last executing test programs: 8m26.661252s ago: executing program 1 (id=5709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x103, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x3c}}, 0x0) 8m26.487061963s ago: executing program 1 (id=5712): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0100008500000006000000850000000e00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 8m26.138698591s ago: executing program 1 (id=5720): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x2a1, &(0x7f0000000200)="$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") rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./bus\x00') 8m25.79243532s ago: executing program 1 (id=5724): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000001240)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x2}}, {@quota}, {@noquota}, {@discard}]}, 0x1, 0x6142, &(0x7f0000009100)="$eJzs3c1vHGcdB/Df7JtfQtKoh6pECLlteCmleS0hUKDpAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqqVON/TzOeLKbtet4Z+35fCRn5rfPzO4z/u54dzMz+wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/+0U/PFxFx7TfphpMRX4h+RC9iqapXImJp5WRefhARL8Zmc7wQEcOFiGr9zX+ei3gjIj4+EfHw0b3V6uYLu+zHD//6rz/97NhP/vmX4dn//+1O/81Jy929+/v//f3+/rYZAAAAuqYsy7JIH/NPpc/3vbY7BQDMRH79L5N8u3ru6vU5649arVarD2FdV453v15ExHp9neo9g8PxAHDIrMcnbXeBFsm/0wYRcaztTgBzrWi7AxyIh4/urRYp36L+erCy1Z7PBdmR/3qxfX3HpOk0zXNMZvX82oh+PD+hP0sz6sM8yfn3mvlf22ofpeUOOv9ZmZT/aOvSp87J+feb+Tccnfx7Y/Pvqpz/YE/59+UPAAAAAABzLP///8mWj/8u7H9TduVpx39XZtQHAAAAAAAAAHjW9jv+3zbj/wEAAMDcqj6rV/5w4vFtk76Lrbr9ahFxvLE80DHpYpnltvsBAAAAAAAAAAAAAF0y2DqH92oRMYyI48vLZVlWP3XNeq/2u/5h1/Xthy5r+488AABs+fhE41r+ImIxIq6m7/obLi8vl+Xi0nK5XC4t5Pezo4XFcqn2uTZPq9sWRrt4QzwYldWdLdbWq5v2eXlae/P+qscalf1ddGw2WgwcACJi69XooVekI6Ysn4u23+VwONj/jx77P7vR9vMUAAAAOHhlWZZF+jrvU+mYf6/tTgEAM5Ff/5vHBdRqtVqtVh+9uq4c7369iIj1+jrVewbD8QPAIbMen7TdBVok/04bRMSLbXcCmGtF2x3gQDx8dG+1SPkW9deDNL57PhdkR/7rxeZ6ef1x02ma55jM6vm1Ef14fkJ/XphRH+ZJzr/XzP/aVvsoLXfQ+c/KpPyr7TzZQn/alvPvN/NvODr598bm31U5/8Ge8u/LHwAAAAAA5lj+//+Tc3X8d/R5N2eqpx3/XTmwRwUAAAAAAACAg/Xw0b3VfN1rPv7/pTHLuf7zaMr5F/LvpJx/r5H/1xvL9WvzD95+nP9/H91b/fOd/3wxT3eb/0KeKdIzq0jPiCI9UjFI0/1s3ZM2hv1R9UjDotcfpHN+yuG7cSNuxlqc27FsL/0+NtuPP3lfVU+Hm+1lf2v9CzvaB9vt+f4v7mgfpjOdyqXcfiZW45dxM97ZbK/aFnZsf/6lPLY45fdTTmnP+fft/52U8x/Ufqr8l1N70ZhWHnzUe2K/r0/HPc6VG1/+3bmD35ypNqK/vW111fa93EJ/Nn8nx0bx69trt87cvX7nzq3zkSY7br0QafKM5fyH6Wf77/8rW+357359f33w0WjP+c+LjRhMzP+V2ny1va/OuG9tyPmP0k/O/53UPn7/P8z5T97/X2uhPwAAAAAAAAAAAAAAAPA0ZVluXiJ6JSIupet/2ro2EwCYrSvp2yXKJN8+q7o/48dTqw95XcxZf2Zaf1rOV3/U6sNY15XjvVUvIuIf9XUuRcRvx90ZADDPPo2If7fdCVoj/w7L3/dXTU+33Rlgpm5/8OHPr9+8uXbrdts9AQAAAAAAAAA+rzz+50pt/OfTZVnebyy3Y/zXt2Nlv+N/bg9kvT3A6ISBqvt736an2eiN+r3acOMvxaTxv4fbc4/bzz/RtScG5G4YTmkfTWlfmNK+OKV97IUeNTn/l2rjnZ+OiFON4de7MP5rc8z7Lsj5v1x7Plf5f62xXD3/8o+HOf/ejvzP3nn/V2dvf/Dh6zfev/7e2ntrv7h4/vy5i5cuXb58+ey7N26undv6t8UeH6ycfx772nmg3ZLzz5nLv1ty/l9Jtfy7Jef/1VTLv1ty/vn9nvy7JeefP/vIv1ty/q+mWv7dkvP/Rqrl3y05/9dSLf9uyfl/M9V7zH/afz8z53L+r6fa/t8tOf8zqZZ/t+T8z6Z6l/kvHXS/mI2cfz7CZf/vlpx/PrNB/t2S87+Qavl3S87/Yqrl3y05/zdSLf9uyfl/K9Xy75ac/6VUy79bcv7fTrX8uyXnfznV8u+WnP93Ui3/bsn5fzfV8u+WnP+bqZZ/t+T8v5fqPeX/jK/NY/Zy/t9Ptf2/W3L+P0i1/Lsl5/9WquXfLY+//9+MGTNm8kzbf5kAAAAAAAAAAAAAgKZZnE7c9jYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bk7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIddb3Az+zN6+dm4GQv5O/gbVjjHE22fUlvtC6mHBtuJVAUtJLbNe7dhZ8i9cuSRrJjgIlEkZFFW3Di7aAojZvKqwqL2gVUF6gVpUqkfYFfYOoUHkRVQEFpEptFbLVnHmeZ2dmZ2d2veP1zDmfj5T84pkzc86ceWZ2v+t8dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAepveO/3FSpZl1X/yf63Psuur/712bH1+2buu9RECAAAAK/XL/N+v3pQuOLiEG9Vt849v/f7zc3Nzc9mnB/9k+Ktzc+mKsSwbXpNl+XXR5R8/WKnfJngqG60M1P15oMPuBztcP9Th+uEO1490uH5Nh+tHO1y/4AQssLb285j8zrbk/7m+dkqzm7Ph/LotLW71VGXNwED8WU6ukt9mbvhYNpOdyKazyYbta9tW8u1f2FTd14eyuK+Bun1trK6Qnz9xNB5DJZzjLQ37mr/P6KfvycZ+8fMnjv7VuVdubTU7noaG+6sd57bN1eP8fLikdqyVbE06J/E4B+qOc2OL52Sw4Tgr+e2q/918nK8u8TgH5w9zVTU/56PZQP7fL+Xnaaj+x3rpPG0Ml/337VmWXZw/7OZtFuwrG8jWNVwyMP/8jNZWZPU+qkvpjdnQstbppiWs0+qc2tK4TptfE/H53xRuN7TIMdQ/TT99cqTueX9t7krWaVR91Iu9VprXYLdfK72yBuO6eCl/0E+3XINbwuN/Yuvia7Dl2mmxBtPjrluDmzutwYGRwfyY05NQyW8zvwZ3NGw/mO+pks+Xt7ZfgxPnTp6ZmH3s8TtnTh45Pn18+tSuHTsmd+3Zs2/fvoljMyemJ2v/vsKz3fvWZQPpNbA5nLv4GnhH07b1S3XuGyML3n+v9HU42uZ1uL5p226/DoeaH1xldV6QC9d07bXxqepJH700kC3yGsufn+0rfx2mx133Ohyqex22/JrS4nU4tITXYXWbM9uX9j3LUN0/rY5h8a8FK1uD6+vWYPP3I81rsNvfj/TKGhwN6+KH2xf/WrAxHO/T48v9fmRwwRpMDze891QvSd/vj+7LR6t1eVv1iutGsvOz02fvevTIuXNnd2RhrIo31a2V5vW6ru4xZQvW68Cy1+vBmbc+fVuLy9eHczV6Z/Vfo4s+V9Vtdt/V/rnKv7q1Pp8Nl+7Mwuiy1T6frb6aV8/nSJZ97XtP3vedJ7723kXPZzVvfn5i5d+Lp1xa9/47vMj7b8z9r9f2l+7qqcHhodrrdzCdneGG9+PGp2oof++q5Pt+dWJp78fD4Z/Vfj++uc378Yambbv9fjzc/ODi+3Gl0087Vqb5+RwN6+TEZPv34+o2G3Yud00OtX0/vj3MSjj/7wxJIeWiurWz2LpN+xoaGg6PayjuoXGd7mrYfjhks+q+ntt5Zet02+21+xpMj27eaq3TsaZtu71O08++FlunlU4/fbsyzc/naFgXN+9qv06r27y4e+XvnWvjf9a9d450WoPDgyPVYx5OizB/v8/m1sY1eFd2NDudncim8mtH8vVUyfc1fvfS1uBI+Ge13ys3tFmD25q27fYaTF/HFlt7laGFD74Lmp/P0bAunrm7/RqsbvO+vd393nVbuCRtU/e9a/PP1xb7mddtTafpaq2VoXCc39vb/mez1W1O7Ftuzmx/nu4Il1zX4jw1v34Xe01NZatznjaE43xl3+LnqXo81W2+un+J6+lglmUXHrkn/3lv+PuVvz3/g+cb/t6l1d/pXHjknp/dcOwflnP8APS/12tjXe1rXd3fTC3l7/8BAACAvhBz/0CYifwPAAAAhRFzf/y/whP5HwAAAAoj5v6hMJOS5P8N73tl5vULWWrmzwXx+nQa7q1tFzuuk+HPY3Pzqpff8+z0f/39haXteyDLstfu/YOW22+4Nx5XzVg4zsvvb7x8gefvXNK+D99/Ie23vr/+9XD/8fEsdRm0quBOZln2wk1fzvcz9uClfL547+F83nfx6aeq27y6v/bnePuX31Tb/s9D+ffgsSMNt385nIefhDn54dbnI97uW5feuXHvA/P7i7erbL4xf9jPPFS73/h7cr7yVG37eJ4XO/7vfOm5b1W3f/TtrY//wkDr438u3O+zYf7PW2rb1z8H1T/H230hHH/cX7zdXd/8bsvjv/zF2vZnPlDb7nCYcf/bwp+3fOCVmfrz9WjlSMPjyj5Y2y7uf/IHf5RfH+8v3n/z8Y8eutRwPprXx4v/Wrufiabt4+VxP9HfNe2/ej/16zPu/7k/PNxwnjvt//J9L7+ler/N+7+jabszj2zP9z9/f42/sekvvvDllvuLx3Pwb840PJ6Dnwiv47D/Zx4K6zFc/7+Xa/fX/NsVDn+i8f0nbv/19RcaHk/0oV/U9n/53cfzuWZ07brrrr/hxotvq567LHtpTe3+Ou3/+F+ebjj+b9xSOx/x+tjRb97/YuL+z35u/NTp2fMzU+msPnFT/rtzPlI7nni8N4X31uY/Hzp97uHps2OTY5NZNlbcX6F3xb4Z5s9q42L7recWvINuvz88n7f92Qvrtv7Ll+Ll//ap2uWXPlz7uvWOsN1XwuXrw/O3vP0v9MymW/LXd+XFcIRzC39f8Eps3PKf+5a0YXj8zd8XxPV+5s0P5+ehel3+dSO+rld4/D+aqt3Pt8N5nQu/mXnzLfP7q98+/m6ES5+svd5XfP7C21x8Xv86PN8f/Unt/uNxxcf7o/B9zHc3NL7fxfXx7QsDzfef/xaPi+H9JLtYuz5uFc/3pVdvaXl48feQZBdvzf/8x+l+bl3Ww1zM7GOzEydmTp1/dOLc9Oy5idnHHj908vT5U+cO5b/L89BnOt1+/v1pXf7+NDW9Z3eWv1udro2r7Fof/5n7j07tndw6NX3syPlj5+4/M332+NHZ2aPTU7Nbjxw7Nv25TrefmTqwY+f+XXt3jh+fmTqwb//+XfvHZ06drh5G7aA62DP52fFTZw/lN5k9sHv/jrvv3j05fvL01PSBvZOT4+c73T7/2jRevfXvj5+dPnHk3MzJ6fHZmcenD+zYv2fPzo6/DfDkmWOzYxNnz5+aOD87fXai9ljGzuUXV7/2dbo9xTT777XvZ5tVar+IL/v4HXvS72etevbJRe+qtknTLxB9Jfwumn96w5l9S/lzzP3DYSYlyf8AAABQBjH3j4SZyP8AAABQGDH3rwkzkf8BAACgMGLuHw0zKUn+L1z/f8OFJe1f/1//v/586f+XrP//yV7r/9feL/T/u2Ol/Xv9/0D/X/9f/1//X/+fLui1/n/M/WuzrJT5HwAAAMog5v51YSbyPwAAABRGzP3XhZnI/wAAAFAYMfdfH2ZSkvyv/3+1+/+D+v/6//r/cV3q/+v/rwL9//b0/zvQ/5/IytX/v9jN49f/1/9noV7r/8fcf0OYSUnyPwAAAJRBzP03hpnI/wAAAFAYMfffFGYi/wMAAEBhxNy/PsykJPlf/9/n/+v/6//r/7fev/5/f9L/b0//vwP9f5//r/+v/09X9Vr/P+b+N4SZlCT/AwAAQBnE3P/GMBP5HwAAAHrP0JXdLOb+N4WZLMj/V7gDAAAA4JqLuf/mrKkIXpK//9f/1//X/9f/1/9vvf+l9/8HM/3/3qH/357+fwf6//r/+v/6/3RVr/X/89yfjWZvDjMpSf4HAACAMoi5/5YwE/kfAAAACiPm/v8XZiL/AwAAQGHE3L8hzKQk+V//X/9f/1//X/+/9f59/n9/0v9vT/+/A/1//X/9f/1/uqrX+v8x998aZlKS/A8AAABlEHP/bWEm8j8AAAAURsz9/z/MRP4HAACAwoi5f2OYSUnyv/5/j/f/Y3NU/1//X/9f/1//f0n0/9vT/+9A/1//X/9f/5+u6rX+f8z9bwkzKUn+BwAAgDKIuf+tYSbyPwAAABRGzP1vCzOR/wEAAKAwYu4fCzMpSf7X/+9S/3/LDQsu8/n/+v9pfYSp/6//r/9/9en/t6f/34H+v/6//r/+P13Va/3/mPs3hZmUJP8DAABAGcTcvznMRP4HAACAwoi5//YwE/kfAAAACiPm/i1hJiXJ//r/Pf75//r/+v/6//r/+v/Lov/fnv5/B/r/+v/6//r/dFWv9f9j7n97mElJ8j8AAACUQcz9W8NM5H8AAAAojJj73xFmIv8DAABAYcTcvy3MpCT5X/9f/1//X/9f/7/1/vX/+5P+f3v6/x3o/+v/6//r/9NVvdb/j7n/nWEmJcn/AAAAUAYx928PM5H/AQAAoDBi7r8jzET+BwAAgMKIuX88zKQk+V//X/9f/1//X/+/9f71//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/84wk5LkfwAAACiDmPvvCjOR/wEAAKAwYu6fCDOR/wEAAKAwYu6fDDMpSf7X/9f/1//X/19W//9t8/er/1+j/99b9P/b0//vQP9f//+a9/+H9f8plF7r/8fcvyPMpCT5HwAAAMog5v6dYSbyPwAAABRGzP27wkzkfwAAACiMmPt3h5mUJP/r/+v/6//r//v8/9b71//vT/r/7XW//x8fov6//r/+v8//1/9noV7r/8fcf3eYSUnyPwAAAJRBzP17wkzkfwAAACiMmPv3hpnI/wAAAFAYMffvCzMpSf7X/9f/1//X/9f/b71//f/+pP/fns//70D/X/9f/1//n67qtf5/zP37w0xKkv8BAACgDGLuf1eYifwPAAAAhRFz/6+Emcj/AAAAUBgx9/9qmElJ8r/+v/6//r/+v/5/6/3r//envu3/174M6//r/+v/9/Hx6//r/7NQr/X/Y+4/EGZSkvwPAAAAZRBz/6+Fmcj/AAAAUBgx9787zET+BwAAgMKIuf9gmElJ8r/+v/6//r/+v/5/6/3r//envu3/ByXr/480X6D/r//fz8ev/6//z0K91v+Puf89YSYlyf8AAABQBjH33xNmIv8DAABAYcTc/94wE/kfAAAACiPm/veFmZQk/+v/6//r/+v/6/+33r/+f3/S/2+vx/r/C+j/6//38/Hr/+v/s1Cv9f9j7n9/mElJ8j8AAACUQcz9Hwgzkf8BAACgMGLu/2CYifwPAAAAhRFz/4fCTEqS//X/9f/1//X/9f9b71//vz/p/7en/9+B/n/B+v9jN+j/6/9ztbRKQAtdWf//+tcW3eEK+/8x9/96mElJ8j8AAACUQcz994aZyP8AAABQGDH3fzjMRP4HAACAwoi5/yNhJiXJ/yvq/4/o/0f6/43Hr//fen3o/+v/6/9fffr/7fVZ//+XN4bL9f9r9P97+/h7sv//48X6/3Nrmm+v/8/VcGX9/5a60v+Puf+jYSYlyf8AAABQBjH3fyzMRP4HAACAwoi5/+NhJvI/AAAAFEbM/b8RZlKS/O/z/6vHMd9e1v/X/88v0P/X/9f/71v6/+31Wf/f5/830f/v7ePvyf6/z//nGuu1/n/M/Z8IMylJ/gcAAIAyiLn/vjAT+R8AAAAKI+b+T4aZyP8AAABQGDH3fyrMpCT5X//f5//r/+v/6/+33r/+f3/S/29P/78D/X/9/17r//+H/j/9rdf6/zH33x9mUpL8DwAAAGUQc/8DYSbyPwAAABRGzP2/GWYi/wMAAEBhxNz/6TCTkuR//f9+6f+P6f/r/+v/Nz0e/X/9/1b0/9vT/+9A/1//v9f6/z7/nz7Xa/3/mPsfDDNZev4fXfKWAAAAwDURc/9vhZmU5O//AQAAoAxi7v/tMBP5HwAAAAoj5v7fCTMpSf7X/++X/r/P/8/0//X/mx6P/r/+fyur1/+P7zz6//r/+v+R/r/+v/4/zXqt/x9z/++GmZQk/wMAAEAZxNz/UJiJ/A8AAAB9odX/k90s5v5DYSbyPwAAABRGzP2Hw0xKkv/1//X/9f97tP//p5v/+Yff/9jhHfr/+v/6/8uyqp//X33x+/x//X/9/0T/X/9f/59mvdb/j7n/SJhJSfI/AAAAlEHM/b8XZiL/AwAAQGHE3H80zET+BwAAgMKIuX8qzKQk+V//X/9f/79H+v+VSpYV5PP/4/nQ/2/Utf5/fNPV/29pVfv/D8z3xPX/l9v/H2l5qf6//n8/H7/+v/4/C/Va/z/m/ukwk5LkfwAAACiDkPsHjtXm/BXyPwAAABRGzP3Hw0zkfwAAACiMmPsfDjMpSf7X/9f/1//vkf5/8+f/93H/3+f/t+bz/1eH/n97vdP/b03/X/+/n49f/1//n4V6rf8fc/9MmElJ8j8AAACUQcz9nwkzkf8BAACgMGLu/2yYifwPAAAAhRFz/4kwk5Lkf/1//X/9f/1//f/W+9f/70/6/+3p/3eg/6//r/+v/09X9Vr/P+b+k2EmJcn/AAAAUAYx958KM5H/AQAA+D/27qPJ0ru64/gde2TPlF6AF95o71fg0sKu8s5+AV5444Vd5fLCsi0HskYgkgCRs0DkLIIEQiSRk0QSiIzIGUQQWYShqD7nzHTP7ef2DLenn+d/Pp/NsWcYbkM1kn7SfOvPMHL3XxG32P8AAAAwjNz9/xm3NNn/+n/9/7D9/9/o//f7fP2//n9k+v9p+v8N9P/6f/2//p+tmlv/n7v/v+KWJvsfAAAAOsjd/99xi/0PAAAAw8jdf2XcYv8DAADAMHL3/0/c0mT/7+n/j6169v+Z8er/R+r/vf+/7+fr//X/I7u4/f/Vf/gjn/5f/6//D/p//b/+n73m1v/n7v/fuKXJ/gcAAIAOcvf/X9xi/wMAAMAwcvf/f9xi/wMAAMAwcvffL25psv+9/+/9f/2//l//v/7z9f/L5P3/aZ36/yvvuvQ/7r3lL289n8/X/+v/9f/6f7Zrbv1/7v77xy27h9/f7f3rUQAAAGA5cvc/IG5p8s//AQAAoIPc/Q+MW+x/AAAAGEbu/gfFLU32v/5f/6//1//r/9d/vv5/mfT/0zr1/xfy+fp//b/+X//Pds2t/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBi5+6+KW+x/AAAAGEbu/lNxS5P9r/8//P7/t/p//X9c/b/+X/9/+PT/0/T/G+j/9f/6f/0/WzW3/j93/9VxS5P9DwAAAB3k7n9o3GL/AwAAwDBy9z8sbrH/AQAAYBi5+6+JW5rsf/2/9//1//p//f/6z9f/L5P+f9rF7//X/Rlyf/r/xff/l+j/9f/6f852nv3/fRN/2N5K/5+7/+FxS5P9DwAAAB3k7n9E3GL/AwAAwDBy9z8ybrH/AQAAYBi5+x8VtzTZ//p//b/+X/+v/1//+fr/ZdL/T5vN+//Hjq/9Yf3/4vt/7//r//X/7DK39/9z9z86bmmy/wEAAKCD3P3Xxi32PwAAAAwjd/9j4hb7HwAAAIaRu/+xcUuT/a//1//r//X/+v/1nz/V/9961ten/58X/f+02fT/+9D/6/+X/PXr//X/nGtu/X/u/sfFLU32PwAAAHSQu/+6uMX+BwAAgGHk7n983GL/AwAAwDBy9z8hbmmy/9f3/2d+Xv9/MPr/3V+//n/998e2+v/8d9T/T/b/f+v9/570/9P0/xvo//X/+v/9+v+Tm369/p915tb/5+5/YtzSZP8DAABAB7n7nxS32P8AAAAwjNz9T45b7H8AAAAYRu7+p8QtTfa/9//1//r/5fX/3v/fcZTv/68uev9/XP9/QPr/afr/DfT/+n/9v/f/2aq59f+5+58atzTZ/wAAANBB7v6nxS32PwAAACzD2b93YO9vKA25+58et9j/AAAAMIzc/c+IW5rsf/2//l//r//v3f+fWEj/7/3/g9L/T9P/b3C0/f+xQfv/44P1/zfs9+vn0P9fpf9nZnb1/7ed+fGj6v9z9z8zbmmy/wEAAKCD3P3PilvsfwAAABhG7v5nxy32PwAAAAwjd//1cUuT/X/o/f/J/T9b/6//1//r/4++/1/K+//6/4PS/0/T/2/g/X/v/3v/X//PVu3q/89yVP1/7v7nxC1N9j8AAAB0kLv/uXGL/Q8AAADDyN1/Q9xi/wMAAMAwcvc/L25psv+31P9ff+01f+39/z30//r/vd8f+n/9v/7/8On/p+n/N9D/6//1//p/tmpu/X/u/ufHLU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/x/6+/8TOvT/+eP6f/3/Sv+v/9f/XxRt+/9j6/5MdK59+v87/u3UP+z+Ef2//l//r//X/7MFs+j/T5/5q8vc/S+OW5rsfwAAAOggd/9L4hb7HwAAAIaRu/+lcYv9DwAAAMPI3f+yuGWQ/X9iw8/r/73/r//X/+v/13++/n+Z2vb/B+T9/w30//p//b/+n62aRf9/1v+fu//lccsg+x8AAABY1e5/Rdxi/wMAAMAwcve/Mm6x/wEAAGAYuftfFbc02f/6f/2//l//r/9f//n6/2XS/0/T/2+g/9f/6//1/2zV3Pr/3P03xi1N9j8AAAB0kLv/1XGL/Q8AAADDyN3/mrjF/gcAAIBh5O5/bdzSZP/r//X/+n/9v/5//efr/5dJ/z9N/79arW6a+ALW9f+n/1z/r//X/+v/uUBz6/9z978ubmmy/wEAAKCD3P03xS32PwAAAAwjd//NcYv9DwAAAMPI3f/6uKXJ/tf/6//1//p//f/6z9f/L5P+f5r+fwPv/+v/9f/6f7Zqbv1/7v43xC1N9j8AAAB0kLv/lrjF/gcAAIBh5O5/Y9xi/wMAAMAwcvffGrc02f/6f/2//l//r/9f//n6/2U6vP5/pf/X/+v/N9D/6//1/+w1t/4/d/+b4pYm+x8AAAA6yN3/5rjF/gcAAIBh5O5/S9xi/wMAAMAwcve/NW5psv/1//p//b/+X/+//vP1/8vk/f9p+v8N9P/6f/2//p+tmlv/n7v/bXFLk/0PAAAAHeTuvy1usf8BAABgGLn73x632P8AAAAwjNz974hbmux//b/+f3f/v1rp//X/+v8dF6H/P7HS/2+d/n+a/n8D/f+Y/f+frAbq/0/u++v1/8zR3Pr/3P3vjFua7H8AAADoIHf/u+IW+x8AAACGkbv/3XGL/Q8AAADDyN3/nrilyf7X/+v/vf+v/9f/r/987/8vk/5/mv5/A/3/mP2/9//1/xyZufX/ufvfG7c02f8AAADQQe7+98Ut9j8AAAAMI3f/++MW+x8AAACGkbv/Azv3zN8AaLL/9f/6f/2//n9v/39qpf9f6f8XS/8/Tf+/gf5f/6//1/+zVXPr/2P3rz4YtzTZ/wAAANBB7v7b4xb7HwAAAIaRu/+OuMX+BwAAgGHk7v9Q3NJk/+v/9f/6/2X2/ye8/6//1/+vNZf+//LL//5O/b/+X/+v/9f/6/+7m1v/n7v/w3FLk/0PAAAAHeTu/0jcYv8DAADAMHL3fzRusf8BAABgGLn7Pxa3NNn/5/b/l6x2CtUd6/r/aNT0/2fR/+/++vX/678/lvL+v/5/h/5/mebS/3v//8K+fv2//n/JX/959f+XnfvrD7P//90B/reg/+cwzK3/z91/Z9zSZP8DAABAB7n7Px632P8AAAAwjNz9n4hb7H8AAAAYRu7+u+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v//f+/xX/8qf6f7Znbv1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNzSZP/r//X/+n/9v/5//efr/5dJ/z9N/7+B/l//r//3/j9bNbf+P3f/Z+OWJvsfAAAAOsjd/7m4xf4HAACAYeTu/3zcYv8DAADAMHL3fyFuabL/t9//X6b/D/r/ufT//6z/3/P5+n/9/8hm0v/nt9WR9P+XTPyc/n8D/b/+X/+v/2er5tb/5+6/O25psv8BAACgg9z9X4xb7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvvf+/+9+v9jq479v/f/9f/6/05m0v97/1//r//X/+v/9f/MsP/P3f+VuKXJ/gcAAICl+se/+ve7D/qvzd3/1bjF/gcAAIBh5O7/Wtxi/wMAAMAwcvd/PW5psv/1/736/57v/+v/9f/6/070/9P0/xvo//X/+n/9P1s1t/4/d/834pazht/x8/5PCQAAAMxJ7v5vxi1N/vk/AAAAdJC7/1txyzn7//QBf1c7AAAAMDe5+78dtzT55//6/5n3/6vx+/97Vvp//f8O/b/+fxv0/9P+yP7/9DH9v/5/gv5f/6//Z6+59f+5+78TtzTZ/wAAADCoXX9HIXf/d+MW+x8AAACGkbv/e3GL/Q8AAADDyN3//bilyf7X/8+8/7+g9/9P1v+1hP7f+/+H2P9fd2Lt5+v/9f8j0/9P8/7/Bvr/Bff/+Udl/b/+nzmZW/+fu/+euKXJ/gcAAIAOcvf/IG6x/wEAAGAYuft/GLfY/wAAADCM3P0/ilua7H/9/4j9/7Le/9f/e///wvv/v7j01O3/9K8336j/54yL2f/n94L+X/+v/9/h/X/9v/6fvebW/+fu/3Hc0mT/AwAAQAe5+++NW+x/AAAAGEbu/p/ELfY/AAAADCN3/0/jlib7X/+v/59L/5//XR9B/39qef1/NsXd+3/v/+v/z+X9/2n6/w30//p//b/+n62aW/+fu/9ncUuT/Q8AAAAd5O7/edxi/wMAAMAwcvf/Im6x/wEAAGAYuft/Gbc02f/r+/8/q5/X/x+M/n/31+/9//XfH97/1//r/w+f/n+a/n8D/b/+X/+v/2er5tb/5+7/VdzSZP8DAABAB7n774tb7H8AAAAYRu7+X8ct9j8AAAAMI3f/b+KWJvvf+//6f/2//l//v/7z9f/LpP+fpv/fQP+v/9f/6//Zqrn1/7n7fx8AAP//XXxspA==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 8m23.939724343s ago: executing program 1 (id=5745): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x25}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21) 8m22.830393645s ago: executing program 1 (id=5761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) 8m22.303936487s ago: executing program 32 (id=5761): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x13, {0x11, "8f997fa6ce8400a0286048c10b6b"}}]}, 0x30}}, 0x0) 8.930486185s ago: executing program 4 (id=13118): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 7.96050786s ago: executing program 4 (id=13133): syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$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") mknod$loop(&(0x7f0000000780)='./bus\x00', 0x2000, 0x1) rename(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000400)='./file1\x00') 7.413396606s ago: executing program 4 (id=13139): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902241654030310000904140002a024260009050602ff0300000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.914634904s ago: executing program 0 (id=13157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe4b, 0x0, 0x0, 0x0) 5.099154129s ago: executing program 0 (id=13161): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') exit(0xffff) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) 4.937912674s ago: executing program 5 (id=13163): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4428, &(0x7f000000c300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 4.285748625s ago: executing program 4 (id=13167): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x100000000) 3.856027765s ago: executing program 4 (id=13171): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xd) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 3.855874662s ago: executing program 0 (id=13172): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xe7e6, 0x40, 0x0, 0x40}, &(0x7f0000000000), &(0x7f0000000080)) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0}, 0x1) 3.690784123s ago: executing program 4 (id=13175): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x200000000180, 0x100000}}, 0x40) 3.495258775s ago: executing program 0 (id=13177): r0 = syz_io_uring_setup(0x18e7, &(0x7f0000000140)={0x0, 0xdf17, 0x2}, &(0x7f0000000000), &(0x7f0000000040)) syz_io_uring_setup(0x263c, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x169, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0xfffffffe, 0x1, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 2.507456765s ago: executing program 6 (id=13183): r0 = socket(0x10, 0x3, 0x4) setreuid(0x0, 0xee00) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0xe, 0xd}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x1d64765e, 0x8}}, {0x4}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x2000800, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x68}}, 0x8000) 2.380363191s ago: executing program 0 (id=13184): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0x3) 2.186185641s ago: executing program 6 (id=13186): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 2.174333939s ago: executing program 5 (id=13187): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xce, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x98, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x26, 0x2, 0x0, 0x0, 0x8000, {[@fastopen={0x22, 0x12, "b9ed4a72aff8d80de447e7415270690b"}, @sack={0x5, 0x6, [0x70c0489d]}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x9, @broadcast, 0x6}, @mss={0x2, 0x4, 0xe}, @mptcp=@remove_addr={0x1e, 0x5b, 0x6, 0x0, "5e7aa45d3ef0f6c1dd82a9c326cc45549c4db5b760d31c07f2dad6c6d7a7025836019781497bef85debb12ce6ac8a3df37890c72b3087adfdfa7bcb9b7123ae3df889030ab654c5979d5b0020ba917d7d8c8e2790a712991"}]}}}}}}}}, 0x0) 1.804515674s ago: executing program 0 (id=13189): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc}) 1.789899945s ago: executing program 6 (id=13191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) 1.503439005s ago: executing program 3 (id=13193): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x6845a088, 0x1, 0x3, 0x1, 0xffffffff, 0x0, 0x0, 0x60b0aa53c2fe5eb, 0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.41225749s ago: executing program 6 (id=13194): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r0, 0x11c, 0x13, 0x0, 0x0) 1.411584941s ago: executing program 2 (id=13195): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 1.230222024s ago: executing program 3 (id=13196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) 1.213708957s ago: executing program 2 (id=13197): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4f, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60a1260000190600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='`\"\x00'], 0x0) 1.094915088s ago: executing program 6 (id=13198): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 