last executing test programs: 3.155196306s ago: executing program 1 (id=2458): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0xf, 0x0, &(0x7f0000000200)) 3.051039987s ago: executing program 1 (id=2461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) 2.019497682s ago: executing program 1 (id=2475): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa4) 1.898164735s ago: executing program 1 (id=2480): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000002900000004000000d400000000000000180000000000000029"], 0x30}}], 0x2, 0x0) 1.782421437s ago: executing program 2 (id=2482): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1, 0xda1}}, 0xffffffff, 0xfffd, 0x0, 0x3, 0x11, 0x8, 0x2}, 0x9c) 1.741344381s ago: executing program 2 (id=2484): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11, 0x2d2, &(0x7f0000000200)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x51) 1.731160082s ago: executing program 1 (id=2485): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.590758026s ago: executing program 2 (id=2488): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 1.418774554s ago: executing program 2 (id=2492): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x800401, &(0x7f00000000c0)={[{@data_ordered}, {@resv_level={'resv_level', 0x3d, 0x2}}, {@heartbeat_none}, {@coherency_buffered}, {@err_cont}, {@barrier={'barrier', 0x3d, 0x1000000}}, {@coherency_full}, {@localflocks}, {@data_ordered}, {@data_ordered}]}, 0x8, 0x446c, &(0x7f0000004780)="$eJzs281vFOcdB/DfrN1iU6B+4x2kVXuo1VbWmlNbDqXgtkKqSu2+qOoBa/0CuF17LXtdcahUqt6RIuUQ5ZwLKPcITvwLOYRrjhxIDrlEySWOdnfW3pn1hhXy2sH5fCQYzzPzvMhfz+zz6LELqdq9lc3iymaxvFasLt7ZvFL8d7WytbochQNy2P3Tm37kJPvDc+vG7/78tysR9z8a+8H29vZ21I3Enqbbvv78s/8sth9bCrk69Xb3bm2//CMiJiJiKPLjGYiIv38QkUTEaFo2lh6HI+JENK/9//1Hc0P7NJqBF49nH83OPHzycvX58I3bxa43JhHvVs7//O7qJz8euPrxT/epewAA+Ea/n7v11z+VpuNZEqeeDnbO18+mx27z42168uv+RwkAAABd7a7/R5JC0rn+n0iPXbYEw8L2zXbzj7dmfluaTvd/k47rv0iLPv3NQGMPNb/vm9//Hc3V33v/t7Of19UaX6vfkUgKU5nzQmFqKmL6evP8XHK8UKlu1n52p7q1trRvw3hjZfNv7t5n0kk39HvNfyzXfv/3/8c7fprq58X9+xE70rL5D3S9773/JT3lP56rdxD58/qy+Q82yn7UfkOx+QKo5//W4Kvzn8i136/8T9Xf7Ul9rEOZN0B9DlMv7zZfISub//caZZlXZ/qN7Pb8f5nL/3Su/cN6/09e72+vR0U2/+83yrK/tLb7/I8WXv38n8m1fxj518c/6fO/J9n8jzULsy/Pxney1/f/2Vz7fcr/QbqtGnEqifG23zp9Otj8cGjtVzeWNPXL630YxRGQzb9zl393/Vfoaf53Llf/oNZ/rX5b67/WOmQyaa7/2Fs2/+Gu9/X6/J/P1ev7+z8ZSlcA2//taz9HVDb/483CPSaAveZ/Idd+v/JvvPGHWvnvDvirY83ykvlfT7L5p1FlPgYeNP5vzP+Szty/yOV/Mdd+W/75Pw3ZJ53zv/r4J/vU21GTzf9E1/vq+X/Yw+f/pVy9/s//I0rm+q8tm//Jrvc1nv+hV+d/OVev3/n/pJ+NAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8B4ylx5FIClOZ80JhaipiPD0/F8eThfLS/EKluvivzYiJtLwYY8ndSnWhXJlfWasuLc+XK5XqYsTp9PpEDCWblWptfrW8fmanreHk3nJ5o7awXK5FxNm0/FKcbLW1sFJbLa837m1d+2GhurF+r7w2v7Sy8atSqVSK8ztjGE2W79eW12rN3ptXIy7s1B1J2gbXuHxxZywnkn9WtzbWypVG+aW2OpXqYrnSVudyeu3tGE1qG1tri+Xa8nylerfV32G6lh5nbs79Ze4P0x3Xi0nzOHawwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgW+bZ1V++ExGDzbNCRFxrfZGk/zIGXjyefTQ78/DJy9XnwzduF/e6BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADga3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8cqDUNRGIDPvQoKLuroEziFZHNVFHExIvgEvkSHvmYfo0PHLqXQ3kBIGujS0uH7lkPyc+85cA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfj87f9+6mbiBS3m5uI2eLxrp8/lVq/HT5/dYYZOZ2v7/b9o27Ku6dR/lJ+LV/zLl2v5v9R6nXvu9MM9mS4T3vjPkNT+zY1X9f3PlKuIuKh5M8p56o67i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbszaEJgGAQx9E7wWSzuIZOYVQE9zA6nks4jybBYBC++l46OH78AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfcZnWuR/iyKiuzNjPtnn/u+fYvvssm6/LcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIMCAAD//+N8zQE=") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x100002b, &(0x7f0000000340)='heartbeat=none') 1.272591539s ago: executing program 4 (id=2495): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000180)={0xff, "4c628c2ffdf8f0724e1f4d043f856a09965999751059ff4079c9a8e31748a957"}) 1.231769963s ago: executing program 3 (id=2496): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x10, 0x1414, 0x211, 0x0, 0x25dfdbff}, 0x10}}, 0x0) 1.209941235s ago: executing program 3 (id=2498): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x2, 0x7, 0xfab2, 0x0, 0x1]}, &(0x7f0000000080)=0x54) 1.128096244s ago: executing program 4 (id=2499): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x40, &(0x7f0000000600)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}]}) 1.127888114s ago: executing program 3 (id=2500): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e5c}, 0x15) 1.084532998s ago: executing program 3 (id=2502): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x18, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x5, 0x12b, 0x0, 0x0, @binary='F'}]}, 0x18}], 0x1}, 0x0) 1.032954463s ago: executing program 4 (id=2503): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x1c0, 0x3, 0xd0e7500, 0x1c0, 0x60, 0x298, 0x1d8, 0x1d8, 0x298, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0x0, 0x0, 'nr0\x00', 'vxcan1\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x158, 0x1c0, 0x0, {0x60000000}, [@common=@inet=@udp={{0x20}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@loopback, [], @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, [], @ipv4=@multicast2, [0x0, 0xffffff00], @ipv4=@empty, [], 0x0, 0x400000}, 0x80}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x39}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0x1, 0x2, 0xd070, 'syz1\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 941.399483ms ago: executing program 3 (id=2505): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x44, &(0x7f00000000c0)=ANY=[], 0xfd, 0x6216, &(0x7f000000cb40)="$eJzs3c2OHFfZB/Cn+ms+/CaxsojyRghNEgMJIf4MxhAgyQIWbFggb5GtySSycADZBjmWhSeaDQsuAoTEEhBLVlxAFmzZcQFYspGArFKoZs4Z1zTT7rGd7uqZ8/tJk6qnTtX0qfy7prtdVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvffcHZ6qIuPTztOB4xP9FP6IXsdLUaxGxsnY8rz+IiOdjuzmei4jhUkSVG5+JeCMiPn464t792+vNorMH7Md3/vi33/7w2Pf/+vvhqX//6Ub/zUnr3bz5q3/9+c7j7y8AAACUqK7rukof819In+97XXcKAJiL/PpfJ3m5euHqzQXrj1qtVqsPYd1W7+9Ou4iIzfY2zXsGp+MB4JDZjE+67gIdkn/RBhFxrOtOAAut6roDzMS9+7fXq5Rv1X49WNtpz9eC7Ml/s9q9v2PSdJrxa0zm9fzain48O6E/K3PqwyLJ+ffG87+00z5K6806/3mZlP9o59an4uT8++P5jzk6+ff2zb9UOf/BI+Xflz8AAAAAACyw/O//xzs+/7v05LtyIA87/7s2pz4AAAAAAAAAwGftScf/21UZ/w8AAAAWVfNZvfHrpx8sm/RdbM3yi1XEU2PrA4VJN8usdt0PAAAAAAAAAAAAACjJYOca3otVxDAinlpdreu6+Wkbrx/Vk25/2JW+/1Cyrv/IAwDAjo+fHruXv4pYjoiL6bv+hqurq3W9vLJar9YrS/n97GhpuV5pfa7N02bZ0ugAb4gHo7r5Zcut7dqmfV6e1j7++5rHGtX9A3RsPjoMHAAiYufV6J5XpCOmrp+Jrt/lcDg4/o8exz8H0fXzFAAAAJi9uq7rKn2d9wvpnH+v604BAHORX//Hzwuo1Wq1Wq0+enVbvb877SIiNtvbNO8ZDMcPAIfMZnzSdRfokPyLNoiI57vuBLDQqq47wEzcu397vUr5Vu3XgzS+e74WZE/+m9X2dnn7/abTjF9jMq/n11b049kJ/XluTn1YJDn/3nj+l3baR2m9Wec/L5Pyb/bzeAf96VrOvz+e/5ijk39v3/xLlfMfPFL+ffkDAAAAAMACy//+f3yhzv+OHnd3pnrY+d+1mT0qAAAAAAAAAMzWvfu31/N9r/n8/+f2Wc/9n0dTzr+Sf5Fy/un+/90Lb14ZW6/fmr/7zoP8/3n/9vrvbvzj//P0oPkv5ZkqPbOq9Iyo0iNVgzR9zB2bYGvYHzWPNKx6/UG65qcevhdX4mpsxOk96/bS8fCg/cye9qanw+32ur/TfnZP+2C3PW9/bk/7MF3pVK/k9pOxHj+Jq/HudnvTtjRl/5entNdT2nP+fcd/kXL+g9ZPk/9qaq/Gpo27H/X+57hvT/d7nLevfP6Xp2e/O1NtRX9339qa/Xupg/5s/z85disiNq6dvHn5xo1rZyJNjo3iZ9fz0rORJp+xnP8w/eT8X3l5pz3/3W8fr3c/Gj1y/otiKwYT83+5Nd/s76tz7lsXcv6j9JPzfze173/8H+b8Jx//r3XQHwAAAAAAAAAAAAAAAHiYuq63bxF9OyLOp/t/uro3EwCYr/z6Xyd5+bzq/uNu/4e9+9FV/9XqOdfVgvVnrvWn9WL1R72Q9X8WrD8LV7fV+3urXUTEX9rbNO8ZfrHfLwMAFtmnEfH3rjtBZ+RfsPx9f830RNedAebq+oe3fnT56tWNa9e77gkAAAAAAAAA8Ljy+J9rrfGfT9R1fWdsvT3jv74Ta086/ucgz+wOMDphoOr+o+/Tw2z1Rv1ea7jxF2PS+N/D3bmHjf89mPJ4wyntoyntS1Pal6e073ujR0vO/8XWeOcnIuKFseHXSxj/dXzM+xLk/F9qPZ+b/L80tl47//o3hzn/3p78T9344Kenrn946/UrH1x+f+P9jR+fO3Pm9Lnz5y9cuHDqvStXN07v/LfDHs9Wzj+Pfe060LLk/HPm8i9Lzv8LqZZ/WXL+X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9NtfzLkvP/cqrlX5ac/2upln9Zcv5fSbX8y5Lzfz3V8i9Lzv9kquVflpz/qVQfMP+VWfeL+cj55zNcjv+y5PzzlQ3yL0vO/2yq5V+WnP+5VMu/LDn/N1It/7Lk/L+aavmXJed/PtXyL0vO/2upln9Zcv4XUi3/suT8v55q+Zcl5/+NVMu/LDn/N1Mt/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/lWr5l+XB9/+bMWNmRjODw3egdf2XCQAAAAAAAAAAAAAYN4/LibveRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe/cWI9dd3wH8zN68diA2EFInNWHtGGOcTXZ9iS+0LiZcG24lIRR6wXa9a7PgG167BBrVjgIlEkZFFW3DQ1tAqM1LhVXxQKuA8oBaVapE2gf6gqhQeYiqgAJSVVpBtpo5//9/Z2ZnZ3a9483Zcz4fKfllZ87MOXPmP7P7tfPdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg2dY3TX+mlmVZrVbLL9iUZS+pz/VjmxqXvP7FPT4AAABg5X7R+PfzG9MFR5Zwo6Zt/umO73x9bm5uLvvA4J8Of2FuLl0xlmXD67KscV107QcfrDVvEzyWjdYGmr4e6LH7wR7XD/W4frjH9SM9rl/X4/rRHtcvOAELrM9q6c62N/5zU35Ks1uy4cZ12zvc6rHauoH6uUu3zWqN28wNn8xmstPZdDbZsn2+ba2x/VNb6/t6exb3NdC0ry31FfKTR07EY6iFc7y9ZV/z9xn96I3Z2E9/8siJv7743G2dZs/T0HJ/+XHu3FY/zk+FS/JjrWXr0jmJxznQdJxbOjwngy3HWWvcrv7f7cf5/BKPc3D+MFdV+3M+mg00/vuZxnkaqmUdztOWcNnP7syy7Mr8Ybdvs2Bf2UC2oeWSgfnnZzRfkfX7qC+ll2dDy1qnW5ewTutzanvrOm1/TcTnf2u43dAix9D8NP3o0ZGm5/3nc9ezTqP6o17stdK+Bvv9WinKGozr4pnGg3684xrcHh7/IzsWX4Md106HNZged9Ma3NZrDQ6MDDaOOT0JtcZt5tfg7pbtBxt7qjXmszu6r8GJi2fOT8x+4pN3z5w5fmr61PTZvbt3T+7dv//gwYMTJ2dOT0/m/77Os118G7KB9BrYFs5dfA28tm3b5qU69+WRBe+/1/s6HO3yOtzUtm2/X4dD7Q+utjovyIVrOn9tvK9+0kevDmSLvMYaz8+ulb8O0+Nueh0ONb0OO35P6fA6HFrC67C+zfldS/uZZajpn07HsPj3gpWtwU1Na7D955H2Ndjvn0eKsgZHw7r43q7FvxdsCcf7+Phyfx4ZXLAG08MN7z31S9LP+6MHG6PTury9fsVNI9ml2ekL9zx8/OLFC7uzMFbFK5rWSvt63dD0mLIF63Vg2ev1yMwdj9/e4fJN4VyN3l3/1+iiz1V9m333dH+uGt/dOp/Plkv3ZGH02Wqfz07fzevncyTLvvjtRx/45iNffNOi57OeNz81sfKfxVMubXr/HV7k/Tfm/hfy/aW7emxweCh//Q6mszPc8n7c+lQNNd67ao19Pz+xtPfj4fDPar8f39Ll/Xhz27b9fj8ebn9w8f241utPO1am/fkcDevk9GT39+P6Npv3LHdNDnV9P74zzFo4/68LSSHloqa1s9i6TfsaGhoOj2so7qF1ne5t2X44ZLP6vp7cc33rdOed+X0Npkc3b7XW6Vjbtv1ep+nPvhZbp7Vef/p2fdqfz9GwLm7Z232d1rd5et/K3zvXx/9seu8c6bUGhwdH6sc8nBZh4/0+m1sf1+A92YnsXHY6m2pcO9JYT7XGvsbvXdoaHAn/rPZ75eYua3Bn27b9XoPp+9hia682tPDB90H78zka1sUT93Zfg/Vt3nygvz+77gyXpG2afnZt//O1xf7M6/a203Sj1spQOM5vH+j+Z7P1bU4fXG7O7H6e7gqX3NThPLW/fhd7TU1lq3OeNofjfO7g4uepfjz1bb5waInr6UiWZZc/dl/jz3vD36/83aXvfr3l7106/Z3O5Y/d9+OXnvzH5Rw/AGvfC/nYkH+va/qbqaX8/T8AAACwJsTcPxBmIv8DAABAacTcH/+v8ET+BwAAgNKIuX8ozKQi+X/zm5+beeFylpr5c0G8Pp2G+/PtYsd1Mnw9Njevfvl9X53+73+4vLR9D2RZ9vP7/6Dj9pvvj8eVGwvHee0trZcv8PW7l7TvYw9dTvtt7q9/Kdx/fDxLXQadKriTWZY9tfFzjf2MffBqYz59/7HGfODK44/Vt3n+UP51vP2zr8i3/4tQ/j1y8njL7Z8N5+GHYU6+o/P5iLf72tXXbTnw/vn9xdvVtt3ceNhPfCi/3/h7cj7/WL59PM+LHf83P/vk1+rbP/yazsd/eaDz8T8Z7verYf7vq/Ltm5+D+tfxdp8Oxx/3F293z1e+1fH4r30m3/78W/PtjoUZ978zfL39rc/NNJ+vh2vHWx5X9rZ8u7j/ye/+ceP6eH/x/tuPf/To1Zbz0b4+nv63/H4m2raPl8f9RH/ftv/6/TSvz7j/J//oWMt57rX/aw88+6r6/bbv/6627c5/bFdj//P31/obm/7y05/ruL94PEf+9nzL4zny3vA6Dvt/4kNhPYbr/+9afn/tv13h2Htb33/i9l/adLnl8URv/2m+/2tvONWY60bXb7jpJS+9+cqr6+cuy55Zl99fr/2f+qtzLcf/5Vvz8xGvjx399v0vJu7/wsfHz56bvTQzlc7qIxsbvzvnnfnxxOPdGN5b278+eu7ih6cvjE2OTWbZWHl/hd51+0qYP87Hle5bzy14B931UHg+b//zpzbs+NfPxsv//X355VffkX/fem3Y7vPh8k3h+Vve/hd6Yuutjdd37elwhHMLf1/wSmzZ/l8Hl7RhePztPxfE9X7+lR9unIf6dY3vG/F1vcLj//5Ufj/fCOd1Lvxm5m23zu+vefv4uxGuPpi/3ld8/sLbXHxe/yY83+/6YX7/8bji4/1++DnmW5tb3+/i+vjG5YH2+2/8Fo8r4f0ku5JfH7eK5/vq87d2PLz4e0iyK7c1vv6TdD+3LethLmb2E7MTp2fOXnp44uL07MWJ2U988uiZc5fOXjza+F2eRz/S6/bz708bGu9PU9P792WNd6tz+bjBXuzjP//QiakDkzumpk8ev3Ty4kPnpy+cOjE7e2J6anbH8ZMnpz/e6/YzU4d37zm098Ce8VMzU4cPHjq099D4zNlz9cPID6qH/ZMfHT974WjjJrOH9x3afe+9+ybHz5ybmj58YHJy/FKv2ze+N43Xb/374xemTx+/OHNmenx25pPTh3cf2r9/T8/fBnjm/MnZsYkLl85OXJqdvjCRP5axi42L69/7et2ecpr9j/zn2Xa1/BfxZe+5a3/6/ax1X3100bvKN2n7BaLPhd9F888vO39wKV/H3D8cZlKR/A8AAABVEHP/SJiJ/A8AAAClEXP/ujAT+R8AAABKI+b+0TCTiuT/0vX/N19e0v71//X/m8+X/n/F+v8PFq3/n79f6P/3x0r79/r/gf6//r/+v/6//j99ULT+f8z967OskvkfAAAAqiDm/g1hJvI/AAAAlEbM/TeFmcj/AAAAUBox978kzKQi+V//X/9f/1//X/+/8/71/9cm/f/u9P970P+fyKrV/7/Sz+PX/9f/Z6Gi9f9j7n9pmElF8j8AAABUQcz9N4eZyP8AAABQGjH3bwwzkf8BAACgNGLu3xRmUpH8r//ftf/fXkNelP5/6/Hr/3deH/r/+v/6/zee/n93+v896P/7/H/9f/1/+qpo/f+Y+18WZlKR/A8AAABVEHP/y8NM5H8AAAAonqHru1nM/a8IM1mQ/69zBwAAAMCLLub+W7K2InhF/v5f/9/n/xe//78uXaf/r/+fFbL/P5jp/xeH/n93+v896P/r/+v/6//TV0Xr/zdyfzaavTLMpCL5HwAAAKog5v5bw0zkfwAAACiNmPt/KcxE/gcAAIDSiLl/c5hJRfK//r/+f/H7/z7/X/+/6P1/n/9fJPr/3en/96D/r/+v/6//T18Vrf8fc/9tYSYVyf8AAABQBTH33x5mIv8DAABAacTc/8thJvI/AAAAlEbM/VvCTCqS//X/C97/j81R/X/9f/1//X/9/yXR/+9O/78H/X/9f/1//X/6qmj9/5j7XxVmUpH8DwAAAFUQc/8dYSbyPwAAAJRGzP2vDjOR/wEAAKA0Yu4fCzOpSP7X/y94/z/vwY/4/H/9f/1//X/9/6XR/+9O/78H/X/9/770/+cu6//r/5MrWv8/5v6tYSYVyf8AAABQBTH3bwszkf8BAACgNGLuvzPMRP4HAACA0oi5f3uYSUXyv/7/muj/Z/r/+v/6//r/+v9Lo//fnf5/D/r/+v8+/1//n74qWv8/5v7XhJlUJP8DAABAFcTcvyPMRP4HAACA0oi5/7VhJvI/AAAAlEbM/TvDTCqS//X/9f/1//X/9f8771//f23S/+9O/78H/X/9f/1//X/6qmj9/5j7XxdmUpH8DwAAAFUQc/+uMBP5HwAAAEoj5v67wkzkfwAAACiNmPvHw0wqkv/1//X/9f/1//X/O+9f/39t0v/vTv+/B/1//X/9f/1/+qpo/f+Y++8OM6lI/gcAAIAqiLn/njAT+R8AAABKI+b+iTAT+R8AAABKI+b+yTCTiuR//X/9f/1//f9l9f9fPX+/+v85/f9i0f/vTv+/B/1//f8Xvf8/rP9PqRSt/x9z/+4wk4rkfwAAAKiCmPv3hJnI/wAAAFAaMffvDTOR/wEAAKA0Yu7fF2ZSkfyv/6//r/+v/+/z/zvvX/9/bdL/767//f/4EPX/9f/1/33+v/4/CxWt/x9z/71hJhXJ/wAAAFAFMffvDzOR/wEAAKA0Yu4/EGYi/wMAAEBpxNx/MMykIvlf/1//X/9f/1//v/P+9f/XJv3/7nz+fw/6//r/+v/6/6zQg3/Y/FXR+v8x9x8KM6lI/gcAAIAqiLn/9WEm8j8AAACURsz9vxJmIv8DAABAacTc/6thJhXJ//r/Ld3z+sPV/9f/1//X/2/Q/1+b9P+70//vQf9f/1//X/+fvlq0/x+i92r3/2PuPxxmUpH8DwAAAFUQc/+vhZnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/SJhJRfK//r/P/9f/1//X/++8/9Xu/4/E+9X/XxH9/+70/3vQ/9f/1//X/6evivb5/zH3vzHMpCL5HwAAAKog5v77wkzkfwAAACiNmPvfFGYi/wMAAEBpxNz/5jCTiuR//X/9f/1//X/9/8779/n/a5P+f3f6/8GdGzsfgP6//r/+v/4/fVW0/n/M/W8JM6lI/gcAAIAqiLn/rWEm8j8AAACURsz9bwszkf8BAACgNGLuf3uYSUXyv/6//r/+v/6//n/n/ev/r036/93p//eg/6//r/+v/09fFa3/H3P/r4eZVCT/AwAAQBXE3H9/mIn8DwAAAKURc/87wkzkfwAAACiNmPvfGWZSkfyv/6//r/+v/6//33n/+v9rk/5/d2us//+Lm8Pl+v85/f9iH/9y+/9DbV/fkP7/Dxbr/8+ta7+9/j83QtH6/zH3vyvMpCL5HwAAAKog5v53h5nI/wAAAFAaMfe/J8xE/gcAAIDSiLn/N8JMKpL/9f/rxzHfXtb/L2v/f0D/X/9f/78i9P+7W2P9f5//30b/v9jH7/P/9f9ZqGj9/5j73xtmUpH8DwAAAFUQc/8DYSbyPwAAAJRGzP0PhpnI/wAAAFAaMfe/L8ykIvlf/9/n/1ej/+/z/zP9f/3/itD/707/vwf9f/3/ovX//1P/n7WtaP3/mPsfCjOpSP4HAACAKoi5//1hJvI/AAAAlEbM/b8ZZiL/AwAAQGnE3P+BMJOK5H/9/7XS/x9bo/3/R/X/b2D//46b8+30//X/maf/353+fw/6//r/Rev/+/x/1rii9f9j7v9gmMnS8//okrcEAAAAXhQx9/9WmElF/v4fAAAAqiDm/t8OM5H/AQAAoDRi7v+dMJOK5H/9/7XS//f5/5n+v8//b3s8+v/6/52sXv8/vvPo/+v/6/9H+v/6//r/tCta/z/m/t8NM6lI/gcAAIAqiLn/Q2Em8j8AAACsCZ3+n+x2MfcfDTOR/wEAAKA0Yu4/FmZSkfyv/6//r/9f0P7/n237l+99593Hduv/6//r/y/Lqn7+f/3F7/P/9f/1/xP9f/1//X/aFa3/H3P/8TCTiuR/AAAAqIKY+38vzET+BwAAgNKIuf9EmIn8DwAAAKURc/9UmElF8r/+v/6//n9B+/9r+PP/4/nQ/2/Vt/5/fNPV/+8o79+nVXRj+//vn++J6/8vt/8/0vFS/X/9/7V8/Pr/+v8sVLT+f8z902EmFcn/AAAAUAUh9w+czOf8FfI/AAAAlEbM/afCTOR/AAAAKI2Y+z8cZlKR/K//r/+v/6//7/P/O++/W/+/NuTz/4sq9e9/1nih6P+3KU7/vzP9f/3/tXz8+v/6/yxUtP5/zP0zYSYVyf8AAABQBTH3fyTMRP4HAACA0oi5/6NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f8777+wn/+v/9/VSvv3+v+B/n+1+///o/+v/6//T38Urf8fc/+ZMJOK5H8AAACogv9n706aLKvLPI7f7C66soJe9K4X3YuO6N71S2DRve5+AS7cuDHCcIEKKs4UziOKirMiOA84gCCigvMATiiKA6g4izNOiBJlkPU8T1Vmnjw3s+pm5jn//+ezqEfSSu6VqKjiV1lfT+7+8+MW+x8AAACakbv/UXGL/Q8AAADNyN3/6Lilk/2v/z+b/v9Upaz/3/z+J9H//4/+f6fX1//r/1um/x+n/19C/+/5//p//T8rNbX+P3f/Y+KWTvY/AAAA9CB3/wVxi/0PAAAAzcjdf2HcYv8DAABAM3L3PzZu6WT/b+n/1xZ99v+Z8Xr+f0v9v+f/7/j6+n/9f8sOtv+/5MGf+fT/+n/9f9D/76r/P7rT5+v/adHU+v/c/Y+LWzrZ/wAAANCD3P2Pj1vsfwAAAGhG7v6L4hb7HwAAAJqRu/8JcUsn+391z/8/tvHxmfb/Rf+v/9/4gP5f/6//ny3P/x/XU/9/4e3nnn/v9f92w15eX/+v//f8f/0/qzW1/j93/xPjlk72PwAAAPQgd/+T4hb7HwAAAJqRu//JcYv9DwAAAM3I3f+UuKWT/b+6/n/Wz/8v+n/9/8YH9P/6f/3/bOn/x/XU/5/J6+v/9f/6f/0/qzW1/j93/1Pjlk72PwAAAPQgd//T4hb7HwAAAJqRu//iuMX+BwAAgGbk7j8et3Sy//X/+9//P6D/1//H1f/r//X/+0//P07/v4T+X/+v/9f/s1JT6/9z918St3Sy/wEAAKAHufufHrfY/wAAANCM3P3PiFvsfwAAAGhG7v5nxi2d7H/9v+f/6/+X9/8X6P+D/l//P336/3H6/yX0/2fbz5+j/9f/6/853R77//tHftpeSf+fu/9ZcUsn+x8AAAB6kLv/2XGL/Q8AAADNyN3/nLjF/gcAAIBm5O5/btzSyf7X/+v/9f+e/3/G/f/2H3ob9P/D9P8HQ/8/bjL9/9qRwQ/r/2ff/3v+v/5f/88mU3v+f+7+58Utnex/AAAA6EHu/ufHLSP7f8+/mQ8AAAAcqtz9L4hbfP0fAAAAZi+rs9z9L4xbOtn/+n/9v/5f/+/5/8OvP9b/33Da+9P/T4v+f9xk+v8d6P/1/3N+//p//T/bTa3/z93/orilk/0PAAAAPcjdf2ncYv8DAABAM3L3vzhusf8BAACgGbn7XxK3dLL/h/v/U/+9/n939P+b37/+f/jHx6r6//w76v9H+///9fz/Pun/xx18/39U/7/576//30eH/f4b7/+PLft8/T9Dptb/5+6/LG7pZP8DAABAD3L3vzRusf8BAACgGbn7Xxa32P8AAADQjNz9L49bOtn/nv+v/9f/z6//9/z/kw7z+f+LA+//j+j/d0n/P87z/5fQ/+v/9f+e/89KTa3/z91/edzSyf4HAACAHlx+32Jj979isbD/AQAAYI5O/7MDW/9Aacjd/8q4xf4HAACAZuTuf1Xc0sn+1//r//X/+n/9//DrT6v/9/z/3dL/j9P/L6H/349+/khj/f8VO33+FPr/i/X/TMym/v+mUx8/rP4/d/+r45ZO9j8AAAD0IHf/a+IW+x8AAACakbv/tXGL/Q8AAADNyN3/urilk/2/7/3/sZ1fe+b9/6byRP+/+f3r/zfT/8ePB/2//v8A6P/H6f+X0P97/r/n/+v/WalT/f/mnw8Pq//P3f/6uKWT/Q8AAAA9yN3/hrjF/gcAAIBm5O6/Im6x/wEAAKAZufvfGLd0sv89/9/z//X/+n/9//Dr6//nSf8/Tv+/hP5f/6//1/+zUpue/3+aw+r/c/dfGbd0sv8BAACgB7n7r4pb7H8AAABoRu7+N8Ut9j8AAAA0I3f/m+OWTva//n9/+//8uP5f/7/Q/+v/9f8Hotv+f23oV6Ltduj/b33E8f/f/BH9v/5f/6//1/+zApPo/0+c+rfL3P1viVs62f8AAADQg9z9b41b7H8AAABoRu7+t8Ut9j8AAAA0I3f/2+OWPe7/f1npuzo4+n/P/9f/6//1/8Ovr/+fp277/13y/P8l9P/6f/2//p+VmkT/f9pf5+5/R9zi6/8AAADQjNz974xb7H8AAABoRu7+d8Ut9j8AAAA0I3f/u+OWTva//l//r/+fZf9/XnwX/f8E+//1xTD9/8HQ/4/T/y+h/9f/6//1/6zU1Pr/3P1Xxy2d7H8AAADoQe7+98Qt9j8AAAA0I3f/e+MW+x8AAACakbv/fXFLJ/tf/6//1//Psv/3/P8J9/870f8fDP3/OP3/YrG4ZuQNDPX/J47q//X/+n/9P2doav1/7v73xy2d7H8AAADoQe7+a+IW+x8AAACakbv/2rjF/gcAAIBm5O7/QNzSyf7X/+v/9f/6f/3/8Ovr/+dJ/z9O/7+E5//r//X/+n9Wamr9f+7+6+KWTvY/AAAA9CB3//Vxi/0PAAAAzcjd/8G4xf4HAACAZuTuvyFu6WT/6//1//p//f++9P/H9f9b6f8Pxv71/wv9v/5f/7+E/l//r/9nq4Pq/++Pn++X9f+5+z8Ut3Sy/wEAAKAHuftvjFvsfwAAAGhG7v4Pxy32PwAAADQjd/9H4pZO9r/+X/+v/9f/e/7/8Ovr/+fJ8//H6f+X0P/r//X/+n9W6qD6/516/61/nbv/o3FLJ/sfAAAAepC7/6a4xf4HAACAZuTuvzlusf8BAACgGbn7Pxa3dLL/9f/6/839/2Kh/9f/6/9POoD+f32h/185/f84/f8S+v82+/9/WDTU/x/b8fP1/0zR1Pr/3P0fj1s62f8AAADQg9z9n4hb7H8AAABoRu7+T8Yt9j8AAAA0I3f/p+KWlvb/Azunb/Pv/49u+UT9/2KxuPMiz//X/4+8vv5/Mv1//VPV/6+O/n/cv//XPXes7+Y76v/1/y31/57/r//n0Eyt/8/d/+m4paX9DwAAAJ3L3f+ZuMX+BwAAgGbk7v9s3GL/AwAAQDNy938ubulk/8+//9/6ifr/xVk9/1//v/EB/b/+X/8/W2fb31+5Hr+mtdv/e/7/GP3/0n5+bYd/71no//X/+n8GTK3/z93/+bilk/0PAAAAPcjdf0vcYv8DAABAM3L33xq32P8AAADQjNz9X4hbOtn/+n/9/5z6/3X9f/X/6/p//b/+f9BUnv9/3nn/d5v+X//fYv8/Rv+v/9f/s9XU+v/c/V+MWzrZ/wAAANCD3P1filvsfwAAAGhG7v4vxy32PwAAADQjd/9X4pZO9v/2/v+cxclC9aSh/j8aNf3/afT/m9+/5/8P//jw/H/9v/5//02l//f8/zN7//p//f+c3/+e+v//2P75+n9aNLX+P3f/bXFLJ/sfAAAAepC7/6txi/0PAAAAzcjd/7W4xf4HAACAZuTuvz1u6WT/e/6//l//r//X/w+/vv5/nvT/4/T/S+j/z76fz59V9f/zff7/P+r/WZ2p9f+5+78et2wMv//85zP8nwkAAABMSO7+b8QtnXz9HwAAAHqQu/+OuMX+BwAAgGbk7v9m3NLJ/tf/6//1//p//f/w6+v/50n/P07/v0Q//f/60AcPu58/W4f9/pvp/z3/nxWaWv+fu/9bcUsn+x8AAADadt/Gt7n7vx232P8AAADQjNz934lb7H8AAABoRu7+O+OWTva//l//337//zD9/5bX1//r/1um/89f0Yfp/5fop/8fdNj9/Nzfv/5f/892U+v/c/ffFbd0sv8BAACgB7n7vxu32P8AAADQjNz934tb7H8AAABoRu7+78ctnex//X9f/f/aosf+3/P/9f/6/57Mp/+/6sjQRz3/X/+v/5/v+9f/6//Zbmr9f+7+u9eOdLn/AQAAYK4e8t+PvGu33/fujW/XFz+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/6/r/6/z+f/6//1//r/nsyn/x+m/9f/6//n+/576P//aeTz9f8MmVr/n7v/x3HLacNv8P+gBwAAADg8Y78pNSB3/0/ilk6+/g8AAAA9yN3/07hl2/4/scs/1Q4AAABMTe7+n8UtnXz9X/8/8f5/sU/9f3w//f9J+n/9/9Dr6//nSf8/7iz7/xNr+n/9/wj9f/v9/xj9P0Om1v/n7r/xukWX+x8AAAAatel3FH6+8e364p64xf4HAACAZuTu/0XcYv8DAABAM3L3/zJu6WT/6/8n3v+f0fP/j9V/8vz/zvv/S9cHX1//r/9vmf5/nOf/L6H/1//r//X/rNQe+v+NQbrf/X/u/l/FLZ3sfwAAAOhB7v5fxy32PwAAADQjd/9v4hb7HwAAAJqRu/+3cUsn+1//fwj9/2VHF4t97f938fx//X8f/f8Or99O//+v5x6/5aEPv/Zq/T+nHGT/nz8W9P/6f/3/Sfp//b/+n62m9vz/3P2/i1s62f8AAADQg9z998Yt9j8AAAA0I3f/7+OWB/f/zYf1rgAAAIBVyt3/h7ilk6//6/9bfP7/PPv//Gd9CP3/8fn1/9kU997/e/6//n87z/8fp/9fQv+v/9f/6/9Zqan1/7n7/xi3dLL/AQAAoAe5+/8Ut+T+X9vzb90DAAAAE5O7/89xi6//AwAAQDNy998Xt3Sy//X/+v+p9P/J8/9PfZ7n/5+k/9f/74X+f5z+fwn9v/5f/6//Z6Wm1v/n7v9L3NLJ/gcAAIAe5O6/P26x/wEAAKAZufv/GrfY/wAAANCM3P1/i1s62f/6f/2//l//r/8ffn39/zzp/8fp/5fQ/+v/9f/6f1Zqav1/7v6/BwAA//+l7G5O") lsetxattr$security_ima(&(0x7f0000000240)='./file1\x00', &(0x7f0000000340), &(0x7f0000000380)=@ng={0x4, 