ T2054] [U] [ 1013.799260][ T2054] [U] [ 1013.801994][ T2054] [U] [ 1013.804693][ T2054] [U] [ 1013.826033][T18679] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1013.828988][ T2053] [U] [ 1013.853100][T18679] r8152-cfgselector 3-1: USB disconnect, device number 67 [ 1014.214444][ T2086] loop4: detected capacity change from 0 to 64 [ 1014.519403][ T2107] netlink: 'syz.3.13319': attribute type 10 has an invalid length. [ 1014.536289][ T2107] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13319'. [ 1014.560286][ T2107] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1014.618790][ T2112] device vlan0 entered promiscuous mode [ 1014.690585][ T2114] netlink: 'syz.3.13324': attribute type 10 has an invalid length. [ 1014.709104][ T2114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13324'. [ 1014.724164][ T5020] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1014.751420][ T2114] batman_adv: batadv0: Adding interface: vlan1 [ 1014.763024][ T2114] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.795683][ T2114] batman_adv: batadv0: Interface activated: vlan1 [ 1014.905213][ T2122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13328'. [ 1014.967180][ T2124] loop3: detected capacity change from 0 to 2048 [ 1015.042973][ T2100] loop5: detected capacity change from 0 to 32768 [ 1015.057208][ T2124] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1015.117248][ T2124] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1015.252254][ T144] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 1015.264004][ T144] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 1015.272409][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1015.279949][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.290003][ T144] Workqueue: writeback wb_workfn (flush-7:5) [ 1015.295999][ T144] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 1015.302587][ T144] Code: df 41 80 3c 04 00 74 08 48 89 df e8 b2 fb f2 fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 8a fb f2 fd 41 bf 90 00 00 00 4d 03 [ 1015.307926][ T2111] loop0: detected capacity change from 0 to 40427 [ 1015.322191][ T144] RSP: 0018:ffffc9000162edc0 EFLAGS: 00010202 [ 1015.322210][ T144] RAX: 00000000000000ba RBX: ffff888041ce1148 RCX: dffffc0000000000 [ 1015.322220][ T144] RDX: 0000000000000000 RSI: ffffffff96269dc0 RDI: ffff888041ce1140 [ 1015.322231][ T144] RBP: 1ffff1100839c231 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 1015.322241][ T144] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: 1ffff1100839c229 [ 1015.322252][ T144] R13: ffff888041ce1188 R14: 00000000000005d0 R15: ffff888017ff596c [ 1015.322262][ T144] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1015.322274][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.322285][ T144] CR2: 00007fcca199c000 CR3: 0000000065254000 CR4: 00000000003506f0 [ 1015.322299][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1015.322309][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1015.322319][ T144] Call Trace: [ 1015.322325][ T144] [ 1015.322336][ T144] bio_associate_blkg+0x23a/0x340 [ 1015.322359][ T144] lbmStartIO+0x204/0x4c0 [ 1015.322378][ T144] lbmWrite+0x361/0x480 [ 1015.322396][ T144] jfs_flush_journal+0x535/0xeb0 [ 1015.322415][ T144] ? lmLogShutdown+0x820/0x820 [ 1015.322431][ T144] ? rcu_lock_release+0x5/0x20 [ 1015.322447][ T144] ? __lock_acquire+0x7c60/0x7c60 [ 1015.322465][ T144] metapage_writepage+0x544/0xf80 [ 1015.322484][ T144] ? metapage_exit+0x20/0x20 [ 1015.322502][ T144] __writepage+0x63/0x130 [ 1015.322518][ T144] write_cache_pages+0x984/0xfa0 [ 1015.322538][ T144] ? generic_writepages+0x160/0x160 [ 1015.322555][ T144] ? tag_pages_for_writeback+0x480/0x480 [ 1015.322575][ T144] ? writeback_sb_inodes+0x3f6/0x1610 [ 1015.322594][ T144] do_writepages+0x4fa/0x6d0 [ 1015.322621][ T144] ? __writepage+0x130/0x130 [ 1015.322636][ T144] ? __lock_acquire+0x7c60/0x7c60 [ 1015.322652][ T144] ? do_raw_spin_lock+0x11d/0x280 [ 1015.506944][ T144] __writeback_single_inode+0x153/0xda0 [ 1015.512479][ T144] writeback_sb_inodes+0x9fe/0x1610 [ 1015.517661][ T144] ? queue_io+0x550/0x550 [ 1015.521981][ T144] ? rcu_is_watching+0x11/0xa0 [ 1015.526835][ T144] wb_writeback+0x443/0xb90 [ 1015.531331][ T144] ? rcu_lock_release+0x20/0x20 [ 1015.536170][ T144] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1015.542137][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1015.547320][ T144] wb_workfn+0x423/0xe60 [ 1015.551576][ T144] ? inode_wait_for_writeback+0x200/0x200 [ 1015.557280][ T144] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1015.563242][ T144] ? read_lock_is_recursive+0x10/0x10 [ 1015.568594][ T144] ? preempt_schedule_thunk+0x16/0x18 [ 1015.573957][ T144] process_one_work+0x863/0x1000 [ 1015.578879][ T144] ? worker_detach_from_pool+0x240/0x240 [ 1015.584490][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 1015.589760][ T144] ? _raw_spin_lock_irq+0xab/0xe0 [ 1015.594776][ T144] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1015.600129][ T144] ? wq_worker_running+0x97/0x170 [ 1015.605226][ T144] worker_thread+0xaa8/0x12a0 [ 1015.609889][ T144] kthread+0x436/0x520 [ 1015.613939][ T144] ? rcu_lock_release+0x20/0x20 [ 1015.618769][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1015.623376][ T144] ret_from_fork+0x1f/0x30 [ 1015.627783][ T144] [ 1015.630898][ T144] Modules linked in: [ 1015.639512][ T144] ---[ end trace db2a4d3242522563 ]--- [ 1015.645609][ T144] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 1015.652247][ T144] Code: df 41 80 3c 04 00 74 08 48 89 df e8 b2 fb f2 fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 8a fb f2 fd 41 bf 90 00 00 00 4d 03 [ 1015.652266][ T144] RSP: 0018:ffffc9000162edc0 EFLAGS: 00010202 [ 1015.652282][ T144] RAX: 00000000000000ba RBX: ffff888041ce1148 RCX: dffffc0000000000 [ 1015.652294][ T144] RDX: 0000000000000000 RSI: ffffffff96269dc0 RDI: ffff888041ce1140 [ 1015.652305][ T144] RBP: 1ffff1100839c231 R08: dffffc0000000000 R09: fffffbfff1ff7619 [ 1015.652315][ T144] R10: fffffbfff1ff7619 R11: 1ffffffff1ff7618 R12: 1ffff1100839c229 [ 1015.652326][ T144] R13: ffff888041ce1188 R14: 00000000000005d0 R15: ffff888017ff596c [ 1015.652336][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1015.652348][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.652359][ T144] CR2: 00007f635126ffd3 CR3: 0000000064cfa000 CR4: 00000000003506e0 [ 1015.652373][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1015.652382][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1015.652402][ T144] Kernel panic - not syncing: Fatal exception [ 1015.652647][ T144] Kernel Offset: disabled [ 1015.767776][ T144] Rebooting in 86400 seconds..