1.09406085s ago: executing program 5 (id=13199): r0 = memfd_create(&(0x7f0000000080)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\xc7\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xcc\xc7\xbb\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xae\x1a=@\xad\xccE\xad\xceRN^[A<\nhV\x90\x88\xbd\x94\xb2\x03\x18\xae\xde/\xc4\xe9tI\x8d+9\xd7\x82/W\xec$\x9f{\xd1d=j\x99\"\xce', 0x0) syz_clone(0x40200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 909.130257ms ago: executing program 3 (id=13200): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = mq_open(&(0x7f00000014c0)='batadv_slave_\x98\xcd', 0x8c2, 0x30, 0x0) mq_getsetattr(r0, 0x0, 0x0) 850.990475ms ago: executing program 2 (id=13201): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x28000000, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 795.734905ms ago: executing program 6 (id=13202): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x408, &(0x7f0000000080)=ANY=[], 0x1, 0x627c, &(0x7f00000063c0)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV28uWH/UarVafQjrtnpvt9tFRGy2t2neMzgdDwCHzGZ80nUX6JD8izaIiCe67gSw0KquO8BM3Lt/a71K+Vbt14O17fZ8Lciu/Dernfs7Jk2nGb/GZF7PrzvRj2cm9GdlTn1YJDn/3nj+l7bbR2m9Wec/L5PyH23f+lScnH9/PP8xRyf/3p75lyrnP3ik/PvyBwAAAACABZb//f9Yx+d/lx5/V/blYed/1+bUBwAAAAAAAAD4rD3u+H87KuP/AQAAwKJqPqs3fvPUg2WTvoutWX6xinhybH2gMOlmmdWu+wEAAAAAAAAAAAAAJRlsX8N7sYoYRsSTq6t1XTc/beP1o3rc7Q+70vcfStb1H3kAANj28VNj9/JXEcsRcTF9199wdXW1rpdXVuvVemUpv58dLS3XK63PtXnaLFsa7eMN8WBUN79subVd27TPy9Pax39f81ijur+Pjs1Hh4EDQERsvxrd84p0xNT109H1uxwOB8f/0eP4Zz+6fp4CAAAAs1fXdV2lr/M+ns7597ruFAAwF/n1f/y8gFqtVqvV6qNXt9V7u90uImKzvU3znsFw/ABwyGzGJ113gQ7Jv2iDiHiu604AC63qugPMxL37t9arlG/Vfj1I47vna0F25b9ZbW2Xt99rOs34NSbzen7diX48M6E/z86pD4sk598bz//SdvsorTfr/OdlUv7Nfh7roD9dy/n3x/Mfc3Ty7+2Zf6ly/oNHyr8vfwAAAAAAWGD53/+PLdT539FBd2eqh53/XZvZowIAAAAAAADAbN27f2s93/eaz/9/YY/13P95NOX8K/kXKeef7v/fufDmpbH1+q35u289yP9f92+t//7GPz+fp/vNfynPVOmZVaVnRJUeqRqk6QF3bII7w/6oeaRh1esP0jU/9fDduBJXYyNO71q3l46HB+1ndrU3PR1utdf97fazu9oHO+15+3O72ofpSqd6JbefjPX4aVyNd7bam7alKfu/PKW9ntKe8+87/ouU8x+0fpr8V1N7NTZt3P2o93/HfXu61+O8eeWLvzo9+92Z6k70d/atrdm/Fzroz9b/kydG8fPrG9dO3rx848a1M5Emu5aejTT5jOX8h+kn5//Si9vt+e9++3i9+9HokfNfFHdiMDH/F1vzzf6+POe+dSHnP0o/Of93Uvvex/9hzn/y8f9KB/0BAAAAAAAAAAAAAACAh6nreusW0Tcj4ny6/6erezMBgPnKr/91kpfPq+4fdPs/7t6PrvqvVs+5rhasP3OtP61n/XhvL9T+qg9U/3fB+rNwdVu9tzfaRUT8tb1N857hl3v9MgBgkX0aEf/ouhN0Rv4Fy9/310xPdN0ZYK6uf/Dhjy9fvbpx7XrXPQEAAAAAAAAADiqP/7nWGv/5RF3Xt8fW2zX+61ux9rjjfw7yzM4AoxMGqu4/+j49TC+ivzXWeboF4vmYNP73cGfuYeN/D6Y83nBK+2hK+9KU9uUp7Xve6NGS83++Nd75iYg4Pjb8egnjv46PeV+CnP8Lredzk/9XxtZr51//9jDn39uV/6kb7//s1PUPPnz1yvuX39t4b+Mn586cOX3u/PkLFy6cevfK1Y3T2//tsMezlfPPY1+7DrQsOf+cufzLkvP/UqrlX5ac/5dTLf+y5Pzz+z35lyXnnz/7yL8sOf+XUy3/suT8v5pq+Zcl5/9KquVflpz/11It/7Lk/F9NtfzLkvM/mWr5lyXnfyrV+8x/Zdb9Yj5y/vkMl+O/LDn/fGWD/MuS8z+bavmXJed/LtXyL0vO/7VUy78sOf+vp1r+Zcn5n0+1/MuS8/9GquVflpz/hVTLvyw5/2+mWv5lyfl/K9XyL0vO//VUy78sOf9vp1r+Zcn5fyfV8i9Lzv+7qZZ/WXL+b6Ra/mV58P3/ZsyYMZNnuv7LBAAAAAAAAAAAAACMm8flxF3vIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb17i5Hrru8AfmZvXjuQGAipk5qwdowxzia7vsQXWhcTrg23khAKvcR2vWtnwbd47ZKkUe0oUCJhVFTRNnloCyhq81JhVXmgVUB5QK0qVSLtA31BVKg8RFVAAakqrSBbzZz//78zs7Mzu97xeuacz0dKftmZM3POnPnP7H7tfHcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqLfpXdOfr2RZVqlU8gvWZ9lrqnPt2PraJW+/tscHAAAArNwvav9+5YZ0wcEl3Khum3+69TvPzc3NzWWfGPzT4S/PzaUrxrJseE2W1a6LLv/gk5X6bYInstHKQN3XAx12P9jh+qEO1w93uH6kw/VrOlw/2uH6BSdggbVZJd3Zltp/rs9PaXZjNly7bkuLWz1RWTNQPXfptlmldpu54WPZTHYim84mG7bPt63Utn9+U3Vf78/ivgbq9rWxukJ+8tjReAyVcI63NOxr/j6jH70zG/vpTx47+tfnXr651ex4GhruLz/ObZurx/nZcEl+rJVsTTon8TgH6o5zY4vnZLDhOCu121X/u/k4X1nicQ7OH+aqan7OR7OB2n+/WDtPQ5WsxXnaGC772W1Zll2cP+zmbRbsKxvI1jVcMjD//IzmK7J6H9Wl9PpsaFnrdNMS1ml1Tm1pXKfNr4n4/G8Ktxta5Bjqn6YfPT5S97z/fO5K1mlUfdSLvVaa12C3Xyu9sgbjunix9qCfbLkGt4TH/9jWxddgy7XTYg2mx123Bjd3WoMDI4O1Y05PQqV2m/k1uKNh+8Haniq1+dLW9mtw4tzJMxOzjzx6x8zJI8enj0+f2rVjx+SuPXv27ds3cWzmxPRk/u8rPNu9b102kF4Dm8O5i6+BtzZtW79U5746suD990pfh6NtXofrm7bt9utwqPnBVVbnBblwTeevjY9VT/ropYFskddY7fnZvvLXYXrcda/DobrXYcvvKS1eh0NLeB1WtzmzfWk/swzV/dPqGBb/XrCyNbi+bg02/zzSvAa7/fNIr6zB0bAuvrd98e8FG8PxPjm+3J9HBheswfRww3tP9ZL08/7ovtpotS5vqV5x3Uh2fnb67J0PHzl37uyOLIxV8Ya6tdK8XtfVPaZswXodWPZ6PThz65O3tLh8fThXo3dU/zW66HNV3Wb3ne2fq9p3t9bns+HSnVkYXbba57PVd/Pq+RzJsqe//fi933zs6Xctej6refOzEyv/WTzl0rr33+FF3n9j7n8131+6qycGh4fy1+9gOjvDDe/HjU/VUO29q1Lb9ysTS3s/Hg7/rPb78Y1t3o83NG3b7ffj4eYHF9+PK53+tGNlmp/P0bBOTky2fz+ubrNh53LX5FDb9+PbwqyE8/+2kBRSLqpbO4ut27SvoaHh8LiG4h4a1+muhu2HQzar7uvZnVe2Trfdlt/XYHp081ZrnY41bdvtdZr+7GuxdVrp9KdvV6b5+RwN6+LGXe3XaXWbF3av/L1zbfzPuvfOkU5rcHhwpHrMw2kR1t7vs7m1cQ3emR3NTmcnsqnatSO19VSp7Wv8rqWtwZHwz2q/V25oswa3NW3b7TWYvo8ttvYqQwsffBc0P5+jYV08dVf7NVjd5t17u/uz67ZwSdqm7mfX5j9fW+zPvG5pOk1Xa60MheP89t72fzZb3ebEvuXmzPbn6fZwyXUtzlPz63ex19RUtjrnaUM4zpf3LX6eqsdT3ebL+5e4ng5mWXbhobtrf94b/n7l785/97mGv3dp9Xc6Fx66+8evPfaPyzl+APrfq/lYl3+vq/ubqaX8/T8AAADQF2LuHwgzkf8BAACgMGLuj/9XeCL/AwAAQGHE3D8UZlKS/L/h3S/PvHohS838uSBen07DPfl2seM6Gb4em5tXvfzuZ6b/+x8uLG3fA1mW/fyeP2i5/YZ74nHlxsJxXn5P4+ULPHfHkvZ9+P4Lab/1/fWvhPuPj2epy6BVBXcyy7Lnb/hibT9jn7xUmy/cc7g277345BPVbV7Zn38db//SG/Lt/yKUfw8eO9Jw+5fCefhhmJMfaH0+4u2+fultG/d+fH5/8XaVzdfXHvZTD+T3G39PzpeeyLeP53mx4//mF579enX7h9/S+vgvDLQ+/mfD/T4T5v++Kd++/jmofh1v97lw/HF/8XZ3fu1bLY//8ufz7c+8N9/ucJhx/9vC11ve+/JM/fl6uHKk4XFl78u3i/uf/O4f166P9xfvv/n4Rw9dajgfzevjhX/L72eiaft4edxP9PdN+6/eT/36jPt/9o8ON5znTvu/fO9Lb6reb/P+b2/a7sxD22v7n7+/xt/Y9Jef+2LL/cXjOfi3Zxoez8GPhtdx2P9TD4T1GK7/v8v5/TX/doXDH218/4nbf2X9hYbHE73/p/n+L7/jeG2uGV277rrXvPb6i2+unrsse3FNfn+d9n/8r043HP9Xb8rPR7w+dvSb97+YuP+znxk/dXr2/MxUOquP3VD73TkfzI8nHu8N4b21+etDp889OH12bHJsMsvGivsr9K7Y18L8cT4utt96bsE76Pb7w/N5y58/v27rv34hXv7vH8svv/SB/PvWW8N2XwqXrw/P3/L2v9BTm26qvb4rL4QjnFv4+4JXYuOW/9q3pA3D42/+uSCu9zNvfLB2HqrX1b5vxNf1Co//+1P5/XwjnNe58JuZN980v7/67ePvRrh0X/56X/H5C29z8Xn9m/B8f+iH+f3H44qP9/vh55hvbWh8v4vr4xsXBprvv/ZbPC6G95PsYn593Cqe70uv3NTy8OLvIcku3lz7+k/S/dy8rIe5mNlHZidOzJw6//DEuenZcxOzjzx66OTp86fOHar9Ls9Dn+p0+/n3p3W196ep6T27s9q71el8XGXX+vjP3H90au/k1qnpY0fOHzt3/5nps8ePzs4enZ6a3Xrk2LHpz3S6/czUgR079+/au3P8+MzUgX379+/aPz5z6nT1MPKD6mDP5KfHT509VLvJ7IHd+3fcddfuyfGTp6emD+ydnBw/3+n2te9N49Vb//742ekTR87NnJwen515dPrAjv179uzs+NsAT545Njs2cfb8qYnzs9NnJ/LHMnaudnH1e1+n21NMs/+R/zzbrJL/Ir7sI7fvSb+fteqZxxe9q3yTpl8g+nL4XTT//Loz+5bydcz9w2EmJcn/AAAAUAYx94+Emcj/AAAAUBgx968JM5H/AQAAoDBi7h8NMylJ/i9c/3/DhSXtX/9f/7/+fOn/l6z/f1+v9f/z9wv9/+5Yaf9e/z/Q/9f/1//X/9f/pwt6rf8fc//aLCtl/gcAAIAyiLl/XZiJ/A8AAACFEXP/dWEm8j8AAAAURsz9rwkzKUn+1//X/9f/1//X/2+9f/3//qT/357+fwf6/xNZufr/F7t5/Pr/+v8s1Gv9/5j7XxtmUpL8DwAAAGUQc//1YSbyPwAAABRGzP03hJnI/wAAAFAYMfevDzMpSf7X/9f/1//X/9f/b71//f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP2vCzMpSf4HAACAMoi5//VhJvI/AAAA9J6hK7tZzP1vCDNZkP+vcAcAAADANRdz/41ZUxG8JH//r/+v/9/7/f816Tr9f/3/rCf7/4OZ/n/vuCb9/6cn0vOn/6//n+n/6//r/+v/k/Ra/7+W+7PR7I1hJiXJ/wAAAFAGMfffFGYi/wMAAEBhxNz/S2Em8j8AAAAURsz9G8JMSpL/9f/7t/8/Em5T/P6/z//X/+/1/r/P/+8lPv+/Pf3/DvT/9f/1//X/6ape6//H3H9zmElJ8j8AAACUQcz9t4SZyP8AAABQGDH3/3KYifwPAAAAhRFz/8Ywk5Lkf/3/Hu//x+ZoqT//X/9f/1//X/9/6fT/29P/70D/X/9f/1//n67qtf5/zP1vCjMpSf4HAACAMoi5/9YwE/kfAAAACiPm/jeHmcj/AAAAUBgx94+FmZQk/+v/93j/P+/Bj7T6/P8r7f9X71r/X/9f/1//v6j0/9vT/+9A/1//vyv9/7kL+v/6/+R6rf8fc/+mMJOS5H8AAAAog5j7N4eZyP8AAABQGDH33xZmIv8DAABAYcTcvyXMpCT5X/+/L/r/WTf7/z7/X/9f/1//v8j0/9vT/+9A/1//3+f/6//TVb3W/4+5/y1hJiXJ/wAAAFAGMfdvDTOR/wEAAKAwYu5/a5iJ/A8AAACFEXP/tjCTkuR//X/9f/1//X/9/9b71//vT/r/7en/d6D/r/9/Ffr/c/r/+v8l1mv9/5j73xZmUpL8DwAAAGUQc//2MBP5HwAAAAoj5v7bw0zkfwAAACiMmPvHw0xKkv/1//X/9f/1//X/W+9f/78/6f+3p//fgf6//r/P/9f/p6t6rf8fc/8dYSYlyf8AAABQBjH33xlmIv8DAABAYcTcPxFmIv8DAABAYcTcPxlmUpL8r/+v/6//r/+/rP7/m+fvV/8/p//fW/T/29P/70D/X///mvf/h/X/KZRe6//H3L8jzKQk+R8AAADKIOb+nWEm8j8AAAAURsz9u8JM5H8AAAAojJj7d4eZlCT/6//r/+v/6//7/P/W+9f/70/6/+11v/8fH6L+v/6//r/P/9f/Z6Fe6//H3H9XmElJ8j8AAACUQcz9e8JM5H8AAAAojJj794aZyP8AAABQGDH37wszKUn+1//X/9f/1//X/2+9f/3//qT/357P/+9A/1//X/9f/58Vuu8P67/qtf5/zP37w0xKkv8BAACgDGLuf3uYifwPAAAAhRFz/6+Emcj/AAAAUBgx9/9qmElJ8r/+f0P3vPpw9f/1//X/9f9r9P/7k/5/e/r/Hej/6//r/+v/01WL9v9D9F7t/n/M/QfCTEqS/wEAAKAMYu7/tTAT+R8AAAAKI+b+d4SZyP8AAABQGDH3HwwzKUn+1//3+f/6//r/+v+t97/a/f+ReL/6/yui/9+e/n8H+v/6//r/+v90Va99/n/M/e8MMylJ/gcAAIAyiLn/7jAT+R8AAAAKI+b+d4WZyP8AAABQGDH3vzvMpCT5X/9f/79f+v/X6f/r/zc9nqL1/33+f3fo/7en/9+B/r/+v/6//j9d1Wv9/5j73xNmUpL8DwAAAGUQc/97w0zkfwAAACiMmPvfF2Yi/wMAAEBhxNz//jCTkuR//X/9/37p/2f6//r/TY9H/1//vxX9//b0/zvQ/9f/1//X/6ereq3/H3P/r4eZlCT/AwAAQBnE3H9PmIn8DwAAAIURc/8HwkzkfwAAACiMmPs/GGZSkvyv/6//r/+v/6//33r/+v/9Sf+/vT7r///i+nC5/n9O/7+3j3+5/f+hpq+vSv//B4v1/+fWNN9e/5+rodf6/zH3fyjMpCT5HwAAAMog5v4Ph5nI/wAAAFAYMfd/JMxE/gcAAIDCiLn/N8JMSpL/9f+rxzHfXtb/L2r/f0D/X/9f/78k9P/b67P+v8//b6L/39vH7/P/9f9ZqNf6/zH3fzTMpCT5HwAAAMog5v57w0zkfwAAACiMmPvvCzOR/wEAAKAwYu7/WJhJSfK//r/P/y9H/9/n/2f6//r/JaH/357+fwf6//r/vdb//0/9f/pbr/X/Y+6/P8ykJPkfAAAAyiDm/o+Hmcj/AAAAUBgx9/9mmIn8DwAAAIURc/8nwkxKkv/1//ul/z/Wp/3/x/X/r2L//9br8+30//X/maf/357+fwf6//r/vdb/9/n/9Lle6//H3P/JMJOl5//RJW8JAAAAXBMx9/9WmElJ/v4fAAAAyiDm/t8OM5H/AQAAoDBi7v+dMJOS5H/9/37p//v8/0z/3+f/Nz0e/X/9/1ZWr/8f33n0//X/9f8j/X/9f/1/mvVa/z/m/t8NMylJ/gcAAIAyiLn/gTAT+R8AAAD6Qqv/J7tZzP2HwkzkfwAAACiMmPsPh5mUJP/r/+v/6//3aP//zzb/y/e+8+HDO/T/9f/1/5dlVT//v/ri9/n/+v/6/4n+v/6//j/Neq3/H3P/kTCTkuR/AAAAKIOY+38vzET+BwAAgMKIuf9omIn8DwAAAIURc/9UmElJ8r/+v/6//n+P9v/7+PP/4/nQ/2/Utf5/fNPV/28p79+nVXR1+/8fn++J6/8vt/8/0vJS/X/9/34+fv1//X8W6rX+f8z902EmJcn/AAAAUAYh9w8cy+f8FfI/AAAAFEbM/cfDTOR/AAAAKIyY+x8MMylJ/tf/1//X/9f/9/n/rfffrv9fGfL5/70q9e9/Vnuh6P836Z3+f2v6//r//Xz8+v/6/yzUa/3/mPtnwkxKkv8BAACgDGLu/1SYifwPAAAAhRFz/6fDTOR/AAAAKIyY+0+EmZQk/+v/6//r/+v/6/+33n/Pfv6//n9bK+3f6/8H+v/l7v//j/6//r/+P93Ra/3/mPtPhpmUJP8DAADA/7N3J02W1Wkdx09iQWUFLty5cGOESyN8Ayx0rS9AI9y4McJwgQMqzhTOIwqKsyI4D6CCIKKCswgqojiD3fQ8D/RE001UB1nP81QOJ8/NzLp57zn//+ez4JGkknsliCx+lfXt04Pc/bfGLfY/AAAANCN3/9fFLfY/AAAANCN3/9fHLZ3sf/3/9fT/1ypl/f/B97+6/89XPMf+/4v1/8e9vv5/Gf3/V9yo/z8L/f80/f8K4/3/TcMw9NX/e/6//l//z5rMrf/P3f8NcUsn+x8AAAB6kLv/G+MW+x8AAACakbv/trjF/gcAAIBm5O7/prilk/1/qP/fGfrs/zPj9fx/z//X/+v/Z9P/e/7/2Wy2/7/zja98+v8T9/8P3bPqZWfa/7f4/P+bxj647X7+em37/Z+w/7943Ofr/2nR3Pr/3P3fHLd0sv8BAACgB7n7vyVusf8BAACgGbn7b49b7H8AAABoRu7+b41bOtn/63v+/6W9jy+0/y/6f/3/3gf0//p//f9ief7/tJ6e/3/bCzff+spjn/f4aV6/o/5/1Lb7+aW/f8//1/9z1Nz6/9z93xa3dLL/AQAAoAe5+789brH/AQAAoBm5+78jbrH/AQAAoBm5+78zbulk/6+v/1/08/+L/l//v/cB/b/+X/+/WPr/aT31/2d5ff2//l//r/9nvebW/+fu/664pZP9DwAAAD3I3f/dcYv9DwAAAM3I3X9H3GL/AwAAwHIdCtly91+OWzrZ//r/8+//X9f/6//j6v/1//r/86f/n6b/X0H/r//X/+v/Wau59f+5+++MWzrZ/wAAANCD3P3fE7fY/wAAANCM3P3fG7fY/wAAANCM3P3fF7d0sv/1/57/r//X/+v/x19f/79M+v9p+v8V9P/X28/fqP/X/+v/2e+U/f9rE1+219L/5+7//rilk/0PAAAAPcjd/wNxi/0PAAAAzcjd/4Nxi/0PAAAAzcjd/0NxSyf7X/+v/9f/6//P3P8f/Vdvj/5/nP5/M/T/02bT/+9cGP2w/n/x/b/n/+v/9f8cMLfn/+fu/+G4pZP9DwAAAD3I3f8jccvE/j/1L+YDAAAAW5W7/0fjFt//BwAAgMXL6ix3/4/FLZ3sf/2//l//r//3/P/x15/q/x/f9/70//Oi/582m/7/GPp//f+S37/+X//PUXPr/3P3/3jc0sn+BwAAgB7k7r8rbrH/AQAAoBm5+38ibrH/AQAAoBm5+38ybulk/4/3/9f+uv7/ZPT/B99/b/1/2lT/n39H/f9k//8lnv/fJ/3/tM33/xf1/wf//vr/c7Tt9994/39p1efr/xkzt/4/d//dcUsn+x8AAAB6kLv/nrjF/gcAAIBm5O7/qbjF/gcAAIBm5O7/6bilk/3v+f/6f/2/5/832v+f6/P/h433/xf0/yek/5/m+f8r6P/1//p/z/9nrebW/+fuvzdu6WT/AwAAQA/ufXXY2/0/Mwz2PwAAACzR/t87cPg3lIbc/T8bt9j/AAAA0Izc/T8Xt3Sy//X/+n/9v/5f/z/++qft/1c9GNnz/zdD/z9N/7+C/v88+vkLjfX/9x33+XPo/+/Q/zMzB/r/J699fFv9f+7+n49bOtn/AAAA0IPc/b8Qt9j/AAAA0Izc/b8Yt9j/AAAA0Izc/b8Ut3Sy/8+9/58IYvX/+n/9v/6/pf5/Ff3/Zuj/p+n/V9D/e/6/5//r/1mra/3/wa+H2+r/c/f/ctzSyf4HAACAHuTu/5W4xf4HAACAZuTuvy9usf8BAACgGbn7fzVu6WT/e/6//l//r//X/4+/vv5/mfT/0/T/K+j/9f/6f/0/a3Xg+f/7bKv/z91/f9zSyf4HAACAHuTufyBusf8BAACgGbn7fy1usf8BAACgGbn7fz1u6WT/6//Pt//Pj+v/9f+D/l//r//fiG77/52xn4mOOqb/f/ZrLn/ZwY/o//X/C+//82u1/l//z3bNov+/cu2/LnP3/0bc0sn+BwAAgB7k7v/NuMX+BwAAgGbk7v+tuMX+BwAAgGbk7v/tuOWU+/9z1vquNkf/7/n/+n/9v/5//PX1/8vUbf9/Qp7/v4L+v5n+3/P/9f/Mwyz6/31/nrv/d+IW3/8HAACAZuTu/924xf4HAACAZuTu/724xf4HAACAZuTu//24pZP9r//X/+v/9f/6//HXP2v/vzuM0/9vhv5/mv5/Bf2//l//r/9nrebW/+fufzBu6WT/AwAAQA9y9z8Ut9j/AAAA0Izc/X8Qt9j/AAAA0Izc/X8Yt3Sy//X/+n/9v/5f/z/++p7/v0z6/2mb6//z68UM+/+HJ97AWP9/5aL+X/+v/9f/c0Zz6/9z9/9R3NLJ/gcAAIAe5O5/OG6x/wEAAKAZufsfiVvsfwAAAGhG7v4/jls62f/6f/2//l//r/8ff339/zLp/6d5/v8Knv+v/9f/6/9Zq7n1/7n7H41bOtn/AAAA0IPc/Y/FLfY/AAAANCN3/5/ELfY/AAAANCN3/+NxSyf7X/+v/9f/6//Ppf+/rP8/TP+/GefX/w/6f/2//n8F/b/+X//PYZvq/1+Lr/er+v/c/X8at3Sy/wEAAKAHufufiFvsfwAAAGhG7v4/i1vsfwAAAGhG7v4/j1s62f/6f/2//l//7/n/46+v/18mz/+f1mP/P/Zz9LH0//p//b/+n7XaVP9/XO9/+M9z9/9F3NLJ/gcAAIAe5O5/Mm6x/wEAAKAZufufilvsfwAAAGhG7v6/jFs62f/6f/3/wf5/GPT/+n/9/1Ub6P93B/3/2un/p/XY/5/m9fX/jfb/NwwN9f+Xjv18/T9zNLf+P3f/X8Utnex/AAAA6EHu/r+OW+x/AAAAaEbu/r+JW+x/AAAAaEbu/r+NW1ra/68fn74tv/+/eOgT9f/DMLx4u+f/6/8nXl//P5v+v/6p6v/XR/8/Tf+/gv6/zf7f8//1/2zN3Pr/3P1/F7e0tP8BAACgc7n7/z5usf8BAACgGbn7/yFusf8BAACgGbn7n45bOtn/y+//D3+i/n+4ruf/6//3PtBE/79z7Ovr//X/Lbve/v7+3fg5Tf+v/9f/j/bzO8f8d8+g/9f/6/8ZMbf+P3f/P8Ytnex/AAAA6EHu/mfiFvsfAAAAmpG7/9m4xf4HAACAZuTu/6e4pZP9r//X/zfX/9/QR/+/6/n/+n/9/6i5PP//llu+9Hn9v/6/xf5/iv5f/6//57C59f+5+/85bulk/wMAAEAPcvf/S9xi/wMAAEAzcvc/F7fY/wAAANCM5/ZCzt3hX4ehy/1/tP+/cbhaqF411v9Ho6b/30f/f/D9e/7/+L8fm33+//Gvv7H+/4v0//vp/zdjLv2/5/+f7f3r//X/S37/p+r/P//o5+v/adHc+v/c/c/HLZ3sfwAAAOhB7v5/i1vsfwAAAGhG7v5/j1vsfwAAAGhG7v4X4pZO9r/n/+v/9f/6f8//H399/f8y6f+n6f9X0P9ffz+fX1X1/8t9/v9n6f9Zn7n1/7n7/yNu2Rt+X/DZZ/x/EwAAAJiR3P3/Gbd08v1/AAAA6EHu/v+KW+x/AAAAaEbu/v+OWzrZ//p//f+S+v/hsv5f/6//1/9P0/9P0/+v0E//vzv2wW3389dr2++/mf7f8/9Zo7n1/7n7/ydu6WT/AwAAQNte3ftj7v7/jVvsfwAAAGhG7v7/i1vsfwAAAGhG7v4X45ZO9r/+X/+/pP7/bM///yr9/6HX1//r/1um/8+f0cfp/1fop/8fte1+funvX/+v/+eoufX/uftfils62f8AAADQg9z9/x+32P8AAADQjNz9b4pb7H8AAABoRu7+N8ctTez/Cyt/hP6/r/5/Z+ix//f8f/2//r8ny+n/Hxj9Sdrz//X/+v/lvn/9v/6fo+bW/+fuf3nnQoP7HwAAANr15V/4tS+d9Me+vPfH3eEtcYv9DwAAAM3I3f/WuMX+BwAAgGbk7n9b3NLJ/tf/99X/9/n8f/2//l//35ON9f9Px1+Y4fP/p8y//7/63yP6f/3/Et+//l//z1Fz6/9z9789btk3/Fb/r+gBAAAAG3XT6X547v53xC2dfP8fAAAAepC7/51xy5H9f+WEv6sdAAAAmKfd4V1xSyff/9f/z7z/H86p/48fp/+/Sv+v/x97ff3/Mi3n+f/jZt7/X9nx/H/9/wT9v/5f/89hc+v/c/c/8ejQ5f4HAACARh34FYV37/1xd3hP3GL/AwAAQDNy9783brH/AQAAoBm5+98Xt3Sy//X/M+//z/T8/0v1f3n+f+f9/127o6+v/9f/t0z/P23+z//X/+v/l/v+9f/6f446Rf+/N0jPu//P3f/+uKWT/Q8AAAA9yN3/gbjF/gcAAIBm5O7/YNxi/wMAAEAzcvd/KG7pZP/r/7fQ/999cRjOtf8/wfP/9f999P/HvH47/f/n3nz5ma/86kce1P9zzSb7//x3Qf+v/9f/X6X/1//r/zlsbs//z93/4bilk/0PAAAAPcjd/0rcYv8DAABAM3L3fyRueWP/P7WtdwUAAACsU+7+j8YtnXz/X//f4vP/l9n/5z/rLfT/l5fX/2dT3Hv/7/n/+v+jPP9/mv5/Bf2//l//r/9nrebW/+fu/1jc0sn+BwAAgB7k7v943JL7f+fUv3QPAAAAzEzu/k/ELb7/DwAAAM3I3f9q3NLJ/tf/6//n0v8nz/+/9nme/3+V/l//fxr6/2n6/xX0//p//b/+n7WaW/+fu/+TcUsn+x8AAAB6kLv/tbjF/gcAAIBm5O7/VNxi/wMAAEAzcvd/Om45sv/b/AUB/b/+X/+v/9f/j7++/n+Z9P/T9P8r6P/1/832/5dWvn/9P+dhbv1/7v7PBAAA//9VZmfp") chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080)) 656.657723ms ago: executing program 5 (id=13203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000002c0)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4002a, &(0x7f0000000000)={[{@noswap}]}) 603.199529ms ago: executing program 2 (id=13204): r0 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0xac24, 0x10000, 0x3, 0x2000000}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 582.848709ms ago: executing program 3 (id=13205): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)=@chain) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000001800)='asymmetric\x00', &(0x7f00000019c0)) 411.418666ms ago: executing program 3 (id=13206): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000200)=0x101, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) 357.08041ms ago: executing program 5 (id=13207): unshare(0x2a020400) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x2, {0x2}}, 0x4) 355.554935ms ago: executing program 2 (id=13208): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) 155.894336ms ago: executing program 3 (id=13209): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x0, 0x4, 0x6], 0x0, 0x4}) 102.668008ms ago: executing program 2 (id=13210): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000140)='./bus\x00', 0x808808, &(0x7f00000000c0)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2f2, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x8010}}, 0xffffff20) 0s ago: executing program 5 (id=13211): r0 = syz_open_dev$vbi(&(0x7f0000000180), 0x3, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000000}) kernel console output (not intermixed with test programs): [T32414] ntfs3(loop2): ino=20, mi_enum_attr [ 1005.505041][ T5826] usb 6-1: Using ep0 maxpacket: 8 [ 1005.525148][ T5826] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.589019][ T5826] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1005.624728][ T5826] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x43, changing to 0x3 [ 1005.662357][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 254, changing to 11 [ 1005.693215][ T5826] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 1005.731372][ T5826] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1005.778951][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.825190][T32431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1005.843221][T32449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1005.864595][ T5826] hub 6-1:1.0: bad descriptor, ignoring hub [ 1005.870629][ T5826] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1005.924823][ T5826] cdc_wdm 6-1:1.0: skipping garbage [ 1005.939087][ T5826] cdc_wdm 6-1:1.0: skipping garbage [ 1005.956019][ T5826] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1006.026027][T32452] loop6: detected capacity change from 0 to 1024 [ 1006.109901][T32455] xt_bpf: check failed: parse error [ 1006.197852][ T6039] usb 6-1: USB disconnect, device number 105 [ 1006.467845][T32468] wlan1: mtu less than device minimum [ 1006.487233][T32468] team0: Device wlan1 failed to change mtu [ 1006.522371][T32473] loop0: detected capacity change from 0 to 256 [ 1006.609293][T32473] FAT-fs (loop0): Directory bread(block 64) failed [ 1006.642267][T32473] FAT-fs (loop0): Directory bread(block 65) failed [ 1006.675868][T32473] FAT-fs (loop0): Directory bread(block 66) failed [ 1006.695282][T32473] FAT-fs (loop0): Directory bread(block 67) failed [ 1006.727800][T32473] FAT-fs (loop0): Directory bread(block 68) failed [ 1006.777061][T32473] FAT-fs (loop0): Directory bread(block 69) failed [ 1006.808538][T32473] FAT-fs (loop0): Directory bread(block 70) failed [ 1006.844375][T32473] FAT-fs (loop0): Directory bread(block 71) failed [ 1006.851100][T32473] FAT-fs (loop0): Directory bread(block 72) failed [ 1006.882193][T32473] FAT-fs (loop0): Directory bread(block 73) failed [ 1006.991462][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1006.991483][ T30] audit: type=1800 audit(2000000104.423:2359): pid=32473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11726" name="file2" dev="loop0" ino=1048743 res=0 errno=0 [ 1007.148917][T32496] openvswitch: netlink: Actions may not be safe on all matching packets [ 1007.171700][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11737'. [ 1007.300835][T32497] openvswitch: netlink: Invalid VLAN frame [ 1007.584749][T32504] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.940048][T32511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.943590][T32514] netlink: 'syz.0.11745': attribute type 10 has an invalid length. [ 1007.989824][T32517] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1008.011307][T32514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11745'. [ 1008.066267][ T30] audit: type=1326 audit(2000000105.557:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32519 comm="syz.3.11749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1008.151580][ T30] audit: type=1326 audit(2000000105.578:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32519 comm="syz.3.11749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1008.236361][ T30] audit: type=1326 audit(2000000105.599:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32519 comm="syz.3.11749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1008.733968][T32547] netlink: 'syz.6.11763': attribute type 10 has an invalid length. [ 1008.753350][T32549] loop0: detected capacity change from 0 to 16 [ 1008.808686][T32549] erofs (device loop0): mounted with root inode @ nid 36. [ 1009.319086][ T30] audit: type=1326 audit(2000000106.859:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32573 comm="syz.2.