0x17}, 0x2, 0x0) 921.501495ms ago: executing program 4 (id=2506): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0x149) 805.738177ms ago: executing program 4 (id=2508): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) 723.327205ms ago: executing program 0 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x46}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 511.272157ms ago: executing program 0 (id=2510): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @empty}}}], 0x20}}], 0x1, 0x80) 371.017261ms ago: executing program 0 (id=2511): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x800800, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d62710efebadf14e33c167c33aec426bc6a9d6e643a302d4e3a"]) 261.792792ms ago: executing program 0 (id=2512): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000140)="75d73a70024c05930c6126bccceca7d827c310a828c89783fa5ee343c32e5479df67a9660fc280c5647a322841b767f41cfe48d962e23e1d485b60760f04ca00305922726629a117", 0x48}, {&(0x7f00000001c0)="ac7e2d157468ebb6eaee30da06ee7d7d69fa58c6c61f4198b5a2c59cb0d8526713481ee6e79836107ad52035fa57f371c614de4e0947db43ac6aeff868f3a0b167242664318969937a9c0812b8794a8706eedf68c082040e346dc3f995587af7f906cee9ca6d47d579ff0a78e55fe16d96acda3606172ca1d83add4a3693c8ee562085b28a79164e4db9a55334aad34a990d8faf2abb40f83ac9e3ae3c795c00"/173, 0xad}, {&(0x7f0000000280)="2bdcd757f046d9c3d7f9b5ce466a0c027bb5438d", 0x14}, {&(0x7f00000002c0)="42a4ae7cfe62478d02ff4127baa1983648069aced4f3fb6edc0c65aeb1f734ea107c4816e39cd03b596733a95ff3efc1e8033017aba7aadf36d52fc026f8816edd44acf640a8fb6ae6f9adb9335fff70f91d26a77da4ca09a93d73fb28366e8c371561d8c60ad4f474a396e369b877f6703bcfbbe72a3a2275bd9bf239d8570ca775a89e4896a45373a1f6a50bde4b28f1d970b8b05cb2a278dbd2f106b858c3b296acfeb2e211cc588fbe52a84d8bb2bdf19a86", 0xb4}, {&(0x7f0000000380)="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", 0x3bf}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 205.813348ms ago: executing program 2 (id=2513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc1) 165.252072ms ago: executing program 0 (id=2514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) 163.546562ms ago: executing program 4 (id=2515): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=cp850,time_offset=0x000000000000000a,namecase=1,iocharset=cp936,errors=remount-ro,allow_utime=00000000000000000000007,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000002367,dmask=00000000000000000000015,fmask=00000000000000000000100,permit_directio,dont_measure,euid<', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=.%{,fownur=', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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") chdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 120.050617ms ago: executing program 3 (id=2516): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1b00000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c24144800050000050080dd090581030002000000090401"], 0x0) 38.650496ms ago: executing program 2 (id=2517): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x700, 0x1, 0x900}}) 21.857777ms ago: executing program 0 (id=2518): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x110, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 0s ago: executing program 1 (id=2519): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)=@mmap={0x6, 0x3, 0x4, 0x70000, 0x100, {0x0, 0x2710}, {0x5, 0x0, 0x5, 0x7, 0x4, 0x1, "3e3823f7"}, 0x10001, 0x1, {}, 0x5}) kernel console output (not intermixed with test programs): invalid altsetting 3 [ 105.043684][ T4681] comedi comedi5: could not set alternate setting 3 in high speed [ 105.076797][ T4681] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 105.119238][ T4681] usbduxsigma: probe of 5-1:0.0 failed with error -22 [ 105.140398][ T4796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 105.224379][ T4796] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 105.252762][ T4796] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 105.294633][ T4796] usb 3-1: config 4 has no interface number 0 [ 105.297111][ T6402] netlink: 'syz.1.909': attribute type 21 has an invalid length. [ 105.309485][ T4681] usb 5-1: USB disconnect, device number 5 [ 105.340366][ T6402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.909'. [ 105.404520][ T6406] loop0: detected capacity change from 0 to 256 [ 105.460420][ T4796] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 105.465713][ T6406] autofs4:pid:6406:autofs_fill_super: called with bogus options [ 105.469486][ T4796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.469518][ T4796] usb 3-1: Product: syz [ 105.469533][ T4796] usb 3-1: Manufacturer: syz [ 105.469546][ T4796] usb 3-1: SerialNumber: syz [ 105.692639][ T6416] netlink: 'syz.1.916': attribute type 8 has an invalid length. [ 105.708104][ T6416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.800986][ T6421] netlink: 100 bytes leftover after parsing attributes in process `syz.0.918'. [ 105.940273][ T4796] usb 3-1: Found UVC 0.02 device syz (04f2:b746) [ 105.969070][ T4796] usb 3-1: No valid video chain found. [ 105.981643][ T4796] usb 3-1: USB disconnect, device number 9 [ 106.026398][ T6436] loop4: detected capacity change from 0 to 2048 [ 106.106302][ T6436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.115518][ T6442] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 106.117960][ T6435] loop1: detected capacity change from 0 to 4096 [ 106.319671][ T6435] __ntfs_error: 6 callbacks suppressed [ 106.319688][ T6435] ntfs: (device loop1): parse_options(): NLS character set cp8ƒÓ O¥¿one_multiplier=0x0000000000000001gid=0 not found. Using previous one cp862. [ 106.395984][ T6459] xt_connbytes: Forcing CT accounting to be enabled [ 106.407004][ T6457] ERROR: device name not specified. [ 106.427839][ T6435] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 106.451088][ T6459] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 106.460351][ T6435] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 106.493833][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.939'. [ 106.502595][ T6435] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 106.550301][ T6435] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 106.594522][ T6435] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 106.628297][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'. [ 106.646854][ T6435] ntfs: volume version 3.1. [ 106.647937][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.4.943'. [ 106.677799][ T6435] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 106.719366][ T6435] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 106.790533][ T6435] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 106.817789][ T6481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 106.827497][ T6435] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 107.145354][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.248711][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 107.290723][ T6502] loop4: detected capacity change from 0 to 4096 [ 107.339033][ T6514] loop3: detected capacity change from 0 to 8 [ 107.400039][ T6518] loop2: detected capacity change from 0 to 128 [ 107.401582][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 107.423975][ T6502] ntfs: volume version 3.1. [ 107.469685][ T6518] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 107.477535][ T6514] SQUASHFS error: Failed to read block 0x1ec: -5 [ 107.510590][ T6514] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 107.590723][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.638972][ T4192] sysv_free_block: flc_count > flc_size [ 107.670471][ T25] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 107.678715][ T25] usb 1-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 107.694791][ T4192] sysv_free_block: flc_count > flc_size [ 107.729145][ T6528] loop3: detected capacity change from 0 to 2048 [ 107.730160][ T4192] sysv_free_block: flc_count > flc_size [ 107.745229][ T25] usb 1-1: config 4 has no interface number 0 [ 107.780249][ T4192] sysv_free_block: flc_count > flc_size [ 107.806032][ T4192] sysv_free_block: flc_count > flc_size [ 107.818880][ T6532] loop4: detected capacity change from 0 to 64 [ 107.825226][ T4192] sysv_free_block: flc_count > flc_size [ 107.836811][ T4192] sysv_free_block: flc_count > flc_size [ 107.842871][ T4192] sysv_free_block: flc_count > flc_size [ 107.848218][ T6530] loop1: detected capacity change from 0 to 4096 [ 107.848556][ T4192] sysv_free_block: flc_count > flc_size [ 107.874995][ T4192] sysv_free_block: flc_count > flc_size [ 107.894909][ T4192] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 107.904937][ T6528] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.911187][ T25] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 107.949916][ T6530] ntfs: volume version 3.1. [ 107.980020][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.990745][ T25] usb 1-1: Product: syz [ 108.009945][ T25] usb 1-1: Manufacturer: syz [ 108.016103][ T25] usb 1-1: SerialNumber: syz [ 108.144016][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.975'. [ 108.180494][ T6538] netlink: 40 bytes leftover after parsing attributes in process `syz.4.975'. [ 108.437336][ T25] usb 1-1: Found UVC 0.02 device syz (04f2:b746) [ 108.451583][ T25] usb 1-1: No valid video chain found. [ 108.470583][ T25] usb 1-1: USB disconnect, device number 8 [ 108.481735][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.528087][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.548312][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.568655][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.593917][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.609289][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.623804][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.638124][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.653358][ T6558] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 108.666636][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.989'. [ 108.719051][ T6572] loop4: detected capacity change from 0 to 512 [ 108.798491][ T6572] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 108.830377][ T6572] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.557693][ T6596] device bond1 entered promiscuous mode [ 109.578222][ T6596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.605976][ T6591] loop3: detected capacity change from 0 to 32768 [ 109.614021][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1002'. [ 109.692074][ T6591] ERROR: (device loop3): diAllocAG: numfree > numinos [ 109.692074][ T6591] [ 109.755958][ T6591] ialloc: diAlloc returned -5! [ 110.538454][ T6677] loop1: detected capacity change from 0 to 64 [ 110.709516][ T6693] __nla_validate_parse: 4 callbacks suppressed [ 110.709532][ T6693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 110.735794][ T6691] loop2: detected capacity change from 0 to 1024 [ 110.760557][ T6693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1049'. [ 110.881476][ T144] hfsplus: b-tree write err: -5, ino 4 [ 110.888687][ T6703] netlink: 'syz.4.1053': attribute type 4 has an invalid length. [ 110.900351][ T6701] loop1: detected capacity change from 0 to 4096 [ 110.912874][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 110.933428][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 110.958287][ T6701] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 110.982960][ T6707] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1055'. [ 110.994334][ T6712] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1057'. [ 111.115396][ T6718] loop0: detected capacity change from 0 to 256 [ 111.136189][ T6720] x_tables: ip_tables: osf match: only valid for protocol 6 [ 111.250287][ T4797] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.271814][ T6725] loop1: detected capacity change from 0 to 1024 [ 111.304698][ T6725] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 111.326270][ T6725] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #32: comm syz.1.1064: iget: special inode unallocated [ 111.338306][ T6727] net_ratelimit: 8339 callbacks suppressed [ 111.338322][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.365317][ T6725] EXT4-fs (loop1): no journal found [ 111.385739][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.390525][ T6725] EXT4-fs (loop1): can't get journal size [ 111.417766][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.436861][ T6732] overlayfs: workdir and upperdir must be separate subtrees [ 111.444471][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.447952][ T6725] EXT4-fs (loop1): filesystem is read-only [ 111.454504][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.473699][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.483796][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.492520][ T6725] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,resuid=0x0000000000000000,. Quota mode: none. [ 111.493702][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.519505][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.529614][ T6727] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 111.628270][ T6725] EXT4-fs error (device loop1): ext4_lookup:1850: inode #2: comm syz.1.1064: bad inode number: 12 [ 111.680292][ T4797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 111.760592][ T4797] usb 3-1: config 170 has an invalid interface number: 105 but max is 1 [ 111.776479][ T4797] usb 3-1: config 170 has an invalid interface number: 96 but max is 1 [ 111.812196][ T4797] usb 3-1: config 170 has no interface number 0 [ 111.844799][ T4797] usb 3-1: config 170 has no interface number 1 [ 111.875919][ T4797] usb 3-1: config 170 interface 105 has no altsetting 0 [ 111.906726][ T6715] loop4: detected capacity change from 0 to 32768 [ 111.913337][ T4797] usb 3-1: config 170 interface 96 has no altsetting 0 [ 111.981996][ T6715] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 112.170435][ T4797] usb 3-1: string descriptor 0 read error: -22 [ 112.176804][ T4797] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice=1a.25 [ 112.215910][ T4797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.295150][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 112.385115][ T6740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.574199][ T4796] usb 3-1: USB disconnect, device number 10 [ 112.668855][ T6752] netlink: 'syz.3.1078': attribute type 21 has an invalid length. [ 112.698015][ T6754] overlayfs: missing 'lowerdir' [ 112.715804][ T6752] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1078'. [ 112.954375][ T6768] loop0: detected capacity change from 0 to 128 [ 112.969186][ T6762] loop3: detected capacity change from 0 to 4096 [ 112.993095][ T6762] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 113.029133][ T6768] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.072565][ T6768] hpfs: filesystem error: improperly stopped [ 113.078813][ T6768] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 113.110063][ T6762] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 113.117606][ T6768] hpfs: You really don't want any checks? You are crazy... [ 113.160817][ T6768] hpfs: hpfs_map_sector(): read error [ 113.162209][ T6762] ntfs3: loop3: mft corrupted [ 113.170784][ T6768] hpfs: code page support is disabled [ 113.198632][ T6768] hpfs: hpfs_map_4sectors(): unaligned read [ 113.221633][ T6768] hpfs: hpfs_map_4sectors(): unaligned read [ 113.230693][ T6762] ntfs3: loop3: Failed to load $Extend. [ 113.236223][ T6777] sctp: [Deprecated]: syz.4.1088 (pid 6777) Use of int in max_burst socket option deprecated. [ 113.236223][ T6777] Use struct sctp_assoc_value instead [ 113.264558][ T6748] loop1: detected capacity change from 0 to 32768 [ 113.271164][ T6768] hpfs: filesystem error: unable to find root dir [ 113.300864][ T6748] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1075 (6748) [ 113.316470][ T6768] hpfs: hpfs_map_4sectors(): unaligned read [ 113.341240][ T6768] hpfs: hpfs_map_sector(): read error [ 113.376742][ T6748] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.418489][ T6748] BTRFS info (device loop1): enabling auto defrag [ 113.446071][ T6782] loop2: detected capacity change from 0 to 128 [ 113.460300][ T6748] BTRFS info (device loop1): force clearing of disk cache [ 113.510285][ T6748] BTRFS info (device loop1): max_inline at 0 [ 113.516318][ T6748] BTRFS info (device loop1): turning on sync discard [ 113.542439][ T6782] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.558575][ T6748] BTRFS info (device loop1): using free space tree [ 113.593655][ T6748] BTRFS info (device loop1): has skinny extents [ 113.627965][ T6782] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 113.693713][ T6782] ext4 filesystem being mounted at /141/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.827025][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1099'. [ 113.840878][ T6807] Cannot find add_set index 0 as target [ 113.978757][ T6825] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 113.987167][ T6825] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1105'. [ 113.997091][ T6825] netlink: 'syz.2.1105': attribute type 1 has an invalid length. [ 114.089717][ T6837] loop4: detected capacity change from 0 to 1024 [ 114.115576][ T6748] BTRFS info (device loop1): enabling ssd optimizations [ 114.148862][ T6748] BTRFS info (device loop1): clearing free space tree [ 114.149562][ T6841] xt_TCPMSS: Only works on TCP SYN packets [ 114.186314][ T6748] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.207602][ T6845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1112'. [ 114.239173][ T6748] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.254353][ T6849] netlink: 'syz.2.1114': attribute type 3 has an invalid length. [ 114.278134][ T6837] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 114.307345][ T6853] loop3: detected capacity change from 0 to 64 [ 114.357244][ T6748] BTRFS info (device loop1): creating free space tree [ 114.414195][ T6748] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.450031][ T6748] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.758332][ T6876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 114.768429][ T6877] loop3: detected capacity change from 0 to 1024 [ 115.035057][ T9] hfsplus: b-tree write err: -5, ino 4 [ 115.080430][ T4290] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 115.117548][ T6896] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 115.136301][ T6896] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.188049][ T6902] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 115.227171][ T6904] loop0: detected capacity change from 0 to 512 [ 115.350192][ T4290] usb 3-1: Using ep0 maxpacket: 16 [ 115.366841][ T6904] EXT4-fs (loop0): orphan cleanup on readonly fs [ 115.460360][ T6904] __quota_error: 11 callbacks suppressed [ 115.460377][ T6904] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 115.537259][ T6904] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 115.594568][ T6904] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.1139: Failed to acquire dquot type 0 [ 115.621052][ T6904] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 115.645743][ T6904] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 115.666067][ T6904] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.1139: Failed to acquire dquot type 0 [ 115.694045][ T4290] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 115.720474][ T6904] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1139: bg 0: block 64: padding at end of block bitmap is not set [ 115.734854][ T4290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.760195][ T4290] usb 3-1: Product: syz [ 115.769785][ T6899] loop3: detected capacity change from 0 to 32768 [ 115.773551][ T4290] usb 3-1: Manufacturer: syz [ 115.797418][ T6904] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 115.800187][ T4290] usb 3-1: SerialNumber: syz [ 115.837371][ T6899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1135 (6899) [ 115.841875][ T4290] usb 3-1: config 0 descriptor?? [ 115.871662][ T6904] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 115.881581][ T6904] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 115.891597][ T6904] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.1139: Failed to acquire dquot type 0 [ 115.912378][ T6899] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 115.927245][ T6899] BTRFS info (device loop3): enabling auto defrag [ 115.936666][ T6899] BTRFS info (device loop3): force clearing of disk cache [ 115.949597][ T6904] EXT4-fs (loop0): 1 orphan inode deleted [ 115.958062][ T6899] BTRFS info (device loop3): max_inline at 0 [ 115.969487][ T6904] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 115.990465][ T6899] BTRFS info (device loop3): turning on sync discard [ 115.997364][ T6899] BTRFS info (device loop3): using free space tree [ 116.017480][ T6899] BTRFS info (device loop3): has skinny extents [ 116.128731][ T6908] loop1: detected capacity change from 0 to 32768 [ 116.164070][ T6906] loop4: detected capacity change from 0 to 32768 [ 116.176132][ T4290] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 116.185570][ T4290] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 116.242228][ T6908] ERROR: (device loop1): diAllocAG: numfree > numinos [ 116.242228][ T6908] [ 116.254100][ T6908] ialloc: diAlloc returned -5! [ 116.271942][ T6930] loop0: detected capacity change from 0 to 64 [ 116.309016][ T6899] BTRFS info (device loop3): enabling ssd optimizations [ 116.335910][ T6899] BTRFS info (device loop3): clearing free space tree [ 116.350001][ T6930] Trying to free block not in datazone [ 116.356109][ T6899] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.418369][ T6938] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 116.426639][ T6899] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 116.441934][ T6930] Trying to free block not in datazone [ 116.447537][ T6930] Trying to free block not in datazone [ 116.474157][ T6936] __nla_validate_parse: 2 callbacks suppressed [ 116.474172][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'. [ 116.500278][ T6930] Trying to free block not in datazone [ 116.530347][ T6936] netlink: 'syz.4.1146': attribute type 1 has an invalid length. [ 116.537932][ T6930] minix_free_block (loop0:6): bit already cleared [ 116.551662][ T6899] BTRFS info (device loop3): creating free space tree [ 116.596207][ T6930] Trying to free block not in datazone [ 116.599140][ T6899] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.614843][ T4290] usb 3-1: USB disconnect, device number 11 [ 116.620330][ T6930] Trying to free block not in datazone [ 116.660888][ T6899] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.172151][ T150] block nbd4: Attempted send on invalid socket [ 117.178360][ T150] blk_update_request: I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.200241][ T6963] vxfs: unable to read disk superblock at 1 [ 117.312078][ T150] block nbd4: Attempted send on invalid socket [ 117.319167][ T150] blk_update_request: I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.331944][ T6963] vxfs: unable to read disk superblock at 8 [ 117.338310][ T6963] vxfs: can't find superblock. [ 117.431728][ T6975] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 117.652742][ T6990] loop0: detected capacity change from 0 to 64 [ 117.729513][ T6948] loop1: detected capacity change from 0 to 32768 [ 117.816091][ T6948] XFS: attr2 mount option is deprecated. [ 117.928748][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 117.972364][ T6948] XFS (loop1): Mounting V5 Filesystem [ 117.985255][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1176'. [ 118.047108][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 118.057466][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 118.131383][ T6987] loop2: detected capacity change from 0 to 32768 [ 118.241507][ T6987] XFS: attr2 mount option is deprecated. [ 118.255918][ T6948] XFS (loop1): Ending clean mount [ 118.331699][ T6948] XFS (loop1): Quotacheck needed: Please wait. [ 118.400558][ T6948] XFS (loop1): Quotacheck: Done. [ 118.410594][ T6987] XFS (loop2): Mounting V5 Filesystem [ 118.609100][ T6948] UBIFS error (pid: 6948): cannot open "./file0", error -22 [ 118.652403][ T6987] XFS (loop2): Ending clean mount [ 118.724855][ T4182] XFS (loop1): Unmounting Filesystem [ 118.725252][ T6987] XFS (loop2): Quotacheck needed: Please wait. [ 118.878575][ T6987] XFS (loop2): Quotacheck: Done. [ 118.968147][ T7058] loop4: detected capacity change from 0 to 512 [ 119.012662][ T4192] XFS (loop2): Unmounting Filesystem [ 119.108356][ T7058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 119.253977][ T7058] EXT4-fs (loop4): 1 truncate cleaned up [ 119.283977][ T7070] loop3: detected capacity change from 0 to 1024 [ 119.290995][ T7058] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,user_xattr,nolazytime,quota,,errors=continue. Quota mode: writeback. [ 119.403813][ T7058] cifs: Unknown parameter 'quota' [ 119.543045][ T7080] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1207'. [ 119.583520][ T7082] loop0: detected capacity change from 0 to 1024 [ 119.610314][ T7080] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1207'. [ 119.839363][ T7098] overlayfs: missing 'lowerdir' [ 120.052605][ T7112] net_ratelimit: 5459 callbacks suppressed [ 120.052621][ T7112] netlink: zone id is out of range [ 120.103294][ T7112] netlink: zone id is out of range [ 120.108566][ T7112] netlink: zone id is out of range [ 120.138927][ T7112] netlink: zone id is out of range [ 120.163168][ T7112] netlink: zone id is out of range [ 120.168320][ T7112] netlink: zone id is out of range [ 120.176735][ T7118] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 120.244163][ T7112] netlink: zone id is out of range [ 120.264406][ T7112] netlink: zone id is out of range [ 120.269547][ T7112] netlink: zone id is out of range [ 120.329762][ T7112] netlink: zone id is out of range [ 120.495661][ T7135] deleting an unspecified loop device is not supported. [ 120.728144][ T7091] loop1: detected capacity change from 0 to 32768 [ 120.776863][ T7148] loop0: detected capacity change from 0 to 2048 [ 120.837015][ T7091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1211 (7091) [ 120.873462][ T7158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.932057][ T7091] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 120.945725][ T7148] NILFS (loop0): error -2 truncating bmap (ino=16) [ 120.985602][ T7091] BTRFS info (device loop1): using free space tree [ 121.036579][ T7091] BTRFS info (device loop1): has skinny extents [ 121.327959][ T7187] device erspan1 entered promiscuous mode [ 121.498268][ T7205] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1258'. [ 121.512596][ T7091] BTRFS info (device loop1): enabling ssd optimizations [ 121.630732][ T1281] block nbd1: Attempted send on invalid socket [ 121.636978][ T1281] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 121.830314][ T4253] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.071360][ T7239] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 122.090298][ T4253] usb 3-1: Using ep0 maxpacket: 16 [ 122.210377][ T4253] usb 3-1: config 0 has an invalid interface number: 94 but max is 0 [ 122.210406][ T4253] usb 3-1: config 0 has no interface number 0 [ 122.210436][ T4253] usb 3-1: config 0 interface 94 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 122.210463][ T4253] usb 3-1: config 0 interface 94 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 122.210486][ T4253] usb 3-1: config 0 interface 94 has no altsetting 0 [ 122.254007][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 122.312844][ T7256] xt_TCPMSS: Only works on TCP SYN packets [ 122.371428][ T4253] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=4e.9b [ 122.371459][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.371480][ T4253] usb 3-1: Product: syz [ 122.371494][ T4253] usb 3-1: Manufacturer: syz [ 122.371509][ T4253] usb 3-1: SerialNumber: syz [ 122.373202][ T4253] usb 3-1: config 0 descriptor?? [ 122.374596][ T7260] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 122.390434][ T7214] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.727318][ T7281] loop0: detected capacity change from 0 to 64 [ 122.796542][ T7284] x_tables: unsorted entry at hook 3 [ 122.860532][ T4253] keyspan 3-1:0.94: Keyspan 4 port adapter converter detected [ 122.868372][ T4253] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 81 [ 122.893767][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 122.904096][ T4253] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 88 [ 122.910330][ T7290] netlink: 'syz.0.1297': attribute type 5 has an invalid length. [ 122.954862][ T4253] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 1 [ 122.993742][ T7294] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 123.007851][ T4253] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 123.035245][ T7296] loop1: detected capacity change from 0 to 16 [ 123.044402][ T4253] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 2 [ 123.088683][ T4253] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 123.114775][ T7296] erofs: (device loop1): mounted with root inode @ nid 36. [ 123.130187][ T4253] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 4 [ 123.148738][ T7302] netlink: 'syz.4.1304': attribute type 32 has an invalid length. [ 123.178257][ T4253] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 123.207878][ T4253] keyspan 3-1:0.94: found no endpoint descriptor for endpoint 6 [ 123.250452][ T4253] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 123.289364][ T4253] usb 3-1: USB disconnect, device number 12 [ 123.381335][ T4253] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 123.397264][ T7306] loop3: detected capacity change from 0 to 4096 [ 123.429159][ T4253] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 123.456690][ T4253] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 123.482144][ T7306] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 123.503900][ T4253] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 123.530202][ T7323] loop1: detected capacity change from 0 to 256 [ 123.538365][ T4253] keyspan 3-1:0.94: device disconnected [ 123.545402][ T7306] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 123.603480][ T7323] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.632503][ T7323] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 123.666133][ T7306] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 123.684249][ T7306] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 123.706107][ T7323] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 123.742305][ T7306] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 123.779423][ T7323] exFAT-fs (loop1): error, failed to bmap (inode : ffff888060a2a1e0 iblock : 16, err : -5) [ 123.789538][ T7306] ntfs: volume version 3.1. [ 123.789585][ T7306] ntfs: (device loop3): ntfs_read_locked_inode(): Inode is not in use! [ 123.789607][ T7306] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 123.789649][ T7306] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 123.850602][ T7306] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 123.880322][ T7306] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 123.900826][ T7341] loop0: detected capacity change from 0 to 64 [ 123.906503][ T7323] exFAT-fs (loop1): Filesystem has been set read-only [ 123.961234][ T7345] loop2: detected capacity change from 0 to 512 [ 123.990207][ T5779] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.990487][ T7345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 124.032906][ T7345] System zones: 1-12 [ 124.037825][ T7345] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.126744][ T7345] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1325: invalid indirect mapped block 8 (level 2) [ 124.240707][ T7345] EXT4-fs (loop2): 1 truncate cleaned up [ 124.252643][ T7345] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.281721][ T5779] usb 5-1: Using ep0 maxpacket: 32 [ 124.430445][ T5779] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 124.438590][ T5779] usb 5-1: config 0 has no interface number 0 [ 124.465950][ T5779] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.508301][ T5779] usb 5-1: config 0 interface 85 has no altsetting 0 [ 124.720618][ T5779] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 124.748994][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.763436][ T7375] xt_hashlimit: overflow, try lower: 3/0 [ 124.769885][ T5779] usb 5-1: Product: syz [ 124.787426][ T5779] usb 5-1: Manufacturer: syz [ 124.802550][ T5779] usb 5-1: SerialNumber: syz [ 124.821072][ T5779] usb 5-1: config 0 descriptor?? [ 124.844199][ T7379] loop1: detected capacity change from 0 to 256 [ 124.858213][ T7352] loop3: detected capacity change from 0 to 32768 [ 124.880435][ T4681] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 124.968662][ T7379] FAT-fs (loop1): Directory bread(block 64) failed [ 124.979840][ T7383] loop0: detected capacity change from 0 to 4096 [ 124.998016][ T7379] FAT-fs (loop1): Directory bread(block 65) failed [ 125.000712][ T7383] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 125.005068][ T7379] FAT-fs (loop1): Directory bread(block 66) failed [ 125.020255][ T7379] FAT-fs (loop1): Directory bread(block 67) failed [ 125.026836][ T7379] FAT-fs (loop1): Directory bread(block 68) failed [ 125.033828][ T7379] FAT-fs (loop1): Directory bread(block 69) failed [ 125.041184][ T7379] FAT-fs (loop1): Directory bread(block 70) failed [ 125.048103][ T7379] FAT-fs (loop1): Directory bread(block 71) failed [ 125.054849][ T7379] FAT-fs (loop1): Directory bread(block 72) failed [ 125.061819][ T7379] FAT-fs (loop1): Directory bread(block 73) failed [ 125.081686][ T7352] XFS (loop3): Mounting V5 Filesystem [ 125.150516][ T4681] usb 3-1: Using ep0 maxpacket: 32 [ 125.198914][ T7383] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 125.238010][ T7383] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 125.238439][ T7393] netlink: 'syz.1.1344': attribute type 2 has an invalid length. [ 125.257459][ T7352] XFS (loop3): Ending clean mount [ 125.269080][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'. [ 125.290486][ T5779] appletouch 5-1:0.85: Failed to request geyser raw mode [ 125.298327][ T5779] appletouch: probe of 5-1:0.85 failed with error -5 [ 125.320347][ T4681] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.362627][ T5779] usb 5-1: USB disconnect, device number 6 [ 125.411282][ T4183] XFS (loop3): Unmounting Filesystem [ 125.420373][ T4681] usb 3-1: config 129 has an invalid interface number: 249 but max is 0 [ 125.428787][ T4681] usb 3-1: config 129 has no interface number 0 [ 125.453178][ T4681] usb 3-1: config 129 interface 249 altsetting 247 bulk endpoint 0x81 has invalid maxpacket 32 [ 125.487990][ T4681] usb 3-1: config 129 interface 249 altsetting 247 endpoint 0xA has invalid wMaxPacketSize 0 [ 125.490740][ T154] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 125.511030][ T4681] usb 3-1: config 129 interface 249 has no altsetting 0 [ 125.514339][ T4193] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 125.546544][ T4193] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 125.700403][ T4681] usb 3-1: New USB device found, idVendor=0424, idProduct=9908, bcdDevice=2e.38 [ 125.743052][ T4681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.770084][ T4681] usb 3-1: Product: syz [ 125.774628][ T4681] usb 3-1: Manufacturer: syz [ 125.779250][ T4681] usb 3-1: SerialNumber: syz [ 125.831523][ T7367] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 125.845863][ T7411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1354'. [ 125.940852][ T7419] loop0: detected capacity change from 0 to 256 [ 125.978084][ T7423] x_tables: unsorted entry at hook 2 [ 126.077453][ T7367] udc-core: couldn't find an available UDC or it's busy [ 126.117050][ T7367] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 126.259554][ T4681] smsc95xx v2.0.0 [ 126.280603][ T4681] smsc95xx 3-1:129.249 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 126.328871][ T4681] smsc95xx: probe of 3-1:129.249 failed with error -71 [ 126.373939][ T4681] usb 3-1: USB disconnect, device number 13 [ 126.753999][ T7476] loop2: detected capacity change from 0 to 128 [ 126.845952][ T7482] loop1: detected capacity change from 0 to 512 [ 126.889001][ T7482] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.928236][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1390'. [ 127.011014][ T7482] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1386: Failed to acquire dquot type 1 [ 127.035100][ T7499] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 127.052500][ T7482] EXT4-fs (loop1): 1 truncate cleaned up [ 127.061542][ T7482] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.084741][ T7499] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.096270][ T7482] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1386: Failed to acquire dquot type 1 [ 127.188099][ T7504] loop4: detected capacity change from 0 to 64 [ 127.389532][ T7520] loop0: detected capacity change from 0 to 512 [ 127.399003][ T7521] binder: binder_mmap: 7518 200000001000-20000000b000 bad vm_flags failed -1 [ 127.529772][ T7520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 127.585449][ T7520] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.189972][ T7561] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1425'. [ 128.203692][ T7552] loop4: detected capacity change from 0 to 8192 [ 128.220315][ T7561] net_ratelimit: 334 callbacks suppressed [ 128.220330][ T7561] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 128.253793][ T7562] loop0: detected capacity change from 0 to 4096 [ 128.267379][ T7529] loop2: detected capacity change from 0 to 32768 [ 128.293625][ T7552] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.311032][ T7562] ntfs: volume version 3.1. [ 128.387411][ T7552] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 128.396150][ T7552] FAT-fs (loop4): Filesystem has been set read-only [ 128.403827][ T7529] XFS (loop2): Mounting V5 Filesystem [ 128.433886][ T4189] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 128.511186][ T7578] loop3: detected capacity change from 0 to 64 [ 128.587601][ T7529] XFS (loop2): Ending clean mount [ 128.599426][ T7529] XFS (loop2): Quotacheck needed: Please wait. [ 128.759055][ T7529] XFS (loop2): Quotacheck: Done. [ 128.768193][ T7529] XFS (loop2): Unmounting Filesystem [ 129.116257][ T7609] loop0: detected capacity change from 0 to 256 [ 129.217648][ T7609] FAT-fs (loop0): Directory bread(block 64) failed [ 129.255428][ T7604] loop4: detected capacity change from 0 to 4096 [ 129.287575][ T7609] FAT-fs (loop0): Directory bread(block 65) failed [ 129.341363][ T7604] __ntfs_warning: 20 callbacks suppressed [ 129.341380][ T7604] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 129.357877][ T7609] FAT-fs (loop0): Directory bread(block 66) failed [ 129.410540][ T7609] FAT-fs (loop0): Directory bread(block 67) failed [ 129.440591][ T7609] FAT-fs (loop0): Directory bread(block 68) failed [ 129.482672][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 129.510821][ T7609] FAT-fs (loop0): Directory bread(block 69) failed [ 129.527469][ T7609] FAT-fs (loop0): Directory bread(block 70) failed [ 129.530283][ T7604] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 129.534934][ T7609] FAT-fs (loop0): Directory bread(block 71) failed [ 129.587807][ T7604] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 129.598723][ T7609] FAT-fs (loop0): Directory bread(block 72) failed [ 129.622980][ T7604] ntfs: volume version 3.1. [ 129.653448][ T7609] FAT-fs (loop0): Directory bread(block 73) failed [ 129.685155][ T7619] loop3: detected capacity change from 0 to 512 [ 129.767262][ T4273] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 129.809277][ T4273] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 129.834679][ T4189] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 129.882007][ T7619] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 129.922368][ T7619] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.941466][ T7610] loop1: detected capacity change from 0 to 32768 [ 130.039400][ T7610] jfs_strtoUCS: char2uni returned -22. [ 130.039469][ T7610] charset = iso8859-3, char = 0xc3 [ 130.067717][ T7634] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1457'. [ 130.132245][ T4683] Bluetooth: hci0: command 0x080f tx timeout [ 130.164132][ T7641] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1460'. [ 130.296358][ T7647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.298876][ T7649] loop2: detected capacity change from 0 to 64 [ 130.376145][ T7653] sctp: [Deprecated]: syz.1.1458 (pid 7653) Use of int in maxseg socket option. [ 130.376145][ T7653] Use struct sctp_assoc_value instead [ 130.433928][ T7649] Trying to free block not in datazone [ 130.450169][ T7649] Trying to free block not in datazone [ 130.482553][ T7660] loop0: detected capacity change from 0 to 1024 [ 130.493932][ T7649] Trying to free block not in datazone [ 130.500435][ T7649] Trying to free block not in datazone [ 130.508835][ T7664] tc_dump_action: action bad kind [ 130.519242][ T7649] minix_free_block (loop2:6): bit already cleared [ 130.548283][ T7649] Trying to free block not in datazone [ 130.553876][ T7649] Trying to free block not in datazone [ 130.587196][ T7667] loop4: detected capacity change from 0 to 4096 [ 130.659189][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 130.726771][ T7677] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.744120][ T7676] loop2: detected capacity change from 0 to 1024 [ 130.866332][ T7678] loop1: detected capacity change from 0 to 4096 [ 130.905859][ T7676] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000000a,grpquota,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 130.944085][ T7678] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 131.027574][ T7678] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 131.049088][ T7678] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 131.345410][ T7714] loop3: detected capacity change from 0 to 512 [ 131.399844][ T7718] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1497'. [ 131.443970][ T154] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 131.490743][ T4182] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 131.497663][ T4182] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 131.509459][ T7714] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 131.537748][ T7714] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.669915][ T7738] loop2: detected capacity change from 0 to 64 [ 131.770851][ T7746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 131.798328][ T7738] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 131.835877][ T7750] loop3: detected capacity change from 0 to 64 [ 131.970502][ T7754] loop4: detected capacity change from 0 to 1024 [ 132.285978][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 132.321410][ T7768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1519'. [ 132.550195][ T5779] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.592274][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.598654][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.853315][ T7744] loop1: detected capacity change from 0 to 32768 [ 132.927323][ T7744] XFS: attr2 mount option is deprecated. [ 132.993121][ T5779] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 133.031409][ T5779] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.125532][ T5779] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 133.139660][ T5779] usb 4-1: config 1 has no interface number 1 [ 133.146151][ T5779] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 133.159401][ T5779] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 133.170649][ T5779] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 133.278323][ T7744] XFS (loop1): Mounting V5 Filesystem [ 133.287960][ T7756] loop0: detected capacity change from 0 to 32768 [ 133.380657][ T5779] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 133.395143][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.409824][ T5779] usb 4-1: Product: syz [ 133.418246][ T5779] usb 4-1: Manufacturer: syz [ 133.423221][ T5779] usb 4-1: SerialNumber: syz [ 133.442001][ T7756] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 133.450599][ T7756] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 133.491662][ T7756] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 133.501457][ T7744] XFS (loop1): Ending clean mount [ 133.540759][ T7744] XFS (loop1): Quotacheck needed: Please wait. [ 133.551408][ T4290] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 133.564409][ T4290] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 133.596934][ T7772] loop2: detected capacity change from 0 to 32768 [ 133.633989][ T4290] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 133.653165][ T7772] [ 133.653165][ T7772] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.653165][ T7772] [ 133.665152][ T4290] gfs2: fsid=syz:syz.0: jid=0: Done [ 133.684036][ T7756] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 133.701632][ T7772] ERROR: (device loop2): dtSearch: stack overrun! [ 133.701632][ T7772] [ 133.767805][ T7774] loop4: detected capacity change from 0 to 32768 [ 133.777644][ T7772] btstack dump: [ 133.783189][ T7744] XFS (loop1): Quotacheck: Done. [ 133.790652][ T5779] usb 4-1: MIDIStreaming interface descriptor not found [ 133.798441][ T7772] bn = 0, index = 0 [ 133.798486][ T7772] bn = 0, index = 0 [ 133.798496][ T7772] bn = 0, index = 0 [ 133.798505][ T7772] bn = 0, index = 0 [ 133.798514][ T7772] bn = 0, index = 0 [ 133.798524][ T7772] bn = 0, index = 0 [ 133.798533][ T7772] bn = 0, index = 0 [ 133.798542][ T7772] bn = 0, index = 0 [ 133.798573][ T7772] jfs_lookup: dtSearch returned -5 [ 133.860824][ T7774] XFS: attr2 mount option is deprecated. [ 133.900510][ T4192] [ 133.900510][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.900510][ T4192] [ 133.938954][ T4192] [ 133.938954][ T4192] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.938954][ T4192] [ 133.982867][ T4182] XFS (loop1): Unmounting Filesystem [ 133.986225][ T5779] usb 4-1: USB disconnect, device number 5 [ 134.089242][ T7774] XFS (loop4): Mounting V5 Filesystem [ 134.284444][ T7774] XFS (loop4): Ending clean mount [ 134.326331][ T7796] netlink: 'syz.0.1526': attribute type 1 has an invalid length. [ 134.349439][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 134.370818][ T7774] XFS (loop4): Quotacheck needed: Please wait. [ 134.541087][ T7774] XFS (loop4): Quotacheck: Done. [ 134.609001][ T7774] UBIFS error (pid: 7774): cannot open "./file0", error -22 [ 134.659684][ T4189] XFS (loop4): Unmounting Filesystem [ 134.875780][ T7822] loop1: detected capacity change from 0 to 1024 [ 134.996997][ T7832] loop0: detected capacity change from 0 to 64 [ 135.001947][ T26] audit: type=1800 audit(1763382585.305:6): pid=7822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1525" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 135.055292][ T7832] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 135.134288][ T155] hfsplus: b-tree write err: -5, ino 4 [ 135.209476][ T7842] loop2: detected capacity change from 0 to 256 [ 135.296217][ T7846] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1550'. [ 135.327319][ T7842] FAT-fs (loop2): Directory bread(block 64) failed [ 135.356450][ T7842] FAT-fs (loop2): Directory bread(block 65) failed [ 135.388655][ T7842] FAT-fs (loop2): Directory bread(block 66) failed [ 135.430308][ T7842] FAT-fs (loop2): Directory bread(block 67) failed [ 135.455304][ T7854] program syz.0.