last executing test programs: 3m53.411783667s ago: executing program 2 (id=949): r0 = socket$isdn(0x22, 0x2, 0x10) r1 = socket$isdn(0x22, 0x2, 0x2) r2 = dup3(r1, r0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000081, 0x0, 0x0) 3m53.237095599s ago: executing program 2 (id=952): fchmodat(0xffffffffffffffff, 0x0, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xa467}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x44042, 0xb0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x2000) 3m52.861675885s ago: executing program 2 (id=955): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2020) 3m52.623399668s ago: executing program 2 (id=957): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2010880, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp869,discard=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,errors=remount-ro\x00iocharset=cp737,grpquota,usrquota,gid=', @ANYRES16, @ANYBLOB=',quota,g\x00\x00=', @ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c000100000000000000"], 0x5, 0x6170, &(0x7f00000066c0)="$eJzs3b2PHGcdB/Dfvt5LiHNKEQULoYsTXkKIX4MxBEhSQEGTArlFti6XyMIBZBvkRBY+dA0FFX8BCIkSIUpEwR+QgpaOiopINhIoFYPm7nl8s+td75nz7ezd8/lI65nfPLO7z9x3Z1+8M/sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/c73znUi4spP04K1iE9FL6IbsVLX6xGxsr6W1+9HxPOx0xzPRcRgKaK+/s4/z0S8FhEfnYi4d//ORr34/D778e0//O2333/q7b/+fnDmP3+81Xt92nq3b//y33+6e7BtBgAAgNJUVVV10sf8k+nzfbftTgEAc5Ff/6skL1+YuntIt/+rf7z950XYPrVarVar51g3VZPdbRYRsdW8Tv2ewdfxAHDEbMUnbXeBFsm/aP2IeKrtTgALrdN2BzgU9+7f2eikfDvN14P13fZ8LMhI/ludB+d3TJvOMn6MybweX9vRi2en9GdlTn1YJDn/7nj+V3bbh2m9w85/XqblP9w99ak4Of/eeP5jjk/+3Yn5lyrn33+s/HvyBwAAAACABZb//3+t5e9/lw6+KfvyqO9/1+fUBwAAAAAAAAB40g46/t8Dxv8DAACAhVV/Vq/9+sTesmm/xVYvv9yJeHpsfaAw6WSZ1bb7AQAAAAAAAAAAAAAl6e8ew3u5EzGIiKdXV6uqqi9N4/XjOuj1j7rStx9K1vaTPAAA7ProxNi5/J2I5Yi4nH7rb7C6ulpVyyur1Wq1spTfzw6XlquVxufaPK2XLQ338Ya4P6zqG1tuXK9p1uflWe3jt1ff17Dq7aNjT8gg/TWnNLcUNgAku69G97wiHTNV9cy0Nx8wwv5//Nj/2Y+2H6cAAADA4auqquqkn/M+mb7z77bdKQBgLvLr//j3AodSRxzu7avVarVarX5k3VRNdrdZRMRW8zr1ewbD8QPAEbMVn7TdBVok/6L1I+L5tjsBLLRO2x3gUNy7f2ejk/LtNF8P0vju+ViQkfy3OjvXy9efNJ1l/BiTeT2+tqMXz07pz3Nz6sMiyfl3x/O/sts+TOsddv7zMi3/ejvXWuhP23L+vfH8xxyf/LsT8y9Vzr//WPn35A8AAAAAAAss////mu9/8yYDAAAAAAAAwJFz7/6djXzea/7+/zMT1nP+5/GU8+/Iv0g5/+5Y/l8cW6/XmP/4rb38/3X/zsbvbv3z03m63/yX8kwnPbI66RHRSffU6afpQbbuYduD3rC+p0Gn2+unY36qwbtxLa7HZpwdWbeb/h577edG2uueDkbaz4+09x9qvzDSPki/O1Ct5PbTsRE/iuvxzk573bY0Y/uXZ7RXM9pz/j37f5Fy/v3Gpc5/NbV3xqbR2DWb+31zOul+3rz22V+cPeRt2Y/t6D3YtqZ6+0610J+dv8lTw/jJzc0bp29fvXXrxrlIk5Gl5yNNnrCc/2DnsrT3/P/ibnt+3m/urx//fPjQ8/6s/BfFdvSn5v9iY77e3pfn3Lc25PyH6ZLzfye1T9r/j3b+0/f/V1roDwAAAAAAAAAAAAAAADxKVVU7p4i+GREX0/k/bZ2bCQDMV379r5K8XK1Wq9Vq9fGrm6rJ3mgWEfGX5nXq9ww/m3RjAMAi+29E/L3tTtAa+Rcs/95fPX2p7c4Ac3Xzgw9/cPX69c0bN9vuCQAAAAAAAADw/8rjf643xn9+KSLWxtYbGf/1rVg/6Pif/TzzYIDRJzzQ9xTb3WGv2xhu/IXYGZ/79LTxv0/Fo8f/7s+4v8GM9uGM9qUZ7csTl+6lNfFEj4ac/wuN8c7r/E+ODb9ewviv42PelyDnf6rxeK7z/8LYes38q98sXP5b+11xO7oj+Z+59f6Pz9z84MNXr71/9b3N9zZ/eOHcubMXLl68dOnSmXevXd88u/vv4fR6AeT889jXjgMtS84/Zy7/suT8P5dq+Zcl5//5VMu/LDn//H5P/mXJ+efPPvIvS87/5VTLvyw5/y+lWv5lyfm/kmr5lyXn/+VUy78sOf9XUy3/suT8T6da/mXJ+Z9J9T7y9/Pwx0jOP3/DZf8vS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzfy3V8i9Lzv8rqZZ/WXL+F1Mt/7Lk/L+aavmXJed/KdXyL0vO/2upln9Zcv5fT7X8y5Lzfz3V8i9Lzv8bqZZ/WXL+30y1/MuS8/9WquVflpz/G6mWf1n2fv/fjBkzZvJM289MAAAAAAAAAAAAAMC4eRxO3PY2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNUaus74f+Jm92GuHEAMhOPkbsklMCMmSXduJL/zrYsK1AUqBhEIv2K53bRZ8w2uXQJFsGiiRMCqqqJq+oAWE2khVhVVRiVaU5kXVy6vSvqBvKqpKSI2qgAISUktptpo5z/N4ZnZ2zq49Xs+e5/OR4p935sycM2fOzO53ne8cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaHfHG+Y+0yiKovlf648tRfGC5t83TW5pXfba672FAAAAwNX639afz92ULjiwghu1LfN3r/jHry8uLi4W7xv93fEvLC6mKyaLYnxjUbSuiy79+/sb7csEjxcTjZG2r0cqVj9acf1YxfXjFddvqLh+Y8X1ExXXL9kBS2wqfx/TurPtrb9uKXdpcXMx3rpue49bPd7YODISf5fT0mjdZnH8aDFfHC/mipmO5ctlG63lv3lHc11vLeK6RtrWta15hPzwE0fiNjTCPt7esa7L9xl9//XF5I9++Ikjf3T22Vt7zcrd0HF/5Xbec2dzOz8VLim3tVFsTPskbudI23Zu6/GcjHZsZ6N1u+bfu7fzuRVu5+jlzVxT3c/5RDHS+vu3W/tprP3Xemk/bQuX/dddRVFcuLzZ3cssWVcxUmzuuGTk8vMzUR6RzftoHkovLsZWdZzesYLjtDlnt3cep92vifj83xFuN7bMNrQ/Td//5IYlz/tqj9Oo+aiXe610H4ODfq0MyzEYj4tvtx70Ez2Pwe3h8X/i7uWPwZ7HTo9jMD3utmPwzqpjcGTDaGub05PQaN3m8jG4o2P50daaGq35zN39j8HpsydOTy987OOvmT9x+NjcsbmTu3bsmNm1e/fevXunj84fn5sp/7zCvT38Nhcj6TVwZ9h38TXwqq5l2w/VxS8P7nU40ed1uKVr2UG/Dse6H1xjbV6QS4/p8rXxSHOnT1wcKZZ5jbWen3uv/nWYHnfb63Cs7XXY83tKj9fh2Apeh81lTt+7sp9Zxtr+67UN1+p7wZa2Y7D755HuY3DQP48MyzE4EY6Lf713+e8F28L2PjG12p9HRpccg+nhhvee5iXp5/2Jva3R67i8rXnFDRuKcwtzZ+5/7PDZs2d2FGGsiZe0HSvdx+vmtsdULDleR1Z9vB6Yf8UTt/W4fEvYVxOvaf4xsexz1Vzmgfv7P1et726992fHpTuLMAZsrfdnr+/mzf2ZsmSf/dlc5lPTV/+zeMqlbe+/48u8/8bc/3y5vnRXj4+Oj5Wv39G0d8Y73o87n6qx1ntXo7Xu56ZX9n48Hv5b6/fjm/u8H2/tWnbQ78fj3Q8uvh83qn7bcXW6n8+JcJwcn+n/ftxcZuvO1R6TY33fj+8KsxH2/6tDUki5qO3YWe64TesaGxsPj2ssrqHzON3Vsfx4yGbNdT2188qO03vuKu9rND26y9bqOJ3sWnbQx2l6v1ruOG1U/fbtynQ/nxPhuLh5V//jtLnM0w9c/XvnpvjXtvfODVXH4PjohuY2j6eDsHy/X9wUj8H7iyPFqeJ4Mdu6dkPreGq01jX14MqOwQ3hv7V+r9za5xi8p2vZQR+D6fvYcsdeY2zpgx+A7udzIhwXTz7Y/xhsLvPGPYP92fWecElapu1n1+7fry33O6/bunbTtfydV3M7/2ZP/9/NNpc5vne1ObP/frovXHJDj/3U/fpd7jU1W6zNftoatvPZvcvvp+b2NJf5wr4VHk8HiqI4/5GHWr/vDf++8mfnvvP1jn936fVvOuc/8tAPbjz6t6vZfgDWv+fLsbn8Xtf2L1Mr+fd/AAAAYF2IuX8kzET+BwAAgNqIuT/+X+GJ/A8AAAC1EXP/WJhJJvl/6xufnX/+fJGa+YtBvD7thofL5WLHdSZ8Pbl4WfPyh7469+O/PL+ydY8URfHTh3+j5/JbH47bVZoM23npTZ2XL73h+RWt/9Cjl5dr769/Kdx/fDz9DoP2zzHrVcGdKYrimzd9rrWeyfdfbM2nHz7Umu++8MTjzWWe21d+HW//zEvK5b8Yyr8Hjh7uuP0zYT98L8yZt/XeH/F2X7v46m173nt5ffF2jTtf2HrYT36gvN/4OTmff7xcPu7n5bb/rz771Neayz/2yt7bf36k9/Y/Fe73q2H+98vL5dufg+bX8XafDtsf1xdvd/9XvtVz+y99plz+9JvL5Q6FGdd/T/h6+5ufnW/fX481Dnc8ruIt5XJx/TPf+e3W9fH+4v13b//EwYsd+6P7+Hj6n8v7me5aPl4e1xP9Rdf6m/fTfnzG9T/1W4c69nPV+i+9+5mXN++3e/33dS032nX77k9s+oNPf67n+uL2HPjT0x2P58C7wus4rP/JD4TjMVz/k0uf61hvdOhdne8/cfkvbTnf8Xiit/6oXP+l1x1rzf+Y/PHv3/CCG1944fbmviuKb7+nvL+q9R/7w1Md2//lW+5tPR/x+tjR717/cuL6z3x06uSphXPzs217tfXZOW8vt2fjxKbNze29Kby3dn998NTZD86dmZyZnCmKyfp+hN4V+0qYPyjHhdXe/t5Hw/N52+99c/Pd//TZePm/PFJefvFt5fetV4XlPh8u31I+f4uNq1z/k3fc0np9N54uv+7osQ/Atu3/uXdFC4bH3/1zQTzeT7/0g6390Lyu9X0jvq6vcvu/O1vezzfCfl0Mn8x85y2X19e+fPxshIvvKV/vV73/wttcfF7/ODzf7/heef9xu+Lj/W74OeZbWzvf7+Lx8Y3zI9333/oUjwvh/aS4UF4fl4r7++Jzt/TcvPg5JMWFW1tf/066n1tX9TCXs/Cxhenj8yfPPTZ9dm7h7PTCxz5+8MSpcyfPHmx9lufBD1Xd/vL70+bW+9Ps3O4HiplNRVGcKmbW4A3r2mx/828r2/7Tjx6Z3TNz9+zc0cPnjp599PTcmWNHFhaOzM0u3H346NG5j1bdfn52/46d+3bt2Tl1bH52/959+3btm5o/eaq5GeVGVdg98+Gpk2cOtm6ysP+BfTsefPCBmakTp2bn9u+ZmZk6V3X71vemqeatf33qzNzxw2fnT8xNLcx/fG7/jn27d++s/DTAE6ePLkxOnzl3cvrcwtyZ6fKxTJ5tXdz83ld1e+pp4d/Kn2e7NcoP4iveed/u9PmsTV/95LJ3VS7S9QGiz4bPovmHF53eu5KvY+4fDzPJJP8DAABADmLu3xBmIv8DAABAbcTcvzHMRP4HAACA2oi5fyLMJJP8r/9/5f3/dvXv/5fX6//n1f8//ZGyVxpv39ViXTf9/9if1//Pw3Xu/1/1+vX/9f/r1/9feX9+vW+//r/+P0sNW/8/5v5NRZFl/gcAAIAcxNy/OcxE/gcAAIDaiLn/hjAT+R8AAABqI+b+F4SZZJL/9f9X1P/fWVW4qn//3/n/9f+L9Xn+//jk6P9nY9X9+/c+0vGl/n+g/6//r/+v/6//z1UbX/aa69X/j7n/xjCTTPI/AAAA5CDm/heGmcj/AAAAUBsx998UZiL/AwAAQG3E3L8lzCST/K//7/z/+v/6/7Xu/1/t+f/bNkb/f31w/v/+evT/b++5oP7/Kvv/E/r/67H/Pz7Y7R/u/n/l5uv/c00M2/n/Y+5/UZhJJvkfAAAAchBz/4vDTOR/AAAAqI2Y+18SZiL/AwAAQG3E3H9zmEkm+V//X/9f/1//X/+/9/qrz/9f/k3/f7jo//fn/P8VnP8/r/7/gLd/uPv/gz7///ibum+v/08vw9b/j7n/pWEmmeR/AAAAyEHM/beEmcj/AAAAUBsx978szET+BwAAgNqIuX9rmEkm+V//X/9f/1//X/+/9/qr+/8l/f/hov/f36D7/6Ndl+v/l/T/9f9r3//v8cOv/j+9DFv/P+b+W8NMMsn/AAAAkIOY+28LM5H/AQAAoDZi7v9/YSbyPwAAANRGzP3bwkwyyf/6//r/+v959f/v26D/r/9fb/r//Tn/fwX9f/1//f8Vnv9/qdX0/zdW3Rm1MWz9/5j7Xx5mkkn+BwAAgBzE3P+KMJMV5/+5L16DzQIAAAAGKOb+28NM/Ps/AAAA1EbM/ZNhJpnkf/3/evX//+Svn7y90P/X/69Yf037//Ew0P/PnP5/f/r/FfT/9f/1/9ek/08+hq3/H3P/HWEmmeR/AAAAyEHM/XeGmcj/AAAAUBsx998VZiL/AwAAQG3E3L89zCST/K//X6/+f6T/r//fb/3Xpv+/KV3u/P+96f+vDf3/HtreFPT/K+j/6/9n3/+PP/3q/zMYw9b/j7n/lWEmmeR/AAAAyEHM/XeHmcj/AAAAUBsx978qzET+BwAAgNqIuf+eMJNM8r/+v/6//r/+f03O/5/o/+dN/78//f8K+v/6/9n3/53/n8Eatv5/zP2vDjPJJP8DAABADmLuvzfMRP4HAACA2oj//2b5/73K/wAAAFBHMfdPhZlkkv/1//X/c+r/N/T/9f/1/2tP/78//f8K+v/6//r/+v8M1LD1/2Puf02YSSb5HwAAAHIQc//9YSbyPwAAANRGzP3TYSbyPwAAANRGzP0zYSaZ5H/9f/3/nPr/zv/f0f+fKAr9f/3/+tH/70//v4L+v/5/3fr/RaH/z3U1bP3/mPt3hJlkkv8BAAAgBzH37wwzkf8BAACgNmLu3xVmIv8DAABAbcTc/0CYSSb5X/9f/1//P9v+v/P/6//Xkv5/f/r/FfT/9f/r1v93/n+us2Hr/8fc/2CYSSb5HwAAAHIQc//uMBP5HwAAAGoj5v49YSbyPwAAANRGzP17w0wyyf/6/zXp///m33esW/9f/7/f+gfT/9+k/x+m/v9wqWn/v/tlccX0/yvo/+v/6//r/zNQw9b/j7l/X5hJJvkfAAAAchBz/2vDTOR/AAAAqI2Y+/9/mIn8DwAAALURc//PhJlkkv/1/2vS/++i/6//32/9zv+v/19nNe3/D4z+fwX9f/1//X/9fwbq2vf/499W1v+PuX9/mEkm+R8AAAByEHP/z4aZyP8AAABQGzH3vy7MRP4HAACA2oi5/0CYSSb5X/9f/1//X///2vT/X1d0G8b+f/Pg0f+vF/3//vT/K+j/6//r/+v/M1DDdv7/mPtfH2aSSf4HAACAHMTc/1CYifwPAAAAtRFz/xvCTOR/AAAAWM82tX8Rc/8bw0wyyf/6//r/+v/6/9X9/3gPzv+v/z/89P/70/+voP+v/6//r//PQA1b/z/m/jeFmWSS/wEAACAHMfe/OcxE/gcAAIDaiLn/LWEm8j8AAADURsz9bw0zyST/6//r/+v/6/9fm/P/17H/v/g/zdvr/w83/f/+9P8r6P/r/+v/6/8zUMPW/4+5/+fCTDLJ/wAAAJCDmPsfDjOR/wEAAKA2Yu5/W5iJ/A8AAAC1EXP/28NMMsn/+v/6//r/+v/6/73X7/z/65P+f3/6/xWGoP/f/J6m/78+t1//X/+fpYat/x9z/zvCTDLJ/wAAAJCDmPt/PsxE/gcAAIDaiLn/nWEm8j8AAADURsz9vxBmkkn+1//X/9f/1//Pov/fvJH+fxb0//vT/29309KLevT/Nzr/v/6//r/+P1ds2Pr/Mfe/K8wkk/wPAAAAOYi5/91hJvI/AAAA1EbM/e8JM5H/AQAAoDZi7n8kzCST/K//n2X/Pz1k/f+S/n8G/X/n/8+G/n9/+v8VhuD8//r/63f79f/1/1lq2Pr/Mfc/GmaSSf4HAACAHMTc/94wE/kfAAAAaiPm/l8MM5H/AQAAoDZi7n9fmEkm+b8G/f+fdBT79P87buf8/9e7/z/WcXzk1P+faHs+03Gp/6//vwb0//vT/6+g/6//P8z9/3A0b1rm9vr/DKNh6//H3P/+MJNM8j8AAADkIOb+Xwozkf8BAACgNmLu/+UwE/kfAAAAaiPm/l8JM8kk/9eg/991Q/3/Qv9/iPr/ncdHTv1/5/9fSv9/bej/96f/X0H/X/9/mPv/FfT/GUbD1v+Puf9Xw0wyyf8AAACQg5j7PxBmIv8DAABAbcTcfzDMRP4HAACA2oi5/1CYSSb5X/+/u/8fz6iq/6//r/+v/6//vx4Nrv//shuLYkX9/z9vXq//r/+v/6//r/+v/89Sw9b/j7n/cJhJJvkfAAAAchBz/6+Fmcj/AAAAUBsx9x8JM5H/AQAAoDZi7p8NM8kk/+v/O///oPr/P9X/1/8P9P970/9fG87/35/+fwX9f/1//X/9fwZq2Pr/MffPhZlkkv8BAACgxtKvg2PuPxpmIv8DAABAbcTcfyzMRP4HAACA2oi5/4NhJpnkf/1//X/n/78e/f+xjuX1/0v6//r/g6D/35/+fwX9f/1//X/9fwZq2Pr/MffPh5lkkv8BAAAgBzH3fyjMRP4HAACA2oi5/8NhJvI/AAAA1EbM/cfDTDLJ//r/+v+59/8bRXHB+f/1/3utX/9/fdL/70//v4L+v/6//r/+PwM1bP3/mPtPhJlkkv8BAAAgBzH3nwwzkf8BAACgNv6PvftokvOu9jjedtmWVHdx70u467u6S1jBS2DLjirWFMnkYEzOYHIOJpiMCSYHk3PO2eQcTTRUiWLmnCONpvW0pGlPP8//fD6bw6g0dI81CP2s+taTu/+ecYv9DwAAAMPI3X+vuKXJ/tf/d+v//0v/P4vn/x/8+fr/ffp//f82HOrvr7i4zz9v////d7j6bvp//b/+f5L+X/+v/+dcc+v/c/ffO25psv8BAACgg9z994lb7H8AAAAYRu7++8Yt9j8AAAAMI3f/1XFLk/2v/+/W/3v+v/5/Q/9/s/5f/79snv8/Tf+/gf5f/6//1/+zVXPr/3P33y9uabL/AQAAoIPc/fePW+x/AAAAGEbu/gfELfY/AAAADCN3/wPjlib7X/+v/9f/6/89/3/96+v/l0n/P03/v4H+X/+v/9f/s1Vz6/9z9z8obmmy/wEAAKCD3P0PjlvsfwAAABhG7v6HxC32PwAAAAwjd/9D45Ym+1//r//X/+v/9f/rX1//v0zXr878nqD/P0z/v8GG/n+10v9PueB+fv2Xt5z3fx76f/0/h82t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+6+JW+x/AAAAGEbu/kfELU32v/5f/6//1//r/9e/vv5/mTz/f9rR+///+5973L1v/+/5/9M8/1//r//nXHPr/3P3Xxu3NNn/AAAA0EHu/kfGLfY/AAAADCN3/6PiFvsfAAAAhpG7/9FxS5P9r/9v0//v1S76f/2//l//Pzr9/zTP/99g77e5U/Wh/l//r//X/3M0c+v/c/c/Jm5psv8BAACgg9z9j41b7H8AAAAYRu7+x8Ut9j8AAAAMI3f/4+OWJvtf/9+m//f8f/2//l//34L+f5r+f4NRnv9/id81u+7nj2rX71//r//nsLn1/7n7nxC3NNn/AAAA0EHu/ifGLfY/AAAADCN3/5PiFvsfAAAAhpG7/8lxS5P9r//X/y+j/89X0P/r//X/+v9p+v9p+v8NRun/L9Gu+/mlv3/9v/6fw+bW/+fuf0rc0mT/AwAAQAe5+58at9j/AAAAMIzc/U+LW+x/AAAAGEbu/qfHLU32v/5f/7+M/t/z//X/+n/9/4XR/0/T/2+g/9f/6//1/2zV3Pr/3P3XxS1N9j8AAAB0kLv/GXGL/Q8AAADDyN3/zLjF/gcAAIBh5O5/VtzSZP/r//X/+n/9v/5//evr/5dJ/z9N/7+B/l//r//X/7NVM+r/z/qsk6tnxy1N9j8AAAB0kLv/OXGL/Q8AAADDyN3/3LjF/gcAAIBh5O5/Xtwy+P6/LPIJ/f9s+v+9nG+s/v/UarXS/6+a9v+nzvr1rO9L/b/+/xjo/6fp/zfQ/+v/9f/6f7ZqRv3/3se5+58ftwy+/wEAAKCT3P0viFvsfwAAABhG7v4Xxi32PwAAAAwjd/+L4pYm+1//P5v+f89Y/b/n/5/7/dGp//f8/8P0/8dD/z9N/7+B/l//r//X/7NVc+v/c/e/OG666spL/hIBAACAmcnd/5K4pcnf/wMAAEAHuftfGrfY/wAAALBQ1x36kdz9L4tbmux//f92+/+rzvox/b/+/9zvD/2//l//f/vT/0/T/2+g/9f/6//1/2zV3Pr/3P0vj1ua7H8AAADoIHf/9XGL/Q8AAADDyN3/irjF/gcAAIBh5O5/ZdzSZP/r/z3/X/+v/9f/r399/f8y6f+nzbv/P12/nej/9f9LfP9b6P9PnPmP+n/GcBH9/+nTp6+53fv/3P2vilua7H8AAADoIHf/q+MW+x8AAACGkbv/hrjF/gcAAIBh5O5/TdzSZP/r/5v2//mtrv/fo//X/697ff3/Mun/p827//f8f/3/st+/5//r/zlsbs//z93/2rilyf4HAACADnL3vy5usf8BAABgGLn7Xx+32P8AAAAwjNz9b4hbmux//X/T/t/z//X/+v/j7v9vW23q/y9f6f+3YBH9/6nzv/7c+/9r9f/6/wnt+v+73PHAh/p//T+Hza3/z93/xrilyf4HAACADnL3vylusf8BAABgGLn73xy32P8AAAAwjNz9N8ZNVzTZ//p//b/+X/+v/1//+sf8/P+rViv9/zYsov+fMPf+3/P/9f9T2vX/59D/6/85bG79f+7+t8QtTfY/AAAAdJC7/61xi/0PAAAAw8jd/7a4xf4HAACAYeTuf3vc0mT/6//1//p//f/w/f+1i+j/V6vox/X/R6P/n6b/30D/r//X/+v/ORa76v9z998UtzTZ/wAAANBB7v53xC32PwAAAAwjd/874xb7HwAAAIaRu/9dcUuT/a//1//r//X/J2bX/5888N/X5Pn/+v8t2WH/f+eV/l//H/T/+v8F9//X6f/Zprk9/z93/7vjlib7HwAAADrI3f+euPWvbu1/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6/+Hf/6//r8Vz/+fpv/fQP+v/9f/e/4/WzW3/j93//vjlib7HwAAADrI3f+BuMX+BwAAgGHk7v9g3GL/AwAAwDBy998ctzTZ//p//b/+X/+v/9//NdT/j0H/P+14+v9T+n/9f/Xzl8X/CvT/+v9Nn8+Y5tb/5+7/UNzSZP8DAABAB7n7Pxy32P8AAAAwjNz9H4lb7H8AAABYpCvW/Fju/o/GLU32v/5f/6//1//r/9e/vv5/mfT/0zz/fwP9/0X28/974KOlPf//3P//0v/r/9m+3ff/+39iy49z938sbmmy/wEAAKCD3P0fj1vsfwAAABhG7v5PxC32PwAAAAwjd/8n45Ym+1//r//X/+v/9f/rX1//v0z6/2n6/w30/zt9fv7S37/+X//PYbvv/w9+nLv/U3FLk/0PAAAAHeTu/3TcYv8DAADAMHL3fyZusf8BAABgGHu7P+Oyhvtf/6//1//r//X/619f/79M+v9p+v8N9P/6f/2//p+tmlv//9m9zzq5+lzc0mT/AwAAQAe5+z8ft9j/AAAAMIzc/V+IW+x/AAAAGEbu/i/GLU32f4P+/8S6n6b/X1r/f/r06Wv0//r/g1/Pmf7/Fv0/Rf8/Tf+/gf5f/6//1/+zVXPr/3P3fyluabL/AQAAoIPc/V+OW+x/AAAAGEbu/q/ELfY/AAAADCN3/1fjlib7v0H/v9as+v+T+n/P/9f/rzz/X/+/Jfr/afr/DUbs/09e+Je/637+qHb9/vX/+n8Om1v/n7v/a3FLk/0PAAAAHeTu/3rcYv8DAADAMHL3fyNusf8BAABgGLn7vxm3NNn/+v/j6///88+uy/P/T63Wv3/9v/5f/6//v73p/6fp/zcYsf+/CLvu55f+/vX/+n8Om1v/n7v/W3FLk/0PAAAAHeTu/3bcYv8DAADAMHL3fydusf8BAABgGLn7vxu3NNn/+v8ZPP9/wP7f8//Xf3/o/2fd/1+u/x+D/n/acP3/DftX/6//n8P71/+f3f/nd7P+v7u59f+5+78XtzTZ/wAAANBB7v7vxy32PwAAAAwjd/8P4hb7HwAAAIaRu/+WuOWs/b+u7R6F/l//r//X/+v/17++/n+Z9P/TLrT/P7E6Wv+fPP9f/6//79r/e/4/++bW/+fu/2Hc4u//AQAAYHGuPM+P5+7/Udxi/wMAAMAwcvf/OG6x/wEAAGAYuft/Erfcevmu3tKx0v/r//X/+n/9//rX1/8vk/5/2nDP/4+r/59V/38n/f8Y/f9qpf/n6ObW/+fu/2nc4u//AQAAYBi5+38Wt9j/AAAAMIzc/T+PW+x/AAAAGEbu/l/ELU32v/5f/3/E/n8vzdT/79P/79P/r6f/Px76/2n6/w30/57/r//3/H+2am79f+7+X8YtTfY/AAAAdJC7/1dxi/0PAAAAw8jd/+u4xf4HAACAYeTu/03c0mT/76z/j3/U+v/F9/+e/6//1//r/2dF/z9N/7+B/l//r//X/7NVc+v/c/f/Nm5psv8BAACgg9z9v4tb7H8AAAAYRu7+38ct9j8AAAAMI3f/H+KWJvvf8//1/zPq/2+68Zz3r//X/6/0//r/i6T/n6b/X69+ofT/+n/9v/6frZpb/5+7/49xS5P9DwAAAB3k7v9T3GL/AwAAwDBy998at9j/AAAAMIzc/X+OW5rsf/2//n9G/f8ez/8/83n6/31r+v+9BlL/r/9fR/8/bZf9/13/e/PLev7/zvv/fAv6f/2//p+tmFv/n7v/L3FLk/0PAAAAHeTu/2vcYv8DAADAMHL3/y1usf8BAABgGLn7/x63NNn/G/r/E/UT9f+T9P8H37/+f/33h/7/yP3/qZXn/+v/N9D/T+vy/P8br7y019f/e/6//l//z3btvv/f++NjfZy7/x9xS5P9DwAAAB3k7r8tbrH/AQAAYBi5+/8Zt9j/AAAAMIzc/f+KW5rsf8//1//r//X/C+r/D3w9+n/9/zr6/2ld+n/P/780u+7nl/7+9f/6fw7bff9/8OPc/f8OAAD//ykxU+A=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 3m52.097495465s ago: executing program 2 (id=960): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'}}}]}, 0x48}}, 0x0) 3m51.323381036s ago: executing program 2 (id=969): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000140)={0x0, 0xd, 0x4, "5fe79a52"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m50.96752513s ago: executing program 32 (id=969): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000140)={0x0, 0xd, 0x4, "5fe79a52"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m59.215907225s ago: executing program 5 (id=1347): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r0, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 2m58.685508962s ago: executing program 5 (id=1352): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000e80)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$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") unlink(&(0x7f0000000000)='./file0/file0\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 2m58.179526349s ago: executing program 5 (id=1358): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x81008c, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES64=0x0, @ANYRES32], 0x1, 0x675, &(0x7f0000001280)="$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") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lchown(&(0x7f0000000000)='./file1\x00', r1, r2) 2m57.483456988s ago: executing program 5 (id=1365): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x1008000, &(0x7f0000000040), 0x1, 0x5db, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 2m56.950304216s ago: executing program 5 (id=1372): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) 2m55.875085961s ago: executing program 5 (id=1385): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0x64, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) 2m55.470004166s ago: executing program 33 (id=1385): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x40, 0x64, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) 1m50.69135244s ago: executing program 6 (id=2029): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 1m48.891293515s ago: executing program 6 (id=2050): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 1m48.820490396s ago: executing program 6 (id=2051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 1m48.54306012s ago: executing program 6 (id=2057): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1304825, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m47.881708919s ago: executing program 6 (id=2062): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x109b01) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m47.360793797s ago: executing program 6 (id=2067): unshare(0x22020680) r0 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) fanotify_mark(r0, 0xa, 0x8, r1, 0x0) 1m46.948440632s ago: executing program 34 (id=2067): unshare(0x22020680) r0 = fanotify_init(0x0, 0x0) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) fanotify_mark(r0, 0xa, 0x8, r1, 0x0) 1m29.347290487s ago: executing program 1 (id=2259): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@bridge_setlink={0x44, 0x13, 0x1, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x62010}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7d6e}}]}]}}}]}, 0x44}}, 0x0) 1m29.071606051s ago: executing program 1 (id=2262): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0xe4}}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 