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1009.326781][T32572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11776'. [ 1009.352229][T32563] bond2: option fail_over_mac: invalid value (15) [ 1009.361926][ T30] audit: type=1326 audit(2000000106.890:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32573 comm="syz.2.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1009.416592][T32563] bond2 (unregistering): Released all slaves [ 1009.451591][ T30] audit: type=1326 audit(2000000106.890:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32573 comm="syz.2.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1009.561525][ T30] audit: type=1326 audit(2000000106.890:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32573 comm="syz.2.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1009.652528][ T30] audit: type=1326 audit(2000000106.890:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32573 comm="syz.2.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1009.759021][ T30] audit: type=1326 audit(2000000106.890:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32573 comm="syz.2.11774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1009.984221][T32597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11787'. [ 1010.056498][T32602] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11789'. [ 1010.231076][T32612] xt_cgroup: xt_cgroup: no path or classid specified [ 1010.521361][T32624] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11800'. [ 1010.614046][T32628] loop5: detected capacity change from 0 to 256 [ 1010.665543][T32628] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1010.693009][ T5972] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1010.750701][T32628] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1010.871795][ T5972] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1010.885489][T32638] loop6: detected capacity change from 0 to 256 [ 1010.891715][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.922262][T32638] exfat: Deprecated parameter 'utf8' [ 1010.927695][T32638] exfat: Deprecated parameter 'namecase' [ 1010.933718][ T5972] usb 3-1: Product: syz [ 1010.938152][ T5972] usb 3-1: Manufacturer: syz [ 1010.970089][ T5972] usb 3-1: SerialNumber: syz [ 1010.972321][T32638] exfat: Deprecated parameter 'namecase' [ 1011.009274][ T5972] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1011.029884][ T5972] r8152-cfgselector 3-1: config 0 descriptor?? [ 1011.033841][T32638] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1011.055609][T32642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11810'. [ 1011.239954][T32648] netlink: 'syz.5.11811': attribute type 6 has an invalid length. [ 1011.386609][T32652] loop3: detected capacity change from 0 to 64 [ 1011.395674][T32654] netlink: 'syz.6.11814': attribute type 275 has an invalid length. [ 1011.416452][T32652] Trying to free block not in datazone [ 1011.513005][ T5972] r8152-cfgselector 3-1: USB disconnect, device number 106 [ 1011.643840][T32664] netlink: 'syz.4.11820': attribute type 1 has an invalid length. [ 1011.849820][T32669] loop0: detected capacity change from 0 to 4096 [ 1011.926611][T32674] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1012.503001][T32695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11835'. [ 1012.559090][T32695] ý™: entered promiscuous mode [ 1012.741206][T32703] netlink: 'syz.4.11839': attribute type 16 has an invalid length. [ 1012.788444][T32703] netlink: 'syz.4.11839': attribute type 17 has an invalid length. [ 1012.915598][T32703] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.922916][T32703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1012.982608][T32703] bridge0: left allmulticast mode [ 1013.019077][T32703] bond0: left allmulticast mode [ 1013.040289][T32703] bond_slave_0: left allmulticast mode [ 1013.069352][T32676] loop5: detected capacity change from 0 to 32768 [ 1013.105659][T32676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.11825 (32676) [ 1013.144149][T32703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1013.165341][T32676] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1013.173691][T32715] loop0: detected capacity change from 0 to 64 [ 1013.203669][T32676] BTRFS info (device loop5): using sha256 checksum algorithm [ 1013.344951][T32728] netlink: 'syz.2.11848': attribute type 2 has an invalid length. [ 1013.379098][T32728] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11848'. [ 1013.494866][T32676] BTRFS info (device loop5): enabling ssd optimizations [ 1013.502110][T32676] BTRFS info (device loop5): turning on async discard [ 1013.538805][T32676] BTRFS info (device loop5): enabling free space tree [ 1013.628129][T32740] loop3: detected capacity change from 0 to 8 [ 1013.818530][ T5834] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1014.033259][T32754] xt_TCPMSS: Only works on TCP SYN packets [ 1014.118070][T32758] kAFS: unable to lookup cell 'syz0' [ 1014.297236][T32763] loop3: detected capacity change from 0 to 8 [ 1014.422524][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1014.674126][ T307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11868'. [ 1014.714428][ T307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11868'. [ 1015.283415][ T5961] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1015.489673][ T5961] usb 6-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1015.528874][ T5961] usb 6-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 1015.552196][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.588141][ T5961] usb 6-1: Product: syz [ 1015.603543][ T5961] usb 6-1: Manufacturer: syz [ 1015.627749][ T5961] usb 6-1: SerialNumber: syz [ 1015.856954][ T357] loop2: detected capacity change from 0 to 128 [ 1015.875886][ T5961] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1016.016031][ T361] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1016.068820][ T5961] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1016.132675][ T5961] usb 6-1: USB disconnect, device number 106 [ 1016.272574][ T369] netlink: 'syz.0.11898': attribute type 1 has an invalid length. [ 1016.311942][ T369] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11898'. [ 1016.330093][ T373] ip6gre1: entered promiscuous mode [ 1016.338596][ T6921] udevd[6921]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1016.822292][ T396] loop6: detected capacity change from 0 to 256 [ 1016.955224][ T399] loop2: detected capacity change from 0 to 1024 [ 1017.240107][ T414] loop4: detected capacity change from 0 to 164 [ 1017.265940][ T416] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1017.293518][ T416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1017.339125][ T416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11922'. [ 1017.349271][ T414] ISOFS: unable to read i-node block [ 1017.357910][ T419] loop5: detected capacity change from 0 to 1024 [ 1017.371823][ T414] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1017.480886][ T414] ISOFS: unable to read i-node block [ 1017.710425][ T1014] hfsplus: b-tree write err: -5, ino 25 [ 1017.738213][ T1014] hfsplus: b-tree write err: -5, ino 4 [ 1017.759565][ T1014] hfsplus: b-tree write err: -5, ino 2 [ 1017.949434][ T438] loop6: detected capacity change from 0 to 512 [ 1018.018041][ T438] EXT4-fs: Ignoring removed bh option [ 1018.085968][ T438] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1018.182125][ T438] EXT4-fs (loop6): 1 truncate cleaned up [ 1018.229436][ T438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.308793][ T451] netlink: 'syz.0.11937': attribute type 2 has an invalid length. [ 1018.351253][ T438] tmpfs: Unknown parameter 'max_dir_size_kb' [ 1018.580123][T19085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.633171][ T466] netlink: 228 bytes leftover after parsing attributes in process `syz.5.11945'. [ 1018.819350][ T475] netlink: 'syz.6.11947': attribute type 1 has an invalid length. [ 1019.427890][ T505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11965'. [ 1019.675432][ T512] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1020.082174][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1020.082196][ T30] audit: type=1326 audit(2000000118.165:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.173811][ T30] audit: type=1326 audit(2000000118.165:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.317032][ T30] audit: type=1326 audit(2000000118.165:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.417652][ T30] audit: type=1326 audit(2000000118.207:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.471631][ T30] audit: type=1326 audit(2000000118.207:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.614438][ T30] audit: type=1326 audit(2000000118.207:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.642098][ T547] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1020.715592][ T30] audit: type=1326 audit(2000000118.207:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.822622][ T30] audit: type=1326 audit(2000000118.207:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=528 comm="syz.0.11976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77e0b9c799 code=0x7ffc0000 [ 1020.850896][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11988'. [ 1020.899103][ T553] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11988'. [ 1021.225035][ T510] syz.2.11966 (510): drop_caches: 2 [ 1021.314715][ T566] loop6: detected capacity change from 0 to 4096 [ 1021.411336][ T566] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 1021.885541][ T586] loop3: detected capacity change from 0 to 4096 [ 1022.115472][ T30] audit: type=1326 audit(2000000120.307:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=600 comm="syz.2.12008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1022.210009][ T30] audit: type=1326 audit(2000000120.307:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=600 comm="syz.2.12008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1022.740329][ T624] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1022.863188][ T632] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1022.916415][ T632] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1023.007306][ T628] loop3: detected capacity change from 0 to 4096 [ 1023.018354][ T636] netlink: 'syz.6.12025': attribute type 30 has an invalid length. [ 1023.059425][ T628] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1023.196073][ T628] ntfs3(loop3): ino=1a, mi_enum_attr [ 1023.218522][ T628] ntfs3(loop3): ino=1a, mi_enum_attr [ 1023.223860][ T628] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1023.260357][ T646] netlink: 'syz.2.12030': attribute type 10 has an invalid length. [ 1023.363920][ T628] ntfs3(loop3): ino=5, "/" indx_read_ra [ 1023.534191][ T644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.538796][ T649] loop0: detected capacity change from 0 to 4096 [ 1023.541728][ T644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.598308][ T649] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1024.018142][ T665] xt_TCPMSS: Only works on TCP SYN packets [ 1024.243319][ T673] loop2: detected capacity change from 0 to 512 [ 1024.281877][ T673] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1024.321529][ T673] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 1024.373800][ T644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1024.412247][ T673] EXT4-fs (loop2): 1 truncate cleaned up [ 1024.443621][ T673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.626866][ T673] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #2: block 4: comm syz.2.12043: lblock 0 mapped to illegal pblock 4 (length 1) [ 1024.658224][ T673] EXT4-fs (loop2): Remounting filesystem read-only [ 1024.719527][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.978322][ T695] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1025.094773][ T1014] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.127196][ T1014] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.179153][ T1014] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.198738][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.307210][ T707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.434690][ T711] loop6: detected capacity change from 0 to 64 [ 1025.496571][ T713] loop0: detected capacity change from 0 to 64 [ 1025.876528][ T727] loop6: detected capacity change from 0 to 256 [ 1025.981254][ T732] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1026.012622][ T727] FAT-fs (loop6): Directory bread(block 64) failed [ 1026.035436][ T727] FAT-fs (loop6): Directory bread(block 65) failed [ 1026.059152][ T727] FAT-fs (loop6): Directory bread(block 66) failed [ 1026.076923][ T727] FAT-fs (loop6): Directory bread(block 67) failed [ 1026.123649][ T727] FAT-fs (loop6): Directory bread(block 68) failed [ 1026.142817][ T5998] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1026.160622][ T727] FAT-fs (loop6): Directory bread(block 69) failed [ 1026.182567][ T727] FAT-fs (loop6): Directory bread(block 70) failed [ 1026.189178][ T727] FAT-fs (loop6): Directory bread(block 71) failed [ 1026.216421][ T727] FAT-fs (loop6): Directory bread(block 72) failed [ 1026.256977][ T727] FAT-fs (loop6): Directory bread(block 73) failed [ 1026.325061][ T5998] usb 1-1: Using ep0 maxpacket: 32 [ 1026.347052][ T5998] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1026.366406][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.402464][ T5998] usb 1-1: Product: syz [ 1026.419045][ T5998] usb 1-1: Manufacturer: syz [ 1026.423681][ T5998] usb 1-1: SerialNumber: syz [ 1026.446256][ T709] loop2: detected capacity change from 0 to 32768 [ 1026.495848][ T5998] usb 1-1: config 0 descriptor?? [ 1026.515231][ T709] (syz.2.12060,709,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1026.567816][ T709] (syz.2.12060,709,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1026.658841][ T741] loop6: detected capacity change from 0 to 512 [ 1026.681760][ T709] JBD2: Ignoring recovery information on journal [ 1026.705384][ T5998] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 1026.772945][ T5998] eb 9a 47 80 9b f8 7a f0 [ 1026.777583][ T5998] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1026.788100][ T741] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.12076: corrupted inode contents [ 1026.838083][ T741] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1026.839960][ T741] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1026.849210][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1026.849248][ C0] EXT4-fs (loop6): initial error at time 2000000125: ext4_do_update_inode:5569: inode 15 [ 1026.849288][ C0] EXT4-fs (loop6): last error at time 2000000125: ext4_do_update_inode:5569: inode 15 [ 1026.858953][ T709] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1026.918147][ T741] loop6: lost filesystem error report for type 5 error -117 [ 1026.924028][ T741] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.12076: corrupted inode contents [ 1026.926544][ T5998] usb 1-1: USB disconnect, device number 97 [ 1026.962593][ T741] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1026.964489][ T741] EXT4-fs error (device loop6): ext4_evict_inode:303: inode #15: comm syz.6.12076: mark_inode_dirty error [ 1027.038712][ T741] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1027.046812][ T741] EXT4-fs (loop6): 1 orphan inode deleted [ 1027.078479][ T741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.134739][ T733] loop3: detected capacity change from 0 to 32768 [ 1027.183300][ T733] jfs_mkdir: dtInsert returned -EIO [ 1027.212591][ T733] ERROR: (device loop3): jfs_mkdir: [ 1027.212591][ T733] [ 1027.253154][ T733] ERROR: (device loop3): remounting filesystem as read-only [ 1027.273065][T19085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.338642][ T756] netlink: 'syz.4.12081': attribute type 8 has an invalid length. [ 1027.487356][ T5822] ocfs2: Unmounting device (7,2) on (node local) [ 1027.577889][ T762] netlink: 'syz.3.12084': attribute type 11 has an invalid length. [ 1028.175368][ T786] netlink: 36 bytes leftover after parsing attributes in process `syz.5.12095'. [ 1028.750497][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12106'. [ 1028.820126][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12106'. [ 1029.113469][ T824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.332303][ T835] netlink: 'syz.5.12118': attribute type 2 has an invalid length. [ 1029.381888][ T835] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12118'. [ 1029.454150][ T838] netlink: 'syz.2.12119': attribute type 13 has an invalid length. [ 1029.487244][ T838] netlink: 'syz.2.12119': attribute type 17 has an invalid length. [ 1029.576870][ T846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12122'. [ 1030.310821][ T838] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.318113][ T838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.325820][ T838] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.332950][ T838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.370868][ T838] bridge0: left promiscuous mode [ 1030.388241][ T838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1030.391179][ T5826] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1030.427004][ T5998] lo speed is unknown, defaulting to 1000 [ 1030.439615][ T5998] syz0: Port: 1 Link ACTIVE [ 1030.564628][ T5826] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 30768, setting to 1024 [ 1030.584107][ T877] loop5: detected capacity change from 0 to 256 [ 1030.606794][ T5826] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1030.633856][ T5826] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.650356][ T877] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1030.673788][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.742959][ T866] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1030.790328][ T887] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12143'. [ 1030.817656][ T5826] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1030.852821][ T887] ..0·: renamed from hsr0 (while UP) [ 1030.866421][ T5826] usb 4-1: invalid MIDI in EP 0 [ 1030.919489][ T889] loop4: detected capacity