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.465312][ T7842] FAT-fs (loop2): Directory bread(block 68) failed [ 135.490418][ T7842] FAT-fs (loop2): Directory bread(block 69) failed [ 135.497130][ T7842] FAT-fs (loop2): Directory bread(block 70) failed [ 135.514759][ T7842] FAT-fs (loop2): Directory bread(block 71) failed [ 135.550313][ T7842] FAT-fs (loop2): Directory bread(block 72) failed [ 135.556903][ T7842] FAT-fs (loop2): Directory bread(block 73) failed [ 135.595561][ T7861] loop4: detected capacity change from 0 to 164 [ 135.687295][ T7861] rock: directory entry would overflow storage [ 135.699172][ T7866] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 135.705165][ T7861] rock: sig=0x5252, size=5, remaining=3 [ 135.934224][ T7838] loop3: detected capacity change from 0 to 32768 [ 136.050901][ T7838] XFS: attr2 mount option is deprecated. [ 136.178640][ T7838] XFS (loop3): Mounting V5 Filesystem [ 136.445680][ T7838] XFS (loop3): Ending clean mount [ 136.485223][ T7838] XFS (loop3): Quotacheck needed: Please wait. [ 136.520183][ T4290] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 136.610462][ T7838] XFS (loop3): Quotacheck: Done. [ 136.632458][ T7838] UBIFS error (pid: 7838): cannot open "./file0", error -22 [ 136.686310][ T7924] loop2: detected capacity change from 0 to 512 [ 136.701534][ T4183] XFS (loop3): Unmounting Filesystem [ 136.790278][ T4290] usb 5-1: Using ep0 maxpacket: 16 [ 136.797731][ T7926] loop0: detected capacity change from 0 to 8192 [ 136.848780][ T7924] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 136.895467][ T7926] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 136.925069][ T4290] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 136.940511][ T7934] loop1: detected capacity change from 0 to 256 [ 136.945874][ T4290] usb 5-1: config 0 has no interface number 0 [ 136.948769][ T7926] REISERFS (device loop0): using ordered data mode [ 136.959377][ T4290] usb 5-1: config 0 interface 94 altsetting 7 bulk endpoint 0x9 has invalid maxpacket 1024 [ 136.959408][ T4290] usb 5-1: config 0 interface 94 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 136.959429][ T4290] usb 5-1: config 0 interface 94 has no altsetting 0 [ 136.970251][ T7926] reiserfs: using flush barriers [ 137.017784][ T7926] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.030570][ T7934] FAT-fs (loop1): Directory bread(block 64) failed [ 137.037032][ T7926] REISERFS (device loop0): checking transaction log (loop0) [ 137.048122][ T7934] FAT-fs (loop1): Directory bread(block 65) failed [ 137.055008][ T7934] FAT-fs (loop1): Directory bread(block 66) failed [ 137.062046][ T7934] FAT-fs (loop1): Directory bread(block 67) failed [ 137.068670][ T7934] FAT-fs (loop1): Directory bread(block 68) failed [ 137.076641][ T7926] REISERFS (device loop0): Using rupasov hash to sort names [ 137.084066][ T7934] FAT-fs (loop1): Directory bread(block 69) failed [ 137.091090][ T7926] REISERFS (device loop0): using 3.5.x disk format [ 137.098208][ T7934] FAT-fs (loop1): Directory bread(block 70) failed [ 137.102732][ T7926] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.116758][ T7934] FAT-fs (loop1): Directory bread(block 71) failed [ 137.124920][ T7934] FAT-fs (loop1): Directory bread(block 72) failed [ 137.131973][ T7934] FAT-fs (loop1): Directory bread(block 73) failed [ 137.145960][ T7926] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.215298][ T4290] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=4e.9b [ 137.221222][ T7926] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.233677][ T4290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.270486][ T7926] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 137.285116][ T4290] usb 5-1: Product: syz [ 137.285136][ T4290] usb 5-1: Manufacturer: syz [ 137.285151][ T4290] usb 5-1: SerialNumber: syz [ 137.301037][ T4290] usb 5-1: config 0 descriptor?? [ 137.344496][ T7899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 137.382250][ T7926] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 137.512977][ T7946] loop3: detected capacity change from 0 to 1024 [ 137.533014][ T7926] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.587250][ T7946] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 137.594479][ T7926] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 137.618248][ T7946] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869) [ 137.641243][ T4290] keyspan 5-1:0.94: Keyspan 4 port adapter converter detected [ 137.652232][ T7946] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #5: comm syz.3.1595: unexpected bad inode w/o EXT4_IGET_BAD [ 137.666074][ T4290] keyspan 5-1:0.94: found no endpoint descriptor for endpoint 81 [ 137.684184][ T4290] keyspan 5-1:0.94: found no endpoint descriptor for endpoint 88 [ 137.693105][ T7946] EXT4-fs (loop3): no journal found [ 137.698323][ T7946] EXT4-fs (loop3): can't get journal size [ 137.711347][ T4290] keyspan 5-1:0.94: found no endpoint descriptor for endpoint 1 [ 137.716235][ T6892] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 137.731890][ T4290] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 137.753103][ T7946] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,quota,,errors=continue. Quota mode: writeback. [ 137.779946][ T4290] keyspan 5-1:0.94: found no endpoint descriptor for endpoint 2 [ 137.790078][ T4290] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 137.799796][ T4290] keyspan 5-1:0.94: found no endpoint descriptor for endpoint 4 [ 137.808419][ T4290] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 137.817483][ T4290] keyspan 5-1:0.94: found no endpoint descriptor for endpoint 6 [ 137.826066][ T4290] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 137.845195][ T4290] usb 5-1: USB disconnect, device number 7 [ 137.855753][ T4290] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 137.934733][ T4290] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 137.999947][ T4290] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 138.050996][ T4290] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 138.073035][ T7953] loop2: detected capacity change from 0 to 4096 [ 138.084948][ T4290] keyspan 5-1:0.94: device disconnected [ 138.118737][ T7961] comedi comedi4: bad chanlist[0]=0x80100000 chan=0 range length=2 [ 138.185750][ T7953] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 138.260394][ T6892] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.279571][ T6892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.314255][ T6892] usb 2-1: Product: syz [ 138.324116][ T6892] usb 2-1: Manufacturer: syz [ 138.332679][ T7971] loop3: detected capacity change from 0 to 1764 [ 138.339695][ T6892] usb 2-1: SerialNumber: syz [ 138.367390][ T7971] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 138.392060][ T6892] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 138.461462][ T7971] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 138.564914][ T7981] netlink: 'syz.4.1612': attribute type 10 has an invalid length. [ 138.603958][ T7981] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 138.652007][ T7981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 138.827184][ T7999] nft_compat: unsupported protocol 5 [ 138.936184][ T8005] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1623'. [ 139.070382][ T6892] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.149607][ T8020] device wlan0 entered promiscuous mode [ 139.207887][ T8014] loop3: detected capacity change from 0 to 4096 [ 139.307342][ T8014] ntfs3: loop3: ino=3, Correct links count -> 2. [ 139.335568][ T8014] ntfs3: loop3: Failed to load $Volume. [ 139.349509][ T8030] xt_NFQUEUE: number of total queues is 0 [ 139.556382][ T4290] usb 2-1: USB disconnect, device number 8 [ 139.655109][ T8046] loop0: detected capacity change from 0 to 164 [ 139.790683][ T8046] Unable to read rock-ridge attributes [ 139.845281][ T8054] loop4: detected capacity change from 0 to 4096 [ 139.949969][ T8058] loop3: detected capacity change from 0 to 4096 [ 140.115080][ T8060] loop1: detected capacity change from 0 to 2048 [ 140.145885][ T8054] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 140.179712][ T8054] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 140.193082][ T6892] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 140.213715][ T6892] ath9k_htc: Failed to initialize the device [ 140.229905][ T8060] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 140.245866][ T4290] usb 2-1: ath9k_htc: USB layer deinitialized [ 140.250357][ T8060] NILFS (loop1): unrecognized mount option "ÿÿ" [ 140.268780][ T8054] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 140.311519][ T8054] ntfs: volume version 3.1. [ 140.313522][ T8064] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.387958][ T4189] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 140.442333][ T8060] NILFS (loop1): device size too small [ 140.466071][ T8069] loop0: detected capacity change from 0 to 1024 [ 140.527313][ T8070] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1653'. [ 140.554519][ T8070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 140.604575][ T8070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.776225][ T8085] loop2: detected capacity change from 0 to 1024 [ 140.786795][ T8088] loop0: detected capacity change from 0 to 1024 [ 140.894576][ T8088] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 140.968089][ T8085] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,inode_readahead_blks=0x0000000000000000,auto_da_alloc,errors=remount-ro,. Quota mode: none. [ 141.056510][ T8072] loop1: detected capacity change from 0 to 32768 [ 141.176111][ T8098] loop3: detected capacity change from 0 to 8192 [ 141.224275][ T8098] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 141.264013][ T8072] XFS (loop1): Mounting V5 Filesystem [ 141.339364][ T8098] REISERFS (device loop3): using ordered data mode [ 141.347725][ T8098] reiserfs: using flush barriers [ 141.356473][ T8116] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1671'. [ 141.378106][ T8098] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.436001][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 141.455574][ T8098] REISERFS (device loop3): checking transaction log (loop3) [ 141.467894][ T8072] XFS (loop1): Ending clean mount [ 141.467946][ T8098] REISERFS (device loop3): Using rupasov hash to sort names [ 141.495986][ T8098] REISERFS (device loop3): using 3.5.x disk format [ 141.503412][ T8098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 141.530662][ T8098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 141.559932][ T8072] XFS (loop1): Quotacheck needed: Please wait. [ 141.587619][ T8098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 141.627359][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1677'. [ 141.645270][ T8098] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 141.696278][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'. [ 141.722383][ T8072] XFS (loop1): Quotacheck: Done. [ 141.745991][ T8098] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 141.777234][ T8072] XFS (loop1): Unmounting Filesystem [ 141.905328][ T8138] netlink: 'syz.0.1683': attribute type 2 has an invalid length. [ 141.941500][ T8138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.958913][ T8098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 141.971227][ T8098] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 142.316146][ T8146] device ip6erspan0 entered promiscuous mode [ 142.692875][ T8166] openvswitch: netlink: Missing key (keys=40, expected=80) [ 142.753390][ T8168] loop2: detected capacity change from 0 to 256 [ 142.768444][ T8134] loop4: detected capacity change from 0 to 32768 [ 142.812842][ T8164] loop0: detected capacity change from 0 to 4096 [ 142.831028][ T8168] exfat: Deprecated parameter 'utf8' [ 142.839633][ T8168] exfat: Deprecated parameter 'utf8' [ 142.849132][ T8170] syz.1.1699 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.852297][ T8164] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 142.875861][ T8134] XFS (loop4): Mounting V5 Filesystem [ 142.899356][ T8168] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 143.066016][ T8188] loop1: detected capacity change from 0 to 1024 [ 143.071293][ T8134] XFS (loop4): Ending clean mount [ 143.111127][ T8134] XFS (loop4): Quotacheck needed: Please wait. [ 143.256140][ T8134] XFS (loop4): Quotacheck: Done. [ 143.329060][ T8194] loop3: detected capacity change from 0 to 128 [ 143.423901][ T8200] loop1: detected capacity change from 0 to 128 [ 143.449133][ T4189] XFS (loop4): Unmounting Filesystem [ 143.521648][ T8200] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 143.549063][ T8200] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.555416][ T8206] loop2: detected capacity change from 0 to 256 [ 143.596343][ T8194] autofs4:pid:8194:autofs_fill_super: called with bogus options [ 143.628666][ T8208] loop0: detected capacity change from 0 to 256 [ 143.686151][ T8200] UDF-fs: bad mount option "*÷ÿ7dúä‹ý~\±ï%üý;½ÿÃþÿ¬LÓß®ŽMù±»ÂØ®MWl“pÛ¿Lgö\+Õßþ~ „­mÿ{Ëßujÿ‘´´ÝÖÚ’ò+—/ŽÏÌdÙ`ƒ6J[}gB#¸ãÿgî" or missing value [ 143.712851][ T8208] FAT-fs (loop0): Directory bread(block 64) failed [ 143.741801][ T8208] FAT-fs (loop0): Directory bread(block 65) failed [ 143.763844][ T8208] FAT-fs (loop0): Directory bread(block 66) failed [ 143.780331][ T8208] FAT-fs (loop0): Directory bread(block 67) failed [ 143.786934][ T8208] FAT-fs (loop0): Directory bread(block 68) failed [ 143.805554][ T8208] FAT-fs (loop0): Directory bread(block 69) failed [ 143.815310][ T8208] FAT-fs (loop0): Directory bread(block 70) failed [ 143.830790][ T8208] FAT-fs (loop0): Directory bread(block 71) failed [ 143.866989][ T8208] FAT-fs (loop0): Directory bread(block 72) failed [ 143.879373][ T8214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.912009][ T8208] FAT-fs (loop0): Directory bread(block 73) failed [ 144.050616][ T8219] loop3: detected capacity change from 0 to 512 [ 144.112745][ T26] audit: type=1800 audit(1763382594.425:7): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1715" name="bus" dev="loop0" ino=1048617 res=0 errno=0 [ 144.177089][ T8219] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 144.192679][ T8219] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.202877][ T8229] loop4: detected capacity change from 0 to 2048 [ 144.301975][ T8229] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.459126][ T8237] loop1: detected capacity change from 0 to 2048 [ 144.587854][ T8237] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 144.684608][ T8237] UDF-fs: unknown compression code (0) [ 144.780410][ T5779] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 144.895874][ T8265] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1739'. [ 144.964950][ T8269] xt_CONNSECMARK: invalid mode: 66 [ 145.017696][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 145.070387][ T5779] usb 3-1: Using ep0 maxpacket: 32 [ 145.096064][ T8273] loop4: detected capacity change from 0 to 4096 [ 145.167765][ T8273] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 145.213333][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 145.225697][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 145.237406][ T8273] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096) [ 145.270596][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 145.319408][ T8292] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.339392][ T5779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 145.377191][ T8273] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 145.459292][ T8273] Remounting filesystem read-only [ 145.538714][ T8302] loop3: detected capacity change from 0 to 128 [ 145.569945][ T8302] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 145.598812][ T8302] hpfs: filesystem error: improperly stopped [ 145.605484][ T5779] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 145.614719][ T8302] hpfs: You really don't want any checks? You are crazy... [ 145.638441][ T5779] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.654150][ T8302] hpfs: hpfs_map_sector(): read error [ 145.658088][ T5779] usb 3-1: Product: syz [ 145.664502][ T8302] hpfs: code page support is disabled [ 145.670057][ T8302] hpfs: hpfs_map_sector(): read error [ 145.670340][ T5779] usb 3-1: Manufacturer: syz [ 145.678573][ T8302] hpfs: hpfs_map_sector(): read error [ 145.681434][ T8306] xt_TPROXY: Can be used only with -p tcp or -p udp [ 145.686027][ T8302] hpfs: filesystem error: unable to find root dir [ 145.698304][ T5779] usb 3-1: SerialNumber: syz [ 145.712186][ T5779] usb 3-1: config 0 descriptor?? [ 145.762228][ T5779] usb 3-1: no audio or video endpoints found [ 145.860546][ T6969] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 145.880492][ T4290] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.890758][ T8316] loop3: detected capacity change from 0 to 64 [ 146.011024][ T4796] usb 3-1: USB disconnect, device number 14 [ 146.036409][ T6892] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.100345][ T6969] usb 1-1: Using ep0 maxpacket: 8 [ 146.131308][ T8326] netlink: 755 bytes leftover after parsing attributes in process `syz.3.1771'. [ 146.250629][ T4290] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.259884][ T4290] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.286078][ T4290] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 146.286761][ T6892] usb 5-1: Using ep0 maxpacket: 32 [ 146.295871][ T4290] usb 2-1: config 1 has no interface number 1 [ 146.312051][ T4290] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.342486][ T4290] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 