1m28.819545574s ago: executing program 1 (id=2265): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x120000b5) removexattr(&(0x7f0000000180)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') 1m28.338262471s ago: executing program 1 (id=2272): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdir(&(0x7f0000000280)='./file0\x00', 0x100) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m26.353993569s ago: executing program 1 (id=2293): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup3(r1, r0, 0x80000) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x206, 0x5b, 0x0, 0x4, 0x5, @random="9576f020a1a1"}, 0x10) 1m25.159258075s ago: executing program 1 (id=2310): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(0x3) 1m24.878821309s ago: executing program 35 (id=2310): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) close(0x3) 4.28094407s ago: executing program 4 (id=3220): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 3.050180767s ago: executing program 4 (id=3234): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.971755078s ago: executing program 3 (id=3236): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2.811548601s ago: executing program 4 (id=3240): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000140)={[{@auto_da_alloc}, {@data_err_ignore}, {@grpquota}]}, 0x89, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5ffe, 0x0, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 2.719432272s ago: executing program 7 (id=3241): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_secret(0x0) 2.719289592s ago: executing program 3 (id=3242): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300c0800000080211000000080211000001505050505050"], 0x40}}, 0x0) 2.690107773s ago: executing program 0 (id=3243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000800)={0x14, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4c01d}, 0x20000000) 2.620341694s ago: executing program 0 (id=3244): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)={0x4, 0x26, 0x0, 0x8, 0x1, 0xa7f}) creat(&(0x7f00000002c0)='./file0\x00', 0x37) 2.528038445s ago: executing program 0 (id=3245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) 2.525948275s ago: executing program 3 (id=3255): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000001040)={[{@uid_forget}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@session}, {@gid}, {@rootdir={'rootdir', 0x3d, 0xce5}}, {@adinicb}, {@partition={'partition', 0x3d, 0x2000001}}, {@unhide}, {}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c407, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89f89fb398e023abba4b76a7c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e49136c5ad000"], 0xff, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.401670426s ago: executing program 0 (id=3246): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 2.238515499s ago: executing program 4 (id=3247): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x4) read$dsp(r0, &(0x7f0000000300)=""/79, 0x4f) 2.237660379s ago: executing program 3 (id=3249): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="aad3c3ec11a4b6044733534aa761bb813f06598edc3354bd5f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb2b, @void, @value}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.041707781s ago: executing program 8 (id=3250): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x746a}, 0x8) 1.879519644s ago: executing program 3 (id=3251): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) read(r0, &(0x7f0000000b00)=""/63, 0x3f) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 1.874440444s ago: executing program 8 (id=3252): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x25d}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="010000ff"], 0x20}, 0x0, 0xb1495ebd8e04cf72, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.715523436s ago: executing program 8 (id=3253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x15, 0x0, "bc7ab4aac1b841ffb101cceb4b9acde146526c6be2340944304a08546e879a3ecc20b64daa301289d2abe849238c19a35255ccd6ea15c574464dc6882bbc54f884e59d315819e55a75f0ce41b3c1d090"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x3, 0x0}}}, 0x0, 0x0, 0x13, 0x0, "06479c586ad71b5dc2214ce6ad1b7f6f3919f751296186080565af392e3775343df390d0abe96b1b451f5d0f92a9a27a4139cab336a336954a7becc5ff56e8979712c57a5892972ea83c3dfad7a5233d"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x20048011, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) 1.699122486s ago: executing program 7 (id=3254): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a001000ff04ff08"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.586751738s ago: executing program 4 (id=3256): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"6fee093278a28deb263ceb7b53c53c13", 0x0, 0x0, {0x9}, {0xfffffffffffffffb, 0x4}, 0xd34e, [0x9, 0x2, 0x988, 0x25, 0x6, 0x2147, 0x6, 0x11, 0x0, 0x4, 0x8000, 0x6, 0x1, 0x0, 0x4, 0x7]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"bc6625c65ae2c940e2f7229501524bfb", 0x0, r1, {0x8}, {0xffffffffffffffff, 0x3da6}, 0xaf0, [0x10000, 0xc00, 0x4, 0x24000000000000, 0x6d, 0x7, 0xfffffffffffffff8, 0x5, 0x101, 0x7c7, 0x1, 0x681b8f36, 0x7, 0x55, 0x54, 0x5]}) 985.474016ms ago: executing program 0 (id=3257): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000001080)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d312c696f636861727365743d69736f383835392d362c756d61736b3d30303030303030303030303030303030303030303030352c66696c655f756d61736b3d30303030303030303030303030303030303030303130302c756d61736b3d30313737373737373737373737373737373737373737332c00cf43bf8763560152b0da748d27c637d7c8d8c6dd49844dfda3b18cea92bdb3b533d6e32265a47e2d340830f90974cb163ba7d9df4c71e4613a9131d481549258d56e87e1620c236ddb4fafc471"], 0x7, 0x2db, &(0x7f0000000800)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x84000, 0x0, 0x1, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 863.919418ms ago: executing program 0 (id=3258): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000580), 0xa, 0x4000) 849.252578ms ago: executing program 3 (id=3259): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x84c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80000, 0x0, 0xfd, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000380)='./file0\x00') 848.676738ms ago: executing program 7 (id=3260): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008811}, 0x0) 760.32934ms ago: executing program 8 (id=3261): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x16}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 575.496052ms ago: executing program 7 (id=3262): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 575.015892ms ago: executing program 4 (id=3263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 297.229626ms ago: executing program 7 (id=3264): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x20, 0x0, 0x8, 0xfd, @tick=0x8, {0xfd, 0x20}, {}, @ext={0x0, 0x0}}], 0x1c) 124.794068ms ago: executing program 8 (id=3265): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000002200)={0x3e, 0x1, 0x6, 0x3, 0x0, 0x81}) 12.17138ms ago: executing program 8 (id=3266): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) 0s ago: executing program 7 (id=3267): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='1-2:', @ANYRESDEC, @ANYBLOB='E'], 0x31) kernel console output (not intermixed with test programs): active [ 324.360195][ T9] hfsplus: b-tree write err: -5, ino 4 [ 324.371587][T10542] device hsr_slave_0 entered promiscuous mode [ 324.380897][T10542] device hsr_slave_1 entered promiscuous mode [ 324.435744][ T127] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 324.635934][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 324.644679][ T127] usb 4-1: config 0 has no interfaces? [ 324.661537][ T127] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 324.675288][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.690086][ T127] usb 4-1: config 0 descriptor?? [ 324.742825][T10542] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 324.776005][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 324.786004][T10542] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 324.792901][T10637] loop4: detected capacity change from 0 to 512 [ 324.813715][T10637] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 324.817455][T10542] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 324.831793][T10639] Bluetooth: MGMT ver 1.22 [ 324.832974][T10542] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 324.876383][T10637] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 324.907295][T10637] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 324.917110][T10542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.927127][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.938604][T10542] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.945806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.955975][T10637] System zones: 0-2, 18-18, 34-34 [ 324.956653][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.984350][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.002311][T10637] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 325.026852][ T1168] usb 4-1: USB disconnect, device number 18 [ 325.054398][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.064300][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.071077][T10631] loop7: detected capacity change from 0 to 32768 [ 325.081619][T10637] EXT4-fs (loop4): 1 truncate cleaned up [ 325.090352][T10631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2357 (10631) [ 325.093894][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.109789][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.121624][T10637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 325.133185][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.144689][T10631] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.146798][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.166010][T10631] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 325.169284][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.174664][T10631] BTRFS info (device loop7): using free space tree [ 325.181759][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.182358][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.183347][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.212776][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 325.228298][ T27] audit: type=1800 audit(1749209024.529:160): pid=10637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2360" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 325.266965][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.284614][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.294590][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.303090][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 325.306047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.332746][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.347729][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.357895][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.372175][T10542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.394316][T10542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.405729][ T127] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 325.414513][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.430256][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.442096][T10631] BTRFS info (device loop7): enabling ssd optimizations [ 325.568027][ T9900] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.615888][ T127] usb 1-1: Using ep0 maxpacket: 16 [ 325.639288][ T127] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 325.650822][ T1168] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 325.652721][ T127] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 325.683523][ T127] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 325.694967][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.708842][ T127] usb 1-1: Product: syz [ 325.714157][ T127] usb 1-1: Manufacturer: syz [ 325.725297][ T127] usb 1-1: SerialNumber: syz [ 325.749374][ T127] usb 1-1: config 0 descriptor?? [ 325.763275][ T127] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 325.881604][ T1168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 325.896212][ T1168] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.906183][ T1168] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice= 0.00 [ 325.915225][ T1168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.927977][ T1168] usb 4-1: config 0 descriptor?? [ 325.937733][ T1168] yurex 4-1:0.0: Could not submitting URB [ 325.943599][ T1168] yurex: probe of 4-1:0.0 failed with error -5 [ 325.994516][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 325.999533][ T4297] usb 1-1: USB disconnect, device number 20 [ 326.003934][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.031930][T10542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.115069][T10675] sctp: [Deprecated]: syz.7.2366 (pid 10675) Use of int in max_burst socket option. [ 326.115069][T10675] Use struct sctp_assoc_value instead [ 326.138673][ T1168] usbhid 4-1:0.0: can't add hid device: -71 [ 326.144776][ T1168] usbhid: probe of 4-1:0.0 failed with error -71 [ 326.167341][ T1168] usb 4-1: USB disconnect, device number 19 [ 326.483775][T10685] loop7: detected capacity change from 0 to 2048 [ 326.563819][T10685] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 326.604365][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.624463][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.666103][T10678] loop4: detected capacity change from 0 to 32768 [ 326.704553][T10678] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2377 (10678) [ 326.726419][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.761809][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.773823][T10542] device veth0_vlan entered promiscuous mode [ 326.780696][T10678] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 326.792787][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.811974][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.821398][T10678] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 326.831508][ T4314] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 326.836740][T10678] BTRFS info (device loop4): setting nodatacow, compression disabled [ 326.856166][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 326.864244][ T4266] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 326.880105][ T4314] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 326.887930][T10542] device veth1_vlan entered promiscuous mode [ 326.904471][T10678] BTRFS info (device loop4): setting datacow [ 326.912799][ T4314] EXT4-fs (loop7): This should not happen!! Data will be lost [ 326.912799][ T4314] [ 326.922171][T10678] BTRFS info (device loop4): doing ref verification [ 326.929166][T10678] BTRFS info (device loop4): force clearing of disk cache [ 326.936832][T10678] BTRFS info (device loop4): turning off barriers [ 326.943751][T10678] BTRFS info (device loop4): enabling ssd optimizations [ 326.950849][T10678] BTRFS info (device loop4): using spread ssd allocation scheme [ 326.958584][T10678] BTRFS info (device loop4): using free space tree [ 326.991326][T10542] device veth0_macvtap entered promiscuous mode [ 327.001983][T10542] device veth1_macvtap entered promiscuous mode [ 327.011256][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 327.020094][ T4314] EXT4-fs (loop7): Total free blocks count 0 [ 327.030991][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.051043][ T4314] EXT4-fs (loop7): Free/Dirty block details [ 327.051139][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 327.065490][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 327.091224][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.106600][ T4314] EXT4-fs (loop7): free_blocks=2415919504 [ 327.132823][ T4314] EXT4-fs (loop7): dirty_blocks=16 [ 327.153044][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.173439][ T4314] EXT4-fs (loop7): Block reservation details [ 327.213977][ T4314] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 327.220592][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.232465][T10678] BTRFS info (device loop4): rebuilding free space tree [ 327.280161][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 327.300710][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.335680][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.376745][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.405671][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.425643][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.448360][T10542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.465416][T10690] loop0: detected capacity change from 0 to 32768 [ 327.475087][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.498554][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.504976][T10711] loop7: detected capacity change from 0 to 256 [ 327.525230][T10690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2370 (10690) [ 327.539712][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.550052][T10711] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 327.572719][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.599687][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.612584][T10690] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.641438][T10690] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 327.647976][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.650359][T10690] BTRFS info (device loop0): force clearing of disk cache [ 327.686016][T10690] BTRFS info (device loop0): force zlib compression, level 3 [ 