change from 0 to 1024 [ 1030.931278][ T887] ..0·: entered allmulticast mode [ 1030.946284][ T887] hsr_slave_0: entered allmulticast mode [ 1030.981411][ T887] hsr_slave_1: entered allmulticast mode [ 1031.014756][ T887] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 1031.125104][ T103] hfsplus: b-tree write err: -5, ino 25 [ 1031.163140][ T103] hfsplus: b-tree write err: -5, ino 4 [ 1031.184691][ T103] hfsplus: b-tree write err: -5, ino 2 [ 1031.210822][ T896] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1031.211211][ T103] hfsplus: b-tree write err: -5, ino 22 [ 1031.375181][ T5826] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1031.440844][ T5826] usb 4-1: USB disconnect, device number 127 [ 1031.458519][ T909] bond4: Removing last arp target with arp_interval on [ 1031.465713][ T909] bond4: option min_links: invalid value (18446744071562067973) [ 1031.474554][ T909] bond4: option min_links: allowed values 0 - 2147483647 [ 1031.507683][ T909] bond4 (unregistering): Released all slaves [ 1031.950140][ T933] usb usb9: usbfs: process 933 (syz.3.12159) did not claim interface 0 before use [ 1032.155970][ T951] syz.2.12165: attempt to access beyond end of device [ 1032.155970][ T951] mtdblock0: rw=2048, sector=18446744073709551608, nr_sectors = 8 limit=256 [ 1032.305831][ T5998] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1032.327270][ T956] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.12168'. [ 1032.479258][ T5998] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 1032.515384][ T5998] usb 1-1: config 0 has no interface number 0 [ 1032.559927][ T5998] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1032.583811][ T966] loop2: detected capacity change from 0 to 64 [ 1032.585364][ T5998] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1032.637930][ T5998] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1032.690453][ T5998] usb 1-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 1032.727841][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.772649][ T5998] usb 1-1: Product: syz [ 1032.781544][ T5998] usb 1-1: Manufacturer: syz [ 1032.796587][ T5998] usb 1-1: SerialNumber: syz [ 1032.869092][ T5998] usb 1-1: config 0 descriptor?? [ 1033.065841][ T983] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1033.106896][ T986] SET target dimension over the limit! [ 1033.172180][ T5998] usb 1-1: USB disconnect, device number 98 [ 1033.373452][ T999] netlink: 'syz.6.12188': attribute type 2 has an invalid length. [ 1033.379557][ T995] bond4: entered promiscuous mode [ 1033.405174][ T995] bond4: entered allmulticast mode [ 1033.421249][ T995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1034.430357][ T1052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12209'. [ 1034.467346][ T1052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12209'. [ 1034.552143][ T1052] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1034.837036][ T1069] loop6: detected capacity change from 0 to 2048 [ 1034.918506][ T1069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1034.932071][ T1069] ext4 filesystem being mounted at /1037/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.972340][ T1022] loop0: detected capacity change from 0 to 32768 [ 1035.023379][T19085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.135624][ T1022] ea_get: invalid extended attribute [ 1035.147216][ T1022] ffff888055a730f8: 04 00 00 00 .... [ 1035.377087][ T1089] loop4: detected capacity change from 0 to 512 [ 1035.446270][ T1092] loop3: detected capacity change from 0 to 2048 [ 1035.504018][ T1092] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1035.522148][ T1097] loop5: detected capacity change from 0 to 64 [ 1035.584545][ T1089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.658360][ T1102] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1035.689941][ T1089] ext4 filesystem being mounted at /2094/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1035.746355][ T1104] netlink: 'syz.2.12230': attribute type 1 has an invalid length. [ 1035.791420][ T1089] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #15: comm syz.4.12224: corrupted xattr block 32: bad e_name length [ 1035.878009][ T1089] EXT4-fs (loop4): Remounting filesystem read-only [ 1036.040790][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.317060][ T1123] loop5: detected capacity change from 0 to 8 [ 1036.352894][ T1123] SQUASHFS error: Unable to read inode 0xa7 [ 1036.466940][ T1126] loop4: detected capacity change from 0 to 4096 [ 1036.564586][ T1131] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1036.617379][ T1126] syz.4.12237: attempt to access beyond end of device [ 1036.617379][ T1126] loop4: rw=8388608, sector=26388279066816, nr_sectors = 8 limit=4096 [ 1036.662708][ T1126] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 1036.780698][ T1136] loop6: detected capacity change from 0 to 256 [ 1036.860124][ T1136] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1036.975188][ T1136] exFAT-fs (loop6): error, data valid size is invalid(-281474976706560) [ 1037.049581][ T1136] exFAT-fs (loop6): error, data valid size is invalid(-281474976706560) [ 1037.352085][ T1115] loop3: detected capacity change from 0 to 32768 [ 1037.372552][ T1115] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.12234 (1115) [ 1037.411888][ T1155] netlink: 9 bytes leftover after parsing attributes in process `syz.6.12253'. [ 1037.486029][ T1115] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1037.499049][ T1155] netlink: 9 bytes leftover after parsing attributes in process `syz.6.12253'. [ 1037.544078][ T1115] BTRFS info (device loop3): using sha256 checksum algorithm [ 1037.879063][ T1115] BTRFS info (device loop3): enabling ssd optimizations [ 1037.886053][ T1115] BTRFS info (device loop3): turning on async discard [ 1037.981730][ T1115] BTRFS info (device loop3): enabling free space tree [ 1038.083960][ T1115] BTRFS error: failed to open device for path o_ëv7$ with flags 0x1: -2 [ 1038.214540][ T5827] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1038.866342][ T1159] loop5: detected capacity change from 0 to 32768 [ 1038.983692][ T5998] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1039.160020][ T1228] loop4: detected capacity change from 0 to 512 [ 1039.172217][ T5998] usb 1-1: Using ep0 maxpacket: 16 [ 1039.193461][ T1228] EXT4-fs: Ignoring removed oldalloc option [ 1039.218265][ T5998] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.278813][ T5998] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1039.287855][ T5998] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1039.389451][ T1228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.12279: Parent and EA inode have the same ino 15 [ 1039.423207][ T5998] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.439100][ T1228] loop4: lost filesystem error report for type 5 error -117 [ 1039.449704][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1039.454429][ T1241] loop3: detected capacity change from 0 to 16 [ 1039.457077][ C1] EXT4-fs (loop4): initial error at time 2000000138: ext4_xattr_inode_iget:437 [ 1039.478738][ C1] EXT4-fs (loop4): last error at time 2000000138: ext4_xattr_inode_iget:437 [ 1039.518462][ T5998] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.558408][ T1241] erofs (device loop3): mounted with root inode @ nid 36. [ 1039.564747][ T5998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.625483][ T5998] usb 1-1: Product: syz [ 1039.633750][ T5998] usb 1-1: Manufacturer: syz [ 1039.660489][ T5998] usb 1-1: SerialNumber: syz [ 1039.674286][ T1241] erofs (device loop3): readahead error at folio 2 @ nid 89 [ 1039.721390][T19086] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1039.735411][ T1241] erofs (device loop3): failed to decompress (lz4) unexpected end of stream @ pa 4096 size 4096 => 8192 [ 1039.771036][ T1241] erofs (device loop3): read error -117 @ 1 of nid 89 [ 1039.784360][ T1228] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.12279: Parent and EA inode have the same ino 15 [ 1039.789390][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1039.789409][ T30] audit: type=1800 audit(2000000138.857:2394): pid=1241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12284" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 1039.801292][ T1228] loop4: lost filesystem error report for type 5 error -117 [ 1039.829415][ T1228] EXT4-fs (loop4): 1 orphan inode deleted [ 1039.933437][ T1228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1040.084382][ T1256] netlink: 'syz.3.12291': attribute type 3 has an invalid length. [ 1040.114407][ T5998] usb 1-1: 0:2 : does not exist [ 1040.178326][ T1258] loop5: detected capacity change from 0 to 256 [ 1040.258544][ T1258] FAT-fs (loop5): Directory bread(block 64) failed [ 1040.262803][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.274585][ T5998] usb 1-1: USB disconnect, device number 99 [ 1040.306938][ T1258] FAT-fs (loop5): Directory bread(block 65) failed [ 1040.348768][ T1258] FAT-fs (loop5): Directory bread(block 66) failed [ 1040.353952][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1040.376687][ T1258] FAT-fs (loop5): Directory bread(block 67) failed [ 1040.449455][ T1264] netlink: 'syz.3.12297': attribute type 3 has an invalid length. [ 1040.469859][ T1258] FAT-fs (loop5): Directory bread(block 68) failed [ 1040.476904][ T1258] FAT-fs (loop5): Directory bread(block 69) failed [ 1040.547005][ T1258] FAT-fs (loop5): Directory bread(block 70) failed [ 1040.563113][ T1258] FAT-fs (loop5): Directory bread(block 71) failed [ 1040.580608][ T1258] FAT-fs (loop5): Directory bread(block 72) failed [ 1040.587395][ T1258] FAT-fs (loop5): Directory bread(block 73) failed [ 1041.223985][ T5998] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1041.402730][ T5998] usb 6-1: Using ep0 maxpacket: 32 [ 1041.461514][ T5998] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1041.477511][ T5998] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.507349][ T5998] usb 6-1: config 0 has no interface number 0 [ 1041.546427][ T5998] usb 6-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1041.632656][ T5998] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1041.650648][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.658675][ T5998] usb 6-1: Product: syz [ 1041.707095][ T5998] usb 6-1: Manufacturer: syz [ 1041.717048][ T5998] usb 6-1: SerialNumber: syz [ 1041.747514][ T5998] usb 6-1: config 0 descriptor?? [ 1041.772845][ T5998] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 1041.789920][ T1324] loop0: detected capacity change from 0 to 2048 [ 1041.816166][ T5998] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 1041.821575][ T1327] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1041.899136][ T1324] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 1041.917418][ T1324] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 1041.951793][ T5998] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1041.967152][ T1324] Remounting filesystem read-only [ 1041.994721][ T1324] NILFS (loop0): error -5 truncating bmap (ino=16) [ 1042.101365][ T5818] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1042.113967][ T1340] SET target dimension over the limit! [ 1042.172745][ T5998] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 1042.206169][ T5998] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 1042.223852][ T1333] loop4: detected capacity change from 0 to 8192 [ 1042.258077][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.279408][ T5998] usb 6-1: USB disconnect, device number 107 [ 1042.286242][ T5998] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 1042.306877][ T1333] FAT-fs (loop4): Filesystem has been set read-only [ 1042.323960][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.332830][ T1343] netlink: 45 bytes leftover after parsing attributes in process `syz.0.12332'. [ 1042.346440][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.382811][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.425319][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.452852][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.495125][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.584100][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.626825][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.649673][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.666440][ T1355] loop2: detected capacity change from 0 to 64 [ 1042.678087][ T1333] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 1042.719178][ T30] audit: type=1800 audit(2000000141.922:2395): pid=1333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12327" name="file2" dev="loop4" ino=1048762 res=0 errno=0 [ 1042.797433][ T1355] syz.2.12338: attempt to access beyond end of device [ 1042.797433][ T1355] loop2: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1042.873400][ T1355] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 1042.913232][ T1355] syz.2.12338: attempt to access beyond end of device [ 1042.913232][ T1355] loop2: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1042.948599][ T1355] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 1043.091305][ T1365] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12344'. [ 1043.485644][ T1383] cgroup: name respecified [ 1043.826695][ T30] audit: type=1326 audit(2000000143.098:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1394 comm="syz.5.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1043.897185][ T30] audit: type=1326 audit(2000000143.098:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1394 comm="syz.5.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1043.924366][ T1400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12360'. [ 1043.993971][ T30] audit: type=1326 audit(2000000143.098:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1394 comm="syz.5.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1044.069405][ T30] audit: type=1326 audit(2000000143.098:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1394 comm="syz.5.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1044.141543][ T30] audit: type=1326 audit(2000000143.098:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1394 comm="syz.5.12359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1044.374387][ T1367] loop0: detected capacity change from 0 to 32768 [ 1044.444907][ T1367] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1044.527972][ T1367] XFS (loop0): Ending clean mount [ 1044.538992][ T1367] XFS (loop0): Quotacheck needed: Please wait. [ 1044.716114][ T1367] XFS (loop0): Quotacheck: Done. [ 1044.875329][ T1436] loop2: detected capacity change from 0 to 2048 [ 1044.900599][ T5818] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1045.007310][ T1441] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1045.142961][ T1440] loop6: detected capacity change from 0 to 4096 [ 1045.194778][ T1440] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1045.362020][ T1440] ntfs3(loop6): ino=1a, mi_enum_attr [ 1045.385163][ T1440] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1045.387372][ T30] audit: type=1326 audit(2000000144.735:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1448 comm="syz.2.12380" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x0 [ 1045.518273][ T1440] ntfs3(loop6): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 1045.533797][ T1408] loop5: detected capacity change from 0 to 32768 [ 1045.589080][ T1408] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1045.656882][ T1408] XFS (loop5): Ending clean mount [ 1045.707598][ T103] ntfs3(loop6): ino=1e, ntfs3_write_inode failed, -22. [ 1045.851887][ T5834] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1046.073520][ T1467] genirq: Flags mismatch irq 2. 00200000 (pcl816) vs. 00200000 (comedi_parport) [ 1046.161240][ T1470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.421996][ T1443] loop3: detected capacity change from 0 to 32768 [ 1046.538266][ T1443] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1046.888230][ T1443] XFS (loop3): Ending clean mount [ 1046.937598][ T1506] netlink: 96 bytes leftover after parsing attributes in process `syz.6.12400'. [ 1047.138185][ T5827] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1047.394841][ T1524] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.12407'. [ 1047.899487][ T790] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1048.062422][ T5961] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1048.089722][ T790] usb 1-1: Using ep0 maxpacket: 8 [ 1048.098802][ T790] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.134269][ T790] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1048.164054][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.183010][ T790] usb 1-1: Product: syz [ 1048.192956][ T790] usb 1-1: Manufacturer: syz [ 1048.202180][ T790] usb 1-1: SerialNumber: syz [ 1048.230993][ T1553] netlink: 'syz.4.12424': attribute type 7 has an invalid length. [ 1048.242676][ T1551] netlink: 'syz.3.12422': attribute type 3 has an invalid length. [ 1048.259176][ T790] usb 1-1: config 0 descriptor?? [ 1048.271918][ T5961] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1048.284041][ T790] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1048.290563][ T5961] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.301106][ T1553] netlink: 'syz.4.12424': attribute type 5 has an invalid length. [ 1048.309258][ T1551] netlink: 'syz.3.12422': attribute type 3 has an invalid length. [ 1048.318732][ T790] usb 1-1: selecting invalid altsetting 1 [ 1048.324577][ T5961] usb 3-1: config 0 has no interface number 0 [ 1048.328047][ T1553] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12424'. [ 1048.332642][ T1551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12422'. [ 1048.358260][ T5961] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1048.368178][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.380127][ T5961] usb 3-1: Product: syz [ 1048.384364][ T5961] usb 3-1: Manufacturer: syz [ 1048.391613][ T5961] usb 3-1: SerialNumber: syz [ 1048.417628][ T5961] usb 3-1: config 0 descriptor?? [ 1048.478098][ T790] gspca_stk014: init reg: 0x00 [ 1048.484882][ T790] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 1048.556867][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1048.663865][ T790] usb 3-1: USB disconnect, device number 107 [ 1048.690665][ T5961] usb 1-1: USB disconnect, device number 100 [ 1048.765654][ T1541] loop6: detected capacity change from 0 to 32768 [ 1048.804326][T29643] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1048.956712][T29643] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1048.985446][T29643] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1049.014947][T29643] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1049.032995][T29643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1049.041052][T29643] usb 4-1: SerialNumber: syz [ 1049.081805][T29643] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1049.112671][T29643] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1049.155355][T29643] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1049.203830][T29643] scsi