146.367398][ T4290] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 146.382520][ T6969] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 146.417002][ T6969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.445180][ T6969] usb 1-1: Product: syz [ 146.449376][ T6969] usb 1-1: Manufacturer: syz [ 146.455577][ T6892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.472041][ T6969] usb 1-1: SerialNumber: syz [ 146.476743][ T6892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.494128][ T6969] usb 1-1: config 0 descriptor?? [ 146.499197][ T6892] usb 5-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 146.519656][ T6892] usb 5-1: config 0 interface 0 has no altsetting 1 [ 146.536321][ T8350] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1783'. [ 146.608656][ T4290] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.635487][ T4290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.680576][ T4290] usb 2-1: Product: syz [ 146.687967][ T4290] usb 2-1: Manufacturer: syz [ 146.697879][ T4290] usb 2-1: SerialNumber: syz [ 146.705774][ T6892] usb 5-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 146.723418][ T6892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.750288][ T6892] usb 5-1: Product: syz [ 146.759673][ T6892] usb 5-1: Manufacturer: syz [ 146.770327][ T6969] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 146.787291][ T6892] usb 5-1: SerialNumber: syz [ 146.794529][ T6892] usb 5-1: config 0 descriptor?? [ 146.840050][ T8370] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 146.847098][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 146.859595][ T6892] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 146.923104][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 146.990502][ T6969] usb write operation failed. (-71) [ 147.009155][ T6969] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 147.043054][ T8378] loop3: detected capacity change from 0 to 764 [ 147.060636][ T6969] dvbdev: DVB: registering new adapter (Terratec H7) [ 147.067877][ T6969] usb 1-1: media controller created [ 147.080907][ T4681] usb 5-1: USB disconnect, device number 8 [ 147.100501][ T4290] usb 2-1: MIDIStreaming interface descriptor not found [ 147.105614][ T6969] usb read operation failed. (-71) [ 147.129664][ T8378] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 147.134361][ T8382] loop2: detected capacity change from 0 to 256 [ 147.140294][ T6969] usb write operation failed. (-71) [ 147.169116][ T6969] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 147.195515][ T4290] usb 2-1: USB disconnect, device number 9 [ 147.241590][ T6969] usb 1-1: USB disconnect, device number 9 [ 147.337372][ T8382] FAT-fs (loop2): Directory bread(block 64) failed [ 147.360483][ T8382] FAT-fs (loop2): Directory bread(block 65) failed [ 147.389020][ T8382] FAT-fs (loop2): Directory bread(block 66) failed [ 147.395943][ T8382] FAT-fs (loop2): Directory bread(block 67) failed [ 147.408531][ T8382] FAT-fs (loop2): Directory bread(block 68) failed [ 147.418000][ T8382] FAT-fs (loop2): Directory bread(block 69) failed [ 147.424990][ T8382] FAT-fs (loop2): Directory bread(block 70) failed [ 147.431958][ T8382] FAT-fs (loop2): Directory bread(block 71) failed [ 147.438546][ T8382] FAT-fs (loop2): Directory bread(block 72) failed [ 147.447753][ T8382] FAT-fs (loop2): Directory bread(block 73) failed [ 148.145854][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1822'. [ 148.175534][ T4681] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.356448][ T8404] loop3: detected capacity change from 0 to 32768 [ 148.369576][ T8435] loop0: detected capacity change from 0 to 4096 [ 148.405477][ T8439] loop4: detected capacity change from 0 to 2048 [ 148.424553][ T8435] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 148.450509][ T4681] usb 2-1: Using ep0 maxpacket: 16 [ 148.498774][ T8404] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 148.542599][ T8439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.581182][ T4681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.584445][ T8425] loop2: detected capacity change from 0 to 32768 [ 148.641129][ T4183] ocfs2: Unmounting device (7,3) on (node local) [ 148.743709][ T8443] netlink: 'syz.0.1828': attribute type 5 has an invalid length. [ 148.841380][ T4681] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 148.858458][ T4681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.920305][ T4681] usb 2-1: Product: syz [ 148.924508][ T4681] usb 2-1: Manufacturer: syz [ 148.944510][ T8449] loop4: detected capacity change from 0 to 2048 [ 148.957106][ T4681] usb 2-1: SerialNumber: syz [ 148.963884][ T4681] usb 2-1: config 0 descriptor?? [ 149.060364][ T8459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.090647][ T8449] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 149.098977][ T4681] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 149.110193][ T4796] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 149.129339][ T8449] UDF-fs: Scanning with blocksize 512 failed [ 149.169583][ T8449] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.210787][ T8467] loop3: detected capacity change from 0 to 64 [ 149.256810][ T4681] usb 2-1: USB disconnect, device number 10 [ 149.269989][ T4273] usb 2-1: Failed to submit usb control message: -71 [ 149.323652][ T4273] usb 2-1: unable to send the bmi data to the device: -71 [ 149.350333][ T4273] usb 2-1: unable to get target info from device [ 149.354670][ T4796] usb 3-1: Using ep0 maxpacket: 16 [ 149.396418][ T4273] usb 2-1: could not get target info (-71) [ 149.410029][ T8473] loop0: detected capacity change from 0 to 256 [ 149.416698][ T4273] usb 2-1: could not probe fw (-71) [ 149.501292][ T4796] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 149.518364][ T8473] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 149.550252][ T4796] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 149.590643][ T4796] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 149.621160][ T4796] usb 3-1: config 0 interface 0 has no altsetting 0 [ 149.628561][ T8473] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008) [ 149.655442][ T8473] exFAT-fs (loop0): Filesystem has been set read-only [ 149.810421][ T4796] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 149.819496][ T4796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.882183][ T4796] usb 3-1: Product: syz [ 149.886389][ T4796] usb 3-1: Manufacturer: syz [ 149.910228][ T4796] usb 3-1: SerialNumber: syz [ 149.940859][ T4796] usb 3-1: config 0 descriptor?? [ 149.970562][ T8447] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.018836][ T8505] loop3: detected capacity change from 0 to 512 [ 150.056237][ T8505] EXT4-fs (loop3): Ignoring removed bh option [ 150.074010][ T8505] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.103823][ T8510] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.124087][ T8505] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 150.180786][ T8505] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 150.204408][ T8447] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 150.207246][ T8505] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 150.226551][ T8505] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 150.250153][ T6969] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.264624][ T4796] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 150.308423][ T8517] device veth0_macvtap left promiscuous mode [ 150.487138][ T4681] usb 3-1: USB disconnect, device number 15 [ 150.519998][ T8528] loop3: detected capacity change from 0 to 512 [ 150.547941][ T8524] loop0: detected capacity change from 0 to 4096 [ 150.563235][ T8528] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 150.601200][ T8524] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 150.638266][ T8528] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 150.653533][ T8528] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 150.694831][ T8528] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 150.723690][ T8528] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 150.733347][ T8528] EXT4-fs (loop3): orphan cleanup on readonly fs [ 150.773268][ T8528] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1866: bg 0: block 34: padding at end of block bitmap is not set [ 150.790565][ T6969] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 150.811350][ T8528] Quota error (device loop3): write_blk: dquota write failed [ 150.818799][ T8528] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 150.820391][ T8535] loop4: detected capacity change from 0 to 1024 [ 150.837512][ T8528] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1866: Failed to acquire dquot type 1 [ 150.839216][ T6969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.868667][ T8528] EXT4-fs (loop3): 1 truncate cleaned up [ 150.869110][ T6969] usb 2-1: Product: syz [ 150.909346][ T8535] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 150.927101][ T6969] usb 2-1: Manufacturer: syz [ 150.934711][ T6969] usb 2-1: SerialNumber: syz [ 150.941858][ T6969] usb 2-1: config 0 descriptor?? [ 150.947167][ T8535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 150.964655][ T8535] System zones: 0-1, 4-36, 102-102 [ 150.973203][ T8528] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,mb_optimize_scan=0x0000000000000001,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 150.974103][ T8535] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 151.019368][ T4188] Bluetooth: hci5: urb ffff8880240e6b00 submission failed (2) [ 151.054360][ T8528] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 151.062401][ T8528] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0080] [ 151.246074][ T8548] loop0: detected capacity change from 0 to 1024 [ 151.312003][ T4796] usb 2-1: USB disconnect, device number 11 [ 151.449629][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1877'. [ 151.554206][ T8562] loop4: detected capacity change from 0 to 1024 [ 151.597092][ T8567] loop3: detected capacity change from 0 to 512 [ 151.699855][ T155] hfsplus: b-tree write err: -5, ino 4 [ 151.721405][ T8578] loop2: detected capacity change from 0 to 1024 [ 151.729890][ T8567] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 151.772607][ T8567] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 151.783160][ T8567] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1883: Failed to acquire dquot type 1 [ 151.799061][ T8567] EXT4-fs (loop3): 1 truncate cleaned up [ 151.836032][ T8567] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,auto_da_alloc,minixdf,noinit_itable,init_itable,,errors=continue. Quota mode: writeback. [ 151.866417][ T8567] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.889510][ T8567] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 151.902452][ T8567] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 151.932993][ T8567] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1883: Failed to acquire dquot type 1 [ 151.946304][ T4273] hfsplus: b-tree write err: -5, ino 4 [ 151.986412][ T8576] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 152.153682][ T8601] netlink: 'syz.0.1896': attribute type 4 has an invalid length. [ 152.190895][ T8601] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1896'. [ 152.207285][ T8603] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1899'. [ 152.244260][ T8597] loop1: detected capacity change from 0 to 4096 [ 152.250839][ T8603] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 152.251348][ T8605] QAT: failed to copy from user cfg_data. [ 152.435057][ T8611] loop0: detected capacity change from 0 to 128 [ 152.578374][ T8611] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 152.742504][ T4193] sysv_free_block: flc_count > flc_size [ 152.748086][ T4193] sysv_free_block: flc_count > flc_size [ 152.814913][ T4193] sysv_free_block: flc_count > flc_size [ 152.842363][ T4193] sysv_free_block: flc_count > flc_size [ 152.869107][ T4193] sysv_free_block: flc_count > flc_size [ 152.920139][ T4193] sysv_free_block: flc_count > flc_size [ 152.931644][ T4193] sysv_free_block: flc_count > flc_size [ 152.959394][ T4193] sysv_free_block: flc_count > flc_size [ 152.978484][ T4193] sysv_free_block: flc_count > flc_size [ 153.008868][ T4193] sysv_free_block: flc_count > flc_size [ 153.060546][ T4193] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 153.122513][ T8642] loop4: detected capacity change from 0 to 1024 [ 153.205808][ T8648] loop0: detected capacity change from 0 to 2048 [ 153.229821][ T8653] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 153.349354][ T8648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.412587][ T8664] loop3: detected capacity change from 0 to 764 [ 153.448162][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1930'. [ 153.478010][ T8666] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1930'. [ 153.524825][ T8664] Symlink component flag not implemented [ 153.563791][ T8664] Symlink component flag not implemented (15) [ 153.702185][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 153.739937][ T8678] loop2: detected capacity change from 0 to 4096 [ 153.834347][ T8678] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 153.900211][ T6969] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 153.937679][ T8678] ntfs3: loop2: ino=5, "/" directory corrupted [ 153.961552][ T8678] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 153.973070][ T8701] loop3: detected capacity change from 0 to 1024 [ 154.024590][ T4192] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 154.038353][ T4192] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 154.115943][ T8701] hfsplus: xattr searching failed [ 154.310471][ T6969] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.350829][ T6969] usb 5-1: not running at top speed; connect to a high speed hub [ 154.417876][ T8718] xt_CT: No such helper "snmp" [ 154.453470][ T6969] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 154.645488][ T8738] loop2: detected capacity change from 0 to 256 [ 154.660585][ T6969] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 154.669661][ T6969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.706619][ T8738] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 154.730626][ T6969] usb 5-1: Product: syz [ 154.734823][ T6969] usb 5-1: Manufacturer: syz [ 154.739463][ T6969] usb 5-1: SerialNumber: syz [ 154.798303][ T8738] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 154.822274][ T8738] exFAT-fs (loop2): Filesystem has been set read-only [ 154.959527][ T8756] loop0: detected capacity change from 0 to 1764 [ 155.047239][ T8756] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 155.073399][ T6969] vmk80xx 5-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 155.110943][ T6969] usb 5-1: USB disconnect, device number 9 [ 155.225171][ T8772] xt_ecn: cannot match TCP bits for non-tcp packets [ 155.239423][ T8780] loop3: detected capacity change from 0 to 64 [ 155.468911][ T8797] loop0: detected capacity change from 0 to 64 [ 155.646306][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1989'. [ 155.659168][ T8803] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1991'. [ 155.729299][ T8808] loop2: detected capacity change from 0 to 764 [ 155.753800][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1989'. [ 155.786829][ T8810] tmpfs: Bad value for 'mpol' [ 155.833564][ T8808] rock: directory entry would overflow storage [ 155.891916][ T8808] rock: sig=0x5850, size=36, remaining=7 [ 156.027028][ T8824] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 156.106437][ T8828] netlink: 'syz.4.2002': attribute type 1 has an invalid length. [ 156.129672][ T8828] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2002'. [ 156.155818][ T8833] xt_hashlimit: size too large, truncated to 1048576 [ 156.193299][ T8833] xt_hashlimit: overflow, try lower: 0/0 [ 156.217263][ T8838] loop2: detected capacity change from 0 to 256 [ 156.304884][ T8838] FAT-fs (loop2): Directory bread(block 64) failed [ 156.340278][ T8838] FAT-fs (loop2): Directory bread(block 65) failed [ 156.360285][ T8838] FAT-fs (loop2): Directory bread(block 66) failed [ 156.366847][ T8838] FAT-fs (loop2): Directory bread(block 67) failed [ 156.433953][ T8838] FAT-fs (loop2): Directory bread(block 68) failed [ 156.460019][ T8838] FAT-fs (loop2): Directory bread(block 69) failed [ 156.467195][ T8838] FAT-fs (loop2): Directory bread(block 70) failed [ 156.498746][ T8838] FAT-fs (loop2): Directory bread(block 71) failed [ 156.509685][ T8857] No such timeout policy "syz0" [ 156.515231][ T8838] FAT-fs (loop2): Directory bread(block 72) failed [ 156.536174][ T8838] FAT-fs (loop2): Directory bread(block 73) failed [ 156.625661][ T8862] loop3: detected capacity change from 0 to 512 [ 156.689341][ T8862] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.408410][ T8894] loop3: detected capacity change from 0 to 8192 [ 157.415309][ T8866] loop0: detected capacity change