327.693450][T10690] BTRFS info (device loop0): enabling auto defrag [ 327.712370][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.725801][T10690] BTRFS info (device loop0): max_inline at 0 [ 327.731846][T10690] BTRFS info (device loop0): enabling disk space caching [ 327.732074][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.744689][T10690] BTRFS info (device loop0): disk space caching is enabled [ 327.785650][T10542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.807399][T10542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.838198][T10542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.853409][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 327.864651][ T4251] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 327.907169][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.948456][T10690] BTRFS info (device loop0): enabling ssd optimizations [ 327.960087][T10690] BTRFS info (device loop0): rebuilding free space tree [ 328.021718][T10690] BTRFS info (device loop0): disabling free space tree [ 328.032145][T10542] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.035875][T10690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 328.073278][T10542] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.075850][T10690] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 328.092241][T10542] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.092274][T10542] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.312832][T10734] netlink: 'syz.3.2375': attribute type 2 has an invalid length. [ 328.346052][T10734] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2375'. [ 328.426419][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.446922][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.538030][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 328.565426][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.587674][ T9267] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 328.600976][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.644732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.675298][T10742] loop7: detected capacity change from 0 to 1024 [ 328.713210][T10742] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 328.726797][T10742] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 328.758725][T10742] EXT4-fs error (device loop7): ext4_get_journal_inode:5735: comm syz.7.2381: inode #63: comm syz.7.2381: iget: illegal inode # [ 328.775042][T10742] EXT4-fs (loop7): no journal found [ 328.785465][T10742] EXT4-fs (loop7): can't get journal size [ 328.855915][T10742] EXT4-fs (loop7): failed to initialize system zone (-22) [ 328.875136][T10742] EXT4-fs (loop7): mount failed [ 328.943349][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 328.965355][T10749] loop4: detected capacity change from 0 to 512 [ 328.995412][T10749] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 329.087805][T10749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 329.115001][T10749] System zones: 1-12 [ 329.120530][T10749] EXT4-fs (loop4): orphan cleanup on readonly fs [ 329.127294][T10749] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.2382: Inode bitmap for bg 0 marked uninitialized [ 329.140470][T10749] EXT4-fs (loop4): Remounting filesystem read-only [ 329.147098][T10749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 329.166478][T10749] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 5: comm syz.4.2382: lblock 0 mapped to illegal pblock 5 (length 1) [ 329.181122][T10749] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2382: error -117 reading directory block [ 329.196220][T10749] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 5: comm syz.4.2382: lblock 0 mapped to illegal pblock 5 (length 1) [ 329.226062][T10749] EXT4-fs warning (device loop4): dx_probe:823: inode #2: lblock 0: comm syz.4.2382: error -117 reading directory block [ 329.313365][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 329.460062][T10756] loop7: detected capacity change from 0 to 4096 [ 329.523018][T10756] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 329.574510][T10756] ntfs3: loop7: ino=21, "bus" attr_set_size [ 329.644679][T10747] loop3: detected capacity change from 0 to 32768 [ 329.658517][T10747] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.2391 (10747) [ 329.681487][ T9900] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 329.688000][T10747] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.688773][T10747] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 329.732256][T10765] sctp: [Deprecated]: syz.4.2388 (pid 10765) Use of int in max_burst socket option. [ 329.732256][T10765] Use struct sctp_assoc_value instead [ 329.749062][T10747] BTRFS info (device loop3): force clearing of disk cache [ 329.756413][T10747] BTRFS info (device loop3): force zlib compression, level 3 [ 329.763939][T10747] BTRFS info (device loop3): enabling auto defrag [ 329.775561][T10747] BTRFS info (device loop3): max_inline at 0 [ 329.796319][T10747] BTRFS info (device loop3): enabling disk space caching [ 329.803390][T10747] BTRFS info (device loop3): disk space caching is enabled [ 329.900016][T10775] autofs4:pid:10775:autofs_fill_super: pipe file descriptor does not contain proper ops [ 330.074098][T10786] loop8: detected capacity change from 0 to 256 [ 330.195843][T10783] loop4: detected capacity change from 0 to 32768 [ 330.211586][T10783] [ 330.211586][T10783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.211586][T10783] [ 330.234271][T10783] [ 330.234271][T10783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.234271][T10783] [ 330.247532][T10783] [ 330.247532][T10783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.247532][T10783] [ 330.258140][T10783] [ 330.258140][T10783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.258140][T10783] [ 330.268637][T10783] [ 330.268637][T10783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.268637][T10783] [ 330.282758][ T108] [ 330.282758][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.282758][ T108] [ 330.349215][ T4251] [ 330.349215][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.349215][ T4251] [ 330.382420][ T4251] [ 330.382420][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 330.382420][ T4251] [ 330.407872][T10747] BTRFS info (device loop3): enabling ssd optimizations [ 330.424960][T10802] loop8: detected capacity change from 0 to 64 [ 330.445980][T10747] BTRFS info (device loop3): rebuilding free space tree [ 330.513521][T10747] BTRFS info (device loop3): disabling free space tree [ 330.551292][T10747] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 330.590749][T10747] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 330.684577][T10778] loop7: detected capacity change from 0 to 32768 [ 330.731766][T10778] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 330.755791][T10778] lbmIODone: I/O error in JFS log [ 330.761356][ T9054] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.772462][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 330.781953][T10778] *** Log Format Error ! *** [ 330.782358][T10778] lmLogInit: exit(-22) [ 330.793909][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 330.803768][T10778] lmLogOpen: exit(-22) [ 330.857776][T10778] jfs_dirty_inode called on read-only volume [ 330.863814][T10778] Is remount racy? [ 330.867660][ T4763] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 330.985437][T10816] loop4: detected capacity change from 0 to 1024 [ 331.015744][ T4265] Bluetooth: hci0: command 0x0401 tx timeout [ 331.023252][ T4266] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 331.048832][T10816] EXT4-fs: Ignoring removed bh option [ 331.075775][ T4763] usb 9-1: Using ep0 maxpacket: 16 [ 331.082204][ T4763] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 331.092918][T10818] loop0: detected capacity change from 0 to 256 [ 331.099677][ T4763] usb 9-1: config 1 has no interface number 0 [ 331.106258][ T4763] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 331.118990][ T4763] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 331.129199][ T4763] usb 9-1: config 1 interface 105 has no altsetting 0 [ 331.141146][T10818] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 331.147931][T10816] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 331.211447][ T4763] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 331.231676][ T4763] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.244203][ T4763] usb 9-1: Product: syz [ 331.272375][ T4763] usb 9-1: Manufacturer: syz [ 331.277204][ T4763] usb 9-1: SerialNumber: syz [ 331.305601][T10806] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 331.317231][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 331.325928][T10806] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 331.762756][T10806] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 331.774592][T10806] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 332.207915][ T4763] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 332.242146][ T4763] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 332.270236][ T4763] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 332.285231][T10860] loop0: detected capacity change from 0 to 256 [ 332.341396][T10860] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 332.375520][ T4763] aqc111 9-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2e:3b:c8:7f:82:fc [ 332.417979][T10862] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2422'. [ 332.422379][ T4763] usb 9-1: USB disconnect, device number 2 [ 332.460772][ T4763] aqc111 9-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 332.557450][T10864] loop0: detected capacity change from 0 to 128 [ 332.590986][T10864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 332.591989][T10870] loop7: detected capacity change from 0 to 8 [ 332.609389][ T4763] aqc111 9-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 332.632523][ T4763] aqc111 9-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 332.642701][ T4763] aqc111 9-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 332.652490][T10864] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 332.724372][ T9267] EXT4-fs (loop0): unmounting filesystem. [ 332.786169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.796151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.805992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 332.840443][T10876] loop0: detected capacity change from 0 to 256 [ 332.847369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.858124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 332.900184][T10876] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 332.942451][T10876] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 333.008445][T10876] devtmpfs: Unknown parameter 'dirsyncZ›Ö¦­ikÚ™v¦˝io:¦Łéh:™N¦łélş.¦«éjş™nćóŚénş›¦‡I4‰¦·yŢô1}M?Óß 0/f d™Áf°j†šafn†› ?Ý2™QfŚcĆ™q&Ég7Ě3ŃL4“Ě$3e@v3ÍL3É&ŮĚ03Ě,3ËĚ6łÍ\3×Ě7óÍBłĐ,2‹LŠI1‹ÍbłÄ,5KÍrłÜ¬4+ÍjłÚ¬5kÍzłŢl4ÍłĹl1[ÍVłÝl7;ÍNłŰě6{ĚłĎě3©&Őě7űÍsŔ4Í!sČ6‡ÍsÄ5GÍ1sĚ7ÇÍIsŇś2§ĚisÚś5gÍ9sÎś7çÍs!í¶/P [ 333.008445][T10876] L`‚ A† !H2™' [ 333.020727][T10882] loop7: detected capacity change from 0 to 512 [ 333.094359][T10882] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 333.104016][ T4266] Bluetooth: hci0: command 0x0401 tx timeout [ 333.199075][T10882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 333.213928][T10882] System zones: 1-12 [ 333.220333][T10882] EXT4-fs (loop7): orphan cleanup on readonly fs [ 333.226933][T10882] EXT4-fs error (device loop7): ext4_read_inode_bitmap:168: comm syz.7.2431: Inode bitmap for bg 0 marked uninitialized [ 333.240384][T10882] EXT4-fs (loop7): Remounting filesystem read-only [ 333.247024][T10882] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 333.297263][T10882] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 5: comm syz.7.2431: lblock 0 mapped to illegal pblock 5 (length 1) [ 333.316749][T10882] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.2431: error -117 reading directory block [ 333.335067][T10882] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #2: block 5: comm syz.7.2431: lblock 0 mapped to illegal pblock 5 (length 1) [ 333.357505][T10882] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.2431: error -117 reading directory block [ 333.430663][ T4904] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 333.464522][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 333.596260][T10901] loop7: detected capacity change from 0 to 256 [ 333.639727][ T4904] usb 5-1: Using ep0 maxpacket: 32 [ 333.661397][ T4904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.681973][ T4904] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 333.700748][ T4904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.718292][ T4904] usb 5-1: Product: syz [ 333.722610][ T4904] usb 5-1: Manufacturer: syz [ 333.734255][ T4904] usb 5-1: SerialNumber: syz [ 333.774392][ T4904] usb 5-1: config 0 descriptor?? [ 333.884711][T10912] loop3: detected capacity change from 0 to 2048 [ 333.914332][T10912] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 334.015258][T10917] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 334.174744][T10916] loop8: detected capacity change from 0 to 32768 [ 334.181911][T10916] XFS: attr2 mount option is deprecated. [ 334.203039][T10916] XFS (loop8): Mounting V5 Filesystem [ 334.209956][ T4904] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 334.255889][ T4910] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 334.276218][T10916] XFS (loop8): Ending clean mount [ 334.288840][T10916] XFS (loop8): Quotacheck needed: Please wait. [ 334.328244][T10916] XFS (loop8): Quotacheck: Done. [ 334.352578][T10916] XFS (loop8): Unmounting Filesystem [ 334.410164][T10933] loop3: detected capacity change from 0 to 128 [ 334.465748][ T4910] usb 1-1: Using ep0 maxpacket: 16 [ 334.477764][ T4910] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 334.486199][ T4910] usb 1-1: config 1 has no interface number 0 [ 334.492444][ T4910] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 334.502493][ T4910] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 334.512754][ T4910] usb 1-1: config 1 interface 105 has no altsetting 0 [ 334.523325][ T4910] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 334.532493][ T4910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.540841][ T4910] usb 1-1: Product: syz [ 334.545073][ T4910] usb 1-1: Manufacturer: syz [ 334.550784][ T4910] usb 1-1: SerialNumber: syz [ 334.558952][T10905] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.566414][T10905] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.610072][ T4904] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 334.619041][ T4904] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 334.629403][ T4904] gs_usb: probe of 5-1:0.0 failed with error -71 [ 334.641100][ T4904] usb 5-1: USB disconnect, device number 15 [ 334.991489][T10905] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.999049][T10905] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 335.409493][ T4910] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 335.425124][ T4910] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 335.470468][ T4910] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 335.484542][ T4910] aqc111 1-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 82:7e:0f:59:d3:10 [ 335.499058][ T4910] usb 1-1: USB disconnect, device number 21 [ 335.505573][ T4910] aqc111 1-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 335.698240][ T4910] aqc111 1-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 335.707822][ T4910] aqc111 1-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 335.717352][ T4910] aqc111 1-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 335.814841][T10942] loop8: detected capacity change from 0 to 512 [ 335.822933][T10942] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 335.834831][T10942] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 335.843986][T10942] System zones: 1-12 [ 335.850388][T10942] EXT4-fs (loop8): orphan cleanup on readonly fs [ 335.857080][T10942] EXT4-fs error (device loop8): ext4_read_inode_bitmap:168: comm syz.8.2449: Inode bitmap for bg 0 marked uninitialized [ 335.872735][T10942] EXT4-fs (loop8): Remounting filesystem read-only [ 335.882181][T10942] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 335.901828][T10942] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #2: block 5: comm syz.8.2449: lblock 0 mapped to illegal pblock 5 (length 1) [ 335.934053][T10942] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.2449: error -117 reading directory block [ 335.954614][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2452'. [ 335.964149][T10948] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #2: block 5: comm syz.8.2449: lblock 0 mapped to illegal pblock 5 (length 1) [ 336.004246][T10948] EXT4-fs warning (device loop8): dx_probe:823: inode #2: lblock 0: comm syz.8.2449: error -117 reading directory block [ 336.085254][T10542] EXT4-fs (loop8): unmounting filesystem. [ 336.959741][T10950] loop7: detected capacity change from 0 to 131072 [ 336.967838][T10950] F2FS-fs (loop7): Wrong CP boundary, start(512) end(1536) blocks(0) [ 336.975985][T10950] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 336.989541][T10950] F2FS-fs (loop7): invalid crc value [ 337.064900][T10950] F2FS-fs (loop7): Found nat_bits in checkpoint [ 337.114577][T10950] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 337.122013][T10950] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 337.638464][T10999] loop0: detected capacity change from 0 to 1024 [ 337.645915][T10999] EXT4-fs: Ignoring removed bh option [ 337.709266][T10999] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.845809][ T4910] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 337.861772][T11006] loop4: detected capacity change from 0 to 512 [ 337.886529][T11006] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.892901][ T9267] EXT4-fs (loop0): unmounting filesystem. [ 337.944185][T11006] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 337.959288][T11006] EXT4-fs (loop4): orphan cleanup on readonly fs [ 337.968384][T11006] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 337.985413][T11006] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.005936][T11006] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 338.022610][T11006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2476: bg 0: block 40: padding at end of block bitmap is not set [ 338.063632][T11006] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 338.072648][ T4910] usb 4-1: Using ep0 maxpacket: 16 [ 338.079952][ T4910] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 338.100713][ T4910] usb 4-1: config 1 has no interface number 0 [ 338.119019][T11006] EXT4-fs (loop4): 1 truncate cleaned up [ 338.124731][T11006] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 338.155797][ T4910] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 338.175174][ T4910] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 338.198705][ T4910] usb 4-1: config 1 interface 105 has no altsetting 0 [ 338.206797][T11006] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.2476: bad symlink. [ 338.219851][ T4910] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 338.245982][T11018] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.2476: bad symlink. [ 338.256227][ T4910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.264244][ T4910] usb 4-1: Product: syz [ 338.292561][ T4910] usb 4-1: Manufacturer: syz [ 338.305390][ T4910] usb 4-1: SerialNumber: syz [ 338.337669][T10995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.345035][T10995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.361428][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 338.771855][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2489'. [ 338.795347][T10995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.812987][T10995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.965259][T11044] loop7: detected capacity change from 0 to 1024 [ 338.974063][T11044] EXT4-fs: Ignoring removed bh option [ 339.027278][T11044] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 339.165164][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 339.167662][T11049] loop8: detected capacity change from 0 to 128 [ 339.241669][ T4910] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 339.273495][ T4910] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 339.316780][ T4910] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 339.341255][ T4910] aqc111 4-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 72:e1:2f:dc:d9:a7 [ 339.357410][ T4910] usb 4-1: USB disconnect, device number 20 [ 339.364617][ T4910] aqc111 4-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 339.464832][ T4910] aqc111 4-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 339.497618][ T4910] aqc111 4-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 339.515738][ T4910] aqc111 4-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 339.541201][T11062] loop0: detected capacity change from 0 to 16 [ 339.571633][T11062] erofs: (device loop0): mounted with root inode @ nid 36. [ 339.607787][T11062] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 339.621852][T11062] erofs: (device loop0): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 339.631316][T11062] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 339.641484][T11062] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 339.654312][T11062] syz.0.2496: attempt to access beyond end of device [ 339.654312][T11062] loop0: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 339.693315][T11062] syz.0.2496: attempt to access beyond end of device [ 339.693315][T11062] loop0: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 339.790979][T11068] loop8: detected capacity change from 0 to 4096 [ 339.819216][T11068] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 339.831003][T11070] loop7: detected capacity change from 0 to 128 [ 339.848413][T11068] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 4096) [ 339.883962][T11072] loop4: detected capacity change from 0 to 1024 [ 339.910814][T11072] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 339.942029][T11075] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.963104][T11072] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 339.989885][T11072] EXT4-fs error (device loop4): ext4_get_journal_inode:5735: comm syz.4.2499: inode #63: comm syz.4.2499: iget: illegal inode # [ 340.011370][T11072] EXT4-fs (loop4): no journal found [ 340.018956][T11072] EXT4-fs (loop4): can't get journal size [ 340.020508][T11068] overlayfs: upper fs does not support tmpfile. [ 340.037724][T11072] EXT4-fs (loop4): failed to initialize system zone (-22) [ 340.045007][T11072] EXT4-fs (loop4): mount failed [ 340.087865][T11068] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 340.093249][T11084] NILFS error (device loop8): nilfs_dotdot: directory #12 missing '.' [ 340.160050][T11068] overlayfs: failed to set xattr on upper [ 340.183182][T11084] Remounting filesystem read-only [ 340.194102][T11068] overlayfs: ...falling back to index=off,metacopy=off. [ 340.330736][T10542] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 340.733987][T11110] loop0: detected capacity change from 0 to 512 [ 340.775946][ T4910] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 340.805187][T11110] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 340.839498][T11110] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.856656][T11120] loop4: detected capacity change from 0 to 64 [ 340.863524][T11118] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 340.896264][T11110] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 340.909937][T11120] hfs: keylen 1794 too large [ 340.964857][T11120] hfs: keylen 1794 too large [ 340.980555][ T9267] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 340.981910][ T4910] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.007948][ T9267] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 341.027055][T11116] hfs: keylen 1794 too large [ 341.032795][ T4910] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.055746][ T4910] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 341.075040][ T4910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.086027][ T4910] usb 9-1: config 0 descriptor?? [ 341.098107][ T4910] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 341.115547][ T4910] dvb-usb: bulk message failed: -22 (3/0) [ 341.126302][ T4910] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 341.151465][ T4910] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 341.165727][ T4310] hfs: keylen 1794 too large [ 341.171425][ T4910] usb 9-1: media controller created [ 341.211559][ T4910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 341.231324][ T4910] dvb-usb: bulk message failed: -22 (6/0) [ 341.244258][T11123] loop4: detected capacity change from 0 to 128 [ 341.246049][ T4910] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 341.278404][ T4910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input26 [ 341.299224][T11096] dvb-usb: bulk message failed: -22 (4/0) [ 341.317085][ T4910] dvb-usb: schedule remote query interval to 150 msecs. [ 341.324068][ T4910] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 341.347526][ T4910] usb 9-1: USB disconnect, device number 3 [ 341.382808][ T4910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 341.409135][ T9267] EXT4-fs (loop0): unmounting filesystem. [ 341.546805][T11121] loop7: detected capacity change from 0 to 32768 [ 341.561761][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.619332][T11121] XFS (loop7): Mounting V5 Filesystem [ 341.738836][T11121] XFS (loop7): Ending clean mount [ 341.751307][T11121] XFS (loop7): Quotacheck needed: Please wait. [ 341.764479][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.804933][T11121] XFS (loop7): Quotacheck: Done. [ 341.921008][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.976055][ T9900] XFS (loop7): Unmounting Filesystem [ 342.034670][T11141] loop4: detected capacity change from 0 to 4096 [ 342.077912][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.111540][T11143] device bond0 entered promiscuous mode [ 342.125812][T11143] device bond_slave_0 entered promiscuous mode [ 342.132335][T11143] device bond_slave_1 entered promiscuous mode [ 342.154078][T11143] device batadv0 entered promiscuous mode [ 342.176832][T11143] device bond0 left promiscuous mode [ 342.182228][T11143] device bond_slave_0 left promiscuous mode [ 342.195850][T11143] device bond_slave_1 left promiscuous mode [ 342.216539][T11143] device batadv0 left promiscuous mode [ 342.524748][ T4267] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 342.552130][ T4267] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 342.560669][ T4267] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 342.568583][ T4267] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 342.595815][ T4267] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 342.604438][ T4267] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.677476][T11152] chnl_net:caif_netlink_parms(): no params data found [ 343.799092][T11179] loop3: detected capacity change from 0 to 4096 [ 343.887012][T11152] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.894339][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.903109][T11152] device bridge_slave_0 entered promiscuous mode [ 343.922941][T11184] loop7: detected capacity change from 0 to 256 [ 343.934090][T11152] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.955952][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.964036][T11152] device bridge_slave_1 entered promiscuous mode [ 344.078270][T11152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.131315][T11152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.365941][T11192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2556'. [ 344.503701][T11152] team0: Port device team_slave_0 added [ 344.528308][T11152] team0: Port device team_slave_1 added [ 344.694882][T11198] loop8: detected capacity change from 0 to 256 [ 344.695905][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 344.753663][T11188] loop3: detected capacity change from 0 to 32768 [ 344.778833][T11152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.787456][T11188] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2547 (11188) [ 344.799872][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.825792][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.833195][T11152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.877728][T11152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.884801][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.910736][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.942138][T11188] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 344.959638][T11188] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 344.981475][T11152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.992342][T11188] BTRFS info (device loop3): enabling auto defrag [ 345.008700][T11188] BTRFS info (device loop3): doing ref verification [ 345.015426][T11188] BTRFS info (device loop3): use no compression [ 345.045792][T11188] BTRFS info (device loop3): force clearing of disk cache [ 345.053543][ T9] device hsr_slave_0 left promiscuous mode [ 345.065831][T11188] BTRFS info (device loop3): setting nodatacow, compression disabled [ 345.074240][T11188] BTRFS info (device loop3): disabling free space tree [ 345.081320][ T9] device hsr_slave_1 left promiscuous mode [ 345.096997][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.124794][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.143056][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.166460][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.193733][ T9] device bridge_slave_1 left promiscuous mode [ 345.215159][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.249171][ T9] device bridge_slave_0 left promiscuous mode [ 345.255505][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.265665][ T4763] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 345.286975][T11188] BTRFS info (device loop3): enabling ssd optimizations [ 345.301056][T11188] BTRFS info (device loop3): rebuilding free space tree [ 345.330087][ T9] device veth1_macvtap left promiscuous mode [ 345.336755][ T9] device veth0_macvtap left promiscuous mode [ 345.342878][ T9] device veth1_vlan left promiscuous mode [ 345.348810][ T9] device veth0_vlan left promiscuous mode [ 345.367012][T11188] BTRFS info (device loop3): disabling free space tree [ 345.384734][T11188] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 345.391612][T11203] loop7: detected capacity change from 0 to 32768 [ 345.415409][T11188] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 345.426468][T11203] BTRFS warning: duplicate device /dev/loop7 devid 1 generation 8 scanned by syz.7.2552 (11203) [ 345.465978][ T4763] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 345.479285][ T4763] usb 5-1: config 0 has no interface number 0 [ 345.489310][ T4763] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 345.511150][ T4763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.532055][ T4763] usb 5-1: config 0 descriptor?? [ 345.566355][ T4763] usb 5-1: selecting invalid altsetting 1 [ 345.572291][ T4763] dvb_ttusb_budget: ttusb_init_controller: error [ 345.595732][ T4763] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 345.724368][ T4763] DVB: Unable to find symbol cx22700_attach() [ 345.815535][ T9054] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 345.950843][ T4763] DVB: Unable to find symbol tda10046_attach() [ 345.963718][ T4763] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 345.973382][ T4763] usb 5-1: USB disconnect, device number 16 [ 346.598807][T11238] loop7: detected capacity change from 0 to 32768 [ 346.605900][T11238] XFS: attr2 mount option is deprecated. [ 346.650394][T11238] XFS (loop7): Mounting V5 Filesystem [ 346.705131][T11238] XFS (loop7): Ending clean mount [ 346.727174][T11238] XFS (loop7): Quotacheck needed: Please wait. [ 346.783295][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 346.801866][T11238] XFS (loop7): Quotacheck: Done. [ 346.802435][ T9] team0 (unregistering): Port device team_slave_1 removed [ 346.811601][T11238] XFS (loop7): Unmounting Filesystem [ 346.865392][ T9] team0 (unregistering): Port device team_slave_0 removed [ 346.917030][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.969859][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.531465][ T9] bond0 (unregistering): Released all slaves [ 347.659615][T11152] device hsr_slave_0 entered promiscuous mode [ 347.686802][T11152] device hsr_slave_1 entered promiscuous mode [ 347.694209][T11152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.710628][T11152] Cannot create hsr debugfs directory [ 347.871048][T11254] netlink: 'syz.3.2564': attribute type 39 has an invalid length. [ 348.520353][T11152] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.530239][T11152] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.540669][T11152] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.550770][T11152] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.607311][T11152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.623026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.630775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.641907][T11152] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.652534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.661209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.669947][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.677111][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.700197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.708566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.717675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.726432][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.733530][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.741329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.750367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.762374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.771974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.781431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.801271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.811997][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.822381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.830996][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.842493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.851098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.858918][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 348.873034][T11152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.056320][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.064666][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.078138][T11152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.095508][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.104540][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.124414][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.133083][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.145854][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.153606][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.165499][T11152] device