host1: usb-storage 4-1:1.0 [ 1049.295774][ T1580] loop0: detected capacity change from 0 to 8 [ 1049.326065][ T1560] loop4: detected capacity change from 0 to 32768 [ 1049.367162][ T1580] SQUASHFS error: Failed to read block 0x34e: -5 [ 1049.409689][ T1580] SQUASHFS error: Unable to read metadata cache entry [34c] [ 1049.437902][ T1560] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1049.589877][ T1593] netlink: 'syz.5.12438': attribute type 1 has an invalid length. [ 1049.598022][ T1593] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12438'. [ 1049.611426][ T30] audit: type=1800 audit(2000000149.166:2402): pid=1580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.12434" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1049.647753][ T1560] XFS (loop4): Ending clean mount [ 1049.703781][ T1560] XFS (loop4): Quotacheck needed: Please wait. [ 1049.811852][ T1560] XFS (loop4): Quotacheck: Done. [ 1049.978490][ T5833] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1050.463645][ T5961] usb 4-1: USB disconnect, device number 2 [ 1050.709309][ T1612] loop0: detected capacity change from 0 to 4096 [ 1050.798737][ T1612] ntfs3(loop0): ino=19, mi_enum_attr [ 1050.821903][ T1612] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1051.044188][ T1630] netlink: 228 bytes leftover after parsing attributes in process `syz.6.12456'. [ 1051.084145][ T1633] macsec0: entered promiscuous mode [ 1051.089853][ T1633] macsec0: entered allmulticast mode [ 1051.120250][ T1634] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1051.142518][ T1633] veth1_macvtap: entered allmulticast mode [ 1051.373280][ T1642] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1051.428751][ T1642] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1051.456373][ T1642] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1052.105388][ T1678] sctp: [Deprecated]: syz.5.12479 (pid 1678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1052.105388][ T1678] Use struct sctp_sack_info instead [ 1052.285855][ T1679] bond6: option primary_reselect: invalid value (252) [ 1052.358314][ T1679] bond6 (unregistering): Released all slaves [ 1053.163302][ T1729] loop3: detected capacity change from 0 to 64 [ 1053.224616][ T1734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12507'. [ 1053.435375][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12510'. [ 1053.744489][ T1756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12518'. [ 1054.104078][ T1769] bridge_slave_0: left promiscuous mode [ 1054.202086][ T1769] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1054.242100][ T1769] gre1: left promiscuous mode [ 1054.623898][ T1747] loop4: detected capacity change from 0 to 32768 [ 1055.055578][ T1800] loop6: detected capacity change from 0 to 1764 [ 1055.145465][ T1800] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1055.238837][ T1809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12544'. [ 1055.711394][ T1830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12554'. [ 1055.816692][ T1830] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12554'. [ 1055.852124][ T1835] loop2: detected capacity change from 0 to 256 [ 1056.301512][ T1855] loop3: detected capacity change from 0 to 512 [ 1056.306284][ T1849] loop0: detected capacity change from 0 to 4096 [ 1056.321100][ T1855] EXT4-fs: Ignoring removed nobh option [ 1056.357990][ T1849] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1056.410162][ T1855] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 1: comm syz.3.12568: invalid block [ 1056.505269][ T1855] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1056.510569][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1056.511177][ T1849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.519795][ C0] EXT4-fs (loop3): initial error at time 2000000156: __ext4_iget:5378: inode 11: block 1 [ 1056.519849][ C0] EXT4-fs (loop3): last error at time 2000000156: __ext4_iget:5378: inode 11: block 1 [ 1056.604800][ T1855] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.12568: couldn't read orphan inode 11 (err -117) [ 1056.666408][ T1849] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1056.672978][ T1855] loop3: lost filesystem error report for type 5 error -117 [ 1056.690092][ T1855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.808578][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.838685][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.970576][ T1873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1056.977229][ T1873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1057.051549][ T1873] vhci_hcd vhci_hcd.0: Device attached [ 1057.054215][ T1878] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 1057.063705][ T1878] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1057.091964][ T5998] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1057.096002][ T1882] loop3: detected capacity change from 0 to 256 [ 1057.126748][ T1852] loop2: detected capacity change from 0 to 32768 [ 1057.142000][ T1852] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12565 (1852) [ 1057.161278][ T1878] vhci_hcd vhci_hcd.0: Device attached [ 1057.192989][ T1882] FAT-fs (loop3): Directory bread(block 64) failed [ 1057.203109][ T1852] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1057.219890][ T1879] vhci_hcd: connection closed [ 1057.220591][ T1874] vhci_hcd: connection closed [ 1057.235397][T23043] vhci_hcd vhci_hcd.4: stop threads [ 1057.238252][ T1882] FAT-fs (loop3): Directory bread(block 65) failed [ 1057.241061][T23043] vhci_hcd vhci_hcd.4: release socket [ 1057.249548][ T1852] BTRFS info (device loop2): using sha256 checksum algorithm [ 1057.268647][ T5998] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1057.271875][ T1882] FAT-fs (loop3): Directory bread(block 66) failed [ 1057.291354][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.299649][ T5826] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1057.307379][T23043] vhci_hcd vhci_hcd.4: disconnect device [ 1057.331533][ T1875] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1057.344700][ T5998] usb 7-1: Product: syz [ 1057.353171][ T1882] FAT-fs (loop3): Directory bread(block 67) failed [ 1057.372442][T23043] vhci_hcd vhci_hcd.4: stop threads [ 1057.380533][ T5998] usb 7-1: Manufacturer: syz [ 1057.384190][ T1882] FAT-fs (loop3): Directory bread(block 68) failed [ 1057.385137][ T5998] usb 7-1: SerialNumber: syz [ 1057.401837][T23043] vhci_hcd vhci_hcd.4: release socket [ 1057.420434][ T1882] FAT-fs (loop3): Directory bread(block 69) failed [ 1057.427577][ T1882] FAT-fs (loop3): Directory bread(block 70) failed [ 1057.434522][ T1882] FAT-fs (loop3): Directory bread(block 71) failed [ 1057.439920][T23043] vhci_hcd vhci_hcd.4: disconnect device [ 1057.441242][ T1882] FAT-fs (loop3): Directory bread(block 72) failed [ 1057.454300][ T1882] FAT-fs (loop3): Directory bread(block 73) failed [ 1057.489948][ T30] audit: type=1800 audit(2000000157.428:2403): pid=1882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12575" name="cpu.stat" dev="loop3" ino=1048763 res=0 errno=0 [ 1057.533209][ T5998] usb 7-1: config 0 descriptor?? [ 1057.566136][ T5998] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1057.640474][ T1852] BTRFS info (device loop2): enabling ssd optimizations [ 1057.672665][ T1852] BTRFS info (device loop2): turning on async discard [ 1057.679619][ T1852] BTRFS info (device loop2): enabling free space tree [ 1057.998669][ T5961] usb 7-1: USB disconnect, device number 18 [ 1058.063784][ T5822] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1058.131271][ T1921] loop5: detected capacity change from 0 to 256 [ 1058.273686][ T1921] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1058.387048][ T1927] netlink: 'syz.2.12588': attribute type 10 has an invalid length. [ 1058.714344][ T1938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1058.721651][ T1938] IPv6: NLM_F_CREATE should be set when creating new route [ 1058.728901][ T1938] IPv6: NLM_F_CREATE should be set when creating new route [ 1058.917166][ T1946] loop2: detected capacity change from 0 to 8 [ 1059.027613][ T1946] SQUASHFS error: Unable to read inode 0xe3 [ 1059.219009][ T1955] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1059.436636][ T1962] loop4: detected capacity change from 0 to 2048 [ 1059.439493][ T1967] loop3: detected capacity change from 0 to 128 [ 1059.461215][ T1966] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1059.473920][ T1968] xt_TCPMSS: Only works on TCP SYN packets [ 1059.505323][ T1962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1059.537437][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12609'. [ 1059.550013][ T1962] ext4 filesystem being mounted at /2153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.608054][ T30] audit: type=1326 audit(2000000159.653:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.5.12614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1059.743699][ T30] audit: type=1326 audit(2000000159.664:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.5.12614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1059.841079][ T30] audit: type=1326 audit(2000000159.727:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.5.12614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1059.864777][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.971256][ T1985] loop3: detected capacity change from 0 to 8 [ 1059.972785][ T30] audit: type=1326 audit(2000000159.727:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.5.12614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1060.004619][ T30] audit: type=1326 audit(2000000159.727:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1976 comm="syz.5.12614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a79c799 code=0x7ffc0000 [ 1060.032655][ T1985] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1060.048534][ T6921] udevd[6921]: incorrect cramfs checksum on /dev/loop3 [ 1060.067588][ T1987] loop2: detected capacity change from 0 to 16 [ 1060.074792][ T1985] cramfs: Error -5 while decompressing! [ 1060.080560][ T1985] cramfs: ffffffff9a3acca8(26)->ffff88809f49b000(4096) [ 1060.088945][ T1985] cramfs: Error -3 while decompressing! [ 1060.097181][ T1987] erofs (device loop2): mounted with root inode @ nid 36. [ 1060.134366][ T6921] udevd[6921]: incorrect cramfs checksum on /dev/loop3 [ 1060.147367][ T1985] cramfs: ffffffff9a3accc2(26)->ffff88803f80e000(4096) [ 1060.155121][ T1987] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 1060.167298][ T1985] cramfs: Error -3 while decompressing! [ 1060.182107][ T1987] erofs (device loop2): readahead error at folio 1 @ nid 89 [ 1060.195224][ T6921] udevd[6921]: incorrect cramfs checksum on /dev/loop3 [ 1060.209998][ T1985] cramfs: ffffffff9a3accdc(16)->ffff88804d4fb000(4096) [ 1060.229169][ T1987] erofs (device loop2): readahead error at folio 0 @ nid 89 [ 1060.254240][ T1985] cramfs: Error -5 while decompressing! [ 1060.265889][ T1987] erofs (device loop2): read error -117 @ 0 of nid 89 [ 1060.299736][ T1985] cramfs: ffffffff9a3acca8(26)->ffff88809f49b000(4096) [ 1060.307123][ T30] audit: type=1800 audit(2000000160.398:2409): pid=1987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12620" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1060.418111][ T1995] TCP: TCP_TX_DELAY enabled [ 1060.866526][ T2014] netlink: 'syz.3.12633': attribute type 2 has an invalid length. [ 1060.911609][ T2014] netlink: 228 bytes leftover after parsing attributes in process `syz.3.12633'. [ 1061.822863][ T2064] ip6gre1: entered allmulticast mode [ 1061.884395][ T2079] loop6: detected capacity change from 0 to 1764 [ 1061.891087][ T2075] 0ªX¹¦À: left allmulticast mode [ 1061.896959][ T2075] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1062.057417][ T2078] bond6: entered promiscuous mode [ 1062.063055][ T2078] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1062.270698][ T2130] loop3: detected capacity change from 0 to 8 [ 1062.273748][ T5826] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1062.842574][ T2173] loop2: detected capacity change from 0 to 764 [ 1062.895155][ T2173] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1062.936914][ T2173] Symlink component flag not implemented [ 1062.942902][ T5961] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1062.976067][ T2173] Symlink component flag not implemented (7) [ 1063.114327][ T5998] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1063.172610][ T5961] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1063.199155][ T5961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.242522][ T5961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1063.268393][ T5961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1063.279551][ T5998] usb 4-1: Using ep0 maxpacket: 8 [ 1063.292036][ T5998] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1063.314051][ T5961] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.319549][ T5998] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1063.333284][T23431] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1063.343095][ T5961] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1063.359338][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1063.378457][ T5961] usb 5-1: Product: syz [ 1063.387478][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.393794][ T5961] usb 5-1: Manufacturer: syz [ 1063.416719][ T5998] usb 4-1: Product: syz [ 1063.435609][ T5998] usb 4-1: Manufacturer: syz [ 1063.440277][ T5998] usb 4-1: SerialNumber: syz [ 1063.451274][ T5961] cdc_wdm 5-1:1.0: skipping garbage [ 1063.466015][ T5961] cdc_wdm 5-1:1.0: skipping garbage [ 1063.466399][ T2217] netlink: 'syz.2.12681': attribute type 1 has an invalid length. [ 1063.486490][ T2216] loop6: detected capacity change from 0 to 64 [ 1063.499161][ T5961] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1063.513643][ T5998] usb 4-1: config 0 descriptor?? [ 1063.515812][ T5961] cdc_wdm 5-1:1.0: Unknown control protocol [ 1063.521124][T23431] usb 1-1: Using ep0 maxpacket: 32 [ 1063.556355][ T5998] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1063.578781][T23431] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1063.603008][T23431] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.647722][T23431] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1063.678193][T23431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.687109][ T2166] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1063.709465][T23431] usb 1-1: Product: syz [ 1063.731094][ T5826] usb 5-1: USB disconnect, device number 101 [ 1063.737308][T23431] usb 1-1: Manufacturer: syz [ 1063.751047][ T5998] gspca_zc3xx: reg_w_i err -71 [ 1063.765905][T23431] usb 1-1: SerialNumber: syz [ 1063.822292][ T2245] netlink: 'syz.6.12684': attribute type 3 has an invalid length. [ 1063.881461][ T2245] netlink: 666 bytes leftover after parsing attributes in process `syz.6.12684'. [ 1063.988628][T23431] usb 1-1: Invalid number of CPorts: 0 [ 1063.994263][T23431] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1064.097705][ T2255] loop5: detected capacity change from 0 to 4096 [ 1064.118396][ T2255] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1064.149483][ T2255] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1064.171068][ T2255] System zones: 0-5 [ 1064.200954][T23431] usb 1-1: USB disconnect, device number 101 [ 1064.220105][ T2255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1064.337257][ T2280] netlink: 'syz.6.12692': attribute type 1 has an invalid length. [ 1064.345421][ T5998] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1064.365049][ T5998] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1064.396017][ T5998] usb 4-1: USB disconnect, device number 3 [ 1064.412561][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.634952][ T2299] netlink: 'syz.2.12697': attribute type 1 has an invalid length. [ 1064.812399][ T2307] 8021q: VLANs not supported on lo [ 1065.096490][ T2326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1065.122438][ T2326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12705'. [ 1065.961262][ T2374] loop2: detected capacity change from 0 to 1024 [ 1066.186966][ T2123] hfsplus: b-tree write err: -5, ino 25 [ 1066.194170][ T2123] hfsplus: b-tree write err: -5, ino 4 [ 1066.213471][ T2123] hfsplus: b-tree write err: -5, ino 2 [ 1066.264114][ T2123] hfsplus: b-tree write err: -5, ino 20 [ 1066.417430][ T2403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12729'. [ 1066.468780][ T2403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12729'. [ 1066.636346][ T5998] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1066.788890][ T2354] loop0: detected capacity change from 0 to 32768 [ 1066.807903][ T2354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12714 (2354) [ 1066.818088][ T5998] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1066.849410][ T5998] usb 7-1: config 66 has an invalid interface number: 168 but max is 0 [ 1066.872397][ T5998] usb 7-1: config 66 has an invalid descriptor of length 30, skipping remainder of the config [ 1066.902215][ T2354] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1066.912007][ T5998] usb 7-1: config 66 has no interface number 0 [ 1066.921420][ T5998] usb 7-1: config 66 interface 168 altsetting 131 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1066.969509][ T2354] BTRFS info (device loop0): using sha256 checksum algorithm [ 1066.999472][ T5998] usb 7-1: config 66 interface 168 has no altsetting 0 [ 1067.017424][ T5998] usb 7-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1067.027993][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.046936][ T5998] usb 7-1: Product: syz [ 1067.051122][ T5998] usb 7-1: Manufacturer: syz [ 1067.064152][ T5998] usb 7-1: SerialNumber: syz [ 1067.241749][ T2354] BTRFS info (device loop0): enabling ssd optimizations [ 1067.269632][ T2509] netlink: 'syz.3.12742': attribute type 23 has an invalid length. [ 1067.312286][ T2354] BTRFS info (device loop0): turning on async discard [ 1067.340893][ T2354] BTRFS info (device loop0): enabling free space tree [ 1067.393182][ T5998] usb 7-1: USB disconnect, device number 19 [ 1067.571910][ T5818] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1067.956187][ T30] audit: type=1326 audit(2000000168.419:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2565 comm="syz.2.12750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1068.001816][ T2572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12751'. [ 1068.081996][ T30] audit: type=1326 audit(2000000168.450:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2565 comm="syz.2.12750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1068.208439][ T30] audit: type=1326 audit(2000000168.450:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2565 comm="syz.2.12750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1068.242612][ T30] audit: type=1326 audit(2000000168.450:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2565 comm="syz.2.12750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920819c799 code=0x7ffc0000 [ 1068.267529][ T2582] netlink: 'syz.5.12753': attribute type 12 has an invalid length. [ 1068.303426][ T2582] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12753'. [ 1068.447381][ T2596] netlink: 'syz.4.12758': attribute type 4 has an invalid length. [ 1068.509721][ T2596] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12758'. [ 1068.656409][ T2596] .