from 0 to 32768 [ 157.477865][ T8894] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 157.505088][ T8894] REISERFS (device loop3): using ordered data mode [ 157.522181][ T8894] reiserfs: using flush barriers [ 157.531455][ T8894] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 157.557401][ T8894] REISERFS (device loop3): checking transaction log (loop3) [ 157.631629][ T8866] JBD2: Ignoring recovery information on journal [ 157.723037][ T8866] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 157.773094][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2046'. [ 157.808399][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 157.817858][ T8894] REISERFS (device loop3): Using tea hash to sort names [ 157.835919][ T8894] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 157.890838][ T8866] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 157.921495][ T8894] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 157.930850][ T8866] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 157.941378][ T8866] OCFS2: File system is now read-only. [ 157.943687][ T5779] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 157.947230][ T8866] (syz.0.2020,8866,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 157.965511][ T8866] (syz.0.2020,8866,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 157.973923][ T8866] (syz.0.2020,8866,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 157.982936][ T8866] (syz.0.2020,8866,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 157.991913][ T8866] (syz.0.2020,8866,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 158.000234][ T8866] (syz.0.2020,8866,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 158.008347][ T8866] (syz.0.2020,8866,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 158.017446][ T8866] (syz.0.2020,8866,1):ocfs2_symlink:1941 ERROR: status = -30 [ 158.051189][ T8866] (syz.0.2020,8866,1):ocfs2_symlink:2065 ERROR: status = -30 [ 158.168542][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 158.250379][ T5779] usb 2-1: Using ep0 maxpacket: 8 [ 158.380415][ T5779] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 158.408924][ T5779] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.437889][ T5779] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.453539][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 158.483805][ T5779] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 158.533603][ T5779] usb 2-1: config 0 has no interface number 0 [ 158.539737][ T5779] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.619231][ T5779] usb 2-1: config 0 interface 150 has no altsetting 0 [ 158.652716][ T5779] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 158.679417][ T5779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.691893][ T8978] loop3: detected capacity change from 0 to 64 [ 158.713580][ T8939] loop2: detected capacity change from 0 to 32768 [ 158.724453][ T5779] usb 2-1: config 0 descriptor?? [ 158.752788][ T8939] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.2051 (8939) [ 158.802154][ T8939] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 158.815195][ T8939] BTRFS info (device loop2): force zlib compression, level 3 [ 158.846495][ T8986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.851006][ T8939] BTRFS info (device loop2): force clearing of disk cache [ 158.864119][ T8978] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 158.910399][ T8978] hfs: filesystem is marked locked, mounting read-only. [ 158.933840][ T8939] BTRFS info (device loop2): setting nodatasum [ 158.942628][ T8939] BTRFS info (device loop2): allowing degraded mounts [ 158.949423][ T8939] BTRFS info (device loop2): enabling disk space caching [ 158.980842][ T8939] BTRFS info (device loop2): disk space caching is enabled [ 159.005504][ T8939] BTRFS info (device loop2): has skinny extents [ 159.102305][ T9019] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 159.265627][ T8939] BTRFS info (device loop2): clearing free space tree [ 159.266830][ T4796] usb 2-1: USB disconnect, device number 12 [ 159.284299][ T8939] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.324948][ T8939] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.491098][ T9064] netlink: 'syz.3.2081': attribute type 21 has an invalid length. [ 159.626157][ T4379] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop2 scanned by udevd (4379) [ 159.795108][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 159.935577][ T9095] netlink: 'syz.3.2090': attribute type 10 has an invalid length. [ 160.015118][ T9095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2090'. [ 160.057821][ T9095] device team0 entered promiscuous mode [ 160.102520][ T9095] device team_slave_0 entered promiscuous mode [ 160.131218][ T9095] device team_slave_1 entered promiscuous mode [ 160.160771][ T9095] bridge0: port 3(team0) entered blocking state [ 160.177358][ T9095] bridge0: port 3(team0) entered disabled state [ 160.195255][ T9095] bridge0: port 3(team0) entered blocking state [ 160.202160][ T9095] bridge0: port 3(team0) entered forwarding state [ 160.355855][ T9110] loop0: detected capacity change from 0 to 4096 [ 160.367428][ T9130] loop4: detected capacity change from 0 to 1024 [ 160.437966][ T9110] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 160.457682][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2105'. [ 160.487149][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2105'. [ 160.508032][ T9140] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 160.607561][ T9110] ntfs3: loop0: failed to convert "c46c" to cp865 [ 160.823098][ T9163] loop0: detected capacity change from 0 to 16 [ 160.890298][ T9163] erofs: (device loop0): mounted with root inode @ nid 36. [ 160.934880][ T9163] erofs: (device loop0): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 160.973829][ T9172] loop2: detected capacity change from 0 to 64 [ 161.259113][ T9137] loop3: detected capacity change from 0 to 32768 [ 161.290191][ T4796] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 161.450813][ T9137] XFS (loop3): Mounting V5 Filesystem [ 161.650467][ T4796] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 161.676209][ T4796] usb 2-1: config 0 has no interface number 0 [ 161.714725][ T4796] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 161.763636][ T9137] XFS (loop3): Ending clean mount [ 161.776126][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2137'. [ 161.802942][ T9137] XFS (loop3): Quotacheck needed: Please wait. [ 161.836260][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2137'. [ 161.864398][ T9256] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2137'. [ 161.877769][ T9137] XFS (loop3): Quotacheck: Done. [ 161.912019][ T4796] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 161.923718][ T4796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.947404][ T4796] usb 2-1: Product: syz [ 161.962338][ T4796] usb 2-1: Manufacturer: syz [ 161.967238][ T4796] usb 2-1: SerialNumber: syz [ 161.974570][ T4796] usb 2-1: config 0 descriptor?? [ 161.991103][ T4183] XFS (loop3): Unmounting Filesystem [ 162.001052][ T9181] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 162.029461][ T4796] usb-storage 2-1:0.20: USB Mass Storage device detected [ 162.061055][ T4796] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 162.188144][ T9260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.281415][ T4796] scsi host1: usb-storage 2-1:0.20 [ 162.483360][ T6892] usb 2-1: USB disconnect, device number 13 [ 162.685970][ T9334] netlink: 'syz.2.2148': attribute type 1 has an invalid length. [ 163.120355][ T4683] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.560403][ T4683] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 163.569479][ T4683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.597462][ T4683] usb 1-1: config 0 descriptor?? [ 163.642290][ T4683] gspca_main: spca508-2.14.0 probing 8086:0110 [ 163.713110][ T9436] __nla_validate_parse: 17 callbacks suppressed [ 163.713127][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 164.080444][ T4683] gspca_spca508: reg_read err -71 [ 164.100417][ T4683] gspca_spca508: reg_read err -71 [ 164.127213][ T4683] gspca_spca508: reg_read err -71 [ 164.155564][ T9474] loop2: detected capacity change from 0 to 1024 [ 164.170539][ T4683] gspca_spca508: reg_read err -71 [ 164.185296][ T9474] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 164.185296][ T9474] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 164.185296][ T9474] [ 164.188360][ T9391] loop1: detected capacity change from 0 to 32768 [ 164.210232][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2186'. [ 164.222115][ T4683] gspca_spca508: reg write: error -71 [ 164.226444][ T9474] EXT4-fs (loop2): Ignoring removed bh option [ 164.227534][ T4683] spca508: probe of 1-1:0.0 failed with error -71 [ 164.280446][ T4683] usb 1-1: USB disconnect, device number 10 [ 164.311949][ T9474] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,journal_ioprio=0x0000000000000000,barrier,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 164.416087][ T9391] ERROR: (device loop1): diNewExt: no free extents [ 164.416087][ T9391] [ 164.509841][ T9391] ialloc: diAlloc returned -5! [ 164.808447][ T9527] x_tables: duplicate entry at hook 2 [ 165.267168][ T9570] loop1: detected capacity change from 0 to 164 [ 165.338516][ T9570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 165.386285][ T9570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 165.471599][ T9589] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 165.533177][ T9595] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2213'. [ 165.561385][ T9598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2215'. [ 165.652827][ T9608] loop4: detected capacity change from 0 to 16 [ 165.772405][ T9626] sctp: [Deprecated]: syz.3.2221 (pid 9626) Use of int in max_burst socket option. [ 165.772405][ T9626] Use struct sctp_assoc_value instead [ 165.803395][ T9608] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.820256][ T4290] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.850427][ T9608] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 166.230545][ T4290] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 166.238777][ T4290] usb 1-1: config 0 has no interface number 0 [ 166.269872][ T4290] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.320779][ T4290] usb 1-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.336399][ T9684] loop4: detected capacity change from 0 to 736 [ 166.476079][ T9684] rock: directory entry would overflow storage [ 166.497613][ T9684] rock: sig=0x3b10, size=4, remaining=3 [ 166.540403][ T4290] usb 1-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 166.561254][ T4290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.589103][ T4290] usb 1-1: Product: syz [ 166.610557][ T4290] usb 1-1: Manufacturer: syz [ 166.624964][ T4290] usb 1-1: SerialNumber: syz [ 166.649185][ T4290] usb 1-1: config 0 descriptor?? [ 166.700284][ T5985] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 166.756991][ T4290] vmk80xx 1-1:0.255: driver 'vmk80xx' failed to auto-configure device. [ 166.808639][ T4290] vmk80xx: probe of 1-1:0.255 failed with error -22 [ 166.830672][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2249'. [ 166.970770][ T6892] usb 1-1: USB disconnect, device number 11 [ 167.206898][ T9758] loop3: detected capacity change from 0 to 2048 [ 167.304289][ T5985] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 167.334007][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.348764][ T9761] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.369685][ T5985] usb 2-1: Product: syz [ 167.376591][ T9718] loop2: detected capacity change from 0 to 32768 [ 167.388051][ T5985] usb 2-1: Manufacturer: syz [ 167.393973][ T5985] usb 2-1: SerialNumber: syz [ 167.432336][ T5985] usb 2-1: config 0 descriptor?? [ 167.482398][ T5985] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 167.524479][ T9756] loop4: detected capacity change from 0 to 32768 [ 167.576154][ T9718] XFS (loop2): Mounting V5 Filesystem [ 167.636508][ T9789] libceph: resolve '0' (ret=-3): failed [ 167.722961][ T9756] XFS (loop4): Mounting V5 Filesystem [ 167.734945][ T9718] XFS (loop2): Ending clean mount [ 167.777906][ T9718] XFS (loop2): Quotacheck needed: Please wait. [ 167.878944][ T9756] XFS (loop4): Ending clean mount [ 167.900457][ T5985] gspca_sunplus: reg_w_riv err -71 [ 167.905665][ T5985] sunplus: probe of 2-1:0.0 failed with error -71 [ 167.939595][ T5985] usb 2-1: USB disconnect, device number 14 [ 167.954838][ T9718] XFS (loop2): Quotacheck: Done. [ 167.984479][ T9756] XFS (loop4): Quotacheck needed: Please wait. [ 168.063308][ T9756] XFS (loop4): Quotacheck: Done. [ 168.159081][ T4192] XFS (loop2): Unmounting Filesystem [ 168.212319][ T4189] XFS (loop4): Unmounting Filesystem [ 168.239642][ T9790] loop0: detected capacity change from 0 to 32768 [ 168.419186][ T9790] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 168.539608][ T9790] (syz.0.2258,9790,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=288, inode=0, rec_len=0, name_len=0 [ 168.560429][ T9790] (syz.0.2258,9790,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 168.607750][ T9790] (syz.0.2258,9790,0):ocfs2_mknod:298 ERROR: status = -2 [ 168.620193][ T9790] (syz.0.2258,9790,0):ocfs2_mknod:502 ERROR: status = -2 [ 168.640679][ T9790] (syz.0.2258,9790,0):ocfs2_create:676 ERROR: status = -2 [ 168.721843][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 169.350002][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2295'. [ 169.387419][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2295'. [ 169.428198][ T9920] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2295'. [ 169.575202][ T9938] loop0: detected capacity change from 0 to 2048 [ 169.694507][ T9938] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.734866][ T9965] loop3: detected capacity change from 0 to 256 [ 169.779377][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2311'. [ 169.791844][ T9970] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2311'. [ 169.819456][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2311'. [ 169.852488][ T9965] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.080420][ T4796] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 170.401156][T10044] loop0: detected capacity change from 0 to 1024 [ 170.410577][ T4796] usb 3-1: not running at top speed; connect to a high speed hub [ 170.497088][T10044] hfsplus: bad catalog entry type [ 170.500577][ T4796] usb 3-1: config 1 has an invalid interface number: 78 but max is 0 [ 170.535721][ T4796] usb 3-1: config 1 has no interface number 0 [ 170.577345][ T4796] usb 3-1: config 1 interface 78 has no altsetting 0 [ 170.640921][ T154] hfsplus: b-tree write err: -5, ino 4 [ 170.830764][ T4796] usb 3-1: string descriptor 0 read error: -22 [ 170.840658][ T4796] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 170.878445][ T4796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.919349][T10078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2341'. [ 170.955287][ T4796] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 170.976668][ T4796] usb 3-1: selecting invalid altsetting 0 [ 171.010661][T10085] loop0: detected capacity change from 0 to 1024 [ 171.158643][ T6969] usb 3-1: USB disconnect, device number 16 [ 171.178171][ T2421] pvrusb2: control-write URB failure, status=-71 [ 171.185287][ T2421] pvrusb2: Device being rendered inoperable [ 171.219303][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 171.253269][T10048] loop4: detected capacity change from 0 to 32768 [ 171.269994][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 171.405674][T10128] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.440321][ T4796] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 171.764532][T10145] loop0: detected capacity change from 0 to 512 [ 171.820510][ T4796] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 171.838936][ T4796] usb 4-1: config 0 has no interface number 0 [ 171.851851][T10117] loop1: detected capacity change from 0 to 32768 [ 171.858982][T10145] EXT4-fs (loop0): Ignoring removed nobh option [ 171.880386][T10145] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 171.890238][ T4796] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 171.903461][T10145] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002] [ 171.919250][T10145] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.936185][ T4796] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 171.955821][T10145] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.2358: attempt to clear invalid blocks 1024 len 1 [ 172.069761][T10117] XFS (loop1): Mounting V5 Filesystem [ 172.070927][T10145] EXT4-fs (loop0): Remounting filesystem read-only [ 172.109270][T10139] loop4: detected capacity change from 0 to 32768 [ 172.125068][T10145] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2358: bg 0: block 361: padding at end of block bitmap is not set [ 172.149395][T10145] EXT4-fs (loop0): Remounting filesystem read-only [ 172.176583][T10139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2353 (10139) [ 172.200445][ T4796] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 172.220233][ T4796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.228254][ T4796] usb 4-1: Product: syz [ 172.234850][ T4796] usb 4-1: Manufacturer: syz [ 172.236886][T10145] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 172.239457][ T4796] usb 4-1: SerialNumber: syz [ 172.255430][T10117] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 172.256004][ T4796] usb 4-1: config 0 descriptor?? [ 172.283976][T10145] EXT4-fs (loop0): Remounting filesystem read-only [ 172.293319][T10139] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.309095][T10145] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2358: invalid indirect mapped block 1811939328 (level 0) [ 172.321721][T10117] XFS (loop1): Starting recovery (logdev: internal) [ 172.338077][T10139] BTRFS info (device loop4): using free space tree [ 172.345083][T10139] BTRFS info (device loop4): has skinny extents [ 172.360238][T10145] EXT4-fs (loop0): Remounting filesystem read-only [ 172.379575][T10117] XFS (loop1): Ending recovery (logdev: internal) [ 172.397134][T10145] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2358: invalid indirect mapped block 2185560079 (level 1) [ 172.510073][T10145] EXT4-fs (loop0): Remounting filesystem read-only [ 172.528129][ T4182] XFS (loop1): Unmounting Filesystem [ 172.548304][T10145] EXT4-fs (loop0): 1 truncate cleaned up [ 172.580051][T10145] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,nobh,errors=remount-ro,max_dir_size_kb=0x00000000000000ff. Quota mode: none. [ 172.639394][T10139] BTRFS info (device loop4): enabling ssd optimizations [ 172.646666][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 172.657810][T10206] openvswitch: netlink: Actions may not be safe on all matching packets [ 172.740373][ T4796] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 172.790647][ T4796] asix: probe of 4-1:0.239 failed with error -71 [ 172.810948][ T4796] usb 4-1: USB disconnect, device number 6 [ 173.100485][T10237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2374'. [ 173.797359][T10294] xt_recent: hitcount (4294901760) is larger than allowed maximum (255) [ 173.815592][T10283] loop2: detected capacity change from 0 to 4096 [ 173.842626][T10300] netlink: 'syz.1.2394': attribute type 2 has an invalid length. [ 173.915042][T10283] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 174.036439][T10283] ntfs3: loop2: failed to convert "c46c" to cp857 [ 174.172871][T10327] loop0: detected capacity change from 0 to 512 [ 174.260443][ T5985] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.327334][T10325] loop2: detected capacity change from 0 to 4096 [ 174.355510][T10327] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2402: inode has both inline data and extents flags [ 174.396768][T10344] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 174.408163][T10325] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 174.417833][T10344] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2406'. [ 174.430577][T10344] netlink: 'syz.1.2406': attribute type 1 has an invalid length. [ 174.469491][T10327] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2402: couldn't read orphan inode 15 (err -117) [ 174.492237][T10325] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 174.530230][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 174.549641][T10325] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 174.583381][T10325] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 174.618777][T10327] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback. [ 174.630832][T10325] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 174.678589][T10325] ntfs: volume version 3.1. [ 174.700397][ T5985] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 174.711129][ T5985] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 174.721076][T10325] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 174.743564][ T5985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 174.768432][T10325] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 174.805236][ T5985] usb 5-1: config 1 has no interface number 0 [ 174.814409][T10325] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 174.825951][ T5985] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.844684][ T5985] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.860476][T10325] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 174.879076][ T5985] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 174.892856][T10325] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 174.907910][ T5985] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 174.928626][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.956316][ T4290] Bluetooth: hci4: command 0x0405 tx timeout [ 175.015186][ T5985] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 175.054768][T10372] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.087802][T10372] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 175.091697][T10392] loop2: detected capacity change from 0 to 8 [ 175.109439][T10393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2419'. [ 175.226433][ T5985] snd_usb_pod 5-1:1.1: cannot start listening: -90 [ 175.240837][ T5985] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 175.267588][ T5985] snd_usb_pod: probe of 5-1:1.1 failed with error -90 [ 175.307998][T10406] loop1: detected capacity change from 0 to 2048 [ 175.430615][T10406] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.456299][ T4290] usb 5-1: USB disconnect, device number 10 [ 175.580446][ T5985] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 175.620451][ T4681] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 175.630581][ T4796] Bluetooth: hci1: command 0x0406 tx timeout [ 175.640369][ T4684] Bluetooth: hci2: command 0x0406 tx timeout [ 175.652216][ T4684] Bluetooth: hci0: command 0x0406 tx timeout [ 175.666958][ T4684] Bluetooth: hci3: command 0x0406 tx timeout [ 175.742846][T10451] loop3: detected capacity change from 0 to 1764 [ 175.860424][ T5985] usb 3-1: Using ep0 maxpacket: 32 [ 176.030664][ T4681] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 176.040021][ T5985] usb 3-1: unable to get BOS descriptor or descriptor too short [ 176.050885][ T4681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.068185][T10458] loop1: detected capacity change from 0 to 32768 [ 176.069338][ T4681] usb 1-1: config 0 descriptor?? [ 176.125726][T10458] ERROR: (device loop1): diNewExt: no free extents [ 176.125726][T10458] [ 176.136727][ T4681] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 176.163860][ T5985] usb 3-1: config 3 has an invalid interface number: 224 but max is 0 [ 176.179552][T10458] ERROR: (device loop1): remounting filesystem as read-only [ 176.187616][ T5985] usb 3-1: config 3 has no interface number 0 [ 176.193970][T10458] ialloc: diAlloc returned -5! [ 176.198883][ T5985] usb 3-1: config 3 interface 224 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 176.215565][ T5985] usb 3-1: config 3 interface 224 has no altsetting 0 [ 176.271523][ T4796] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 176.356853][T10491] ceph: No path or : separator in source [ 176.405335][ T5985] usb 3-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=35.1f [ 176.425964][ T5985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.444957][ T5985] usb 3-1: Product: syz [ 176.449264][ T5985] usb 3-1: Manufacturer: syz [ 176.468229][ T5985] usb 3-1: SerialNumber: syz [ 176.509078][ T150] block nbd1: Attempted send on invalid socket [ 176.515701][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 176.518692][T10511] loop4: detected capacity change from 0 to 1024 [ 176.527218][ T4796] usb 4-1: Using ep0 maxpacket: 16 [ 176.544943][T10502] XFS (nbd1): SB validate failed with error -5. [ 176.551875][ T4681] gspca_cpia1: usb_control_msg 03, error -71 [ 176.588917][ T4681] gspca_cpia1: usb_control_msg 01, error -71 [ 176.612438][ T4681] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 176.614979][T10511] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.627792][ T4681] usb 1-1: USB disconnect, device number 12 [ 176.670372][ T4796] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 176.692422][ T4796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.709069][ T4796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 176.720316][ T4796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 176.731800][ T4796] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.820395][ T4796] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.829550][ T4796] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.838165][ T4796] usb 4-1: Manufacturer: syz [ 176.845772][ T4796] usb 4-1: config 0 descriptor?? [ 176.856677][ T5985] rndis_host 3-1:3.224: invalid descriptor buffer length [ 176.863686][T10530] tmpfs: Bad value for 'mpol' [ 176.880221][ T5985] usb 3-1: bad CDC descriptors [ 176.921101][ T5985] usb 3-1: USB disconnect, device number 17 [ 176.944233][T10535] siw: device registration error -23 [ 177.010136][ T4681] Bluetooth: hci4: command 0x0406 tx timeout [ 177.065933][T10549] loop1: detected capacity change from 0 to 4096 [ 177.150002][ T4796] usb 4-1: USB disconnect, device number 7 [ 177.158809][T10552] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.890831][T10592] loop3: detected capacity change from 0 to 4096 [ 177.908210][T10592] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 178.201624][T10599] netlink: 'syz.1.2461': attribute type 3 has an invalid length. [ 178.209514][T10599] netlink: 'syz.1.2461': attribute type 3 has an invalid length. [ 178.420142][T10619] netlink: 'syz.0.2474': attribute type 3 has an invalid length. [ 178.534983][T10637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.574999][T10640] loop4: detected capacity change from 0 to 256 [ 178.592418][T10615] loop3: detected capacity change from 0 to 4096 [ 178.624623][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 178.656476][T10648] loop2: detected capacity change from 0 to 64 [ 178.676280][T10615] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 178.781556][T10615] ntfs3: loop3: Failed to load $Extend. [ 178.931564][ T4253] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 179.274697][T10699] tmpfs: Bad value for 'mpol' [ 179.314946][ T4253] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 179.340837][ T4253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.352292][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2502'. [ 179.383963][ T4253] usb 2-1: config 0 descriptor?? [ 179.512947][T10721] loop0: detected capacity change from 0 to 64 [ 179.580736][T10674] loop2: detected capacity change from 0 to 32768 [ 179.600141][T10728] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 179.607101][T10728] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.628297][T10728] vhci_hcd vhci_hcd.0: Device attached [ 179.641142][T10732] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 179.647682][T10732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 179.661708][T10732] vhci_hcd vhci_hcd.0: Device attached [ 179.674883][T10733] vhci_hcd: connection closed [ 179.677359][T10729] vhci_hcd: connection closed [ 179.683952][ T9] vhci_hcd: stop threads [ 179.702980][ T9] vhci_hcd: release socket [ 179.708020][ T9] vhci_hcd: disconnect device [ 179.742468][ T9] vhci_hcd: stop threads [ 179.746739][ T9] vhci_hcd: release socket [ 179.764244][ T9] vhci_hcd: disconnect device [ 179.780195][T10674] JBD2: Ignoring recovery information on journal [ 179.832028][ T4253] ath6kl: Failed to submit usb control message: -71 [ 179.839180][ T4253] ath6kl: unable to send the bmi data to the device: -71 [ 179.840281][ T5985] vhci_hcd: vhci_device speed not set [ 179.858998][ T4253] ath6kl: Unable to send get target info: -71 [ 179.905278][ T4253] ath6kl: Failed to init ath6kl core: -71 [ 179.948426][T10718] loop3: detected capacity change from 0 to 32768 [ 179.961492][ T4253] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 179.995897][ T4253] usb 2-1: USB disconnect, device number 15 [ 180.015417][T10674] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.042715][T10755] tmpfs: Bad value for 'mpol' [ 180.063287][T10718] [ 180.063287][T10718] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.063287][T10718] [ 180.151428][T10718] __jfs_setxattr: xattr_size = 67, new_size = 161 [ 180.201670][ T4192] ocfs2: Unmounting device (7,2) on (node local) [ 180.272329][ T9] [ 180.272329][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.272329][ T9] [ 180.293465][T10763] loop4: detected capacity change from 0 to 256 [ 180.320319][ T9] [ 180.320319][ T9] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.320319][ T9] [ 180.346216][ T4183] [ 180.346216][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.346216][ T4183] [ 180.370313][ T4183] [ 180.370313][ T4183] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 180.370313][ T4183] [ 180.408392][T10763] exfat: Deprecated parameter 'namecase' [ 180.417195][ T277] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN [ 180.428925][ T277] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] [ 180.437332][ T277] CPU: 1 PID: 277 Comm: jfsCommit Not tainted syzkaller #0 [ 180.444526][ T277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.454593][ T277] RIP: 0010:lmLogSync+0x121/0x9c0 [ 180.459611][ T277] Code: d5 cf fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 bd 97 ef fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 a1 97 ef fe 49 8b 3f e8 39 d5 cf fe [ 180.479196][ T277] RSP: 0018:ffffc90002effc60 EFLAGS: 00010206 [ 180.485250][ T277] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: f0670a2cca1e0c00 [ 180.493215][ T277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.501175][ T277] RBP: ffffc90002effd68 R08: dffffc0000000000 R09: ffffc90002effba4 [ 180.509140][ T277] R10: fffff520005dff7c R11: 1ffff920005dff74 R12: 1ffff9200050a227 [ 180.517103][ T277] R13: ffff8880744f4000 R14: ffff888024f7f238 R15: 0000000000000030 [ 180.525067][ T277] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 180.533982][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.540545][ T277] CR2: 00007f0b4ef909e0 CR3: 000000001b1a3000 CR4: 00000000003506e0 [ 180.548501][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.556451][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.564400][ T277] Call Trace: [ 180.567658][ T277] [ 180.570571][ T277] ? mutex_lock_io_nested+0x60/0x60 [ 180.575754][ T277] ? lmWriteRecord+0x1aa0/0x1aa0 [ 180.580670][ T277] ? __lock_acquire+0x7c60/0x7c60 [ 180.585670][ T277] ? do_raw_spin_lock+0x11d/0x280 [ 180.590672][ T277] ? __rwlock_init+0x140/0x140 [ 180.595424][ T277] jfs_syncpt+0x77/0x90 [ 180.599577][ T277] txEnd+0x2e1/0x520 [ 180.603457][ T277] jfs_lazycommit+0x5ba/0xb20 [ 180.608124][ T277] ? txFreelock+0x5a0/0x5a0 [ 180.612611][ T277] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 180.618486][ T277] ? sched_dynamic_update+0x210/0x210 [ 180.623839][ T277] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 180.629709][ T277] ? __kthread_parkme+0x157/0x1b0 [ 180.634717][ T277] kthread+0x436/0x520 [ 180.638760][ T277] ? txFreelock+0x5a0/0x5a0 [ 180.643239][ T277] ? kthread_blkcg+0xd0/0xd0 [ 180.647804][ T277] ret_from_fork+0x1f/0x30 [ 180.652201][ T277] [ 180.655207][ T277] Modules linked in: [ 180.701910][T10763] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 180.714302][ T277] ---[ end trace 88374e0df3a26623 ]--- [ 180.719832][ T277] RIP: 0010:lmLogSync+0x121/0x9c0 [ 180.725416][ T277] Code: d5 cf fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 bd 97 ef fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 a1 97 ef fe 49 8b 3f e8 39 d5 cf fe [ 180.745202][ T277] RSP: 0018:ffffc90002effc60 EFLAGS: 00010206 [ 180.751375][ T277] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: f0670a2cca1e0c00 [ 180.759450][ T277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.767558][ T277] RBP: ffffc90002effd68 R08: dffffc0000000000 R09: ffffc90002effba4 [ 180.777868][ T277] R10: fffff520005dff7c R11: 1ffff920005dff74 R12: 1ffff9200050a227 [ 180.786005][ T277] R13: ffff8880744f4000 R14: ffff888024f7f238 R15: 0000000000000030 [ 180.794090][ T277] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 180.803094][ T277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.809689][ T277] CR2: 00007f38a7cebdac CR3: 0000000023e7b000 CR4: 00000000003506f0 [ 180.817684][ T277] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 180.825669][ T277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.833754][ T277] Kernel panic - not syncing: Fatal exception [ 180.840008][ T277] Kernel Offset: disabled [ 180.844319][ T277] Rebooting in 86400 seconds..