veth0_vlan entered promiscuous mode [ 349.178424][T11152] device veth1_vlan entered promiscuous mode [ 349.199849][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.210671][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.218929][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.227659][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.239081][T11152] device veth0_macvtap entered promiscuous mode [ 349.249306][T11152] device veth1_macvtap entered promiscuous mode [ 349.266369][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.277028][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.287097][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.297767][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.307606][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.318866][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.328739][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.339202][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.350608][T11152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.362693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.373655][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.382194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.391089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.400222][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.411212][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.421411][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.431860][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.441741][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.452183][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.461993][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.473388][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.484600][T11152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.492609][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 349.502177][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.513937][T11152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.522983][T11152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.532395][T11152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.541683][T11152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.605546][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.614764][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.637257][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 349.645432][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.653883][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.668131][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 349.836249][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2578'. [ 349.908446][T11275] loop0: detected capacity change from 0 to 128 [ 349.931804][T11272] loop7: detected capacity change from 0 to 4096 [ 349.935459][T11273] loop3: detected capacity change from 0 to 4096 [ 349.961109][T11272] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 350.006854][T11273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 350.184193][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 350.252484][ T9054] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 350.336451][T11282] loop7: detected capacity change from 0 to 512 [ 350.344104][T11282] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 350.380682][T11282] EXT4-fs (loop7): 1 truncate cleaned up [ 350.397278][T11282] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 350.590939][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 350.932921][T11296] loop0: detected capacity change from 0 to 4096 [ 350.939559][ T4267] Bluetooth: hci3: command 0x0419 tx timeout [ 350.960763][T11301] loop8: detected capacity change from 0 to 2048 [ 350.987163][T11296] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 351.002145][T11301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.090663][T11296] ntfs3: loop0: failed to convert "c46c" to cp775 [ 351.263573][T11307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2585'. [ 351.270810][T11311] loop7: detected capacity change from 0 to 128 [ 351.423391][T11318] loop0: detected capacity change from 0 to 128 [ 351.471875][T11318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 351.499023][T11318] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.634828][T11152] EXT4-fs (loop0): unmounting filesystem. [ 351.684027][T11327] loop4: detected capacity change from 0 to 128 [ 351.733515][T11327] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 351.811499][T11327] ext4 filesystem being mounted at /550/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.974326][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 352.013128][T11341] loop3: detected capacity change from 0 to 512 [ 352.047896][T11343] netlink: 'syz.7.2599': attribute type 39 has an invalid length. [ 352.093120][T11341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 352.105932][T11341] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.175414][T11345] loop4: detected capacity change from 0 to 4096 [ 352.197770][T11345] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 352.212742][ T9054] EXT4-fs (loop3): unmounting filesystem. [ 352.289201][T11345] ntfs3: loop4: failed to convert "c46c" to cp775 [ 352.620058][T11360] netlink: 'syz.7.2605': attribute type 2 has an invalid length. [ 352.634728][T11360] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2605'. [ 352.731126][ T4908] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 352.927063][ T4908] usb 4-1: Using ep0 maxpacket: 32 [ 352.934962][ T4908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 352.977150][ T4908] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 352.994007][ T4908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.008275][ T4908] usb 4-1: Product: syz [ 353.015341][ T4908] usb 4-1: Manufacturer: syz [ 353.026415][ T4908] usb 4-1: SerialNumber: syz [ 353.043037][ T4908] usb 4-1: config 0 descriptor?? [ 353.137240][T11378] loop8: detected capacity change from 0 to 4096 [ 353.158732][T11378] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 353.274506][T11378] ntfs3: loop8: failed to convert "c46c" to cp775 [ 353.458242][ T4908] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 353.550111][T11389] bridge_slave_0: default FDB implementation only supports local addresses [ 353.583593][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2620'. [ 353.606085][T11391] netem: invalid attributes len -19 [ 353.611375][T11391] netem: change failed [ 353.806743][T11397] netlink: 'syz.8.2624': attribute type 1 has an invalid length. [ 353.860282][ T4908] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 353.873332][ T4908] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 353.884145][ T4908] gs_usb: probe of 4-1:0.0 failed with error -71 [ 353.904617][ T4908] usb 4-1: USB disconnect, device number 21 [ 354.281185][T11422] loop8: detected capacity change from 0 to 64 [ 354.974636][T11425] loop0: detected capacity change from 0 to 32768 [ 354.994433][T11425] XFS: attr2 mount option is deprecated. [ 355.089757][T11425] XFS (loop0): Mounting V5 Filesystem [ 355.160490][T11425] XFS (loop0): Ending clean mount [ 355.177879][T11425] XFS (loop0): Quotacheck needed: Please wait. [ 355.217299][T11443] loop8: detected capacity change from 0 to 32768 [ 355.230140][T11425] XFS (loop0): Quotacheck: Done. [ 355.251254][T11443] ialloc: diAlloc returned -5! [ 355.361642][T11152] XFS (loop0): Unmounting Filesystem [ 355.364405][T11461] loop4: detected capacity change from 0 to 256 [ 355.630000][T11472] netlink: 'syz.8.2650': attribute type 39 has an invalid length. [ 355.846167][ T4764] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 355.867562][T11478] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2653'. [ 355.895946][T11478] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 356.051362][ T4764] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.080447][ T4764] usb 4-1: not running at top speed; connect to a high speed hub [ 356.099965][ T4764] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 356.116103][ T4764] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 356.145668][ T4764] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 356.165036][ T4764] usb 4-1: config 128 has no interface number 0 [ 356.171429][ T4764] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 3876, setting to 64 [ 356.193196][ T4764] usb 4-1: config 128 interface 127 has no altsetting 0 [ 356.208076][ T4764] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 356.225765][ T4764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.244414][ T4764] usb 4-1: Product: syz [ 356.248745][ T4764] usb 4-1: Manufacturer: syz [ 356.253363][ T4764] usb 4-1: SerialNumber: syz [ 356.273284][T11470] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.365713][ T1168] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 356.513606][ T4764] usb 4-1: USB disconnect, device number 22 [ 356.581172][ T1168] usb 5-1: Using ep0 maxpacket: 32 [ 356.588766][ T1168] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 356.602650][ T1168] usb 5-1: config 0 has no interface number 0 [ 356.609251][ T1168] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.625318][ T1168] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.635230][ T1168] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 356.651167][ T1168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.661566][ T1168] usb 5-1: config 0 descriptor?? [ 356.765328][T11497] loop8: detected capacity change from 0 to 32768 [ 356.772699][T11497] XFS: attr2 mount option is deprecated. [ 356.782598][T11497] XFS (loop8): Mounting V5 Filesystem [ 356.812765][T11497] XFS (loop8): Ending clean mount [ 356.823091][T11497] XFS (loop8): Quotacheck needed: Please wait. [ 356.864199][T11497] XFS (loop8): Quotacheck: Done. [ 356.925511][T10542] XFS (loop8): Unmounting Filesystem [ 357.019967][T11509] loop0: detected capacity change from 0 to 2048 [ 357.036710][T11509] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 357.077221][T11510] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 357.290450][ T1168] uclogic 0003:28BD:0094.000F: pen parameters not found [ 357.300065][ T1168] uclogic 0003:28BD:0094.000F: interface is invalid, ignoring [ 357.313463][T11514] tun0: tun_chr_ioctl cmd 1074025677 [ 357.319051][T11514] tun0: linktype set to 778 [ 357.516541][ T1168] usb 5-1: USB disconnect, device number 17 [ 357.573862][T11525] loop8: detected capacity change from 0 to 64 [ 357.792193][T11535] program syz.3.2680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.935963][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2682'. [ 358.138533][T11527] loop0: detected capacity change from 0 to 40427 [ 358.172408][T11527] F2FS-fs (loop0): Found nat_bits in checkpoint [ 358.219553][T11527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 358.292034][T11527] syz.0.2674: attempt to access beyond end of device [ 358.292034][T11527] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 358.316673][T11555] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 358.357868][T11152] syz-executor: attempt to access beyond end of device [ 358.357868][T11152] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 358.479127][T11561] loop4: detected capacity change from 0 to 2048 [ 358.531281][T11562] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.558129][T11564] loop8: detected capacity change from 0 to 164 [ 358.566696][T11562] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 358.596155][T11562] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 358.620834][T11562] Remounting filesystem read-only [ 358.693778][ T4251] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 359.008661][T11581] loop7: detected capacity change from 0 to 128 [ 359.049996][T11581] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 359.108231][T11581] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.214367][T11581] fscrypt (loop7, inode 12): Unsupported encryption flags (0x29) [ 359.369393][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 359.549434][T11597] loop7: detected capacity change from 0 to 4096 [ 359.584799][T11597] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 359.653365][ T27] audit: type=1800 audit(1749209058.949:161): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2705" name="file1" dev="loop7" ino=24 res=0 errno=0 [ 359.834325][ T9900] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 359.849549][ T9900] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 359.860360][ T9900] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 360.167940][T11622] loop7: detected capacity change from 0 to 512 [ 360.197497][T11620] loop8: detected capacity change from 0 to 2048 [ 360.233873][T11622] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 360.243991][T11624] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2719'. [ 360.268682][T11622] EXT4-fs (loop7): orphan cleanup on readonly fs [ 360.277450][T11628] loop3: detected capacity change from 0 to 64 [ 360.283346][T11607] loop0: detected capacity change from 0 to 32768 [ 360.291615][T11607] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2711 (11607) [ 360.304064][T11626] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 360.320683][T11607] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 360.331622][T11607] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 360.341129][T11607] BTRFS info (device loop0): using free space tree [ 360.354405][T11622] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 360.393658][T11626] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 360.413514][T11626] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 360.424264][T11622] EXT4-fs (loop7): 1 truncate cleaned up [ 360.431069][T11622] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 360.461963][T11626] Remounting filesystem read-only [ 360.481122][T11620] NILFS (loop8): mounting fs with errors [ 360.490645][T11637] NILFS error (device loop8): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 360.526290][T11637] Remounting filesystem read-only [ 360.586719][T11607] BTRFS info (device loop0): enabling ssd optimizations [ 360.642905][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 360.660606][T10542] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 361.085322][T11152] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 361.166110][T11639] loop4: detected capacity change from 0 to 40427 [ 361.242749][T11639] F2FS-fs (loop4): Found nat_bits in checkpoint [ 361.336259][T11639] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 361.344680][T11655] loop8: detected capacity change from 0 to 32768 [ 361.354567][T11655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2725 (11655) [ 361.450290][T11655] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.463366][T11655] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 361.480490][T11655] BTRFS info (device loop8): using free space tree [ 361.513585][ T4251] syz-executor: attempt to access beyond end of device [ 361.513585][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 361.579533][T11682] loop3: detected capacity change from 0 to 256 [ 361.628886][T11655] BTRFS info (device loop8): enabling ssd optimizations [ 361.713231][T10542] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 361.775652][T11694] loop3: detected capacity change from 0 to 764 [ 361.790476][T11694] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 362.305328][T11707] loop3: detected capacity change from 0 to 512 [ 362.335390][T11707] EXT4-fs: Ignoring removed oldalloc option [ 362.357523][T11707] EXT4-fs (loop3): 1 truncate cleaned up [ 362.368773][T11707] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 362.449358][ T9054] EXT4-fs (loop3): unmounting filesystem. [ 362.870061][T11724] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2747'. [ 362.946775][T11718] loop3: detected capacity change from 0 to 32768 [ 362.997437][T11718] XFS (loop3): Mounting V5 Filesystem [ 363.095969][T11718] XFS (loop3): Ending clean mount [ 363.108685][T11718] XFS (loop3): Quotacheck needed: Please wait. [ 363.129457][T11736] loop4: detected capacity change from 0 to 512 [ 363.181300][T11718] XFS (loop3): Quotacheck: Done. [ 363.197049][T11736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 363.206715][T11736] ext4 filesystem being mounted at /590/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.223698][T11736] EXT4-fs (loop4): shut down requested (1) [ 363.257868][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 363.294141][ T9054] XFS (loop3): Unmounting Filesystem [ 363.645883][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2752'. [ 363.657111][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 363.714979][T11745] loop8: detected capacity change from 0 to 128 [ 363.721906][T11745] EXT4-fs: Ignoring removed nobh option [ 363.819448][T11745] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 363.863069][T11745] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.023580][T11762] loop4: detected capacity change from 0 to 128 [ 364.041295][T11762] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 364.062635][T11762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.073112][T10542] EXT4-fs (loop8): unmounting filesystem. [ 364.334085][T11773] vxcan1: tx address claim with dest, not broadcast [ 365.179295][T11801] loop8: detected capacity change from 0 to 16 [ 365.196214][T11801] erofs: (device loop8): mounted with root inode @ nid 36. [ 365.246787][ T27] audit: type=1800 audit(1749209064.651:162): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2777" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 365.452330][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2781'. [ 365.652918][T11813] tun0: tun_chr_ioctl cmd 2147767511 [ 365.866546][T11817] loop8: detected capacity change from 0 to 64 [ 366.043555][T11811] loop0: detected capacity change from 0 to 32768 [ 366.089779][T11811] XFS (loop0): Mounting V5 Filesystem [ 366.190096][T11811] XFS (loop0): Ending clean mount [ 366.227288][T11811] XFS (loop0): User initiated shutdown received. [ 366.234263][T11811] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 366.248191][T11811] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 366.365887][T11152] XFS (loop0): Unmounting Filesystem [ 366.513977][T11840] loop7: detected capacity change from 0 to 256 [ 366.587900][T11843] loop3: detected capacity change from 0 to 128 [ 366.596154][T11843] EXT4-fs (loop3): Test dummy encryption mode enabled [ 366.607946][T11843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 366.633643][T11843] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.003566][ T9054] EXT4-fs (loop3): unmounting filesystem. [ 367.127148][T11856] loop3: detected capacity change from 0 to 64 [ 367.258958][T11860] loop7: detected capacity change from 0 to 256 [ 367.290020][T11860] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 367.573548][T11875] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2806'. [ 367.807754][ T27] audit: type=1326 audit(1749209067.272:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 367.849581][T11882] loop4: detected capacity change from 0 to 8192 [ 367.856754][ T27] audit: type=1326 audit(1749209067.272:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 367.880175][ T27] audit: type=1326 audit(1749209067.272:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 367.906026][T11882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 367.919495][T11882] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 367.929976][T11882] REISERFS (device loop4): using ordered data mode [ 367.936877][ T27] audit: type=1326 audit(1749209067.272:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 367.959304][T11882] reiserfs: using flush barriers [ 367.964981][ T27] audit: type=1326 audit(1749209067.272:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 367.987474][ T4902] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 367.990210][T11882] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 367.995125][ T27] audit: type=1326 audit(1749209067.272:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 368.033693][ T27] audit: type=1326 audit(1749209067.272:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 368.057745][ T27] audit: type=1326 audit(1749209067.272:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11885 comm="syz.8.2811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977cf8e929 code=0x7ffc0000 [ 368.080711][T11882] REISERFS (device loop4): checking transaction log (loop4) [ 368.099105][T11882] REISERFS (device loop4): Using r5 hash to sort names [ 368.116652][T11882] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 368.131825][T11882] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 368.175971][T11882] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 368.182534][T11889] kvm [11888]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1000000 [ 368.223574][T11882] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 368.239657][ T4902] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 368.257783][ T4902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.274941][ T4902] usb 4-1: config 0 descriptor?? [ 368.292181][ T4902] cp210x 4-1:0.0: cp210x converter detected [ 368.305010][T11882] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 368.652968][T11905] loop8: detected capacity change from 0 to 1024 [ 368.688845][ T4902] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 368.715261][ T4902] usb 4-1: cp210x converter now attached to ttyUSB0 [ 368.721175][T11905] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 368.792952][T11905] EXT4-fs warning (device loop8): ext4_empty_dir:3156: inode #11: comm syz.8.2818: directory missing '..' [ 368.808062][T11915] binder: 11914:11915 ioctl c00c620f 2000000002c0 returned -22 [ 368.897307][ T4767] usb 4-1: USB disconnect, device number 23 [ 368.912906][ T4767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.928944][T10542] EXT4-fs (loop8): unmounting filesystem. [ 368.937731][ T4767] cp210x 4-1:0.0: device disconnected [ 368.993054][T11921] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 369.353571][T11944] loop0: detected capacity change from 0 to 512 [ 369.456807][T11944] EXT4-fs (loop0): 1 orphan inode deleted [ 369.475943][T11944] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 369.485182][ T75] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 369.518959][ T75] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:4: Failed to release dquot type 1 [ 369.556908][T11944] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.588544][T11951] netlink: 'syz.3.2837': attribute type 2 has an invalid length. [ 369.702306][T11152] EXT4-fs (loop0): unmounting filesystem. [ 369.708594][ T4314] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:7: Failed to release dquot type 1 [ 369.772658][T11961] loop3: detected capacity change from 0 to 16 [ 369.811407][T11961] erofs: (device loop3): mounted with root inode @ nid 36. [ 369.855743][T11961] erofs: (device loop3): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 369.874287][T11961] erofs: (device loop3): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 369.889239][T11961] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 369.909445][T11961] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 369.925762][T11961] syz.3.2841: attempt to access beyond end of device [ 369.925762][T11961] loop3: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 369.945992][T11961] syz.3.2841: attempt to access beyond end of device [ 369.945992][T11961] loop3: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 370.039299][T11972] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2847'. [ 370.129145][ T5224] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 370.214996][T11984] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2852'. [ 370.328182][ T5224] usb 5-1: Using ep0 maxpacket: 32 [ 370.344940][ T5224] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 370.376061][ T5224] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.420040][ T5224] usb 5-1: config 0 has no interface number 0 [ 370.436557][ T5224] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 370.458361][ T5224] usb 5-1: config 0 interface 239 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 370.501633][ T5224] usb 5-1: config 0 interface 239 has no altsetting 0 [ 370.531085][ T5224] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 370.553398][ T5224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.565933][T11992] loop0: detected capacity change from 0 to 16 [ 370.572347][ T5224] usb 5-1: Product: syz [ 370.572366][ T5224] usb 5-1: Manufacturer: syz [ 370.572383][ T5224] usb 5-1: SerialNumber: syz [ 370.574294][ T5224] usb 5-1: config 0 descriptor?? [ 370.611610][T11965] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 370.623511][T11992] erofs: (device loop0): mounted with root inode @ nid 36. [ 370.648174][T11996] 9pnet_virtio: no channels available for device syz [ 370.837968][T11965] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2844'. [ 370.888935][ T5224] usb 5-1: USB disconnect, device number 18 [ 371.472809][T12030] loop7: detected capacity change from 0 to 128 [ 371.519112][T12030] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 371.538468][T12030] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.640709][ T9900] EXT4-fs (loop7): unmounting filesystem. [ 371.647000][ T5225] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 371.834179][ T5225] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 371.850796][ T5224] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 371.864617][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.876684][ T5225] usb 4-1: config 0 descriptor?? [ 371.890274][ T5225] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 372.044218][ T5224] usb 5-1: Using ep0 maxpacket: 32 [ 372.063289][ T5224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 372.081250][ T5224] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 372.104778][ T5224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.127851][ T5224] usb 5-1: Product: syz [ 372.132151][ T5224] usb 5-1: Manufacturer: syz [ 372.139308][ T5224] usb 5-1: SerialNumber: syz [ 372.153425][ T5224] usb 5-1: config 0 descriptor?? [ 372.159315][T12037] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 372.186208][ T5224] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 372.385661][ T4902] usb 5-1: USB disconnect, device number 19 [ 372.385709][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 372.697028][ T5225] usb 4-1: USB disconnect, device number 24 [ 372.744534][T12051] loop8: detected capacity change from 0 to 32768 [ 372.865752][T12053] loop0: detected capacity change from 0 to 32768 [ 372.874303][T12053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2881 (12053) [ 372.917891][T12053] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.949974][T12053] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 372.968814][T12053] BTRFS info (device loop0): using free space tree [ 373.014637][T12053] BTRFS info (device loop0): enabling ssd optimizations [ 373.093029][T11152] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 373.691549][T12099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2892'. [ 374.094908][T12118] loop0: detected capacity change from 0 to 512 [ 374.114081][T12121] loop8: detected capacity change from 0 to 512 [ 374.135680][T12118] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.2900: corrupted in-inode xattr [ 374.161017][T12118] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2900: couldn't read orphan inode 15 (err -117) [ 374.186655][T12118] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 374.206311][T12121] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 374.224500][T12121] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.421704][T11152] EXT4-fs (loop0): unmounting filesystem. [ 374.466687][T12134] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2906'. [ 374.557964][T12137] kvm [12136]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x1000000 [ 374.600738][T10542] EXT4-fs (loop8): unmounting filesystem. [ 374.639539][T12126] loop3: detected capacity change from 0 to 40427 [ 374.658916][T12126] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 374.674793][T12126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 374.693067][T12126] F2FS-fs (loop3): invalid crc value [ 374.725635][T12126] F2FS-fs (loop3): Found nat_bits in checkpoint [ 374.803082][ T5225] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 374.828512][T12126] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 374.842646][T12126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 374.865265][T12151] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2913'. [ 374.993787][ T5225] usb 5-1: Using ep0 maxpacket: 32 [ 375.004572][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.028346][ T5225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.028722][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2924'. [ 375.043004][ T5225] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 375.056431][ T5225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.066091][ T5225] usb 5-1: config 0 descriptor?? [ 375.101745][T12126] overlayfs: failed to resolve './file0': -2 [ 375.494828][ T5225] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 375.542753][T12171] loop8: detected capacity change from 0 to 16 [ 375.583088][T12171] erofs: (device loop8): mounted with root inode @ nid 36. [ 375.746290][ T4764] usb 5-1: USB disconnect, device number 20 [ 375.838265][T12178] loop8: detected capacity change from 0 to 8192 [ 375.847066][T12178] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 375.860334][T12178] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 375.869771][T12178] REISERFS (device loop8): using ordered data mode [ 375.876330][T12178] reiserfs: using flush barriers [ 375.897256][T12178] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 375.919072][T12178] REISERFS (device loop8): checking transaction log (loop8) [ 376.129298][T12178] REISERFS (device loop8): Using tea hash to sort names [ 376.145822][T12178] REISERFS warning (device loop8): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 376.165397][T12178] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 376.636353][T12202] loop4: detected capacity change from 0 to 128 [ 376.684667][T12202] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 376.734834][T12202] ext4 filesystem being mounted at /625/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.898762][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 377.223261][T12208] loop0: detected capacity change from 0 to 32768 [ 377.349777][T12208] XFS (loop0): Mounting V5 Filesystem [ 377.428708][T12208] XFS (loop0): Ending clean mount [ 377.439222][T12208] XFS (loop0): Quotacheck needed: Please wait. [ 377.535311][T12208] XFS (loop0): Quotacheck: Done. [ 377.648617][T11152] XFS (loop0): Unmounting Filesystem [ 377.668397][T12221] loop3: detected capacity change from 0 to 40427 [ 377.711034][T12221] F2FS-fs (loop3): invalid crc value [ 377.771176][T12240] loop4: detected capacity change from 0 to 8 [ 377.786198][T12221] F2FS-fs (loop3): Found nat_bits in checkpoint [ 377.809081][T12240] SQUASHFS error: Unable to read directory block [629:46] [ 377.884646][T12221] F2FS-fs (loop3): Start checkpoint disabled! [ 377.909030][T12221] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 377.978933][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.168319][ T4310] kworker/u4:6: attempt to access beyond end of device [ 378.168319][ T4310] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 379.203792][T12266] loop8: detected capacity change from 0 to 32768 [ 379.227150][T12266] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 scanned by syz.8.2957 (12266) [ 379.275919][T12266] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 379.286593][T12266] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 379.296689][T12266] BTRFS info (device loop8): using free space tree [ 379.352759][T12266] BTRFS info (device loop8): enabling ssd optimizations [ 379.438645][ T14] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 379.656452][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 379.664572][ T14] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 379.692619][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.728480][ T14] usb 1-1: config 0 descriptor?? [ 379.736892][T10542] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 379.942536][ T14] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 379.996105][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.031269][ T14] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 380.050070][ T14] usb 1-1: media controller created [ 380.112758][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.217274][ T14] az6027: usb out operation failed. (-71) [ 380.234629][ T14] az6027: usb out operation failed. (-71) [ 380.250720][ T14] stb0899_attach: Driver disabled by Kconfig [ 380.267490][ T14] az6027: no front-end attached [ 380.267490][ T14] [ 380.284380][ T14] az6027: usb out operation failed. (-71) [ 380.290384][ T14] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.302139][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 380.320300][ T14] dvb-usb: schedule remote query interval to 400 msecs. [ 380.335066][ T14] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.352501][ T14] usb 1-1: USB disconnect, device number 22 [ 380.404965][ T14] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 380.661705][T12334] loop4: detected capacity change from 0 to 64 [ 380.821924][T12340] loop0: detected capacity change from 0 to 256 [ 380.843479][T12340] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 381.248734][T12336] loop8: detected capacity change from 0 to 32768 [ 381.277355][T12336] XFS (loop8): Mounting V5 Filesystem [ 381.327246][T12336] XFS (loop8): Ending clean mount [ 381.334859][T12336] XFS (loop8): Quotacheck needed: Please wait. [ 381.418965][T12336] XFS (loop8): Quotacheck: Done. [ 381.516132][T10542] XFS (loop8): Unmounting Filesystem [ 381.882427][T12381] loop8: detected capacity change from 0 to 1024 [ 381.996195][T12389] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 382.014041][T12385] loop0: detected capacity change from 0 to 8192 [ 382.015066][T12389] isofs_fill_super: bread failed, dev=loop8, iso_blknum=16, block=32 [ 382.028727][ T4763] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 382.035645][T12385] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 382.054679][T12385] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 382.065218][T12385] REISERFS (device loop0): using ordered data mode [ 382.066019][T12391] loop8: detected capacity change from 0 to 8 [ 382.071731][T12385] reiserfs: using flush barriers [ 382.085490][T12385] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 382.093067][T12391] Filesystem uses "unknown" compression. This is not supported [ 382.114295][T12385] REISERFS (device loop0): checking transaction log (loop0) [ 382.129063][T12385] REISERFS (device loop0): Using rupasov hash to sort names [ 382.137553][T12385] REISERFS (device loop0): using 3.5.x disk format [ 382.140599][T12393] loop4: detected capacity change from 0 to 512 [ 382.153059][T12385] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 382.164851][T12385] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 382.176722][T12385] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 382.188842][T12385] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 382.203332][T12385] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 382.229455][ T4763] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.229567][T12385] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 382.250025][ T4763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.253055][T12385] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 382.280816][T12393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 382.298080][ T4763] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 382.316896][T12393] ext4 filesystem being mounted at /649/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.330845][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.346510][ T4763] usb 4-1: SerialNumber: syz [ 382.470562][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 382.572469][ T4763] usb 4-1: 0:2 : does not exist [ 382.593864][ T4763] usb 4-1: USB disconnect, device number 25 [ 382.614194][T12404] loop4: detected capacity change from 0 to 4096 [ 382.634867][T12406] netlink: 'syz.8.3006': attribute type 2 has an invalid length. [ 382.852306][T12413] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 382.900948][T12417] tap0: tun_chr_ioctl cmd 1074025677 [ 382.916651][T12417] tap0: linktype set to 825 [ 383.193657][T12416] loop4: detected capacity change from 0 to 32768 [ 383.233324][T12416] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.3008 (12416) [ 383.262128][T12416] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 383.284635][T12416] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 383.304198][T12416] BTRFS info (device loop4): using free space tree [ 383.351162][T12416] BTRFS info (device loop4): enabling ssd optimizations [ 383.510218][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3016'. [ 383.527311][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3016'. [ 383.569095][ T4251] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 383.727291][ T4763] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 383.923532][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.948543][ T4763] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.976385][ T4763] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.007403][ T4763] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 384.028687][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.048149][ T4763] usb 4-1: config 0 descriptor?? [ 384.260866][ T4763] usbhid 4-1:0.0: can't add hid device: -71 [ 384.269929][ T4763] usbhid: probe of 4-1:0.0 failed with error -71 [ 384.282767][ T4763] usb 4-1: USB disconnect, device number 26 [ 384.550956][T12472] netlink: 'syz.0.3025': attribute type 39 has an invalid length. [ 385.040217][T12486] input: syz1 as /devices/virtual/input/input33 [ 385.159409][T12490] loop3: detected capacity change from 0 to 1024 [ 385.241902][T12492] device netdevsim0 entered promiscuous mode [ 385.257546][ T75] hfsplus: b-tree write err: -5, ino 4 [ 385.274879][T12492] device netdevsim0 left promiscuous mode [ 385.504684][T12479] loop8: detected capacity change from 0 to 40427 [ 385.544782][T12479] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x3ffff [ 385.579586][T12479] F2FS-fs (loop8): invalid crc value [ 385.620539][T12479] F2FS-fs (loop8): Found nat_bits in checkpoint [ 385.647739][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3041'. [ 385.745435][T12479] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 385.873282][T10542] syz-executor: attempt to access beyond end of device [ 385.873282][T10542] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 386.026446][T12521] loop3: detected capacity change from 0 to 512 [ 386.033925][T12521] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.094865][T12521] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 386.187954][T12521] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 386.225797][T12521] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 386.271575][T12521] EXT4-fs (loop3): 1 truncate cleaned up [ 386.303143][T12521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 386.344696][T12521] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.3059: lblock 0 mapped to illegal pblock 4 (length 1) [ 386.377717][T12501] loop4: detected capacity change from 0 to 32768 [ 386.432877][T12521] EXT4-fs (loop3): Remounting filesystem read-only [ 386.455604][T12521] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.3059: lblock 0 mapped to illegal pblock 4 (length 1) [ 386.478293][T12501] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 386.478293][T12501] [ 386.503735][T12521] EXT4-fs (loop3): Remounting filesystem read-only [ 386.614071][ T9054] EXT4-fs (loop3): unmounting filesystem. [ 386.749479][T12536] loop3: detected capacity change from 0 to 1024 [ 386.838114][T12536] EXT4-fs: Ignoring removed orlov option [ 386.876501][T12536] EXT4-fs: Ignoring removed oldalloc option [ 386.903964][T12536] EXT4-fs (loop3): Test dummy encryption mode enabled [ 386.926509][T12536] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 387.135775][ T9054] EXT4-fs (loop3): unmounting filesystem. [ 387.146301][T12551] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 387.196451][T12542] loop4: detected capacity change from 0 to 8192 [ 387.720098][T12563] loop4: detected capacity change from 0 to 40427 [ 387.728866][T12563] F2FS-fs (loop4): invalid crc value [ 387.739776][T12563] F2FS-fs (loop4): Found nat_bits in checkpoint [ 387.770215][T12563] F2FS-fs (loop4): Start checkpoint disabled! [ 387.780460][T12563] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 387.959912][T12573] loop3: detected capacity change from 0 to 2048 [ 387.969454][ T11] kworker/u4:1: attempt to access beyond end of device [ 387.969454][ T11] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 388.005826][T12574] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 388.079253][T12574] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 388.110217][T12574] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 388.151731][T12574] Remounting filesystem read-only [ 388.157102][T12573] NILFS (loop3): mounting fs with errors [ 388.171912][T12581] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 388.209600][T12581] Remounting filesystem read-only [ 388.341122][ T9054] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 388.351740][T12584] loop8: detected capacity change from 0 to 128 [ 388.399730][T12584] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 388.420674][T12584] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.462304][T12584] fscrypt (loop8, inode 12): Unsupported encryption flags (0x29) [ 388.615007][T10542] EXT4-fs (loop8): unmounting filesystem. [ 389.091291][T12597] loop8: detected capacity change from 0 to 512 [ 389.104866][T12597] EXT4-fs: Ignoring removed oldalloc option [ 389.144758][T12597] EXT4-fs (loop8): 1 truncate cleaned up [ 389.203485][T12597] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 389.335585][T12600] loop0: detected capacity change from 0 to 4096 [ 389.354549][T12600] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 389.372497][T10542] EXT4-fs (loop8): unmounting filesystem. [ 389.482261][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 389.482276][ T27] audit: type=1800 audit(1749209089.191:171): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3082" name="file1" dev="loop0" ino=24 res=0 errno=0 [ 389.803665][T11152] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 389.832115][T11152] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 389.842343][T11152] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 389.864496][T12621] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3091'. [ 390.055581][ T4297] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 390.105268][T12632] loop8: detected capacity change from 0 to 64 [ 390.134023][T12634] loop3: detected capacity change from 0 to 128 [ 390.152675][T12634] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 390.186025][T12634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.193295][T10542] hfs: node 4:3 still has 2 user(s)! [ 390.201044][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 390.279196][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.304533][ T4297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.344009][ T4297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 390.377605][ T4297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.397948][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.418390][ T4297] usb 5-1: config 0 descriptor?? [ 390.839658][ T4297] plantronics 0003:047F:FFFF.0011: item fetching failed at offset 12/15 [ 390.858049][ T4297] plantronics 0003:047F:FFFF.0011: parse failed [ 390.865958][ T4297] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 391.059168][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3098'. [ 391.060255][ T4297] usb 5-1: USB disconnect, device number 21 [ 391.128883][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 391.146308][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3100'. [ 391.249139][T12645] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 391.333362][T12648] loop3: detected capacity change from 0 to 128 [ 391.341990][T12648] EXT4-fs: Ignoring removed nobh option [ 391.365348][T12648] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 391.383599][T12648] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 391.448094][ T9054] EXT4-fs (loop3): unmounting filesystem. [ 391.507918][T12656] vxcan1: tx address claim with dest, not broadcast [ 391.930515][T12654] loop8: detected capacity change from 0 to 32768 [ 391.980290][T12654] XFS (loop8): Mounting V5 Filesystem [ 392.068936][T12654] XFS (loop8): Ending clean mount [ 392.126788][T12654] XFS (loop8): User initiated shutdown received. [ 392.159617][T12654] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 392.188522][T12654] XFS (loop8): Please unmount the filesystem and rectify the problem(s) [ 392.240912][T10542] XFS (loop8): Unmounting Filesystem [ 392.275854][T12662] loop0: detected capacity change from 0 to 40427 [ 392.343775][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'. [ 392.356466][T12662] F2FS-fs (loop0): Found nat_bits in checkpoint [ 392.393803][T12683] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3116'. [ 392.541063][T12662] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 392.729248][T11152] syz-executor: attempt to access beyond end of device [ 392.729248][T11152] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 393.166211][T12696] loop4: detected capacity change from 0 to 32768 [ 393.215079][T12696] XFS (loop4): Mounting V5 Filesystem [ 393.292166][T12696] XFS (loop4): Ending clean mount [ 393.315419][T12696] XFS (loop4): Quotacheck needed: Please wait. [ 393.367461][T12696] XFS (loop4): Quotacheck: Done. [ 393.439749][ T4251] XFS (loop4): Unmounting Filesystem [ 393.487544][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3128'. [ 393.605561][ T4764] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 393.658550][T12721] xt_CT: No such helper "snmp" [ 393.811309][ T4764] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.831840][ T4764] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 393.847722][ T4764] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 393.864457][ T4764] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.883720][ T4764] usb 1-1: config 0 descriptor?? [ 393.892346][ T4764] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 393.909413][ T4764] dvb-usb: bulk message failed: -22 (3/0) [ 393.917123][ T4764] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 393.934719][ T4764] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 393.944246][ T4764] usb 1-1: media controller created [ 393.950642][ T4764] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.984170][ T4764] dvb-usb: bulk message failed: -22 (6/0) [ 393.990188][ T4764] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 394.015113][ T4764] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input35 [ 394.028318][ T4764] dvb-usb: schedule remote query interval to 150 msecs. [ 394.035364][ T4764] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 394.108021][T12717] dvb-usb: bulk message failed: -22 (4/0) [ 394.124226][ T4764] usb 1-1: USB disconnect, device number 23 [ 394.139057][ T4764] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 394.217039][T12731] loop4: detected capacity change from 0 to 40427 [ 394.225053][T12731] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 394.235092][T12731] F2FS-fs (loop4): invalid crc value [ 394.242261][T12731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 394.277025][T12731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 394.329692][ T4251] syz-executor: attempt to access beyond end of device [ 394.329692][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 394.672376][T12745] loop4: detected capacity change from 0 to 512 [ 394.679480][T12745] EXT4-fs: Ignoring removed oldalloc option [ 394.729051][T12745] EXT4-fs (loop4): 1 truncate cleaned up [ 394.736687][T12745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 394.819512][T12751] loop0: detected capacity change from 0 to 64 [ 394.916735][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 395.032116][T12755] loop3: detected capacity change from 0 to 8192 [ 395.154805][ T4759] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 395.340367][ T4759] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.358856][ T4759] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.380992][ T4759] usb 9-1: config 0 descriptor?? [ 395.396456][ T4759] cp210x 9-1:0.0: cp210x converter detected [ 395.500966][T12763] loop4: detected capacity change from 0 to 32768 [ 395.512449][T12763] XFS (loop4): Mounting V5 Filesystem [ 395.569820][T12763] XFS (loop4): Ending clean mount [ 395.578912][T12763] XFS (loop4): Quotacheck needed: Please wait. [ 395.633426][T12763] XFS (loop4): Quotacheck: Done. [ 395.657914][ T4764] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 395.687689][ T4763] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 395.703062][ T4251] XFS (loop4): Unmounting Filesystem [ 395.801910][ T4759] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 395.842462][ T4764] usb 1-1: config index 0 descriptor too short (expected 227, got 18) [ 395.864712][ T4764] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 395.888405][ T4759] usb 9-1: cp210x converter now attached to ttyUSB0 [ 395.896383][ T4763] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.912230][ T4764] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.920499][ T4763] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 395.933662][ T4764] usb 1-1: Product: syz [ 395.937942][ T4764] usb 1-1: Manufacturer: syz [ 395.942755][ T4763] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 395.952051][ T4764] usb 1-1: SerialNumber: syz [ 395.957811][ T4763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.972269][ T4764] usb 1-1: config 0 descriptor?? [ 395.979088][ T4764] ch341 1-1:0.0: ch341-uart converter detected [ 395.986197][ T4763] usb 4-1: config 0 descriptor?? [ 395.994687][ T4763] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 396.002081][ T4763] dvb-usb: bulk message failed: -22 (3/0) [ 396.010234][ T4763] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 396.019620][ T4763] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 396.035676][ T4763] usb 4-1: media controller created [ 396.044457][ T4763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 396.060675][ T4759] usb 9-1: USB disconnect, device number 4 [ 396.073111][ T4763] dvb-usb: bulk message failed: -22 (6/0) [ 396.082399][ T4759] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.090416][ T4763] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 396.099193][ T4759] cp210x 9-1:0.0: device disconnected [ 396.109686][ T4763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 396.125612][ T4763] dvb-usb: schedule remote query interval to 150 msecs. [ 396.133550][ T4763] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 396.213068][T12771] dvb-usb: bulk message failed: -22 (4/0) [ 396.220102][ T4912] usb 4-1: USB disconnect, device number 27 [ 396.236892][ T4912] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 396.588953][T12799] loop4: detected capacity change from 0 to 4096 [ 396.625219][T12799] NILFS (loop4): unrecognized mount option "barriń»(sŘ&ŹŚ‹=~er" [ 396.783022][ T4764] usb 1-1: failed to send control message: -71 [ 396.793022][ T4764] ch341-uart: probe of ttyUSB1 failed with error -71 [ 396.811275][ T4764] usb 1-1: USB disconnect, device number 24 [ 396.832404][ T4764] ch341 1-1:0.0: device disconnected [ 397.268131][T12799] loop4: detected capacity change from 0 to 32768 [ 397.355896][T12799] XFS (loop4): Mounting V5 Filesystem [ 397.382508][T12824] loop3: detected capacity change from 0 to 8192 [ 397.425773][T12799] XFS (loop4): Ending clean mount [ 397.432227][T12824] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 397.451872][T12824] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 397.477296][T12824] REISERFS (device loop3): using ordered data mode [ 397.491988][T12824] reiserfs: using flush barriers [ 397.509786][T12845] loop8: detected capacity change from 0 to 128 [ 397.526154][T12824] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 397.545843][T12845] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 397.571423][T12824] REISERFS (device loop3): checking transaction log (loop3) [ 397.585036][T12845] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.587506][ T4251] XFS (loop4): Unmounting Filesystem [ 397.606169][T12824] REISERFS (device loop3): Using r5 hash to sort names [ 397.634801][T12824] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 397.673993][T12824] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 397.709052][T12849] loop0: detected capacity change from 0 to 64 [ 397.750956][T12824] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 397.783063][T12824] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 397.798307][T12824] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 398.035502][T12854] device veth1_macvtap left promiscuous mode [ 398.751070][T12883] device netdevsim0 entered promiscuous mode [ 398.766441][T12883] device netdevsim0 left promiscuous mode [ 399.064462][T12886] loop8: detected capacity change from 0 to 8192 [ 399.099539][T12886] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 399.131781][T12867] loop3: detected capacity change from 0 to 40427 [ 399.178270][T12867] F2FS-fs (loop3): invalid crc value [ 399.183927][T12886] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 399.251524][T12886] REISERFS (device loop8): using ordered data mode [ 399.268240][T12867] F2FS-fs (loop3): Found nat_bits in checkpoint [ 399.286429][T12886] reiserfs: using flush barriers [ 399.350478][T12886] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 399.416572][T12886] REISERFS (device loop8): checking transaction log (loop8) [ 399.454528][T12886] REISERFS (device loop8): Using r5 hash to sort names [ 399.470876][T12867] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 399.478851][T12886] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 399.515201][T12886] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 399.579684][T12886] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 399.614036][T12886] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 399.636555][ T9054] syz-executor: attempt to access beyond end of device [ 399.636555][ T9054] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 399.645071][T12886] REISERFS warning (device loop8): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 399.784956][T12919] netem: incorrect ge model size [ 399.804070][T12919] netem: change failed [ 400.091079][T12927] loop8: detected capacity change from 0 to 1024 [ 400.128646][T12927] hfsplus: bad catalog entry type [ 400.206704][ T9] hfsplus: b-tree write err: -5, ino 4 [ 400.710638][T12949] loop0: detected capacity change from 0 to 8192 [ 400.751073][T12949] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 400.832464][T12949] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 400.842216][T12949] REISERFS (device loop0): using ordered data mode [ 400.891772][T12949] reiserfs: using flush barriers [ 400.944646][T12949] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 400.975536][T12949] REISERFS (device loop0): checking transaction log (loop0) [ 401.019544][T12949] REISERFS (device loop0): Using r5 hash to sort names [ 401.033079][T12949] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 401.080234][T12949] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 401.161713][T12949] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 401.194248][T12949] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 401.244197][T12949] REISERFS warning (device loop0): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 401.550741][T12975] loop3: detected capacity change from 0 to 64 [ 401.781884][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3221'. [ 401.810299][T12960] netlink: 2 bytes leftover after parsing attributes in process `syz.7.3221'. [ 402.151786][T12998] loop4: detected capacity change from 0 to 2048 [ 402.214911][T12998] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 402.298636][T12998] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 402.348804][T12998] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 402.366947][T12998] EXT4-fs (loop4): This should not happen!! Data will be lost [ 402.366947][T12998] [ 402.376898][T12998] EXT4-fs (loop4): Total free blocks count 0 [ 402.387113][T12998] EXT4-fs (loop4): Free/Dirty block details [ 402.402169][T13012] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 402.416330][T12998] EXT4-fs (loop4): free_blocks=2415919104 [ 402.422251][T12998] EXT4-fs (loop4): dirty_blocks=16 [ 402.433787][T12998] EXT4-fs (loop4): Block reservation details [ 402.443316][T13012] EXT4-fs (loop4): This should not happen!! Data will be lost [ 402.443316][T13012] [ 402.496222][T13014] loop3: detected capacity change from 0 to 2048 [ 402.516753][T13014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.647566][T13037] loop4: detected capacity change from 0 to 32768 [ 403.657756][T13037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3256 (13037) [ 403.673933][T13037] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.685420][T13037] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 403.701011][T13037] BTRFS info (device loop4): force clearing of disk cache [ 403.708637][T13037] BTRFS info (device loop4): enabling auto defrag [ 403.715359][T13037] BTRFS info (device loop4): max_inline at 0 [ 403.727907][T13037] BTRFS info (device loop4): enabling disk space caching [ 403.735335][T13037] BTRFS info (device loop4): disk space caching is enabled [ 403.814160][T13037] BTRFS info (device loop4): enabling ssd optimizations [ 403.825789][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3254'. [ 403.841581][T13037] BTRFS info (device loop4): rebuilding free space tree [ 403.846001][T13034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.856920][T13034] IPv6: NLM_F_CREATE should be set when creating new route [ 403.864158][T13034] IPv6: NLM_F_CREATE should be set when creating new route [ 403.889448][T13035] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3254'. [ 403.898353][T13056] loop0: detected capacity change from 0 to 64 [ 403.906316][T13035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.914821][T13037] BTRFS info (device loop4): disabling free space tree [ 403.923332][T13037] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 403.933313][T13037] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 403.950782][T13056] overlayfs: filesystem on './file0' not supported [ 404.188677][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 404.356162][ T4297] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 404.499198][ T4251] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 404.531057][T13062] loop3: detected capacity change from 0 to 32768 [ 404.554744][ T4297] usb 1-1: Using ep0 maxpacket: 16 [ 404.562764][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.606191][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.629288][T13062] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 404.663069][ T4297] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 404.672253][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.682097][ T4297] usb 1-1: config 0 descriptor?? [ 404.742310][T13062] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 404.995554][T13062] [ 404.997933][T13062] ====================================================== [ 405.004945][T13062] WARNING: possible circular locking dependency detected [ 405.011954][T13062] 6.1.141-syzkaller #0 Not tainted [ 405.017056][T13062] ------------------------------------------------------ [ 405.024081][T13062] syz.3.3259/13062 is trying to acquire lock: [ 405.030138][T13062] ffff8880555fea20 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_read_virt_blocks+0x265/0x950 [ 405.041095][T13062] [ 405.041095][T13062] but task is already holding lock: [ 405.048451][T13062] ffff8880678c4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f29/0x2150 [ 405.057674][T13062] [ 405.057674][T13062] which lock already depends on the new lock. [ 405.057674][T13062] [ 405.068067][T13062] [ 405.068067][T13062] the existing dependency chain (in reverse order) is: [ 405.077069][T13062] [ 405.077069][T13062] -> #3 (jbd2_handle){++++}-{0:0}: [ 405.084364][T13062] start_this_handle+0x1f49/0x2150 [ 405.089995][T13062] jbd2__journal_start+0x2b7/0x5a0 [ 405.095631][T13062] jbd2_journal_start+0x26/0x30 [ 405.100999][T13062] ocfs2_start_trans+0x372/0x6c0 [ 405.106456][T13062] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 405.112696][T13062] ocfs2_dismount_volume+0x1fc/0x930 [ 405.118499][T13062] generic_shutdown_super+0x130/0x340 [ 405.124391][T13062] kill_block_super+0x7c/0xe0 [ 405.129589][T13062] deactivate_locked_super+0x93/0xf0 [ 405.135443][T13062] cleanup_mnt+0x463/0x4f0 [ 405.140383][T13062] task_work_run+0x1ca/0x250 [ 405.145493][T13062] exit_to_user_mode_loop+0xe6/0x110 [ 405.151306][T13062] exit_to_user_mode_prepare+0xb1/0x140 [ 405.157375][T13062] syscall_exit_to_user_mode+0x16/0x40 [ 405.163351][T13062] do_syscall_64+0x58/0xa0 [ 405.168285][T13062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.174699][T13062] [ 405.174699][T13062] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 405.183212][T13062] down_read+0x42/0x2d0 [ 405.187889][T13062] ocfs2_start_trans+0x366/0x6c0 [ 405.193345][T13062] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 405.199582][T13062] ocfs2_dismount_volume+0x1fc/0x930 [ 405.205379][T13062] generic_shutdown_super+0x130/0x340 [ 405.211261][T13062] kill_block_super+0x7c/0xe0 [ 405.216454][T13062] deactivate_locked_super+0x93/0xf0 [ 405.222255][T13062] cleanup_mnt+0x463/0x4f0 [ 405.227189][T13062] task_work_run+0x1ca/0x250 [ 405.232295][T13062] exit_to_user_mode_loop+0xe6/0x110 [ 405.238203][T13062] exit_to_user_mode_prepare+0xb1/0x140 [ 405.244268][T13062] syscall_exit_to_user_mode+0x16/0x40 [ 405.250240][T13062] do_syscall_64+0x58/0xa0 [ 405.255175][T13062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.261592][T13062] [ 405.261592][T13062] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 405.269067][T13062] ocfs2_start_trans+0x267/0x6c0 [ 405.274524][T13062] ocfs2_setattr+0xaa6/0x1cf0 [ 405.279727][T13062] notify_change+0xc74/0xf40 [ 405.284863][T13062] do_truncate+0x197/0x220 [ 405.289809][T13062] do_sys_ftruncate+0x312/0x3c0 [ 405.295193][T13062] do_syscall_64+0x4c/0xa0 [ 405.300130][T13062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.306551][T13062] [ 405.306551][T13062] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 405.315325][T13062] __lock_acquire+0x2cf8/0x7c50 [ 405.320705][T13062] lock_acquire+0x1b4/0x490 [ 405.325732][T13062] down_read+0x42/0x2d0 [ 405.330409][T13062] ocfs2_read_virt_blocks+0x265/0x950 [ 405.336307][T13062] ocfs2_find_entry+0x3d1/0x20c0 [ 405.341765][T13062] ocfs2_rename+0x1e13/0x3820 [ 405.346966][T13062] vfs_rename+0xbbf/0x10d0 [ 405.351901][T13062] do_renameat2+0x89d/0xc70 [ 405.356923][T13062] __x64_sys_rename+0x82/0x90 [ 405.362119][T13062] do_syscall_64+0x4c/0xa0 [ 405.367055][T13062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.373479][T13062] [ 405.373479][T13062] other info that might help us debug this: [ 405.373479][T13062] [ 405.383697][T13062] Chain exists of: [ 405.383697][T13062] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> jbd2_handle [ 405.383697][T13062] [ 405.398381][T13062] Possible unsafe locking scenario: [ 405.398381][T13062] [ 405.405819][T13062] CPU0 CPU1 [ 405.411186][T13062] ---- ---- [ 405.416558][T13062] lock(jbd2_handle); [ 405.420641][T13062] lock(&journal->j_trans_barrier); [ 405.428443][T13062] lock(jbd2_handle); [ 405.435030][T13062] lock(&ocfs2_file_ip_alloc_sem_key); [ 405.440584][T13062] [ 405.440584][T13062] *** DEADLOCK *** [ 405.440584][T13062] [ 405.448724][T13062] 8 locks held by syz.3.3259/13062: [ 405.453915][T13062] #0: ffff88805403a460 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 405.463150][T13062] #1: ffff88805403a748 (&type->s_vfs_rename_key#10){+.+.}-{3:3}, at: do_renameat2+0x35b/0xc70 [ 405.473526][T13062] #2: ffff8880555f5108 (&type->i_mutex_dir_key#17/1){+.+.}-{3:3}, at: do_renameat2+0x3ed/0xc70 [ 405.483981][T13062] #3: ffff8880555fed88 (&sb->s_type->i_mutex_key#44/5){+.+.}-{3:3}, at: do_renameat2+0x423/0xc70 [ 405.494615][T13062] #4: ffff888071d75f48 (&sb->s_type->i_mutex_key#44/2){+.+.}-{3:3}, at: vfs_rename+0x78c/0x10d0 [ 405.505153][T13062] #5: ffff88805403a650 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_rename+0x1a0a/0x3820 [ 405.514554][T13062] #6: ffff888057e4f0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x366/0x6c0 [ 405.525250][T13062] #7: ffff8880678c4990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f29/0x2150 [ 405.534891][T13062] [ 405.534891][T13062] stack backtrace: [ 405.540771][T13062] CPU: 0 PID: 13062 Comm: syz.3.3259 Not tainted 6.1.141-syzkaller #0 [ 405.548924][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.558985][T13062] Call Trace: [ 405.562262][T13062] [ 405.565196][T13062] dump_stack_lvl+0x168/0x22e [ 405.569876][T13062] ? load_image+0x3b0/0x3b0 [ 405.574380][T13062] ? show_regs_print_info+0x12/0x12 [ 405.579590][T13062] ? print_circular_bug+0x12b/0x1a0 [ 405.584819][T13062] check_noncircular+0x274/0x310 [ 405.589780][T13062] ? add_chain_block+0x940/0x940 [ 405.594739][T13062] ? lockdep_lock+0xdc/0x1e0 [ 405.599337][T13062] ? _find_first_zero_bit+0xcf/0x100 [ 405.604625][T13062] __lock_acquire+0x2cf8/0x7c50 [ 405.609494][T13062] ? __lock_acquire+0x12e5/0x7c50 [ 405.614535][T13062] ? verify_lock_unused+0x140/0x140 [ 405.619758][T13062] ? __lock_acquire+0x13c0/0x7c50 [ 405.624804][T13062] lock_acquire+0x1b4/0x490 [ 405.629321][T13062] ? ocfs2_read_virt_blocks+0x265/0x950 [ 405.634878][T13062] ? __might_sleep+0xd0/0xd0 [ 405.639475][T13062] ? read_lock_is_recursive+0x10/0x10 [ 405.644853][T13062] ? mark_lock+0x94/0x320 [ 405.649185][T13062] down_read+0x42/0x2d0 [ 405.653350][T13062] ? ocfs2_read_virt_blocks+0x265/0x950 [ 405.658904][T13062] ocfs2_read_virt_blocks+0x265/0x950 [ 405.664283][T13062] ? ocfs2_validate_dx_leaf+0x1f0/0x1f0 [ 405.669840][T13062] ? ocfs2_seek_data_hole_offset+0x990/0x990 [ 405.675916][T13062] ? verify_lock_unused+0x140/0x140 [ 405.681128][T13062] ocfs2_find_entry+0x3d1/0x20c0 [ 405.686074][T13062] ? __lock_acquire+0x7c50/0x7c50 [ 405.691104][T13062] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 405.697174][T13062] ? jbd2_write_access_granted+0x69/0x300 [ 405.702904][T13062] ? mutex_unlock+0x10/0x10 [ 405.707406][T13062] ? do_raw_spin_lock+0x11d/0x280 [ 405.712441][T13062] ? jbd2_write_access_granted+0x2ec/0x300 [ 405.718246][T13062] ? jbd2_write_access_granted+0x69/0x300 [ 405.723966][T13062] ? jbd2_journal_dirty_metadata+0x39f/0xcc0 [ 405.729950][T13062] ? __ocfs2_journal_access+0x633/0x880 [ 405.735500][T13062] ? ocfs2_journal_dirty+0x40e/0x680 [ 405.740784][T13062] ? ocfs2_journal_access_di+0x40/0x40 [ 405.746250][T13062] ? ocfs2_journal_access+0x40/0x40 [ 405.751452][T13062] ? rcu_is_watching+0x11/0xa0 [ 405.756225][T13062] ? _raw_spin_unlock_irq+0x1f/0x40 [ 405.761429][T13062] ? lockdep_hardirqs_on+0x94/0x140 [ 405.766628][T13062] ocfs2_rename+0x1e13/0x3820 [ 405.771322][T13062] ? ocfs2_mknod+0x2350/0x2350 [ 405.776094][T13062] ? mark_lock+0x94/0x320 [ 405.780428][T13062] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 405.786416][T13062] ? lock_chain_count+0x20/0x20 [ 405.791269][T13062] ? __schedule+0x10b7/0x40d0 [ 405.795949][T13062] ? lockdep_hardirqs_on+0x94/0x140 [ 405.801161][T13062] ? release_firmware_map_entry+0x18a/0x18a [ 405.807059][T13062] ? lock_chain_count+0x20/0x20 [ 405.811914][T13062] ? mark_lock+0x94/0x320 [ 405.816260][T13062] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 405.822244][T13062] ? lock_chain_count+0x20/0x20 [ 405.827101][T13062] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 405.833252][T13062] ? lockdep_hardirqs_on+0x94/0x140 [ 405.838448][T13062] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 405.844604][T13062] ? lock_acquire+0x20f/0x490 [ 405.849289][T13062] ? __might_sleep+0xd0/0xd0 [ 405.853886][T13062] ? preempt_count_add+0x8d/0x190 [ 405.858908][T13062] ? rwsem_write_trylock+0x12f/0x1b0 [ 405.864192][T13062] ? clear_nonspinnable+0x60/0x60 [ 405.869212][T13062] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 405.874146][T13062] ? ocfs2_mknod+0x2350/0x2350 [ 405.878927][T13062] vfs_rename+0xbbf/0x10d0 [ 405.883371][T13062] ? __ia32_sys_link+0x90/0x90 [ 405.888157][T13062] ? _raw_spin_unlock+0x24/0x40 [ 405.893025][T13062] ? bpf_lsm_path_rename+0x5/0x10 [ 405.898061][T13062] ? security_path_rename+0x178/0x200 [ 405.903442][T13062] do_renameat2+0x89d/0xc70 [ 405.907960][T13062] ? fsnotify_move+0x4e0/0x4e0 [ 405.912732][T13062] ? __check_object_size+0x500/0xa40 [ 405.918022][T13062] ? strncpy_from_user+0x1e3/0x350 [ 405.923143][T13062] ? getname_flags+0x206/0x500 [ 405.927911][T13062] __x64_sys_rename+0x82/0x90 [ 405.932595][T13062] do_syscall_64+0x4c/0xa0 [ 405.937016][T13062] ? clear_bhb_loop+0x60/0xb0 [ 405.941695][T13062] ? clear_bhb_loop+0x60/0xb0 [ 405.946373][T13062] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.952279][T13062] RIP: 0033:0x7f194db8e929 [ 405.956696][T13062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.976304][T13062] RSP: 002b:00007f194e9fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 405.984732][T13062] RAX: ffffffffffffffda RBX: 00007f194ddb5fa0 RCX: 00007f194db8e929 [ 405.992703][T13062] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000200000000040 [ 406.000674][T13062] RBP: 00007f194dc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 406.008654][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.016622][T13062] R13: 0000000000000000 R14: 00007f194ddb5fa0 R15: 00007fff4c2091b8 [ 406.024612][T13062] [ 406.038842][ T4297] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0012/input/input37 [ 406.108508][ T9054] ocfs2: Unmounting device (7,3) on (node local) [ 406.134006][ T4297] appleir 0003:05AC:8241.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 406.250045][ T4297] usb 1-1: USB disconnect, device number 25