`: renamed from bond0 (while UP) [ 1068.759477][ T2610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12761'. [ 1068.827158][ T2610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12761'. [ 1069.084515][ T2627] xt_bpf: check failed: parse error [ 1069.133084][ T2624] loop3: detected capacity change from 0 to 2048 [ 1069.226779][ T2624] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1069.420781][ T2587] loop0: detected capacity change from 0 to 32768 [ 1069.430516][ T2587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12755 (2587) [ 1069.476567][ T2587] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1069.526579][ T2587] BTRFS info (device loop0): using sha256 checksum algorithm [ 1069.883928][ T2587] BTRFS info (device loop0): enabling ssd optimizations [ 1069.934527][ T2606] loop5: detected capacity change from 0 to 32768 [ 1069.950283][ T2606] BTRFS info: device /dev/loop5 (7:5) using temp-fsid 9610e45d-8557-4bc0-a307-d25a1d74fed3 [ 1069.965220][ T2587] BTRFS info (device loop0): turning on async discard [ 1069.983793][ T2587] BTRFS info (device loop0): enabling free space tree [ 1070.002776][ T2620] loop2: detected capacity change from 0 to 32768 [ 1070.007027][ T2606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12759 (2606) [ 1070.107091][ T2620] BTRFS info: device /dev/loop2 (7:2) using temp-fsid e027ed25-a1a8-4103-a8ea-1a04021069ad [ 1070.129433][ T2606] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1070.148575][ T2620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12763 (2620) [ 1070.170201][ T2606] BTRFS info (device loop5): using sha256 checksum algorithm [ 1070.216871][ T2620] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1070.242918][ T2620] BTRFS info (device loop2): using sha256 checksum algorithm [ 1070.247519][ T5818] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1070.737396][ T2606] BTRFS info (device loop5): enabling ssd optimizations [ 1070.770968][ T2711] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1070.791070][ T2606] BTRFS info (device loop5): turning on async discard [ 1070.812615][ T2620] BTRFS info (device loop2): enabling ssd optimizations [ 1070.836307][ T2606] BTRFS info (device loop5): enabling free space tree [ 1070.853622][ T2620] BTRFS info (device loop2): turning on async discard [ 1070.860779][ T2620] BTRFS info (device loop2): enabling free space tree [ 1070.907982][ T2711] bond1 (unregistering): Released all slaves [ 1071.136888][ T5822] BTRFS info (device loop2): last unmount of filesystem e027ed25-a1a8-4103-a8ea-1a04021069ad [ 1071.157618][ T5834] BTRFS info (device loop5): last unmount of filesystem 9610e45d-8557-4bc0-a307-d25a1d74fed3 [ 1071.422687][ T2687] loop4: detected capacity change from 0 to 32768 [ 1071.592265][ T2687] read_mapping_page failed! [ 1071.596987][ T2687] ERROR: (device loop4): txCommit: [ 1071.596987][ T2687] [ 1072.390185][ T2885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12787'. [ 1072.587635][ T2884] loop5: detected capacity change from 0 to 4096 [ 1072.950576][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1073.053082][ T2845] loop0: detected capacity change from 0 to 32768 [ 1073.083011][ T2912] loop2: detected capacity change from 0 to 256 [ 1073.091788][ T2909] gretap0: entered promiscuous mode [ 1073.203087][ T2912] FAT-fs (loop2): Directory bread(block 64) failed [ 1073.221027][ T2845] ea_get: invalid extended attribute [ 1073.251837][ T2923] loop3: detected capacity change from 0 to 512 [ 1073.253805][ T2912] FAT-fs (loop2): Directory bread(block 65) failed [ 1073.347609][ T2912] FAT-fs (loop2): Directory bread(block 66) failed [ 1073.396143][ T2923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.402319][ T2912] FAT-fs (loop2): Directory bread(block 67) failed [ 1073.429975][ T5998] usb 6-1: new full-speed USB device number 108 using dummy_hcd [ 1073.451234][ T2923] ext4 filesystem being mounted at /2088/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1073.472227][ T2912] FAT-fs (loop2): Directory bread(block 68) failed [ 1073.517220][ T2912] FAT-fs (loop2): Directory bread(block 69) failed [ 1073.534241][ T2934] loop4: detected capacity change from 0 to 2048 [ 1073.550454][ T2912] FAT-fs (loop2): Directory bread(block 70) failed [ 1073.604285][ T2934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.615320][ T2912] FAT-fs (loop2): Directory bread(block 71) failed [ 1073.639840][ T5998] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1073.655426][ T2912] FAT-fs (loop2): Directory bread(block 72) failed [ 1073.683302][ T5998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1073.691996][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.719712][ T2912] FAT-fs (loop2): Directory bread(block 73) failed [ 1073.769929][ T5998] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1073.816518][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.835618][ T5998] usb 6-1: Product: syz [ 1073.845543][ T5998] usb 6-1: Manufacturer: syz [ 1073.894122][ T5998] usb 6-1: SerialNumber: syz [ 1073.924494][ T5998] usb 6-1: config 0 descriptor?? [ 1074.166019][ T5998] rc_core: IR keymap rc-streamzap not found [ 1074.184106][ T5998] Registered IR keymap rc-empty [ 1074.211821][ T5998] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1074.270626][ T5998] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input78 [ 1074.302734][ T2972] usb usb1: check_ctrlrecip: process 2972 (syz.2.12808) requesting ep 01 but needs 81 [ 1074.341718][ T2972] usb usb1: usbfs: process 2972 (syz.2.12808) did not claim interface 0 before use [ 1074.424147][ T5998] usb 6-1: USB disconnect, device number 108 [ 1074.903080][ T3008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12816'. [ 1075.021337][ T3016] input: syz1 as /devices/virtual/input/input79 [ 1075.609614][ T30] audit: type=1326 audit(2000000176.450:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1075.721472][ T30] audit: type=1326 audit(2000000176.450:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1075.818631][ T30] audit: type=1326 audit(2000000176.450:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1075.912490][ T30] audit: type=1326 audit(2000000176.450:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.036371][ T30] audit: type=1326 audit(2000000176.450:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.046882][ T3061] loop4: detected capacity change from 0 to 4096 [ 1076.129161][ T3061] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1076.161085][ T3061] ntfs3(loop4): ino=1a, mi_enum_attr [ 1076.162076][ T30] audit: type=1326 audit(2000000176.450:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.179422][ T3061] ntfs3(loop4): ino=1a, mi_enum_attr [ 1076.198851][ T3003] loop0: detected capacity change from 0 to 40427 [ 1076.257742][ T3003] F2FS-fs: heap/no_heap options were deprecated [ 1076.261582][ T3061] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 1076.284250][ T30] audit: type=1326 audit(2000000176.450:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.322911][ T3003] F2FS-fs (loop0): build fault injection rate: 23 [ 1076.333608][ T3003] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 1076.366745][ T3076] netlink: 182 bytes leftover after parsing attributes in process `syz.5.12836'. [ 1076.381139][ T3003] F2FS-fs (loop0): invalid crc value [ 1076.402063][ T30] audit: type=1326 audit(2000000176.450:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.490868][ T3003] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810 [ 1076.504738][ T30] audit: type=1326 audit(2000000176.450:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.630221][ T30] audit: type=1326 audit(2000000176.450:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3049 comm="syz.3.12829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x50000 [ 1076.843302][ T3003] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1076.890624][ T3003] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1077.010028][ T3003] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90 [ 1077.047632][ T3003] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 1077.305228][ T6039] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1077.492372][ T6039] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1077.526956][ T6039] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1077.571573][ T6039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1077.629039][ T6039] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 1077.676682][ T6039] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1077.721267][ T6039] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1077.733592][ T6039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.742787][ T6039] usb 7-1: Product: syz [ 1077.769337][ T6039] usb 7-1: Manufacturer: syz [ 1077.800635][ T6039] usb 7-1: SerialNumber: syz [ 1077.849806][ T6039] usb 7-1: config 0 descriptor?? [ 1077.856036][ T3101] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1077.982649][ T6039] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input80 [ 1078.085718][ T3139] loop2: detected capacity change from 0 to 1024 [ 1078.376078][ T5998] usb 7-1: USB disconnect, device number 20 [ 1078.395529][ T3158] loop5: detected capacity change from 0 to 64 [ 1078.469734][ T3158] syz.5.12854: attempt to access beyond end of device [ 1078.469734][ T3158] loop5: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1078.469810][ T3158] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 1078.817646][ T3190] netlink: 'syz.4.12859': attribute type 4 has an invalid length. [ 1078.858307][ T3190] netlink: 224 bytes leftover after parsing attributes in process `syz.4.12859'. [ 1079.924759][ T790] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1080.115355][ T790] usb 6-1: Using ep0 maxpacket: 32 [ 1080.134991][ T790] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1080.172482][ T790] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1080.200701][ T790] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1080.234658][ T3277] syz_tun: entered promiscuous mode [ 1080.241185][ T790] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1080.250900][ T3277] macvtap1: entered promiscuous mode [ 1080.256484][ T3277] macvtap1: entered allmulticast mode [ 1080.274781][ T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.289933][ T3277] syz_tun: entered allmulticast mode [ 1080.303164][ T790] usb 6-1: Product: syz [ 1080.308867][ T3285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12885'. [ 1080.318994][ T790] usb 6-1: Manufacturer: syz [ 1080.324892][ T790] usb 6-1: SerialNumber: syz [ 1080.348907][ T3277] syz_tun: left allmulticast mode [ 1080.367600][ T3277] syz_tun: left promiscuous mode [ 1080.377262][ T790] usb 6-1: config 0 descriptor?? [ 1080.426630][ T3290] loop0: detected capacity change from 0 to 512 [ 1080.448189][ T5826] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1080.480383][ T3290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.493494][ T3290] ext4 filesystem being mounted at /2226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.559328][ T5818] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.610319][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 1080.630129][ T5826] usb 7-1: config index 0 descriptor too short (expected 6701, got 45) [ 1080.662254][ T5826] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.708986][ T5826] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.753086][ T5826] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.776954][ T790] gs_usb 6-1:0.0: Configuring for 158 interfaces [ 1080.797103][ T5826] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1080.816392][ T5826] usb 7-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 1080.833936][ T3301] loop3: detected capacity change from 0 to 2048 [ 1080.841048][ T5826] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.872284][ T3301] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1080.885656][ T5826] usb 7-1: config 0 descriptor?? [ 1080.923061][ T3261] loop2: detected capacity change from 0 to 32768 [ 1080.977883][ T790] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1080.983727][ T3261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12877 (3261) [ 1081.000122][ T790] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 1081.046457][ T3261] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1081.058362][ T5998] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 1081.069089][ T3261] BTRFS info (device loop2): using sha256 checksum algorithm [ 1081.076022][ T790] usb 6-1: USB disconnect, device number 109 [ 1081.221948][ T5998] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1081.224397][ T3261] BTRFS info (device loop2): enabling ssd optimizations [ 1081.230405][ T5998] usb 1-1: config 0 has no interface number 0 [ 1081.267380][ T5998] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1081.282544][ T3261] BTRFS info (device loop2): turning on async discard [ 1081.289600][ T5998] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.289663][ T5998] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1081.289696][ T5998] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1081.289743][ T5998] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1081.289771][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.297291][ T5998] usb 1-1: config 0 descriptor?? [ 1081.362720][ T3261] BTRFS info (device loop2): enabling free space tree [ 1081.367048][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.391229][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.409345][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.429941][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.437220][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.448770][ T6039] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1081.451725][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.463866][ T5826] logitech 0003:046D:CA03.0001: unknown main item tag 0x0 [ 1081.570557][ T5826] logitech 0003:046D:CA03.0001: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.6-1/input0 [ 1081.578739][ T3261] BTRFS info (device loop2): balance: start -sprofiles=data|system|metadata|metadata-remap|remapped|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xe000,drange=18446744073709551605..32769,limit=4294967295..255,stripes=5..2 [ 1081.619752][ T5826] logitech 0003:046D:CA03.0001: no inputs found [ 1081.640502][ T6039] usb 4-1: Using ep0 maxpacket: 8 [ 1081.650717][ T6039] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1081.684750][ T3261] BTRFS info (device loop2): balance: ended with status: 0 [ 1081.692309][ T6039] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1081.737689][ T6039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1081.753677][ T5826] usb 7-1: USB disconnect, device number 21 [ 1081.791441][ T6039] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1081.835147][ T6039] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1081.892406][ T6039] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1081.936669][ T5822] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1081.945071][ T6039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.972750][ T6039] usb 4-1: Product: syz [ 1081.976729][ T3364] fido_id[3364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1081.987701][ T6039] usb 4-1: Manufacturer: syz [ 1082.001733][ T6039] usb 4-1: SerialNumber: syz [ 1082.051659][ T6039] usb 4-1: config 0 descriptor?? [ 1082.052570][ T5998] uclogic 0003:145F:0212.0002: failed retrieving string descriptor #100: -71 [ 1082.075541][ T6039] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input81 [ 1082.098610][ T5998] uclogic 0003:145F:0212.0002: failed retrieving pen parameters: -71 [ 1082.120915][ T5998] uclogic 0003:145F:0212.0002: pen probing failed: -71 [ 1082.133425][ T5998] uclogic 0003:145F:0212.0002: failed probing parameters: -71 [ 1082.144219][ T790] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1082.201993][ T5998] uclogic 0003:145F:0212.0002: probe with driver uclogic failed with error -71 [ 1082.223085][ T3387] loop5: detected capacity change from 0 to 4096 [ 1082.240953][ T5998] usb 1-1: USB disconnect, device number 102 [ 1082.263725][ T3387] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1082.307203][ T5972] usb 4-1: USB disconnect, device number 4 [ 1082.343377][ T790] usb 5-1: Using ep0 maxpacket: 32 [ 1082.350850][ T790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.375008][ T3387] ntfs3(loop5): ino=18, mi_enum_attr [ 1082.376403][ T790] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1082.393962][ T3387] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1082.444448][ T790] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 1082.463689][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.485415][ T790] usb 5-1: Product: syz [ 1082.535726][ T790] usb 5-1: Manufacturer: syz [ 1082.540814][ T790] usb 5-1: SerialNumber: syz [ 1082.569982][ T790] usb 5-1: config 0 descriptor?? [ 1083.150441][ T3461] loop3: detected capacity change from 0 to 512 [ 1083.206569][T29645] usb 5-1: USB disconnect, device number 102 [ 1083.252358][ T3461] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.12905: corrupted inode contents [ 1083.277649][ T3461] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1083.281535][ T3461] EXT4-fs (loop3): Remounting filesystem read-only [ 1083.290714][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1083.290740][ C0] EXT4-fs (loop3): initial error at time 2000000184: ext4_do_update_inode:5569: inode 3 [ 1083.290782][ C0] EXT4-fs (loop3): last error at time 2000000184: ext4_do_update_inode:5569: inode 3 [ 1083.467919][ T3461] __quota_error: 1302 callbacks suppressed [ 1083.467943][ T3461] Quota error (device loop3): write_blk: dquota write failed [ 1083.513351][ T3461] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 1083.553931][ T3461] EXT4-fs (loop3): 1 truncate cleaned up [ 1083.561583][ T3461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.603834][ T3461] ext4 filesystem being mounted at /2105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.887237][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.059129][ T3514] Bluetooth: MGMT ver 1.23 [ 1084.173118][ T5972] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1084.235855][ T3526] loop0: detected capacity change from 0 to 64 [ 1084.259284][ T5961] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1084.369627][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.411338][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1084.421854][ T5961] usb 3-1: Using ep0 maxpacket: 8 [ 1084.428178][ T5972] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 1084.454096][ T5961] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1084.465799][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.476617][ T5961] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1084.494028][ T5961] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.504898][ T5961] usb 3-1: Product: syz [ 1084.511524][ T5972] usb 5-1: config 0 descriptor?? [ 1084.536900][ T5961] usb 3-1: Manufacturer: syz [ 1084.541570][ T5961] usb 3-1: SerialNumber: syz [ 1084.583663][ T5961] usb 3-1: config 0 descriptor?? [ 1084.623217][ T5961] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1084.637988][ T3551] loop0: detected capacity change from 0 to 256 [ 1084.662227][ T5961] usb 3-1: setting power ON [ 1084.666846][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 1084.707647][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1084.728129][ T3558] loop3: detected capacity change from 0 to 128 [ 1084.744919][ T5961] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1084.770583][ T5961] usb 3-1: media controller created [ 1084.822267][ T3515] dvb-usb: bulk message failed: -22 (3/0) [ 1084.857169][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1084.875944][ T30] audit: type=1800 audit(2000000186.182:3726): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.12929" name="file1" dev="loop3" ino=1048770 res=0 errno=0 [ 1084.885064][ T3565] netlink: 'syz.5.12931': attribute type 11 has an invalid length. [ 1084.924292][ T5972] arvo 0003:1E7D:30D4.0003: item fetching failed at offset 5/7 [ 1084.990158][ T5972] arvo 0003:1E7D:30D4.0003: parse failed [ 1085.025380][ T5972] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -22 [ 1085.034877][ T5961] usb 3-1: selecting invalid altsetting 6 [ 1085.058708][ T5961] usb 3-1: digital interface selection failed (-22) [ 1085.102743][ T5961] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1085.127874][ T3582] loop0: detected capacity change from 0 to 64 [ 1085.149211][ T5961] usb 3-1: setting power OFF [ 1085.159868][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 1085.180181][ T3582] syz.0.12933: attempt to access beyond end of device [ 1085.180181][ T3582] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1085.194510][ T5961] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1085.214127][ T5972] usb 5-1: USB disconnect, device number 103 [ 1085.249219][ T5961] (NULL device *): no alternate interface [ 1085.400942][ T5961] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1085.518031][ T5961] usb 3-1: USB disconnect, device number 108 [ 1085.571551][ T3603] loop6: detected capacity change from 0 to 4096 [ 1085.614647][ T3603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1085.655649][ T30] audit: type=1800 audit(2000000187.000:3727): pid=3603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.12936" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1085.713163][ T3603] fs-verity (loop6, inode 15): Error -22 reading file data [ 1085.728356][ T3603] fs-verity (loop6, inode 15): Error -22 building Merkle tree [ 1085.917041][T19085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.139103][ T30] audit: type=1326 audit(2000000187.504:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3647 comm="syz.3.12945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1086.219541][ T30] audit: type=1326 audit(2000000187.504:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3647 comm="syz.3.12945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1086.290264][ T3650] loop6: detected capacity change from 0 to 4096 [ 1086.308710][ T30] audit: type=1326 audit(2000000187.504:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3647 comm="syz.3.12945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1086.332729][ T5998] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1086.341621][ T3650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1086.362824][ T3650] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1086.391872][ T3650] EXT4-fs (loop6): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1086.422317][ T30] audit: type=1326 audit(2000000187.504:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3647 comm="syz.3.12945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1086.456845][ T3650] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 1086.466854][ T3668] loop0: detected capacity change from 0 to 2048 [ 1086.497889][ T3668] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1086.508656][ T3668] NILFS (loop0): mounting unchecked fs [ 1086.522033][ T3650] System zones: 0-5 [ 1086.530192][ T5998] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1086.566411][ T3650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.584774][ T5998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.620888][ T3668] NILFS (loop0): recovery complete [ 1086.638085][ T5998] usb 6-1: config 0 descriptor?? [ 1086.652870][ T5998] cp210x 6-1:0.0: cp210x converter detected [ 1086.666404][ T3680] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1086.841698][T19085] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.045453][ T5998] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 1087.078542][ T5998] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1087.122210][ T5998] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1087.128382][ T3708] Zero length message leads to an empty skb [ 1087.151746][ T5998] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1087.215448][ T5998] usb 6-1: USB disconnect, device number 110 [ 1087.250976][ T5998] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1087.272350][ T5998] cp210x 6-1:0.0: device disconnected [ 1088.001962][ T6039] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1088.101173][ T3706] loop0: detected capacity change from 0 to 40427 [ 1088.176158][ T6039] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1088.223683][ T6039] usb 6-1: config 0 has no interface number 0 [ 1088.229837][ T6039] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.297930][ T6039] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.345138][ T6039] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1088.375674][ T6039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.414001][ T6039] usb 6-1: config 0 descriptor?? [ 1088.450691][ T3706] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1088.496437][ T3706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1088.577296][ T3791] netlink: 'syz.6.12978': attribute type 4 has an invalid length. [ 1088.623389][ T3791] netlink: 17 bytes leftover after parsing attributes in process `syz.6.12978'. [ 1088.863913][ T6039] prodikeys 0003:041E:2801.0004: item fetching failed at offset 3/7 [ 1088.885603][ T6039] prodikeys 0003:041E:2801.0004: hid parse failed [ 1088.907568][ T6039] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 1089.055703][ T5972] usb 6-1: USB disconnect, device number 111 [ 1089.440834][ T3796] loop3: detected capacity change from 0 to 32768 [ 1089.491589][ T3796] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1089.555381][ T3846] loop2: detected capacity change from 0 to 764 [ 1089.609462][ T3796] XFS (loop3): Ending clean mount [ 1089.642640][ T3796] XFS (loop3): Quotacheck needed: Please wait. [ 1089.772231][ T3796] XFS (loop3): Quotacheck: Done. [ 1090.038868][ T5827] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1090.101452][ T3875] loop5: detected capacity change from 0 to 128 [ 1090.371707][ T3883] loop2: detected capacity change from 0 to 16 [ 1090.434689][ T3883] erofs (device loop2): mounted with root inode @ nid 36. [ 1090.489241][ T3883] erofs (device loop2): invalid de[0].nameoff 0 @ nid 36 [ 1091.282558][ T3920] loop2: detected capacity change from 0 to 4096 [ 1091.382536][ T3920] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1091.422100][ T3920] ntfs3(loop2): Failed to load $Extend (-22). [ 1091.428231][ T3920] ntfs3(loop2): Failed to initialize $Extend. [ 1091.527717][ T3872] loop6: detected capacity change from 0 to 40427 [ 1091.547500][ T3937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13012'. [ 1091.790225][ T5822] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 1092.122768][ T3872] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1092.129566][ T3961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13018'. [ 1092.159908][ T3969] binder: 3968:3969 ioctl c018620b 200000000780 returned -14 [ 1092.187634][ T3872] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1092.505753][T19085] syz-executor: attempt to access beyond end of device [ 1092.505753][T19085] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1092.584227][T19085] CPU: 0 UID: 0 PID: 19085 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1092.584276][T19085] Tainted: [L]=SOFTLOCKUP [ 1092.584286][T19085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1092.584303][T19085] Call Trace: [ 1092.584313][T19085] [ 1092.584324][T19085] dump_stack_lvl+0xe8/0x150 [ 1092.584367][T19085] f2fs_handle_critical_error+0x37c/0x540 [ 1092.584405][T19085] f2fs_write_end_io+0xcdb/0xff0 [ 1092.584460][T19085] __submit_merged_bio+0x256/0x700 [ 1092.584496][T19085] __submit_merged_write_cond+0x3c9/0x4e0 [ 1092.584533][T19085] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1092.584577][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.584618][T19085] f2fs_write_data_pages+0x2975/0x35e0 [ 1092.584691][T19085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1092.584741][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.584767][T19085] ? css_rstat_updated+0x23a/0x530 [ 1092.584818][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.584844][T19085] ? rcu_is_watching+0x15/0xb0 [ 1092.584877][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.584903][T19085] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 1092.584939][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.584965][T19085] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.585005][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585036][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585062][T19085] ? __lock_acquire+0x6b5/0x2cf0 [ 1092.585095][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585122][T19085] ? do_raw_spin_lock+0x12b/0x2f0 [ 1092.585154][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585185][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585214][T19085] ? do_raw_spin_unlock+0xf5/0x210 [ 1092.585247][T19085] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1092.585278][T19085] do_writepages+0x32e/0x550 [ 1092.585313][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585342][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585372][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585398][T19085] ? do_raw_spin_unlock+0xf5/0x210 [ 1092.585427][T19085] filemap_fdatawrite+0x1e9/0x2f0 [ 1092.585466][T19085] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1092.585537][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585566][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585598][T19085] ? do_raw_spin_unlock+0xf5/0x210 [ 1092.585626][T19085] f2fs_sync_dirty_inodes+0x30e/0x860 [ 1092.585674][T19085] f2fs_write_checkpoint+0x9df/0x26a0 [ 1092.585740][T19085] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1092.585769][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585852][T19085] kill_f2fs_super+0x314/0x720 [ 1092.585888][T19085] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1092.585930][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.585956][T19085] ? lockdep_hardirqs_on+0x7a/0x110 [ 1092.585993][T19085] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1092.586034][T19085] deactivate_locked_super+0xbc/0x130 [ 1092.586072][T19085] cleanup_mnt+0x437/0x4d0 [ 1092.586096][T19085] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.586134][T19085] task_work_run+0x1d9/0x270 [ 1092.586162][T19085] ? __pfx_task_work_run+0x10/0x10 [ 1092.586198][T19085] exit_to_user_mode_loop+0xed/0x480 [ 1092.586249][T19085] ? rcu_is_watching+0x15/0xb0 [ 1092.586286][T19085] do_syscall_64+0x32d/0xf80 [ 1092.586307][T19085] ? trace_irq_disable+0x3b/0x150 [ 1092.586340][T19085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.586370][T19085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.586393][T19085] RIP: 0033:0x7feadbf9d9d7 [ 1092.586414][T19085] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1092.586432][T19085] RSP: 002b:00007fff111905d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1092.586456][T19085] RAX: 0000000000000000 RBX: 00007feadc031f90 RCX: 00007feadbf9d9d7 [ 1092.586471][T19085] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff11190690 [ 1092.586486][T19085] RBP: 00007fff11190690 R08: 00007fff11191690 R09: 00000000ffffffff [ 1092.586502][T19085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff11191720 [ 1092.586516][T19085] R13: 00007feadc031f90 R14: 00000000001067ac R15: 00007fff11191760 [ 1092.586551][T19085] [ 1092.586599][T19085] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1093.272060][ T4013] loop4: detected capacity change from 0 to 64 [ 1093.346604][ T4013] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1093.385634][ T4013] hfs: filesystem is marked locked, mounting read-only. [ 1093.767761][ T4048] loop4: detected capacity change from 0 to 1024 [ 1094.154696][ T4070] binder: 4068:4070 ioctl c0306201 200000000140 returned -14 [ 1094.274624][ T4078] loop5: detected capacity change from 0 to 256 [ 1094.338713][ T4078] FAT-fs (loop5): bogus number of FAT sectors [ 1094.368228][ T4078] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1094.649589][ T4101] netlink: 260 bytes leftover after parsing attributes in process `syz.6.13059'. [ 1094.707543][ T4104] loop3: detected capacity change from 0 to 1024 [ 1094.768118][ T4104] hfsplus: b-tree write err: -5, ino 2 [ 1094.867869][ T4124] loop4: detected capacity change from 0 to 128 [ 1094.910388][ T103] hfsplus: b-tree write err: -5, ino 25 [ 1094.938294][ T103] hfsplus: b-tree write err: -5, ino 4 [ 1094.940202][T29645] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1094.957917][ T4124] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1094.976664][ T103] hfsplus: b-tree write err: -5, ino 2 [ 1095.152366][ T4135] loop6: detected capacity change from 0 to 128 [ 1095.177008][T29645] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1095.192882][T29645] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.223368][ T4135] qnx6: block size(2066842817) > page size(4096) not supported by filesystem [ 1095.241600][T29645] usb 1-1: config 220 has no interface number 2 [ 1095.248013][ T4135] qnx6: unable to set blocksize [ 1095.253433][T29645] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1095.327600][T29645] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 1095.383733][T29645] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1095.411143][T29645] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1095.448753][T29645] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1095.471763][T29645] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1095.519261][T29645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.538079][T29645] usb 1-1: Product: syz [ 1095.546430][T29645] usb 1-1: Manufacturer: syz [ 1095.551340][T29645] usb 1-1: SerialNumber: syz [ 1095.752568][ T4160] loop5: detected capacity change from 0 to 512 [ 1095.797491][T29645] usb 1-1: selecting invalid altsetting 0 [ 1095.831481][T29645] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1095.839362][ T4160] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1095.855432][ T4109] loop2: detected capacity change from 0 to 32768 [ 1095.862052][T29645] uvcvideo 1-1:220.0: No valid video chain found. [ 1095.898643][ T4109] read_mapping_page failed! [ 1095.907918][ T4109] ERROR: (device loop2): txCommit: [ 1095.907918][ T4109] [ 1095.946941][T29645] usb 1-1: selecting invalid altsetting 0 [ 1095.969037][T29645] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1096.067829][T29645] usb 1-1: USB disconnect, device number 103 [ 1097.124267][ T4232] loop4: detected capacity change from 0 to 4096 [ 1097.198847][ T4232] ntfs3(loop4): ino=b, mi_enum_attr [ 1097.216725][ T4232] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1097.234303][ T4232] ntfs3(loop4): Failed to load $Extend (-22). [ 1097.247797][ T4232] ntfs3(loop4): Failed to initialize $Extend. [ 1097.392864][ T4204] loop6: detected capacity change from 0 to 32768 [ 1097.400169][ T5972] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1097.450627][ T4204] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1097.556836][ T5972] usb 6-1: Using ep0 maxpacket: 8 [ 1097.564538][ T5972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1097.589294][ T5972] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1097.604054][ T5972] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1097.618771][ T4263] sctp: [Deprecated]: syz.2.13096 (pid 4263) Use of int in max_burst socket option. [ 1097.618771][ T4263] Use struct sctp_assoc_value instead [ 1097.642242][ T5972] usb 6-1: Product: syz [ 1097.648734][ T5972] usb 6-1: Manufacturer: syz [ 1097.655469][ T4204] XFS (loop6): Ending clean mount [ 1097.656374][ T5972] usb 6-1: SerialNumber: syz [ 1097.866446][T19085] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1097.967976][ T5972] usb 6-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 1097.978851][ T5972] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1097.987187][ T5972] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1098.161988][ T5972] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1098.217888][ T5972] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1098.276672][ T5972] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1098.319876][ T5972] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1098.365159][ T5972] usb 6-1: USB disconnect, device number 112 [ 1098.417303][ T5972] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1098.466168][ T5972] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1098.501877][ T5972] visor 6-1:1.0: device disconnected [ 1098.599701][ T4234] loop3: detected capacity change from 0 to 40427 [ 1098.617142][ T4308] syz_tun: entered promiscuous mode [ 1098.653669][ T4234] F2FS-fs (loop3): invalid crc value [ 1098.728052][ T4308] syz_tun: left promiscuous mode [ 1098.980178][ T4234] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1099.044427][ T4234] F2FS-fs (loop3): Start checkpoint disabled! [ 1099.062832][ T4234] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 1099.089532][ T4234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1099.097528][ T4331] bridge0: port 3(macsec1) entered blocking state [ 1099.132351][ T4331] bridge0: port 3(macsec1) entered disabled state [ 1099.171831][ T4331] macsec1: entered allmulticast mode [ 1099.206095][ T4331] bridge0: entered allmulticast mode [ 1099.231656][ T4331] macsec1: left allmulticast mode [ 1099.248882][ T4331] bridge0: left allmulticast mode [ 1099.414022][ T103] kworker/u8:5: attempt to access beyond end of device [ 1099.414022][ T103] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1099.453841][ T103] CPU: 0 UID: 0 PID: 103 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1099.453880][ T103] Tainted: [L]=SOFTLOCKUP [ 1099.453890][ T103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1099.453907][ T103] Workqueue: writeback wb_workfn (flush-7:3) [ 1099.453946][ T103] Call Trace: [ 1099.453957][ T103] [ 1099.453967][ T103] dump_stack_lvl+0xe8/0x150 [ 1099.454008][ T103] f2fs_handle_critical_error+0x37c/0x540 [ 1099.454045][ T103] f2fs_write_end_io+0xcdb/0xff0 [ 1099.454098][ T103] __submit_merged_bio+0x256/0x700 [ 1099.454134][ T103] __submit_merged_write_cond+0x3c9/0x4e0 [ 1099.454172][ T103] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1099.454216][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.454259][ T103] f2fs_write_data_pages+0x2975/0x35e0 [ 1099.454292][ T103] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1099.454361][ T103] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1099.454410][ T103] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1099.454487][ T103] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1099.454549][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.454579][ T103] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.454628][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.454663][ T103] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1099.454697][ T103] do_writepages+0x32e/0x550 [ 1099.454743][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.454773][ T103] ? reacquire_held_locks+0x104/0x190 [ 1099.454812][ T103] ? writeback_sb_inodes+0x477/0x1a20 [ 1099.454854][ T103] __writeback_single_inode+0x133/0x11a0 [ 1099.454892][ T103] ? do_raw_spin_unlock+0xf5/0x210 [ 1099.454924][ T103] writeback_sb_inodes+0x992/0x1a20 [ 1099.454983][ T103] ? __lock_acquire+0x6b5/0x2cf0 [ 1099.455024][ T103] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1099.455057][ T103] ? do_raw_spin_lock+0x12b/0x2f0 [ 1099.455130][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455160][ T103] ? rcu_is_watching+0x15/0xb0 [ 1099.455197][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455238][ T103] wb_writeback+0x456/0xb70 [ 1099.455276][ T103] ? queue_io+0x1e1/0x4a0 [ 1099.455324][ T103] ? __pfx_wb_writeback+0x10/0x10 [ 1099.455355][ T103] ? do_raw_spin_lock+0x12b/0x2f0 [ 1099.455401][ T103] wb_workfn+0x414/0xf50 [ 1099.455433][ T103] ? look_up_lock_class+0x57/0x110 [ 1099.455475][ T103] ? __pfx_wb_workfn+0x10/0x10 [ 1099.455507][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455540][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455575][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455605][ T103] ? do_raw_spin_unlock+0xf5/0x210 [ 1099.455634][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455665][ T103] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1099.455708][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455743][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455773][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.455807][ T103] ? process_scheduled_works+0xa25/0x1830 [ 1099.455839][ T103] ? process_scheduled_works+0xa25/0x1830 [ 1099.455877][ T103] process_scheduled_works+0xb02/0x1830 [ 1099.455947][ T103] ? __pfx_process_scheduled_works+0x10/0x10 [ 1099.455990][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.456020][ T103] ? assign_work+0x3d5/0x5e0 [ 1099.456061][ T103] worker_thread+0xa50/0xfc0 [ 1099.456118][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.456161][ T103] kthread+0x388/0x470 [ 1099.456188][ T103] ? __pfx_worker_thread+0x10/0x10 [ 1099.456221][ T103] ? __pfx_kthread+0x10/0x10 [ 1099.456249][ T103] ret_from_fork+0x51e/0xb90 [ 1099.456289][ T103] ? __pfx_ret_from_fork+0x10/0x10 [ 1099.456321][ T103] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1099.456352][ T103] ? __switch_to+0xc7d/0x1450 [ 1099.456387][ T103] ? __pfx_kthread+0x10/0x10 [ 1099.456415][ T103] ret_from_fork_asm+0x1a/0x30 [ 1099.456475][ T103] [ 1099.456486][ T103] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1099.894010][ T4328] loop6: detected capacity change from 0 to 32768 [ 1100.302293][ T4369] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13115'. [ 1100.375985][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13117'. [ 1100.862549][ T4396] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60928 [ 1100.869776][ T4396] binder: 4395:4396 ioctl 4018620d 2000000000c0 returned -1 [ 1101.168151][ T4417] loop5: detected capacity change from 0 to 16 [ 1101.196519][ T4417] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1101.277898][ T4423] loop3: detected capacity change from 0 to 1024 [ 1101.314490][ T4423] EXT4-fs: Ignoring removed mblk_io_submit option [ 1101.444732][ T4423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1101.583851][ T4438] loop4: detected capacity change from 0 to 1024 [ 1101.627931][ T4442] netlink: 'syz.5.13132': attribute type 3 has an invalid length. [ 1101.675702][ T4423] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 1101.877201][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.026991][ T4468] loop0: detected capacity change from 0 to 256 [ 1102.190032][ T4485] loop5: detected capacity change from 0 to 256 [ 1102.294684][ T4485] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1102.375001][ T4468] FAT-fs (loop0): Directory bread(block 64) failed [ 1102.410615][ T4468] FAT-fs (loop0): Directory bread(block 65) failed [ 1102.413486][ T4495] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13144'. [ 1102.447944][ T4468] FAT-fs (loop0): Directory bread(block 66) failed [ 1102.481159][ T4468] FAT-fs (loop0): Directory bread(block 67) failed [ 1102.500272][ T4468] FAT-fs (loop0): Directory bread(block 68) failed [ 1102.506955][ T4468] FAT-fs (loop0): Directory bread(block 69) failed [ 1102.557202][ T4468] FAT-fs (loop0): Directory bread(block 70) failed [ 1102.563869][ T4468] FAT-fs (loop0): Directory bread(block 71) failed [ 1102.597571][ T4468] FAT-fs (loop0): Directory bread(block 72) failed [ 1102.617552][ T4468] FAT-fs (loop0): Directory bread(block 73) failed [ 1103.305807][ T4536] loop5: detected capacity change from 0 to 4096 [ 1103.468338][ T4551] loop6: detected capacity change from 0 to 1024 [ 1103.566426][ T4551] hfsplus: failed to extend attributes file [ 1103.623437][ T4499] loop3: detected capacity change from 0 to 32768 [ 1103.624051][T29645] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1103.742863][ T4499] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1103.839583][ T4578] loop5: detected capacity change from 0 to 4096 [ 1103.864974][T29645] usb 3-1: Using ep0 maxpacket: 32 [ 1103.904705][T29645] usb 3-1: config 123 interface 0 has no altsetting 0 [ 1103.971116][T29645] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 1104.031257][T29645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.063293][T29645] usb 3-1: Product: syz [ 1104.067657][ T4499] XFS (loop3): Ending clean mount [ 1104.100738][T29645] usb 3-1: Manufacturer: syz [ 1104.105388][T29645] usb 3-1: SerialNumber: syz [ 1104.153607][ T4589] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1104.361194][ T5827] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1104.368241][T29645] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 1104.453623][T29645] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1104.504916][T29645] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 1104.535734][T29645] usb 3-1: media controller created [ 1104.602956][T29645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1104.817078][T29645] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1104.823450][T29645] error writing reg: 0xff, val: 0x00 [ 1104.974565][T29645] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1105.052296][T29645] usb 3-1: USB disconnect, device number 109 [ 1105.197122][ T4636] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 1105.453080][ T4649] netlink: 296 bytes leftover after parsing attributes in process `syz.6.13169'. [ 1105.711262][ T4605] loop5: detected capacity change from 0 to 32768 [ 1105.735543][T29645] kernel read not supported for file /dsp (pid: 29645 comm: kworker/0:2) [ 1105.825086][ T4605] JBD2: Ignoring recovery information on journal [ 1105.903315][ T4605] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1106.097529][ T4605] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1106.159703][ T4605] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1106.293517][ T4605] OCFS2: File system is now read-only. [ 1106.299022][ T4605] (syz.5.13163,4605,1):ocfs2_search_chain:1888 ERROR: status = -30 [ 1106.368975][ T4605] (syz.5.13163,4605,1):ocfs2_search_chain:2011 ERROR: status = -30 [ 1106.408024][ T4605] (syz.5.13163,4605,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 1106.458045][ T4605] (syz.5.13163,4605,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 1106.522758][ T4605] (syz.5.13163,4605,1):ocfs2_claim_new_inode:2392 ERROR: status = -30 [ 1106.542186][ T4689] netlink: 'syz.6.13180': attribute type 83 has an invalid length. [ 1106.570605][ T4605] (syz.5.13163,4605,1):ocfs2_claim_new_inode:2407 ERROR: status = -30 [ 1106.624965][ T4605] (syz.5.13163,4605,1):ocfs2_mknod_locked:642 ERROR: status = -30 [ 1106.632851][ T4605] (syz.5.13163,4605,1):ocfs2_mknod:389 ERROR: status = -30 [ 1106.726265][ T4605] (syz.5.13163,4605,1):ocfs2_mknod:506 ERROR: status = -30 [ 1106.765810][ T4605] (syz.5.13163,4605,1):ocfs2_mkdir:662 ERROR: status = -30 [ 1106.842946][ T4695] loop3: detected capacity change from 0 to 4096 [ 1106.844116][ T4687] (syz.5.13163,4687,0):ocfs2_reconfigure:670 ERROR: Cannot remount RDWR filesystem due to previous errors. [ 1106.923697][ T4695] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1107.047618][ T4695] ntfs3(loop3): ino=1a, mi_enum_attr [ 1107.113212][ T4695] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1107.173846][ T4695] ntfs3(loop3): ino=1a, mi_enum_attr [ 1107.191731][ T4707] loop6: detected capacity change from 0 to 64 [ 1107.207017][ T4695] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1107.227067][ T4707] minix: block size(59136) > page size(4096) not supported by filesystem [ 1107.258948][ T5834] ocfs2: Unmounting device (7,5) on (node local) [ 1108.528537][ T30] audit: type=1326 audit(2000000211.009:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1108.627206][ T30] audit: type=1326 audit(2000000211.009:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1108.709589][ T30] audit: type=1326 audit(2000000211.072:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1108.796535][ T30] audit: type=1326 audit(2000000211.072:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1108.893479][ T30] audit: type=1326 audit(2000000211.072:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1108.990904][ T30] audit: type=1326 audit(2000000211.072:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1109.083072][ T30] audit: type=1326 audit(2000000211.072:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1109.162270][ T30] audit: type=1326 audit(2000000211.072:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4762 comm="syz.3.13200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37f159c799 code=0x7ffc0000 [ 1109.283114][ T4787] [ 1109.285487][ T4787] ============================================ [ 1109.291717][ T4787] WARNING: possible recursive locking detected [ 1109.297856][ T4787] syzkaller #0 Tainted: G L [ 1109.303821][ T4787] -------------------------------------------- [ 1109.310125][ T4787] syz.3.13209/4787 is trying to acquire lock: [ 1109.316175][ T4787] ffff8880314688f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x38/0x3d0 [ 1109.325095][ T4787] [ 1109.325095][ T4787] but task is already holding lock: [ 1109.332452][ T4787] ffff88803146a8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x210/0x1af0 [ 1109.342152][ T4787] [ 1109.342152][ T4787] other info that might help us debug this: [ 1109.350192][ T4787] Possible unsafe locking scenario: [ 1109.350192][ T4787] [ 1109.357719][ T4787] CPU0 [ 1109.361231][ T4787] ---- [ 1109.364588][ T4787] lock(&dev->mutex#4); [ 1109.368847][ T4787] lock(&dev->mutex#4); [ 1109.373241][ T4787] [ 1109.373241][ T4787] *** DEADLOCK *** [ 1109.373241][ T4787] [ 1109.381455][ T4787] May be due to missing lock nesting notation [ 1109.381455][ T4787] [ 1109.389851][ T4787] 1 lock held by syz.3.13209/4787: [ 1109.394950][ T4787] #0: ffff88803146a8f8 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x210/0x1af0 [ 1109.405169][ T4787] [ 1109.405169][ T4787] stack backtrace: [ 1109.411057][ T4787] CPU: 1 UID: 0 PID: 4787 Comm: syz.3.13209 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.411089][ T4787] Tainted: [L]=SOFTLOCKUP [ 1109.411097][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.411111][ T4787] Call Trace: [ 1109.411121][ T4787] [ 1109.411130][ T4787] dump_stack_lvl+0xe8/0x150 [ 1109.411166][ T4787] print_deadlock_bug+0x279/0x290 [ 1109.411202][ T4787] __lock_acquire+0x253f/0x2cf0 [ 1109.411235][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.411265][ T4787] ? is_bpf_text_address+0x26/0x2b0 [ 1109.411290][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.411315][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.411343][ T4787] lock_acquire+0xf0/0x2e0 [ 1109.411371][ T4787] ? comedi_do_insn+0x38/0x3d0 [ 1109.411402][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.411432][ T4787] __mutex_lock+0x19f/0x1300 [ 1109.411459][ T4787] ? comedi_do_insn+0x38/0x3d0 [ 1109.411499][ T4787] ? comedi_do_insn+0x38/0x3d0 [ 1109.411531][ T4787] ? __pfx___mutex_lock+0x10/0x10 [ 1109.411560][ T4787] ? __pfx___up_read+0x10/0x10 [ 1109.411580][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.411607][ T4787] comedi_do_insn+0x38/0x3d0 [ 1109.411640][ T4787] comedi_dio_bitfield2+0x301/0x3e0 [ 1109.411673][ T4787] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 1109.411703][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.411740][ T4787] bonding_dio_insn_bits+0x2cc/0x5e0 [ 1109.411780][ T4787] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 1109.411815][ T4787] ? kasan_save_track+0x4f/0x80 [ 1109.411837][ T4787] ? kasan_save_track+0x3e/0x80 [ 1109.411858][ T4787] ? __kasan_kmalloc+0x93/0xb0 [ 1109.411886][ T4787] insn_rw_emulate_bits+0x363/0x620 [ 1109.411919][ T4787] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 1109.411951][ T4787] ? comedi_check_chanlist+0x299/0x330 [ 1109.411980][ T4787] parse_insn+0xa3e/0x1b20 [ 1109.412006][ T4787] ? trace_kmalloc+0x2a/0x110 [ 1109.412028][ T4787] ? __pfx_parse_insn+0x10/0x10 [ 1109.412050][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412076][ T4787] ? __kmalloc_noprof+0x37d/0x760 [ 1109.412102][ T4787] do_insn_ioctl+0x174/0x5a0 [ 1109.412128][ T4787] comedi_unlocked_ioctl+0xe06/0x1af0 [ 1109.412172][ T4787] ? kasan_quarantine_put+0xbb/0x1f0 [ 1109.412195][ T4787] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1109.412231][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412258][ T4787] ? tomoyo_path_number_perm+0x219/0x630 [ 1109.412284][ T4787] ? tomoyo_path_number_perm+0x219/0x630 [ 1109.412307][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412334][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412359][ T4787] ? do_vfs_ioctl+0x1166/0x1530 [ 1109.412386][ T4787] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1109.412417][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412442][ T4787] ? do_futex+0x333/0x420 [ 1109.412469][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412510][ T4787] ? __fget_files+0x2a/0x420 [ 1109.412544][ T4787] ? __fget_files+0x3a0/0x420 [ 1109.412575][ T4787] ? __fget_files+0x2a/0x420 [ 1109.412607][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412633][ T4787] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1109.412659][ T4787] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1109.412694][ T4787] __se_sys_ioctl+0xfc/0x170 [ 1109.412720][ T4787] do_syscall_64+0x14d/0xf80 [ 1109.412741][ T4787] ? trace_irq_disable+0x3b/0x150 [ 1109.412773][ T4787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.412799][ T4787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.412820][ T4787] RIP: 0033:0x7f37f159c799 [ 1109.412843][ T4787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.412861][ T4787] RSP: 002b:00007f37f240f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1109.412883][ T4787] RAX: ffffffffffffffda RBX: 00007f37f1815fa0 RCX: 00007f37f159c799 [ 1109.412900][ T4787] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 1109.412914][ T4787] RBP: 00007f37f1632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1109.412929][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.412942][ T4787] R13: 00007f37f1816038 R14: 00007f37f1815fa0 R15: 00007fff4afc3368 [ 1109.412968][ T4787] [ 1109.832297][ T4724] loop0: detected capacity change from 0 to 32768 [ 1109.840654][ T4724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.13189 (4724) [ 1109.846515][ T4791] loop2: detected capacity change from 0 to 64 [ 1109.920981][ T4767] loop6: detected capacity change from 0 to 32768 [ 1109.939025][ T4767] [ 1109.939025][ T4767] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1109.939025][ T4767] [ 1109.964173][ T4767] ERROR: (device loop6): dbReAlloc: the block is outside the filesystem [ 1109.964173][ T4767] [ 1109.975529][ T4724] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1109.975833][ T4767] ERROR: (device loop6): remounting filesystem as read-only [ 1109.985660][ T4724] BTRFS info (device loop0): using crc32c checksum algorithm [ 1110.096058][ T4767] jfs_mkdir: dtInsert returned -EIO [ 1110.101305][ T4767] ERROR: (device loop6): jfs_mkdir: [ 1110.101305][ T4767] [ 1110.219105][ T103] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1110.257891][ T4724] BTRFS warning (device loop0): couldn't read tree root [ 1110.268881][ T4724] BTRFS warning (device loop0): try to load backup roots slot 1 [ 1110.279430][T23043] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1110.293183][ T4724] BTRFS warning (device loop0): couldn't read tree root [ 1110.300329][ T4724] BTRFS warning (device loop0): try to load backup roots slot 2 [ 1110.337008][T23043] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1110.376987][ T4724] BTRFS warning (device loop0): couldn't read tree root [ 1110.432250][ T4724] BTRFS warning (device loop0): try to load backup roots slot 3 [ 1110.485618][ T4724] BTRFS info (device loop0): checking UUID tree [ 1110.492775][ T4724] BTRFS info (device loop0): setting nodatasum [ 1110.504673][ T4724] BTRFS info (device loop0): enabling ssd optimizations [ 1110.520968][ T4724] BTRFS info (device loop0): turning on flush-on-commit [ 1110.527983][ T4724] BTRFS info (device loop0): turning on async discard [ 1110.549258][ T4724] BTRFS info (device loop0): enabling free space tree [ 1110.563414][ T4724] BTRFS info (device loop0): trying to use backup root at mount time [ 1110.584918][ T4724] BTRFS info (device loop0): max_inline set to 0 [ 1110.637934][ T5818] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf