last executing test programs: 9m15.448497625s ago: executing program 1 (id=585): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 9m15.10129324s ago: executing program 1 (id=588): syz_mount_image$minix(&(0x7f0000000e80), &(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2200050, &(0x7f00000000c0)=ANY=[], 0x2, 0x1df, &(0x7f0000000fc0)="$eJzs3Etu00Acx/Gf47ou5f3asEJiARsSKCxgRw/ABdhVrakqXECUTSukiC234CY5BxsukEiwY4WRx06IzSh+xThVvh+p7V8e/zzTyGONLTkCsLaumd+OHHmmGkq6K+nVS0kbHQ8OQKsi/Y4ArCv3R9cjANCNya5r1gEjR/r+89P+OP3xSq4fJru9pNiSNJffLJv/7Ji/dzak8VzeTw9ZuH75muTvK5u/ULH/7Vx+uyDnzPLJ///gXjZ/UdIlSZclXZF0Nb3Xui7phqX/g1z/t0uOH2giPvv6SenXzvfr9x/PntdHYfDI1ujqWdE1wEvzj+3Nc/GRdYfNNL9TfsjW/JPCPV9Yt/ppvr//LjywtPdqjgsoo/d3/tdhnhA2mf+u9CvKz3/7VMn68m02gAXzH8ACJ6dnb/bCMPhQofBMMV0uVIjHu1fsq2oRRdGw5S7WoNiyNHk1z5Y2i/jq3+g48fK15aGqSRd+dst01rb+8XZ1OQLwHw0+Hr8fnJyePTw63jsMDoO3O0+fu2mbuS8f/Ht3XutBAYCVk12cAwAAAAAAAAAAAACA8+impFt1gmVf8AMAAACwMpb1zpBrCk9SronvEAQAAAAAAAAAAAAAAAAAAACW5k8AAAD//w0RPFQ=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x4) 9m14.779134876s ago: executing program 1 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000045c0)={0x2040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x40) 9m14.47708245s ago: executing program 1 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x54, r1, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbf7, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) 9m14.187106745s ago: executing program 1 (id=596): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x210c08, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 9m13.749207702s ago: executing program 1 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x68}}, 0x0) 8m58.619963906s ago: executing program 32 (id=599): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x68}}, 0x0) 7m21.514726742s ago: executing program 4 (id=1360): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffff, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @rand_addr=0x64010102}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 7m21.317168645s ago: executing program 4 (id=1363): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r0) 7m19.876987978s ago: executing program 4 (id=1370): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 7m18.665150006s ago: executing program 4 (id=1381): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) 7m18.023222526s ago: executing program 4 (id=1386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x270bd24, 0x25dfdbf8, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040891}, 0x4000080) 7m17.293216197s ago: executing program 4 (id=1387): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020) 7m16.399415671s ago: executing program 33 (id=1387): socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020) 2m5.860071466s ago: executing program 3 (id=4425): r0 = syz_usb_connect$uac1(0x3, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "6cebe9cc56c0ee4b7b1abc769547132b4ef3523f0476aa0a3737083bf23535a75211e6ac198e8255"}}}, 0x0) 2m3.820689638s ago: executing program 3 (id=4446): r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) 2m3.739817309s ago: executing program 3 (id=4447): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cda900", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x2, 0x3a, 0x0, @mcast1, @empty, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 2m3.602268971s ago: executing program 3 (id=4449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x40004) 2m3.542915652s ago: executing program 3 (id=4450): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 2m3.445178983s ago: executing program 3 (id=4451): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000005c0)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYRES64=0x0], 0xfe, 0x61fd, &(0x7f000000cac0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m48.216777924s ago: executing program 34 (id=4451): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000002c0)='./bus\x00', 0x2010880, &(0x7f00000005c0)=ANY=[@ANYBLOB="646973636172643d3078303030303030303030303030303030342c71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030342c756d61736b3d303430372c75737271756f74612c6572726f72733d72656d6f756e742d726f006e6f646973636172642c726573697a653d3078303030303030303030303031303030302c756d61736b3d3078301030303030303030303030303030322c71756f74612c67695b3d00"/199, @ANYRESHEX, @ANYRES32, @ANYRES16, @ANYRES64=0x0], 0xfe, 0x61fd, &(0x7f000000cac0)="$eJzs3c1vHGcdB/DfvvqlNLV6qEqEkJsWaClN4qSEQIE2Bzhw6QHlihK5bhWRAkoCSitLceULB078BSAkuCHEEXHgitQDV26cOBHJRgL1xKCxnyee3exm7dreWXs+H8mZ+c0z633G3519yczsEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAfO+7319pRcSNn6UFSxGfiU5EO2KhrJcjYmF5Ka/fjYjnY6c5nouI3lxEefudf56JeD0iPj4TsbW9vlouvrTPfnznD3//zQ+eevtvv+9d+O8f73XeGLfe/fu/+M+fHhxumwEAAKBpiqIoWulj/tn0+b5dd6cAgKnIr/9Fkpef+vqX/3z7z7PUH7VarVarp1BXFaM9qBYRsVG9TfmeweF4ADhhNuKTurtAjeTfaN2IeKruTgAzrVV3BzgWW9vrq62Ub6v6erC8257PBRnIf6P16PqOcdNJhs8xmdbjazM68eyY/ixMqQ+zJOffHs7/xm57P6133PlPy7j8+7uXPjVOzr8znP+Q05N/e2T+TZXz7x4o/478AQAAAABghuX//1+q+fjv3OE3ZV+edPx3eUp9AAAAAAAAAICjdtjx/x4x/h8AAADMrPKzeulXZ/aWjfsutnL59VbE00PrAw2TLpZZrLsfAAAAAAAAAAAAANAk3d1zeK+3InoR8fTiYlEU5U/VcH1Qh739Sdf07Ycmq/tJHgAAdn18Zuha/lbEfERcT9/111tcXCyK+YXFYrFYmMvvZ/tz88VC5XNtnpbL5vr7eEPc7RflL5uv3K5q0uflSe3Dv6+8r37R2UfHjkgv/TXHNNcUNgAku69GW16RTpmieGbcmw8YYP8/hZZiqe7HFbOv7ocpAAAAcPyKoiha6eu8z6Zj/u26OwUATEV+/R8+LnCouj2mPeJofr9arVar1epPVVcVoz2oFhGxUb1N+Z7BcPwAcMJsxCd1d4Eayb/RuhHxfN2dAGZaq+4OcCy2ttdXWynfVvX1II3vns8FGch/o7Vzu3z7UdNJhs8xmdbjazM68eyY/jw3pT7Mkpx/ezj/G7vt/bTecec/LePy7+9cMtc8Of/OcP5DTk/+7ZH5N1XOv3ug/DvyBwAAAACAGZb//3/J8d+8yQAAAAAAAABw4mxtr6/m617z8f/PjVjP9Z+nU86/ddD8F9K8/E+0nH97KP+Xh9brVOYfXtvb//+9vb7623v/+mye7jf/uTzTSo+sVnpEtNI9tbppepite9xmr9Mv76nXane66Zyfovdu3IrbsRYXB9Ztp7/HXvvKQHvZ095A+6WB9u5j7ZcH2nvpeweKhdx+Plbjx3E73tlpL9vmJmz//IT2YkJ7zr/j+b+Rcv7dyk+Z/2Jqbw1NSw8/aj+231eno+7nrVuf//nF49+ciTaj82jbqsrtO1dDf3b+Jk/146d31+6cv3/z3r07K5EmA0svRZocsZx/b+dnbu/5/8Xd9vy8X91fH37UP3D+s2IzumPzf7EyX27vK1PuWx1y/v30k/N/J7WP3v8PlP/v/vrytSltzWRP2v9fraE/AAAAAAAAAAAAAAAA8CRFUexcIvpWRFxJ1//UdW0mADBd+fW/SPJytVqtVqvVp6+uKkZ7s1pExF8e3WBu1G8BAE6A/0XEP+ruBLWRf4Pl7/srpy/V3Rlgqu5+8OEPb96+vXbnbt09AQAAAAAAAAA+rTz+53Jl/OeXImJpaL2B8V+vxfJhx3/t5plHA4we8UDfY2y2+512ZbjxF2JnfO7z48b/PhePj/+dx8TtVLdjjN6E9v6E9kmXWMyPXLqX1sgLPSpy/i9Uxjsv8z87NPz6IcZ/nSlPGv91eMz7Jsj5n6s8nsv8vzS0XjX/4tczl//GflfcjPZA/hfuvf+TC3c/+PC1W+/ffG/tvbUfXV5ZuXj5ypWrV69eePfW7bWLu/8eT69nQM4/j33tPNBmyfnnzOXfLDn/L6Ra/s2S8/9iquXfLDn//H5P/s2S88+ffeTfLDn/V1It/2bJ+X851fJvlq3t9bky/1dTLf9myfv/V1It/2bJ+b+Wavk3S87/fKrl3yw5/wup3kf+vh7+FMn55yNc9v9myfmvpFr+zZLzv5Rq+TdLzv9yquXfLDn/11Mt/2bJ+X811fJvlpz/lVTLv1ly/l9L9T7zn3TaMydEzv9qqu3/zZLz/3qq5d8sOf9vpFr+zZLzfyPV8m+WnP83Uy3/Zsn5fyvV8m+WnP+3Uy3/Zsn5v5lq+TfL3vf/mzFjxkyeqfuZCQAAAAAAAAAAAAAYNo3TieveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7PDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1Eaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwd28xct13HcDP7M1rp2ncNk2d4DZrx3VdZ5NdX+JLwcRNkzQkLSXXNlxiG+/a2da3eG2ahEh2SUsj1YEKFTU8AG0VQSSEalAfCgolD4jLE4GH8oKKkCoRITdKKyoBKlk0c/7//87Mzs7seifr2XM+H8n+7c6cmXPmzJnZ/a793QMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTb8JHJL1ayLKv+qf21NsveVv149cja2mUfutJbCAAAACzV/9X+fuOadMH+Bdyobpm/e98/fmtmZmYm+1T/7w5+ZWYmXTGSZYOrsqx2XXTx3x+t1C8TPJsNV/rqPu/rsPr+DtcPdLh+sMP1Qx2uX9Xh+uEO18/ZAXOszn8eU7uzTbUP1+a7NLs2G6xdt6nFrZ6trOrriz/LqanUbjMzeCSbyo5lk9l4w/L5spXa8i9vqK7rniyuq2/17LrWV4+QHz5zOG5DJezjTQ3rmr3P6AcfzkZ+9MNnDv/RmUvXt5odd0PD/eXbuWVjdTs/Hy7Jt7WSrUr7JG5nX912rm/xnPQ3bGeldrvqx83b+cYCt7N/djOXVfNzPpz11T5+tbafBup/rJf20/pw2X/flGXZ+dnNbl5mzrqyvmxNwyV9s8/PcH5EVu+jeii9MxtY1HG6YQHHaXVObGo8TptfE/H53xBuNzDPNtQ/TT/43NCc532xx2lUfdTzvVaaj8Fuv1Z65RiMx8WrtQf9XMtjcFN4/M9snv8YbHnstDgG0+OuOwY3djoG+4b6a9ucnoRK7Tazx+C2huX7a2uq1OZrm9sfg2Nnjp8am37q6Vumjh86Onl08sSObdvGd+zatWfPnrEjU8cmx/O/L3Nv9741WV96DWwM+y6+Bj7QtGz9oTrz9e69DofbvA7XNi3b7dfhQPODqyzPC3LuMZ2/Nh6q7vThC33ZPK+x2vOzdemvw/S4616HA3Wvw5ZfU1q8DgcW8DqsLnNqa9P3LFnr71kG6v602oa36mvB2rpjsPn7keZjsNvfj/TKMTgcjot/3Tr/14L1YXufG13s9yP9c47B9HDDe0/1kvT9/vCe2mh1XN5QveKqoezs9OTpW588dObM6W1ZGMviXXXHSvPxuqbuMWVzjte+RR+v+6fe99wNLS5fG/bV8C3Vv4bnfa6qy+y8tf1zVfvq1np/Nly6PQujy5Z7f7b6al7dnylLttmf1WU+P7b078VTLq17/x2c5/035v438/Wlu3q2f3Agf/32p70z2PB+3PhUDdTeuyq1db8xtrD348HwZ7nfj69t8368rmnZbr8fDzY/uPh+XOn0046laX4+h8Nxcmy8/ftxdZl12xd7TA60fT++KcxK2P8fDEkh5aK6Y2e+4zata2BgMDyugbiGxuN0R8PygyGbVdf10vbLO0633JTfV396dLOW6zgdaVq228dper+a7zitdPrp2+Vpfj6Hw3Fx7Y72x2l1mVd2Lv29c3X8sO69c6jTMTjYP1Td5sF0EObv9zOr4zF4a3Y4O5kdyyZq1w7VjqdKbV2jty3sGBwKf5b7vXJdm2NwS9Oy3T4G09ex+Y69ysDcB98Fzc/ncDguXrit/TFYXebO3d393nVLuCQtU/e9a/PP1+b7mdcNTbvprfyZV3U7/2Z3+5/NVpc5tmexObP9fro5XHJVi/3U/Pqd7zU1kS3PfloXtvPSnvn3U3V7qst8Ze8Cj6f9WZade+KO2s97w7+v/PnZ736r4d9dWv2bzrkn7nj96iN/u5jtB2DlezMfa/KvdXX/MrWQf/8HAAAAVoSY+/vCTOR/AAAAKIyY++P/Ck/kfwAAACiMmPsHwkxKkv/X3Xlp6s1zWWrmzwTx+rQb7s2Xix3X8fD5yMys6uV3vDj54788t7B192VZ9pN7f73l8uvujduVGwnbefGuxsvn3vDcgtZ/8OHZ5er7618L9x8fz0IPg1YV3PEsy16+5vnaekYevVCbr9x7sDYfOP/cs9Vl3tibfx5v/9q78uV/P5R/9x851HD718J++H6Y4/e13h/xdt+88MH1ux+ZXV+8XWXj22sP+4XH8vuNvyfny8/my8f9PN/2/9WXXvpmdfkn3996+8/1td7+l8L9vhjm/7w3X77+Oah+Hm/3hbD9cX3xdrd+4zstt//iF/PlT92dL3cwzLj+LeHzTXdfmqrfX09WDjU8ruyj+XJx/ePf/e3a9fH+4v03b//wgQsN+6P5+Hjln/P7GWtaPl4e1xP9RdP6q/dTf3zG9b/0mwcb9nOn9V984LX3Vu+3ef03Ny3X33T75t/Y9AdfeL7l+uL27P/TUw2PZ//94XUc1v/CY+F4DNf/78XnG9YbHby/8f0nLv+1tecaHk90z4/y9V+8/Wht/sfIj3/vqrdd/fbzN1b3XZa9+mB+f53Wf/QPTzZs/9ev21p7PuL1saPfvP75xPWf/uzoiZPTZ6cm6vZq7XfnfCzfnlXDq9dUt/ea8N7a/PmBk2cenzw9Mj4ynmUjxf0VepftG2G+no/zi7391ofD83nDV19es/mfvhQv/5eH8ssv3Jd/3fpAWO7L4fK1+fM3U1ni+l/YcF3t9V15Jf+8ocfeBes3/eeeBS0YHn/z9wXxeD/17sdr+6F6Xe3rRnxdL3H7vzeR38+3w36dCb+ZeeN1s+urXz7+boQLD+av9yXvv/A2F5/XPw7P98e/n99/3K74eL8Xvo/5zrrG97t4fHz7XF/z/dd+i8f58H6Snc+vj0vF/X3hjetabl78PSTZ+etrn/9Oup/rF/Uw5zP91PTYsakTZ58cOzM5fWZs+qmnDxw/efbEmQO13+V54NOdbj/7/rSm9v40MblrZza+Osuyk9n4MrxhvTXbX/1oYdt/6uHDE7vHN09MHjl09siZh09Nnj56eHr68OTE9OZDR45MfrbT7acm9m3bvnfH7u2jR6cm9u3Zu3fH3tGpEyerm5FvVAe7xj8zeuL0gdpNpvft3Lvtttt2jo8ePzkxuW/3+Pjo2U63r31tGq3e+tdGT08eO3Rm6vjk6PTU05P7tu3dtWt7x98GePzUkemRsdNnT4ydnZ48PZY/lpEztYurX/s63Z5imv63/PvZZpX8F/Fln7h5V/r9rFUvfm7eu8oXafoFopfC76L5h3ec2rOQz2PuHwwzKUn+BwAAgDKIuX8ozET+BwAAgMKIuX9VmIn8DwAAAIURc/9wmElJ8r/+v/7/wvr/+fX6/+Xq/596Iu+VrvT+f+zP6/+XwxXu/y95/V3o/9/Y7spF9v9/68/0//X/l7E/vyR9V3779f/1/5mr1/r/MfevzrJS5n8AAAAog5j714SZyP8AAABQGDH3XxVmIv8DAABAYcTc/7Ywk5Lkf/3/BfX/t3cqXBW//+/8//r/2crs/8cnR/+/NBbdv3/koYZPC9D/b8v5/zvQ/1+5/f8e2H79f/1/mg3Oe82V6v/H3H91mElJ8j8AAACUQcz9bw8zkf8BAACgMGLuvybMRP4HAACAwoi5f22YSUnyv/6/8//r/+v/F7r/v9Tz/9dtjP7/yuD8/+3p/3dw2f3/Yf3/ldj/H+zu9vd2/7/j5nez/z+U6f8T9Nr5/2Puf0eYSUnyPwAAAJRBzP3vDDOR/wEAAKAwYu5/V5iJ/A8AAACFEXP/tWEmJcn/+v/6//r/+v/6/63X3/n8//lH+v+9Rf+/Pf3/Dpz/v1z9/y5vf2/3/7t9/v/Bu5pv7/z/tNJr/f+Y+98dZlKS/A8AAABlEHP/dWEm8j8AAAAURsz97wkzkf8BAACgMGLuXxdmUpL8r/+v/6//r/+v/996/Z37/zn9/96i/9+e/n8H+v/6//r/C+v/t/jmV/+fVnqt/x9z//VhJiXJ/wAAAFAGMfffEGYi/wMAAEBhxNz/U2Em8j8AAAAURsz968NMSpL/19156ZGv1j7S/8/0//X/S9D/v3lI/1//v9j0/9vT/+9A/1//X/9/gef/n2sx/f9Vne6Mwui1/n/M/e8NMylJ/gcAAIAyiLn/fWEm8j8AAAAURsz9N4aZyP8AAABQGDH3j4SZrLz8/8m+y7iR8/8Xq///J3/9wo2Z/r/+f4f1F7T/Hw8D/f+S0/9vT/+/A/1//X/9/2Xp/1Mevdb/j7l/Q5jJysv/AAAAwDxi7t8YZiL/AwAAQGHE3H9TmIn8DwAAAIURc/+mMJOS5H/9/2L1/yP9f/3/dusvaP8/0f8vN/3/FupepCuk/z+i/6//vxK3vxj9//jdr/4/3dFr/f+Y+98fZlKS/A8AAABlEHP/5jAT+R8AAAAKI+b+D4SZyP8AAABQGDH3bwkzKUn+1//X/9f/1/+/Uv3/If3/tFf1/7tH/7+9xfb/h5z/X/9f/79k/X/n/6e7eq3/H3P/B8NMSpL/AQAAoAxi7t8aZiL/AwAAQGHE/7+Z/79X+R8AAACKKOb+0TCTkuT/JfT/Z/r1/xP9/8bt79X+f0X/v6f6/87/P7tX9f+7R/+/vRVy/n/9/x7q/1cv1//X/9f/53L1Wv8/5v5bwkxKkv8BAACgDGLuvzXMRP4HAACAwoi5fyzMRP4HAACAwoi5fzzMpCT53/n/S9f/X1Xm/r/z/+v/6/8Xn/5/e/r/Hej/O/9/0fr/Wab/zxXVa/3/mPu3hZmUJP8DAABAGcTcvz3MRP4HAACAwoi5f0eYifwPAAAAhRFz/84wk5Lkf/3/0vX/S33+f/1//X/9/+LT/29P/78D/X/9/6L1/53/nyus1/r/MfffFmZSkvwPAAAAZRBz/64wE/kfAAAACiPm/t1hJiH/t/p/3QAAAMDKEnP/njCTkvz7v/5/Qfr/v/H3DevW/9f/b7f+7vT/V+v/h6n/31sK2v9vfllcNv3/DvT/9f/1//X/6ape6//H3L83zKQk+R8AAADKIOb+D4WZyP8AAABQGDH3/3SYifwPAAAAhRFz/8+EmZQk/+v/F6T/30T/X/+/3fqd/1//v8gK2v/vmkL1//v0//X/e2v79f/1/5nrre//x48W1v+PuX9fmElJ8j8AAACUQcz9PxtmIv8DAABAYcTcf3uYifwPAAAAhRFz//4wk5Lkf/1//X/9f/3/t6b/f3vWrBf7/9WDZ9n6/4P6/8tB/7+9QvX/nf9f/7/Htl//X/+fuXrt/P8x9384zKQk+R8AAADKIOb+O8JM5H8AAAAojJj7PxJmIv8DAABAYcTcf2eYSUnyv/6//r/+v/6/8/+3Xr/z/69M+v/t6f93oP+v/6//r/9PV/Va/z/m/rvCTEqS/wEAAKAMYu6/O8xE/gcAAIDCiLn/o2Em8j8AAAAURsz994SZlCT/6//r/+v/6//r/7dev/7/yqT/357+fwf6//r/+v/6/3RVr/X/Y+7/uTCTkuR/AAAAKIOY++8NM5H/AQAAoDBi7r8vzET+BwAAgMKIuf9jYSYlyf/6//r/+v/6//r/rdev/78y6f+3p//fgf6//r/+v/4/XdVr/f+Y+z8eZlKS/A8AAABlEHP/z4eZyP8AAABQGDH3fyLMRP4HAACAwoi5/xfCTEqS//X/9f97q/8/c67+dvr/+v9Zt/r/1Rvp/5eC/n97+v8dtOj/r9L/1//X/9f/57L1Wv8/5v77w0xKkv8BAACgDGLufyDMRP4HAACAwoi5/8EwE/kfAAAACiPm/ofCTEqS//X/S9n/Tw+59/r/zv+v/+/8//r/S6P/357+fwfO/6//r/+v/09X9Vr/P+b+h8NMSpL/AQAAoAxi7n8kzET+BwAAgMKIuf+TYSbyPwAAABRGzP2fCjMpSf7X/y9l/7+Hz/9/5fr/1cfQ/f7/QMPxUab+/3Dd85mOS/1//f9loP/fnv5/B/r/oT+f9en/92D/PxzNq+e5vf4/vajX+v8x9z8aZlKS/A8AAABlEHP/L4aZyP8AAABQGDH3/1KYifwPAAAAhRFz/y+HmZQk/+v/6//r/zv/v/P/t16//v/KpP/fnv5/B/r/zv/fy/3/DvT/6UW91v+Puf9XwkzmDX6v/9cCHiYAAADQQ2LufyzMpCT//g8AAABlEHP/gTAT+R8AAAAKI+b+g2EmJcn/+v/N/f94RlX9f/3/Fdf/H9D/z+n/l1v3+v/vuTrL9P/1//X/9f/1//X/WYpe6//H3H8ozKQk+R8AAADKIOb+Xw0zkf8BAACgMGLuPxxmIv8DAABAYcTcPxFmUpL8r//v/P/d6v//RP//Svf/nf8/0P8vN+f/b0//vwP9f/1//X/9f7qq1/r/MfdPhpmUJP8DAABAgaUfB8fcfyTMRP4HAACAwoi5/2iYifwPAAAAhRFz/+NhJiXJ//r/+v/O/38l+v8DDcvr/+f0//X/u0H/vz39/w70//X/9f/1/+mqXuv/x9w/FWZSkvwPAAAAZRBz/6fDTOR/AAAAKIyY+z8TZiL/AwAAQGHE3H8szKQk+V//X/+/7P3/Spadd/5//f9W69f/X5n0/9vT/+9A/1//X/9f/5+u6rX+//+zdx/PdZ3nHcevKIoEskjyJ2SdVZbJStlkn212mfFarnIvlNy7LVdZ7nLvvcpF7r13y0XuvcpV9gw9Ap/nIQFcnAMSh7jnvO/ns3lCRhQuTCaZXzjfeXP3XxO3dLL/AQAAoAe5++8et9j/AAAA0Izc/feIW+x/AAAAaEbu/nvGLZ3sf/2//r/3/n+1kff/d//z+v9z9P/6/yns6+9PXtyvP7D//4//vPb/9f/6f/3/IP2//l//z15z6/9z998rbulk/wMAAEAPcvffO26x/wEAAKAZufvvE7fY/wAAANCM3P3Xxi2d7H/9v/6/j/7/5Er/f8j+/1b9v/5/2bz/P0z/P0L/r//X/+v/mdTc+v/c/feNWzrZ/wAAANCD3P33i1vsfwAAAGhG7v77xy32PwAAADQjd/8D4pZO9r/+X//fR//fwvv/p7z/v+f70f/r/9fR/w/T/4/Q/+v/9f/6fyY1t/4/d/8D45ZO9j8AAAD0IHf/g+IW+x8AAACakbv/wXGL/Q8AAADNyN3/kLilk/2v/9f/6/+X0v8f0/v/+n/9/8LdvDr/vxP0//vp/0eM9P+rlf5/yKH7+fXf3nI+/wH0//p/9ptb/5+7/6Fxy3+vVqcu9ZsEAAAAZiV3/8Pilk7+/h8AAAB6kLv/TNxi/wMAAEAzcvdfF7d0sv/1//p//b/+X/+//uvr/5fpcP396QN/vf4/HNj///u/XnO3fvt/7/8P8/6//l//z15z6/9z918ft3Sy/wEAAKAHufsfHrfY/wAAANCM3P2PiFvsfwAAAGhG7v5Hxi2d7H/9f2v9/5W7ft0F/f9O7aL/1/9P1f/fuHX+90v/r/+fk6P29/r/0PX7/9v1Q/2//l//r//naObW/+fuf1Tc0sn+BwAAgB7k7n903GL/AwAAQDNy9z8mbrH/AQAAoBm5+x8bt3Sy/xfV/5+9Uv/v/X/9/0z6/5X3//X/M6X/H6b/H9HK+/+X+Kdm0/38UW368+v/9f/sN7f+P3f/4+KWTvY/AAAA9CB3/+PjFvsfAAAAmpG7/wlxi/0PAAAAzcjd/8S4pZP9v6j+3/v/Hff/+RX0//r/y9//J/3/Mun/h+n/R7TS/1+iTffzS//8+n/9P/vNrf/P3f+kuKWT/Q8AAAA9yN3/5LjF/gcAAIBm5O5/Stxi/wMAAEAzcvc/NW7pZP/r//X/y+j/vf+v//f+v/7/cPT/w/T/I/T/+n/9v/6fSc2t/8/df0Pc0sn+BwAAgB7k7n9a3GL/AwAAQDNy9z89brH/AQAAoBm5+58Rt3Sy//X/+n/9v/5f/7/+6+v/l0n/P0z/P0L/r//X/+v/mdSM+v8LftXW6plxSyf7HwAAAHqQu/9ZcYv9DwAAAM3I3f/suMX+BwAAgGbk7r8xbulk/+v/Z9P/7+R8bfX/26vV6pL7///R/y+7/9++4Pez/lzq//X/x0D/P0z/P0L/r//X/+v/mdSM+v+dH+fuf07c0sn+BwAAgB7k7r8pbrH/AQAAoBm5+58bt9j/AAAA0Izc/c+LWzrZ//r/2fT/O9rq/73/v/fPR0/9v/f/99P/Hw/9/zD9/wj9v/5f/6//Z1Jz6/9z9z8/bjp11SV/iwAAAMDM5O5/QdzSyd//AwAAQA9y978wbrH/AQAAYKFu2PczuftfFLd0sv/1/9P2/6cu+Dn9v/5/75+P+fb/V+yqlPX/5+j/l0n/P0z/P0L/r//X/+v/mdTc+v/c/S+OWzrZ/wAAANCD3P03xy32PwAAACzELf889k/k7n9J3GL/AwAAQDNy9780bulk/+v/vf+v/9f/e/9//dfX/y+T/n+Y/n+E/l//v9n+//T5/1L/Txsuov8/e/bsmcve/+fuf1nc0sn+BwAAgB7k7n953GL/AwAAQDNy978ibrH/AQAAoBm5+18Zt3Sy//X/l6P/P1crzrr/zz/qy+r/r1ut5t7/n9H/6/8PpP8/Hvr/Yfr/Efp//b/3//X/TGpu7//n7n9V3NLJ/gcAAIAe5O5/ddxi/wMAAEAzcve/Jm6x/wEAAKAZuftfG7d0sv/1/97/X1D/7/1//f+u72dh/f+dK/3/sVhE/7998Nefe/9/vf5f/z+gu/7/f/9r1w/1//p/9ptb/5+7/3VxSyf7HwAAAHqQu//1cYv9DwAAAM3I3f+GuMX+BwAAgGbk7n9j3HSyk/2v/9f/6//1//r/9V//mN//P7VarfT/E1hE/z9g7v2/9//1/0O66//30P/r/9lvbv1/7v43xS2d7H8AAADoQe7+N8ct9j8AAAA0I3f/W+IW+x8AAACakbv/rXFLJ/tf/6//1//r/5vv/69fRP/v/f+J6P+H6f9H6P/1//p//T/HYlP9f+7+t8Utnex/AAAA6EHu/rfHLfY/AAAANCN3/zviFvsfAAAAmpG7/51xSyf7X/+v/7+Y/j8/p/6/rf7/9Oz6/61d/75O3v/X/09E/z9M/z9C/6//1//foP9nSnN7/z93/7vilk72PwAAAPQgd/+749b/69b+BwAAgGbk7r8lbrH/AQAAoBm5+98Tt3Sy//X/+n/v/+v/m3//X//fFf3/MP3/CP2//l//7/1/JjW3/j93/3vjlk72PwAAAPQgd//74hb7HwAAAJqRu//9cYv9DwAAAM3I3X9r3NLJ/tf/6//1//p//f+530P9fxv0/8OOp//f1v/r/6ufvyL+p0D/r/8f+/W0aW79f+7+D8Qtnex/AAAA6EHu/g/GLfY/AAAANCN3/4fiFvsfAAAAFunkmp/L3f/huKWT/a//1//r//X/+v/1X1//v0z6/2He/z/IP9104Y/0/4ft5/9t14+W9v7/3v/7pf/X/zO9ufX/ufs/Erd0sv8BAACgB7n7Pxq32P8AAADQjNz9H4tb7H8AAABoRu7+j8ctnex//b/+v5n+/64Pof/X/+v/u6f/H6b/H9Hb+/+nd/9w0+/nH9WmP7/+X//PfnPr/3P3fyJu6WT/AwAAQA9y938ybrH/AQAAoBm5+z8Vt9j/AAAA0Iyd3Z9xWYf7X/+/sf5/59+v//f+v/5f/6//n5b+f5j+f0Rv/f8em+7nl/759f/6f/abW///6Z1ftbX6TNzSyf4HAACAHuTu/2zcYv8DAABAM3L3fy5usf8BAACgGbn7Px+3dLL/9f/e/19G/3/27Nkz+n/9/+7v53z/f7v+n6L/H6b/H6H/1//r//X/TGpu/X/u/i/ELZ3sfwAAAOhB7v4vxi32PwAAADQjd/+X4hb7HwAAAJqRu/9E3NLJ/tf/z6D/39L/e/9f/7/y/r/+fyL6//W24+r/R7TY/28d/tvfdD9/VJv+/Pp//T/7za3///LOr9pafSVu6WT/AwAAQA9y9381btm3/287xk8FAAAATCl3/9fiFn//DwAAAM3I3f/1uKWT/a//P77+/67/7Hp5/397tf7z6//1//p//f/lpv8fpv8f0WL/fxE23c8v/fPr//X/7De3/j93/zfilt3D76qL+y4BAACAOcnd/824pZO//wcAAIAe5O6/LW6x/wEAAKAZufu/Fbd0sv/1/zN4/7/B/v943v/f0v/r/6fs/0/o/9ug/x+m/x+h/9f/6/8n6v/zT7P+v3dz6/9z9387bulk/wMAAEAPcvd/J26x/wEAAKAZufu/G7fY/wAAANCM3P23xy0X7P91bXcr9P/6/+X2/97/1/97/1//v1/b/f/WIf4N24P/3cP2/6dXR+v/k/5f/6//77X/9/4/58yt/8/d/724xd//AwAAwOJcdcDP5+7/ftxi/wMAAEAzcvf/IG6x/wEAAKAZuft/GLfccWJTH+lY6f/1//p//b/+f/3X1/8vU9v9/9F5/3+E/n+Kfv5q/X8b/f9qpf/n6ObW/+fu/1Hc4u//AQAAoBm5+38ct9j/AAAA0Izc/T+JW+x/AAAAaEbu/p/GLZ3sf/2//v+I/f9Omtly/7+90v/r/8/R/y+D/n+Y/n+E/t/7//p/7/8zqbn1/7n7fxa3dLL/AQAAoAe5+38et9j/AAAA0Izc/b+IW+x/AAAAaEbu/l/GLZ3s/431//Eftf5/s/3/Ce//7/D+v/5/3dfX/y+T/n+Y/n+E/l//r//X/zOpufX/uft/Fbd0sv8BAACgB7n7fx232P8AAADQjNz9v4lb7H8AAABoRu7+38Ytnex/7//33f9P8P6//l//r//X/8+K/n+Y/n+9+o3S/+v/9f/6fyY1t/4/d//v4pZO9j8AAAD0IHf/7+MW+x8AAACakbv/jrjF/gcAAIBm5O7/Q9zSyf7X/+v/9f/6f/3/+q+v/18m/f+wTfb///cv41/W+/8b7//zI+j/9f/6fyYxt/4/d/8f45ZO9j8AAAD0IHf/n+IW+x8AAACakbv/z3GL/Q8AAADNyN3/l7ilk/0/0v+frn9Q/z9I/7/782+s/88Pov8f/Pr6f/1/y/T/w7z/P0L/7/1//b/+n0nNrf/P3f/XuKWT/Q8AAAA9yN1/Z9xi/wMAAEAzcvf/LW6x/wEAAKAZufv/Hrd0sv+9/7+k/v9q/b/3//X/+n/9/wj9/zD9/wj9v/5f/6//Z1Jz6/9z9/8jAAD//w5FTMo=") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1.025179834s ago: executing program 2 (id=5819): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000040882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x1, 0x0, r0, &(0x7f0000000340)="98", 0x1, 0x3e7ffffffd}]) 1.023344324s ago: executing program 6 (id=5821): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x48840) 997.889025ms ago: executing program 5 (id=5822): mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0xee00) 938.845636ms ago: executing program 0 (id=5823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 850.734297ms ago: executing program 5 (id=5824): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000001780)={0xa, 0x4e24, 0x9, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 837.726027ms ago: executing program 2 (id=5825): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r0, &(0x7f00000010c0)=""/4096, 0x1000) 808.998118ms ago: executing program 0 (id=5826): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001600)=@newtaction={0x14, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0xa8c0}, 0x2000a004) 653.02455ms ago: executing program 5 (id=5827): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000300)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 652.63255ms ago: executing program 2 (id=5828): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) syz_clone3(&(0x7f0000001100)={0x40200, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 610.910511ms ago: executing program 6 (id=5829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 609.232061ms ago: executing program 0 (id=5830): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 429.220964ms ago: executing program 5 (id=5831): io_setup(0x63, &(0x7f0000000000)=0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000001480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000000c0)='-', 0x1, 0x0, 0x0, 0x4}]) 428.890884ms ago: executing program 0 (id=5832): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xec, &(0x7f0000000340), &(0x7f0000000080)=0x4) 428.679484ms ago: executing program 2 (id=5833): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSACTIVE(r0, 0x40087446, 0x0) 328.948315ms ago: executing program 0 (id=5834): io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000003c0)="01", 0x1, 0x2a25}]) 328.584855ms ago: executing program 6 (id=5835): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 247.077096ms ago: executing program 2 (id=5836): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000d40)='\x00\a\a\x00\x00\x01\x00\x00\x00\x00\xcf\x80o\xdb\xc7q\x00\x00\x00!\x83\xf8\xad\x17\xcf\xa7\xd6R\x88\xf9\xed\xcdC\x8a\x8b\xf0\x7f\xf1<\x94\xdf\xe1\xaa\xb7j\\\xdf\x1eN\xab\xc9PA:\xdf\a\x0f\xf6\x13\xf2\x16\xf44U\x85C\xdb\x8bkQ\xfarw]\xbd\xf4\x10\x1aG\xc5\xbe\x17\xf0}gb\x8e\x02@a\xb8\xbc\xd4\xd2\xa2\xbc\xc9\x02\xb0\xf8\xc0\xcb\xe4\xfaE5!\xad\x90\xb2\xc7Dw\xf2X,j$6Aj1ho\x12\xc0v\xcd\x1e\xdf\xd4KM\t\xb0dK\x0e$\xf2\xad;E[\xf5\xc9 \xf9\t\x00\x00\x00\x00\x00\x00\x00\xbc\xa5I\xf6\xba7\xcb\xc7\x81\xc4Q\xcd\xa6&\xc5\xd8\x7fa4\x8b\xb9\x104\xfc+x\xaazY\xf0\xe2\xa8\x1b\x9b\xa2\xfdx\x00\xab&:\xa7\x17\x1d\x03.\xdb\xe5\xa9\xc6\x1ba\n\xe5Br\b\x8e:E\xb7\x18\xf2\xbd\xf9\xf6wX\x1f\xf1\x90a\xd1\xa1\x0e\b\xd1OS\xc4\xc9\"T\x8c\f\xbf\xad\xe2\x89\xd1\xaf\xef\xd4\xac\xcf4x\xc8\xc79\xcd|\xdbZ\xe8\x1b\x01\xacF\xde0\xbc\x13Y\x91\xe8\xea~Nt\xe3D\xd3\xcf\xb7\x8c,\x80$PH\xc0\x9cP\\\x1e\xb9\xdby\xa5Y(\xde\xf9s\xcb#\xbd\tF\xceigL\xff\x93\x14{\b\xe7\x14\xca\x85\xcb\x13\x10p\x96M\xa5\xa7(K\xfe&\a\xf0\x7f\xb7\xc9 \x920\xe7!\xe9\x7fC\x9c\x8d\xdc\xb67\xfe\xc8H\xf6\x14\xb2f\x83\xc1\x89\xec\xd8\xc7jN\xf9P\x8eU\x85\xe4\x8b\xd2\xaa\x8d\fK') madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 189.048667ms ago: executing program 5 (id=5837): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd24, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x11223}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20040040) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000080)) 188.574737ms ago: executing program 6 (id=5838): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x20, 0xc, 0x2, 0x241, 0x0, 0x10003, 0x0}) 138.026128ms ago: executing program 6 (id=5839): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000080)=0x8) 94.732009ms ago: executing program 5 (id=5840): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001bc0)={0x2020}, 0x2020) preadv(r0, &(0x7f00000040c0)=[{&(0x7f0000003ec0)=""/45, 0x2d}], 0x1, 0x400, 0x7) 25.153159ms ago: executing program 0 (id=5841): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc10, &(0x7f0000000180)=ANY=[], 0x3, 0x311, &(0x7f00000003c0)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) 24.781319ms ago: executing program 2 (id=5842): unshare(0x2040400) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 6 (id=5843): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_mr_vif\x00') pread64(r0, &(0x7f0000000100)=""/199, 0xc7, 0x5) lseek(r0, 0xd2, 0x1) kernel console output (not intermixed with test programs): 830288][T18539] BTRFS info (device loop0): enabling ssd optimizations [ 626.840360][T18539] BTRFS info (device loop0): auto enabling async discard [ 626.996001][ T5796] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 627.449719][T18528] loop6: detected capacity change from 0 to 65536 [ 627.454915][T18569] loop2: detected capacity change from 0 to 32768 [ 627.487157][T18569] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.4806 (18569) [ 627.540002][T18569] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 627.553134][T18569] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 627.562933][T18528] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 627.577437][T18569] BTRFS info (device loop2): force zlib compression, level 3 [ 627.614213][T18569] BTRFS info (device loop2): force clearing of disk cache [ 627.623957][T18569] BTRFS info (device loop2): setting nodatasum [ 627.630280][T18569] BTRFS info (device loop2): use zlib compression, level 3 [ 627.637699][T18569] BTRFS info (device loop2): enabling disk space caching [ 627.644861][T18569] BTRFS info (device loop2): disk space caching is enabled [ 627.650633][T18528] XFS (loop6): Ending clean mount [ 627.695651][T18528] XFS (loop6): Quotacheck needed: Please wait. [ 627.865307][T18528] XFS (loop6): Quotacheck: Done. [ 627.907867][T18569] BTRFS info (device loop2): enabling ssd optimizations [ 627.917441][T18569] BTRFS info (device loop2): auto enabling async discard [ 627.970532][T18569] BTRFS info (device loop2): rebuilding free space tree [ 627.974817][T17937] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 628.043888][T18569] BTRFS info (device loop2): disabling free space tree [ 628.060765][T18569] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 628.088474][T18569] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 628.280955][T18573] loop5: detected capacity change from 0 to 32768 [ 628.309857][T18573] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.4805 (18573) [ 628.355478][T18597] loop0: detected capacity change from 0 to 32768 [ 628.384962][ T5787] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 628.397399][T18597] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.4809 (18597) [ 628.445782][T18597] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 628.462241][T18597] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 628.475938][T18597] BTRFS info (device loop0): using free space tree [ 628.710807][T18597] BTRFS info (device loop0): enabling ssd optimizations [ 628.717881][T18597] BTRFS info (device loop0): auto enabling async discard [ 628.802780][T18597] BTRFS warning (device loop0): this kernel does not support the compat:0,compat:1,compat:2,compat:3,compat:4,compat:5,compat:6,compat:7 feature bits [ 628.972645][ T5796] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 629.163735][T18627] loop6: detected capacity change from 0 to 2048 [ 629.207195][T18627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.306568][ T28] audit: type=1800 audit(1752765134.577:131): pid=18627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4814" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 629.517352][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.554472][T18642] loop0: detected capacity change from 0 to 64 [ 629.920304][ T28] audit: type=1326 audit(1752765135.187:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.4825" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a5f78e929 code=0x0 [ 629.942082][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.380480][T18652] loop6: detected capacity change from 0 to 32768 [ 630.390256][T18652] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.4821 (18652) [ 630.423826][T18652] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 630.436158][T18649] loop2: detected capacity change from 0 to 40427 [ 630.443548][T18652] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 630.454838][T18652] BTRFS info (device loop6): force zlib compression, level 3 [ 630.463223][T18652] BTRFS info (device loop6): force clearing of disk cache [ 630.472407][T18652] BTRFS info (device loop6): setting nodatasum [ 630.478840][T18652] BTRFS info (device loop6): allowing degraded mounts [ 630.485995][T18652] BTRFS info (device loop6): enabling disk space caching [ 630.494292][T18649] F2FS-fs (loop2): invalid crc value [ 630.499952][T18652] BTRFS info (device loop6): disk space caching is enabled [ 630.512845][T18649] F2FS-fs (loop2): Found nat_bits in checkpoint [ 630.579655][T18649] F2FS-fs (loop2): Start checkpoint disabled! [ 630.589036][T18649] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 630.645691][T18652] BTRFS info (device loop6): auto enabling async discard [ 630.657424][T18652] BTRFS info (device loop6): rebuilding free space tree [ 630.704504][T18652] BTRFS info (device loop6): disabling free space tree [ 630.724297][T18652] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 630.739878][T18652] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 630.890273][T18652] BTRFS info (device loop6): balance: start -d -m [ 630.912050][T18652] BTRFS info (device loop6): relocating block group 6881280 flags data|metadata [ 630.927221][ T34] kworker/u4:2: attempt to access beyond end of device [ 630.927221][ T34] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 630.951917][ T34] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 630.963814][ T34] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 630.983808][T18652] BTRFS info (device loop6): balance: canceled [ 631.048992][T17937] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 631.620225][T14017] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 631.810537][T14017] usb 1-1: Using ep0 maxpacket: 16 [ 631.825518][T14017] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 631.841987][T14017] usb 1-1: config 0 has no interface number 0 [ 631.848988][T14017] usb 1-1: config 0 interface 247 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.866705][T14017] usb 1-1: config 0 interface 247 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.877242][T14017] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 631.891040][T14017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.908284][T14017] usb 1-1: config 0 descriptor?? [ 632.272101][T18729] netlink: 'syz.2.4851': attribute type 1 has an invalid length. [ 632.343599][T14017] kye 0003:0458:0153.0040: bogus close delimiter [ 632.360467][T14017] kye 0003:0458:0153.0040: item 0 4 2 10 parsing failed [ 632.381321][T14017] kye 0003:0458:0153.0040: parse failed [ 632.387112][T14017] kye: probe of 0003:0458:0153.0040 failed with error -22 [ 632.425765][T18733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4854'. [ 632.439745][T18735] Bluetooth: MGMT ver 1.22 [ 632.533406][T18739] loop6: detected capacity change from 0 to 256 [ 632.561136][T18739] exfat: Deprecated parameter 'utf8' [ 632.566571][T18739] exfat: Deprecated parameter 'utf8' [ 632.576583][ T5839] usb 1-1: USB disconnect, device number 50 [ 632.602301][T18739] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 632.703263][T18744] vivid-000: disconnect [ 632.709764][T18743] vivid-000: reconnect [ 633.166808][T18746] loop2: detected capacity change from 0 to 32768 [ 633.231228][T18746] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 633.240938][T18765] ip6_vti0: entered promiscuous mode [ 633.345701][T18746] XFS (loop2): Ending clean mount [ 633.414280][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 633.553997][T18776] loop0: detected capacity change from 0 to 1024 [ 633.627441][T18780] loop5: detected capacity change from 0 to 128 [ 633.652734][T18780] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 633.690078][ T5839] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 633.697416][ T58] hfsplus: b-tree write err: -5, ino 4 [ 633.866417][T18785] program syz.2.4869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.897223][ T5839] usb 7-1: Using ep0 maxpacket: 32 [ 633.905759][ T5839] usb 7-1: unable to get BOS descriptor or descriptor too short [ 633.924946][ T5839] usb 7-1: config 12 has an invalid interface number: 184 but max is 0 [ 633.961247][ T5839] usb 7-1: config 12 has no interface number 0 [ 633.965773][T18787] autofs4:pid:18787:autofs_fill_super: called with bogus options [ 633.979755][ T5839] usb 7-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 634.003331][ T5839] usb 7-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 634.017798][ T5839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.040061][ T5839] usb 7-1: Product: syz [ 634.044386][ T5839] usb 7-1: Manufacturer: syz [ 634.049022][ T5839] usb 7-1: SerialNumber: syz [ 634.114475][T18789] loop2: detected capacity change from 0 to 4096 [ 634.142823][T18789] NILFS (loop2): invalid segment: Checksum error in segment payload [ 634.160150][T18789] NILFS (loop2): trying rollback from an earlier position [ 634.204099][T18789] NILFS (loop2): recovery complete [ 634.292221][ T5839] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 634.294287][T18795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4879'. [ 634.369820][ T5839] usb 7-1: USB disconnect, device number 2 [ 634.880018][ T23] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 635.110552][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 635.117867][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 635.128013][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 635.150165][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 635.170261][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.216376][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 635.230379][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.238519][ T23] usb 1-1: Product: syz [ 635.270068][ T23] usb 1-1: Manufacturer: syz [ 635.274768][ T23] usb 1-1: SerialNumber: syz [ 635.304506][T18809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.322160][ T23] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 635.332466][ T23] usbtest 1-1:1.0: Linux user mode ISO test driver [ 635.339057][ T23] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 635.603855][T14017] usb 1-1: USB disconnect, device number 51 [ 635.616418][T18841] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4902'. [ 635.743439][T18847] loop2: detected capacity change from 0 to 256 [ 635.794008][T18847] FAT-fs (loop2): Directory bread(block 64) failed [ 635.803345][T18847] FAT-fs (loop2): Directory bread(block 65) failed [ 635.817374][T18847] FAT-fs (loop2): Directory bread(block 66) failed [ 635.846727][T18847] FAT-fs (loop2): Directory bread(block 67) failed [ 635.854320][T18847] FAT-fs (loop2): Directory bread(block 68) failed [ 635.864946][T18847] FAT-fs (loop2): Directory bread(block 69) failed [ 635.871884][T18847] FAT-fs (loop2): Directory bread(block 70) failed [ 635.878596][T18847] FAT-fs (loop2): Directory bread(block 71) failed [ 635.895623][T18847] FAT-fs (loop2): Directory bread(block 72) failed [ 635.902640][T18847] FAT-fs (loop2): Directory bread(block 73) failed [ 636.008167][T18854] loop5: detected capacity change from 0 to 1024 [ 636.092095][ T11] hfsplus: b-tree write err: -5, ino 4 [ 636.598013][T18882] loop5: detected capacity change from 0 to 128 [ 636.663589][T18882] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 636.707995][T18882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.091851][T18878] loop2: detected capacity change from 0 to 32768 [ 637.113037][T18878] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.4920 (18878) [ 637.152670][T18878] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 637.180207][T18878] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 637.188932][T18878] BTRFS info (device loop2): using free space tree [ 637.328506][T18878] BTRFS info (device loop2): enabling ssd optimizations [ 637.352480][T18878] BTRFS info (device loop2): auto enabling async discard [ 637.389746][T18923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4935'. [ 637.474654][ T5787] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 638.142537][T18926] loop5: detected capacity change from 0 to 32768 [ 638.157705][T18926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.4936 (18926) [ 638.187378][T18926] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 638.207997][T18926] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 638.219108][T18926] BTRFS info (device loop5): turning on async discard [ 638.226548][T18926] BTRFS info (device loop5): using free space tree [ 638.304816][T18926] BTRFS info (device loop5): enabling ssd optimizations [ 638.459891][ T9905] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 638.763201][T18936] loop6: detected capacity change from 0 to 32768 [ 638.874371][T18936] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 638.888504][T18936] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 639.086184][T18936] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 639.187396][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4954'. [ 639.235016][T18936] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 639.569011][T18989] vivid-000: disconnect [ 639.580171][T18988] vivid-000: reconnect [ 639.697008][T18992] loop6: detected capacity change from 0 to 512 [ 639.791615][T18992] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 639.814389][T18992] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 639.824816][T18992] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.4958: Failed to acquire dquot type 1 [ 639.845540][T18992] EXT4-fs (loop6): 1 truncate cleaned up [ 639.861411][T18992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.878801][T18992] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.922731][T18981] loop5: detected capacity change from 0 to 32768 [ 639.943490][T18992] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 639.972678][T18992] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 639.993742][ T28] audit: type=1800 audit(1752765145.257:133): pid=18981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4955" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 640.026879][T18992] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.4958: Failed to acquire dquot type 1 [ 640.066197][T19004] loop0: detected capacity change from 0 to 2048 [ 640.093288][T19004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 640.108637][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.288763][T19012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4969'. [ 640.300324][T14017] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 640.480099][ T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 640.490391][T14017] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 640.502272][T14017] usb 3-1: config 0 interface 0 has no altsetting 0 [ 640.509022][T14017] usb 3-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 640.518796][T14017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.537517][T14017] usb 3-1: config 0 descriptor?? [ 640.622212][T19022] loop0: detected capacity change from 0 to 4096 [ 640.635597][T19022] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 640.655933][T19022] ntfs3: loop0: It is recommened to use chkdsk. [ 640.667879][T19022] ntfs3: loop0: volume is dirty and "force" flag is not set! [ 640.671085][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 640.692602][ T23] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 640.707293][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.719100][ T23] usb 7-1: config 0 descriptor?? [ 640.858783][T19031] loop5: detected capacity change from 0 to 64 [ 640.966558][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 640.978494][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 640.988459][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 641.000500][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 641.007481][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 641.020399][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 641.034600][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 641.047727][T14017] wacom 0003:056A:032F.0041: unknown main item tag 0x0 [ 641.064025][T14017] wacom 0003:056A:032F.0041: hidraw0: USB HID v0.08 Device [HID 056a:032f] on usb-dummy_hcd.2-1/input0 [ 641.154043][ T23] cherry 0003:046A:0027.0042: hidraw1: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.6-1/input0 [ 641.179736][T14017] usb 3-1: USB disconnect, device number 33 [ 641.357671][ T5839] usb 7-1: USB disconnect, device number 3 [ 641.471192][T19042] loop5: detected capacity change from 0 to 32768 [ 641.483813][T19042] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.537596][T19042] XFS (loop5): Ending clean mount [ 641.542959][ T23] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 641.557334][T19042] XFS (loop5): Quotacheck needed: Please wait. [ 641.600649][T19042] XFS (loop5): Quotacheck: Done. [ 641.638318][ T9905] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 641.750573][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 641.760987][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.772420][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.782641][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 641.795741][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 641.805414][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.816220][ T23] usb 1-1: config 0 descriptor?? [ 642.058786][T19065] cifs: Unknown parameter 'f' [ 642.121806][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4993'. [ 642.149226][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4994'. [ 642.244999][ T23] microsoft 0003:045E:07DA.0043: unbalanced collection at end of report description [ 642.260480][ T23] microsoft 0003:045E:07DA.0043: parse failed [ 642.276096][ T23] microsoft: probe of 0003:045E:07DA.0043 failed with error -22 [ 642.289721][T19073] loop6: detected capacity change from 0 to 256 [ 642.297398][T19073] exfat: Deprecated parameter 'utf8' [ 642.325499][T19073] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 642.448981][ T23] usb 1-1: USB disconnect, device number 52 [ 642.576951][T19085] netlink: 'syz.6.5002': attribute type 29 has an invalid length. [ 642.587289][T19085] netlink: 'syz.6.5002': attribute type 29 has an invalid length. [ 642.599944][T19085] netlink: 'syz.6.5002': attribute type 29 has an invalid length. [ 642.738781][T19093] loop6: detected capacity change from 0 to 64 [ 642.765724][T19093] hfs: unable to locate alternate MDB [ 642.771390][T19093] hfs: continuing without an alternate MDB [ 642.918720][T19095] loop2: detected capacity change from 0 to 1764 [ 643.476417][T19123] loop0: detected capacity change from 0 to 16 [ 643.517010][T19123] erofs: (device loop0): mounted with root inode @ nid 36. [ 643.833060][ T28] audit: type=1326 audit(1752765149.097:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.5.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 643.855447][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.918913][ T28] audit: type=1326 audit(1752765149.097:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.5.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 643.941315][ C1] vkms_vblank_simulate: vblank timer overrun [ 643.979273][ T28] audit: type=1326 audit(1752765149.097:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.5.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 644.029294][ T28] audit: type=1326 audit(1752765149.097:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.5.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 644.094275][ T28] audit: type=1326 audit(1752765149.097:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19132 comm="syz.5.5024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 644.383867][T19149] loop6: detected capacity change from 0 to 4096 [ 644.425385][T19149] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 644.737151][T19170] loop5: detected capacity change from 0 to 64 [ 644.760880][T19170] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 645.697590][T19186] loop6: detected capacity change from 0 to 32768 [ 645.731714][T19186] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.5050 (19186) [ 645.770387][T19186] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 645.800348][T19186] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 645.809429][T19186] BTRFS info (device loop6): setting nodatacow, compression disabled [ 645.827823][T19186] BTRFS info (device loop6): enabling ssd optimizations [ 645.846142][T19186] BTRFS info (device loop6): setting datacow [ 645.860242][T19186] BTRFS info (device loop6): doing ref verification [ 645.877160][T19186] BTRFS info (device loop6): force clearing of disk cache [ 645.887291][T19186] BTRFS info (device loop6): turning off barriers [ 645.900051][T19186] BTRFS info (device loop6): using spread ssd allocation scheme [ 645.918013][T19186] BTRFS info (device loop6): using free space tree [ 645.985227][T19186] BTRFS info (device loop6): auto enabling async discard [ 646.003725][T19186] BTRFS info (device loop6): rebuilding free space tree [ 646.121047][T17937] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 646.213842][T19206] loop2: detected capacity change from 0 to 32768 [ 646.303994][T19206] read_mapping_page failed! [ 646.309244][T19206] ialloc: diAlloc returned -5! [ 646.392366][ T111] read_mapping_page failed! [ 646.680082][ T9] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 646.880015][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 646.881813][T19246] loop2: detected capacity change from 0 to 256 [ 646.887662][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.900137][ T9] usb 1-1: config 0 has no interface number 0 [ 646.909274][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 646.919215][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.939412][ T9] usb 1-1: Product: syz [ 646.939589][T19246] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 646.949755][ T9] usb 1-1: Manufacturer: syz [ 646.959252][T19246] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 646.968389][ T9] usb 1-1: SerialNumber: syz [ 646.990857][T19246] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 646.994322][ T9] usb 1-1: config 0 descriptor?? [ 647.047202][ T9] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 647.084362][ T9] usb 1-1: selecting invalid altsetting 1 [ 647.105459][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 647.118392][ T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 647.135923][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 647.145229][ T9] usb 1-1: media controller created [ 647.152111][T19254] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.5076'. [ 647.178119][T19254] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.5076'. [ 647.197442][T19253] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.5076'. [ 647.205519][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 647.286063][ T9] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 647.304725][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 647.328554][ T9] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 647.424002][ T9] usb 1-1: USB disconnect, device number 53 [ 647.469582][T19264] IPVS: Scheduler module ip_vs_ not found [ 647.748048][T19273] loop2: detected capacity change from 0 to 512 [ 647.768892][T19273] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 647.805548][T19273] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5084: bad orphan inode 67108875 [ 647.858462][T19273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.041796][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.141634][T19260] loop6: detected capacity change from 0 to 32768 [ 648.168075][T19260] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 648.232602][ T5103] Bluetooth: hci0: command 0x0c1a tx timeout [ 648.273314][T19260] XFS (loop6): Ending clean mount [ 648.288609][T19260] XFS (loop6): Quotacheck needed: Please wait. [ 648.395730][T19295] loop0: detected capacity change from 0 to 1024 [ 648.413353][T19260] XFS (loop6): Quotacheck: Done. [ 648.459768][T19277] loop5: detected capacity change from 0 to 40427 [ 648.464889][T19297] loop2: detected capacity change from 0 to 2048 [ 648.480173][T19277] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 648.488899][T19277] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 648.504963][T19297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.510766][T19295] syz.0.5091: attempt to access beyond end of device [ 648.510766][T19295] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 648.525079][T19277] F2FS-fs (loop5): invalid crc value [ 648.549764][T19295] syz.0.5091: attempt to access beyond end of device [ 648.549764][T19295] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 648.549835][T17937] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 648.580012][T19277] F2FS-fs (loop5): Found nat_bits in checkpoint [ 648.675128][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.722362][T19277] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 648.750124][T19277] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 648.820660][T19300] f2fs_ckpt-7:5: attempt to access beyond end of device [ 648.820660][T19300] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 648.854874][T19300] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 649.365685][T19320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5102'. [ 649.393886][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5102'. [ 649.414797][T19322] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.5103'. [ 649.828928][T19314] loop6: detected capacity change from 0 to 32768 [ 649.847737][T19314] XFS: ikeep mount option is deprecated. [ 649.901279][T19314] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 650.019601][T19314] XFS (loop6): Ending clean mount [ 650.027009][T19351] loop2: detected capacity change from 0 to 1024 [ 650.037975][T19314] XFS (loop6): Quotacheck needed: Please wait. [ 650.056318][T19351] hfsplus: bad catalog entry type [ 650.093957][ T11] hfsplus: b-tree write err: -5, ino 4 [ 650.149852][T19355] loop5: detected capacity change from 0 to 64 [ 650.178592][T19314] XFS (loop6): Quotacheck: Done. [ 650.310558][ T5798] Bluetooth: hci0: command 0x0c1a tx timeout [ 650.329655][T17937] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 650.418839][T19367] loop2: detected capacity change from 0 to 256 [ 650.426310][T19367] exfat: Deprecated parameter 'namecase' [ 650.432137][T19367] exfat: Deprecated parameter 'utf8' [ 650.479468][T19369] loop5: detected capacity change from 0 to 16 [ 650.484913][T19367] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 650.487325][T19369] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 650.737832][T19381] loop0: detected capacity change from 0 to 512 [ 650.753572][T19381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 650.777605][T19381] System zones: 1-12 [ 650.787794][T19381] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.5128: Directory hole found for htree index block 0 [ 650.825818][T19381] EXT4-fs (loop0): Remounting filesystem read-only [ 650.833038][T19381] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 650.856857][T19381] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 650.874334][T19381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.029380][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.430152][ T5832] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 651.470593][T14017] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 651.478367][ T5839] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 651.626288][ T5832] usb 1-1: too many configurations: 228, using maximum allowed: 8 [ 651.654110][ T5832] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 651.662640][T14017] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 651.669991][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.680538][T14017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.683011][ T5839] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 651.697036][ T5832] usb 1-1: Product: syz [ 651.699143][T14017] usb 3-1: config 0 descriptor?? [ 651.710341][ T5832] usb 1-1: Manufacturer: syz [ 651.714997][ T5832] usb 1-1: SerialNumber: syz [ 651.723718][T14017] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 651.732192][ T5839] usb 6-1: config 0 has no interface number 0 [ 651.737120][ T5832] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 651.744521][ T5839] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.763982][T19405] loop6: detected capacity change from 0 to 256 [ 651.770821][ T5839] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.780725][ T5839] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 651.792599][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.797265][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 651.801241][T19405] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 651.823986][ T5839] usb 6-1: config 0 descriptor?? [ 651.829355][T19405] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 651.851811][T19405] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 652.254407][ T5839] prodikeys 0003:041E:2801.0044: item fetching failed at offset 0/7 [ 652.275110][ T5839] prodikeys 0003:041E:2801.0044: hid parse failed [ 652.282047][ T5839] prodikeys: probe of 0003:041E:2801.0044 failed with error -22 [ 652.339820][T19413] loop6: detected capacity change from 0 to 736 [ 652.346368][T14017] gp8psk: usb in 138 operation failed. [ 652.354522][T14017] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 652.365218][T14017] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 652.378253][T14017] usb 3-1: USB disconnect, device number 34 [ 652.429799][ T5839] usb 1-1: USB disconnect, device number 54 [ 652.465550][T15505] usb 6-1: USB disconnect, device number 36 [ 652.711343][T19415] loop6: detected capacity change from 0 to 32768 [ 652.725640][T19415] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 652.741677][T19415] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 652.784353][T17937] ocfs2: Unmounting device (7,6) on (node local) [ 653.043598][ T9] usb 1-1: Service connection timeout for: 256 [ 653.076798][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 653.085908][ T9] ath9k_htc: Failed to initialize the device [ 653.104974][ T5839] usb 1-1: ath9k_htc: USB layer deinitialized [ 653.469555][T19419] loop6: detected capacity change from 0 to 32768 [ 653.477500][T19419] XFS: ikeep mount option is deprecated. [ 653.483312][T19419] XFS: noikeep mount option is deprecated. [ 653.513193][T19419] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 653.610073][T19419] XFS (loop6): Ending clean mount [ 653.641870][T19419] XFS (loop6): Quotacheck needed: Please wait. [ 653.736569][T19419] XFS (loop6): Quotacheck: Done. [ 653.847343][T17937] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 653.871552][T19427] loop5: detected capacity change from 0 to 32768 [ 653.926550][T19427] ea_get: invalid extended attribute [ 653.934506][T19446] loop0: detected capacity change from 0 to 1024 [ 653.977009][T19427] ea_get: invalid extended attribute [ 653.999616][T19446] hfsplus: bad catalog entry type [ 654.058544][ T58] hfsplus: b-tree write err: -5, ino 4 [ 654.183292][T19436] loop2: detected capacity change from 0 to 32768 [ 654.254965][T19448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5154'. [ 654.421381][T19454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5156'. [ 654.480991][T19451] loop5: detected capacity change from 0 to 4096 [ 654.500973][T19451] __ntfs_error: 2 callbacks suppressed [ 654.500993][T19451] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 654.539956][T19451] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 654.577195][T19451] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 654.610435][T19451] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 654.644190][T19451] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 654.674916][T19451] ntfs: volume version 3.1. [ 654.712077][T19451] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 654.723332][T19451] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 654.759236][T19451] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 654.801575][T19451] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 654.817106][T19451] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x9, name_len 2. [ 654.838247][T19466] loop2: detected capacity change from 0 to 256 [ 654.845542][T19466] exfat: Deprecated parameter 'namecase' [ 654.876147][T19466] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 655.089032][T19474] loop0: detected capacity change from 0 to 256 [ 655.869467][T19478] loop6: detected capacity change from 0 to 40427 [ 655.897379][T19478] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff [ 655.917465][T19478] F2FS-fs (loop6): invalid crc value [ 655.938623][T19498] loop0: detected capacity change from 0 to 4096 [ 655.946194][T19478] F2FS-fs (loop6): Found nat_bits in checkpoint [ 655.954259][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 655.967674][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 655.976190][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 655.991730][T19502] loop5: detected capacity change from 0 to 128 [ 655.998248][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 656.006722][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 656.016563][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 656.025763][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 656.033979][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 656.035212][T19478] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 656.052965][ T5839] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 656.061331][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 656.062811][T19502] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 656.069212][T19498] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 656.098789][T19502] ext4 filesystem being mounted at /964/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 656.105444][T19478] syz.6.5168: attempt to access beyond end of device [ 656.105444][T19478] loop6: rw=524288, sector=45072, nr_sectors = 24 limit=40427 [ 656.130626][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.160696][T19478] syz.6.5168: attempt to access beyond end of device [ 656.160696][T19478] loop6: rw=0, sector=45072, nr_sectors = 8 limit=40427 [ 656.226426][ T9905] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.272652][ T5839] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 656.296197][ T5839] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 656.317678][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.343344][ T5839] usb 3-1: config 0 descriptor?? [ 656.774827][ T5839] logitech 0003:046D:C294.0045: collection stack underflow [ 656.796239][ T5839] logitech 0003:046D:C294.0045: item 0 4 0 12 parsing failed [ 656.817365][ T5839] logitech 0003:046D:C294.0045: parse failed [ 656.831345][ T5839] logitech: probe of 0003:046D:C294.0045 failed with error -22 [ 656.986034][ T5839] usb 3-1: USB disconnect, device number 35 [ 657.304192][T19536] sp0: Synchronizing with TNC [ 657.330578][T19536] sp0: Found TNC [ 657.341510][T19535] [U] è` [ 657.510812][T19528] loop0: detected capacity change from 0 to 32768 [ 657.518290][T19528] XFS: ikeep mount option is deprecated. [ 657.524937][T19528] XFS: noikeep mount option is deprecated. [ 657.543683][T19528] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 657.596711][T19528] XFS (loop0): Ending clean mount [ 657.599690][T19553] loop2: detected capacity change from 0 to 1024 [ 657.622572][T19528] XFS (loop0): Quotacheck needed: Please wait. [ 657.706878][T19528] XFS (loop0): Quotacheck: Done. [ 657.799493][ T34] hfsplus: b-tree write err: -5, ino 4 [ 657.814174][ T5796] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 658.297786][T19572] loop0: detected capacity change from 0 to 1024 [ 658.340249][T19572] hfsplus: bad catalog entry type [ 658.759875][T19594] loop2: detected capacity change from 0 to 4096 [ 658.845275][T19594] ntfs3: loop2: failed to convert "0080" to cp860 [ 658.863633][T19594] ntfs3: loop2: failed to convert name for inode 1e. [ 659.077392][T19606] loop2: detected capacity change from 0 to 128 [ 659.096634][T19606] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 659.782301][T19608] loop0: detected capacity change from 0 to 32768 [ 659.828765][T19608] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 659.850008][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 659.857389][T19598] loop5: detected capacity change from 0 to 65536 [ 659.877615][T19598] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 659.926971][T19598] XFS (loop5): Ending clean mount [ 659.964703][T19598] XFS (loop5): Quotacheck needed: Please wait. [ 659.977629][T19608] XFS (loop0): Ending clean mount [ 660.003205][T19608] XFS (loop0): Quotacheck needed: Please wait. [ 660.059855][T19598] XFS (loop5): Quotacheck: Done. [ 660.065235][ T23] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.086866][T19608] XFS (loop0): Quotacheck: Done. [ 660.090488][ T23] usb 7-1: config 0 interface 0 has no altsetting 0 [ 660.120035][ T23] usb 7-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 660.129195][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.147816][ T23] usb 7-1: config 0 descriptor?? [ 660.154942][ T9905] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 660.192381][T19615] loop2: detected capacity change from 0 to 32768 [ 660.199762][ T5796] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 660.202478][T19615] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.5226 (19615) [ 660.244970][T19615] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 660.255468][T19615] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 660.265423][T19615] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 660.276108][T19615] BTRFS info (device loop2): use zstd compression, level 3 [ 660.283485][T19615] BTRFS info (device loop2): using free space tree [ 660.390172][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 660.412520][T19615] BTRFS info (device loop2): enabling ssd optimizations [ 660.419579][T19615] BTRFS info (device loop2): auto enabling async discard [ 660.548197][ T5787] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 660.594256][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.628655][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.637616][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.652394][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.659451][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.672625][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.679636][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.694969][ T23] elecom 0003:056E:00FE.0046: unknown main item tag 0x0 [ 660.714028][ T23] elecom 0003:056E:00FE.0046: hidraw0: USB HID v0.01 Device [HID 056e:00fe] on usb-dummy_hcd.6-1/input0 [ 660.780167][T15505] usb 7-1: USB disconnect, device number 4 [ 661.130459][T19660] loop5: detected capacity change from 0 to 512 [ 661.138154][T19660] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 661.161352][T19660] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.5234: invalid block [ 661.178815][T19660] EXT4-fs (loop5): Remounting filesystem read-only [ 661.185925][T19660] EXT4-fs (loop5): 2 truncates cleaned up [ 661.196047][T19660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.247711][ T9905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.635012][T19672] loop5: detected capacity change from 0 to 512 [ 661.662608][T19672] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11d, mo2=0002] [ 661.670566][ T5871] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 661.688854][T19672] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.5238: corrupted in-inode xattr: e_value size too large [ 661.703645][T19672] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.5238: couldn't read orphan inode 15 (err -117) [ 661.719617][T19672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.770916][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 661.770934][ T28] audit: type=1800 audit(1752765167.047:143): pid=19672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5238" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 661.850647][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 661.860890][ T5871] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 661.880323][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 661.900212][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 661.923833][ T5871] usb 7-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 661.944171][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.960907][ T9905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.970583][ T5871] usb 7-1: config 0 descriptor?? [ 662.127905][T19688] ceph: Unexpected value for 'acl' [ 662.174736][T19692] loop0: detected capacity change from 0 to 512 [ 662.205970][T19692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 662.226352][T19692] ext4 filesystem being mounted at /1425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.352641][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 662.414498][ T5871] wacom 0003:056A:0026.0047: Unknown device_type for 'HID 056a:0026'. Assuming pen. [ 662.429733][T19698] macvlan2: entered promiscuous mode [ 662.437349][T19698] macvlan2: entered allmulticast mode [ 662.444185][ T5871] wacom 0003:056A:0026.0047: hidraw0: USB HID v20.00 Device [HID 056a:0026] on usb-dummy_hcd.6-1/input0 [ 662.462181][ T5871] input: Wacom Intuos5 touch S Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:0026.0047/input/input53 [ 662.595343][T19705] loop2: detected capacity change from 0 to 512 [ 662.632057][T19705] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.5252: bad orphan inode 15 [ 662.647796][T19705] ext4_test_bit(bit=14, block=5) = 0 [ 662.658251][T19705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.674761][ T5871] usb 7-1: USB disconnect, device number 5 [ 662.677324][T19709] loop0: detected capacity change from 0 to 256 [ 662.698340][T19709] exfat: Deprecated parameter 'utf8' [ 662.720883][T19709] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 662.756521][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.892847][T19717] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4 [ 663.103532][ T28] audit: type=1326 audit(1752765168.377:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.138607][ T28] audit: type=1326 audit(1752765168.377:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.176297][ T28] audit: type=1326 audit(1752765168.377:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.226597][ T28] audit: type=1326 audit(1752765168.377:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.275478][ T28] audit: type=1326 audit(1752765168.377:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.345239][ T28] audit: type=1326 audit(1752765168.377:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.415220][ T28] audit: type=1326 audit(1752765168.377:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.5.5263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe73d8e929 code=0x7ffc0000 [ 663.437719][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.538684][T19735] loop0: detected capacity change from 0 to 8192 [ 663.561218][T19735] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 663.580312][T19735] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 663.606862][T19735] REISERFS (device loop0): using ordered data mode [ 663.616882][T19735] reiserfs: using flush barriers [ 663.639880][T19735] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 663.690614][T19735] REISERFS (device loop0): checking transaction log (loop0) [ 663.739746][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5273'. [ 663.790329][ T5839] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 663.900092][T19735] REISERFS (device loop0): Using tea hash to sort names [ 663.907479][T19735] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 663.972383][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 663.997564][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.019584][ T5839] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.046331][ T5839] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 664.046468][T19733] loop2: detected capacity change from 0 to 32768 [ 664.065908][ T5839] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 664.108920][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.119579][ T5839] usb 6-1: config 0 descriptor?? [ 664.148905][T19733] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 664.210140][ T5871] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 664.251328][T19763] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5276'. [ 664.279684][T19733] XFS (loop2): Ending clean mount [ 664.348076][T19765] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5277'. [ 664.386194][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 664.410143][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 664.459190][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.519950][ T5871] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.576348][ T5839] microsoft 0003:045E:07DA.0048: ignoring exceeding usage max [ 664.590477][ T5871] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 664.620314][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.641792][ T5871] usb 7-1: config 0 descriptor?? [ 664.664680][ T5871] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input56 [ 664.761487][ T5839] microsoft 0003:045E:07DA.0048: No inputs registered, leaving [ 664.779700][ T5839] microsoft 0003:045E:07DA.0048: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 664.808970][ T5839] microsoft 0003:045E:07DA.0048: no inputs found [ 664.819139][ T5839] microsoft 0003:045E:07DA.0048: could not initialize ff, continuing anyway [ 664.848969][ T5839] usb 6-1: USB disconnect, device number 37 [ 664.884056][ T5871] usb 7-1: USB disconnect, device number 6 [ 665.070287][T15505] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 665.100090][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 665.294434][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 665.306409][T15505] usb 3-1: unable to get BOS descriptor or descriptor too short [ 665.330922][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.342924][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.359060][T15505] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 665.369689][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.387376][T15505] usb 3-1: config 16 has 1 interface, different from the descriptor's value: 2 [ 665.396893][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 665.419470][T15505] usb 3-1: string descriptor 0 read error: -22 [ 665.426005][T15505] usb 3-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 665.435609][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.443707][T15505] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.458920][ T9] usb 1-1: config 0 descriptor?? [ 665.468002][T15505] usb-storage 3-1:16.0: USB Mass Storage device detected [ 665.492492][T15505] usb-storage 3-1:16.0: This device (04e6,000a,0200 S 02 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.6.98-syzkaller) [ 665.492492][T15505] Please send a copy of this message to and [ 665.598995][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5282'. [ 665.630465][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5282'. [ 665.677962][ T5778] usb 3-1: USB disconnect, device number 36 [ 665.789698][T19779] loop6: detected capacity change from 0 to 4096 [ 665.804905][T19779] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 665.853365][T19779] ntfs3: loop6: failed to convert "c46c" to cp857 [ 665.882756][T19779] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 665.918207][ T9] ryos 0003:1E7D:31CE.0049: unbalanced collection at end of report description [ 665.942356][ T9] ryos 0003:1E7D:31CE.0049: parse failed [ 665.948126][ T9] ryos: probe of 0003:1E7D:31CE.0049 failed with error -22 [ 666.086239][T19785] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5287'. [ 666.106769][T19785] netlink: 'syz.5.5287': attribute type 4 has an invalid length. [ 666.116232][ T9] usb 1-1: USB disconnect, device number 55 [ 666.670205][ T5871] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 666.860157][ T5871] usb 7-1: Using ep0 maxpacket: 16 [ 666.872394][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.892597][ T5871] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.912754][ T5871] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 666.930289][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.951275][ T5871] usb 7-1: config 0 descriptor?? [ 667.213453][T19819] loop5: detected capacity change from 0 to 2048 [ 667.236641][T19819] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 667.300610][T19820] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 667.367817][ T5871] hid-multitouch 0003:1FD2:6007.004A: report_id 1023902090 is invalid [ 667.380246][ T5871] hid-multitouch 0003:1FD2:6007.004A: item 0 4 1 8 parsing failed [ 667.389080][ T5871] hid-multitouch: probe of 0003:1FD2:6007.004A failed with error -22 [ 667.479505][T19813] loop2: detected capacity change from 0 to 40427 [ 667.512530][T19813] F2FS-fs (loop2): Invalid segment count (1) [ 667.518596][T19813] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 667.527904][T19813] F2FS-fs (loop2): heap/no_heap options were deprecated [ 667.528790][T19815] loop0: detected capacity change from 0 to 32768 [ 667.540603][T19813] F2FS-fs (loop2): invalid crc value [ 667.552900][T19813] F2FS-fs (loop2): Found nat_bits in checkpoint [ 667.556395][T19815] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.5301 (19815) [ 667.585994][ T5871] usb 7-1: USB disconnect, device number 7 [ 667.605400][T19815] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 667.620124][T19815] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 667.641515][T19813] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 667.649003][T19815] BTRFS info (device loop0): turning off barriers [ 667.655831][T19815] BTRFS info (device loop0): enabling all of the rescue options [ 667.669978][T19813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 667.677796][T19815] BTRFS info (device loop0): ignoring data csums [ 667.699975][T19815] BTRFS info (device loop0): ignoring bad roots [ 667.710182][T19815] BTRFS info (device loop0): disabling log replay at mount time [ 667.724467][T19815] BTRFS info (device loop0): disabling tree log [ 667.731282][T19815] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 667.764135][T19815] BTRFS info (device loop0): trying to use backup root at mount time [ 667.773529][T19815] BTRFS info (device loop0): using free space tree [ 667.787270][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5306'. [ 667.881023][T19815] BTRFS info (device loop0: state C): enabling ssd optimizations [ 668.006258][ T5796] BTRFS info (device loop0: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 668.253542][T19851] loop6: detected capacity change from 0 to 256 [ 668.303000][T19851] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 668.572478][T19855] tipc: Enabling not permitted [ 668.578065][T19855] tipc: Enabling of bearer rejected, failed to enable media [ 668.596947][T19853] loop5: detected capacity change from 0 to 4096 [ 668.613076][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 668.627591][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 668.644154][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 668.656802][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 668.683305][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 668.706900][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 668.726071][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 668.734219][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 668.742412][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 668.750553][T19853] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00 [ 668.820075][T19847] loop2: detected capacity change from 0 to 32768 [ 668.847685][T19847] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 669.011800][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 669.058757][ T5778] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 669.253698][ T5778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.278823][ T5778] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 669.311241][ T5778] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 669.330033][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.357632][ T5778] usb 1-1: config 0 descriptor?? [ 669.649443][T19865] loop6: detected capacity change from 0 to 32768 [ 669.676773][T19865] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 669.777295][T19865] XFS (loop6): Ending clean mount [ 669.786300][ T5778] ortek 0003:1223:3F07.004B: unknown main item tag 0x6 [ 669.803554][ T5778] ortek 0003:1223:3F07.004B: unknown main item tag 0xe [ 669.820127][ T5778] ortek 0003:1223:3F07.004B: ignoring exceeding usage max [ 669.831548][ T5778] ortek 0003:1223:3F07.004B: ignoring exceeding usage max [ 669.849014][ T5778] ortek 0003:1223:3F07.004B: usage index exceeded [ 669.869257][ T5778] ortek 0003:1223:3F07.004B: item 0 2 2 2 parsing failed [ 669.877423][ T5778] ortek: probe of 0003:1223:3F07.004B failed with error -22 [ 669.887183][T19871] loop5: detected capacity change from 0 to 32768 [ 669.948852][T17937] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 670.013095][ T5871] usb 1-1: USB disconnect, device number 56 [ 670.178875][T19873] loop2: detected capacity change from 0 to 40427 [ 670.233354][T19873] F2FS-fs (loop2): invalid crc value [ 670.250036][T19873] F2FS-fs (loop2): Found nat_bits in checkpoint [ 670.349151][T19873] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 670.467410][ T5787] syz-executor: attempt to access beyond end of device [ 670.467410][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 670.483645][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 670.785106][T19902] sp0: Synchronizing with TNC [ 671.055958][T19910] netlink: 'syz.6.5334': attribute type 1 has an invalid length. [ 671.070045][T19910] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5334'. [ 671.086986][T19910] netlink: 'syz.6.5334': attribute type 1 has an invalid length. [ 671.097103][T19910] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5334'. [ 671.237592][T19920] loop5: detected capacity change from 0 to 256 [ 671.265882][T19920] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 671.702826][T19915] loop2: detected capacity change from 0 to 32768 [ 671.774581][T19915] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 671.794609][T19942] loop0: detected capacity change from 0 to 512 [ 671.802376][T19942] EXT4-fs: Ignoring removed i_version option [ 671.837183][ T28] audit: type=1800 audit(1752765177.107:151): pid=19915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5326" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 671.865503][T19942] EXT4-fs (loop0): orphan cleanup on readonly fs [ 671.888025][T19942] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.5347: bg 0: block 131: padding at end of block bitmap is not set [ 671.908949][ T5787] (syz-executor,5787,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 671.942296][T19942] EXT4-fs (loop0): Remounting filesystem read-only [ 671.949022][T19942] EXT4-fs (loop0): 1 truncate cleaned up [ 671.967863][T19942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 671.986863][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 672.075694][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.091536][T19953] netlink: 'syz.6.5352': attribute type 2 has an invalid length. [ 672.497879][T19973] loop6: detected capacity change from 0 to 64 [ 673.177908][T19967] loop0: detected capacity change from 0 to 32768 [ 673.185922][T19971] loop5: detected capacity change from 0 to 32768 [ 673.217247][T19967] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.237853][T19971] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.300257][T20010] loop6: detected capacity change from 0 to 512 [ 673.314353][T20010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c11d, mo2=0002] [ 673.318378][T19971] XFS (loop5): Ending clean mount [ 673.328705][T20010] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.5371: corrupted in-inode xattr: e_value size too large [ 673.331695][T19971] XFS (loop5): Quotacheck needed: Please wait. [ 673.349722][T20010] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.5371: couldn't read orphan inode 15 (err -117) [ 673.391107][T20010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.419980][ T28] audit: type=1800 audit(1752765178.687:152): pid=20010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5371" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 673.449049][T19971] XFS (loop5): Quotacheck: Done. [ 673.457932][T19967] XFS (loop0): Ending clean mount [ 673.471786][T19967] XFS (loop0): Quotacheck needed: Please wait. [ 673.549437][ T9905] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.568906][T19967] XFS (loop0): Quotacheck: Done. [ 673.578405][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.635504][ T5796] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 673.673320][ T5871] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 673.890124][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 673.941600][ T5871] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 673.949680][ T5871] usb 3-1: config 0 has no interface number 0 [ 674.017327][ T5871] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 674.031993][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.060302][ T5871] usb 3-1: Product: syz [ 674.064546][ T5871] usb 3-1: Manufacturer: syz [ 674.069182][ T5871] usb 3-1: SerialNumber: syz [ 674.092809][ T5871] usb 3-1: config 0 descriptor?? [ 674.103547][ T5871] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 674.267077][T20024] loop6: detected capacity change from 0 to 4096 [ 674.294529][T20029] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 674.310562][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 674.354342][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 674.370600][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 674.378545][ T28] audit: type=1800 audit(1752765179.647:153): pid=20024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5376" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 674.401927][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 674.424830][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 674.460404][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 674.480663][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 674.500526][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 674.520109][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 674.536156][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 674.580090][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 674.610364][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 674.630864][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 674.650403][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 674.670381][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 674.702531][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 674.730380][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 674.755669][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 674.776086][ T5871] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 674.799238][ T5871] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57 [ 674.833629][ T5871] usb 3-1: USB disconnect, device number 37 [ 674.992290][T20047] loop6: detected capacity change from 0 to 512 [ 675.055043][T20047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.110868][T20047] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.164376][T20055] loop5: detected capacity change from 0 to 64 [ 675.196330][T20035] loop0: detected capacity change from 0 to 32768 [ 675.234913][T20055] hfs: bad catalog entry type 0 [ 675.260670][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.316523][T20035] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 675.485340][ T5796] ocfs2: Unmounting device (7,0) on (node local) [ 675.807087][T20083] tipc: Started in network mode [ 675.812443][T20083] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 675.824966][T20083] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:00fe:00bb [ 675.838905][T20083] tipc: Enabled bearer , priority 26 [ 675.843941][T20081] loop5: detected capacity change from 0 to 4096 [ 675.871618][T20081] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 675.906652][T20085] loop0: detected capacity change from 0 to 512 [ 675.919626][ T28] audit: type=1800 audit(1752765181.187:154): pid=20081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5401" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 675.967735][T20085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.011520][T20085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.037759][T20085] ext4 filesystem being mounted at /1454/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.167698][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.531315][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5415'. [ 676.830065][T15505] tipc: Node number set to 1 [ 676.898744][T20132] tipc: Enabling of bearer rejected, failed to enable media [ 677.132942][T20144] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 677.253266][T20151] loop5: detected capacity change from 0 to 512 [ 677.265466][T20151] EXT4-fs: Ignoring removed orlov option [ 677.294527][T20151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.321268][T20151] ext4 filesystem being mounted at /1059/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.370994][T20151] EXT4-fs: Cannot change journaled quota options when quota turned on [ 677.467359][T20162] loop6: detected capacity change from 0 to 64 [ 677.476582][ T9905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.530240][T20162] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 677.736256][T20172] loop5: detected capacity change from 0 to 4096 [ 677.760953][T20172] EXT4-fs: Ignoring removed mblk_io_submit option [ 677.776783][T20172] EXT4-fs (loop5): Test dummy encryption mode enabled [ 677.803811][T20172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.859118][ T9905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.998052][T20184] loop5: detected capacity change from 0 to 8 [ 678.040050][T15505] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 678.071915][T20189] loop0: detected capacity change from 0 to 256 [ 678.103280][T20189] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 678.121520][T20189] FAT-fs (loop0): Filesystem has been set read-only [ 678.131405][T20184] SQUASHFS error: xz decompression failed, data probably corrupt [ 678.152702][T20184] SQUASHFS error: Failed to read block 0xa8: -5 [ 678.178913][T20184] SQUASHFS error: xz decompression failed, data probably corrupt [ 678.215938][T20184] SQUASHFS error: Failed to read block 0xa8: -5 [ 678.236759][ T28] audit: type=1800 audit(1752765183.507:155): pid=20184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5447" name="file0" dev="loop5" ino=3 res=0 errno=0 [ 678.237800][T15505] usb 7-1: Using ep0 maxpacket: 16 [ 678.313639][T15505] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.346347][T15505] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.380213][T15505] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.424280][T15505] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 678.447898][T20198] macsec1: entered promiscuous mode [ 678.453963][T15505] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.462207][T20198] macsec1: entered allmulticast mode [ 678.479311][T15505] usb 7-1: config 0 descriptor?? [ 678.504954][T20202] loop5: detected capacity change from 0 to 256 [ 678.532926][T20202] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001047b, chksum : 0x3ced02ab, utbl_chksum : 0xe619d30d) [ 678.681433][T20208] loop5: detected capacity change from 0 to 256 [ 678.807081][T20214] loop5: detected capacity change from 0 to 256 [ 678.913160][T15505] microsoft 0003:045E:07DA.004C: No inputs registered, leaving [ 678.935660][T15505] microsoft 0003:045E:07DA.004C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 678.969186][T15505] microsoft 0003:045E:07DA.004C: no inputs found [ 678.981328][T15505] microsoft 0003:045E:07DA.004C: could not initialize ff, continuing anyway [ 679.133803][T15505] usb 7-1: USB disconnect, device number 8 [ 679.370010][ T785] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 679.480362][ T5871] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 679.552019][ T785] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.567164][ T785] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 679.576390][ T785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.587208][ T785] usb 6-1: Product: syz [ 679.592231][ T785] usb 6-1: Manufacturer: syz [ 679.596864][ T785] usb 6-1: SerialNumber: syz [ 679.604052][ T785] usb 6-1: config 0 descriptor?? [ 679.624392][ T785] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 679.671223][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 679.692619][ T5871] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 679.704910][ T5871] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 679.719997][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.730734][ T5871] usb 3-1: Product: syz [ 679.735326][ T5871] usb 3-1: Manufacturer: syz [ 679.740666][ T5871] usb 3-1: SerialNumber: syz [ 679.755369][ T5871] usb 3-1: config 0 descriptor?? [ 679.763516][ T5871] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 679.767492][T20236] loop6: detected capacity change from 0 to 1024 [ 679.772778][ T5871] usb 3-1: Detected FT232R [ 679.820394][ T785] usb 6-1: USB disconnect, device number 38 [ 679.866255][T18073] hfsplus: b-tree write err: -5, ino 4 [ 679.941334][T20240] netlink: 'syz.6.5475': attribute type 1 has an invalid length. [ 679.964814][ T5871] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 679.975289][ T5871] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 679.985428][ T5871] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 680.000599][ T5871] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 680.014365][ T5871] usb 3-1: USB disconnect, device number 38 [ 680.023522][ T5871] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 680.034056][ T5871] ftdi_sio 3-1:0.0: device disconnected [ 680.326566][T20238] loop0: detected capacity change from 0 to 40427 [ 680.339427][T20238] F2FS-fs (loop0): heap/no_heap options were deprecated [ 680.373337][T20238] F2FS-fs (loop0): invalid crc value [ 680.392273][T20238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 680.408397][T20253] loop6: detected capacity change from 0 to 256 [ 680.453387][T20255] loop5: detected capacity change from 0 to 128 [ 680.468743][T20255] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 680.481845][T20255] ext4 filesystem being mounted at /1068/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 680.481963][T20238] F2FS-fs (loop0): Start checkpoint disabled! [ 680.513676][ C1] vkms_vblank_simulate: vblank timer overrun [ 680.536282][T20238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 680.554164][T20253] FAT-fs (loop6): Directory bread(block 64) failed [ 680.574157][T20253] FAT-fs (loop6): Directory bread(block 65) failed [ 680.613873][T20253] FAT-fs (loop6): Directory bread(block 66) failed [ 680.625062][T20253] FAT-fs (loop6): Directory bread(block 67) failed [ 680.641668][ T9905] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 680.663977][T20253] FAT-fs (loop6): Directory bread(block 68) failed [ 680.686306][T20253] FAT-fs (loop6): Directory bread(block 69) failed [ 680.714478][T20253] FAT-fs (loop6): Directory bread(block 70) failed [ 680.726493][ T34] kworker/u4:2: attempt to access beyond end of device [ 680.726493][ T34] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 680.740158][T20253] FAT-fs (loop6): Directory bread(block 71) failed [ 680.753897][ T34] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 680.761361][ T34] kworker/u4:2: attempt to access beyond end of device [ 680.761361][ T34] loop0: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 680.776767][ T34] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 680.783967][T20253] FAT-fs (loop6): Directory bread(block 72) failed [ 680.796753][T20253] FAT-fs (loop6): Directory bread(block 73) failed [ 680.880409][ T28] audit: type=1800 audit(1752765186.157:156): pid=20253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5481" name="file1" dev="loop6" ino=1049080 res=0 errno=0 [ 680.909890][T20253] syz.6.5481: attempt to access beyond end of device [ 680.909890][T20253] loop6: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 680.970075][ T785] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 681.065873][T20268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5488'. [ 681.154114][ T785] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.165686][ T785] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.180261][ T785] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 681.206693][ T785] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.213940][ T785] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 681.223269][ T785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.231410][ T23] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 681.242116][ T785] usb 3-1: config 0 descriptor?? [ 681.418622][T20280] loop6: detected capacity change from 0 to 764 [ 681.437180][T20280] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 681.450318][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 681.465141][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.479380][T20282] netlink: 'syz.0.5494': attribute type 8 has an invalid length. [ 681.488674][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.501611][ T23] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 681.529961][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.546921][ T23] usb 6-1: config 0 descriptor?? [ 681.613446][T20286] loop0: detected capacity change from 0 to 256 [ 681.625001][T20286] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 681.687206][ T785] uclogic 0003:28BD:0042.004D: interface is invalid, ignoring [ 681.920653][ T785] usb 3-1: USB disconnect, device number 39 [ 681.970989][ T23] corsair 0003:1B1C:1B02.004E: unknown main item tag 0x0 [ 681.978420][ T23] corsair 0003:1B1C:1B02.004E: unknown main item tag 0x0 [ 681.991200][ T23] corsair 0003:1B1C:1B02.004E: unknown main item tag 0x0 [ 681.999822][ T23] corsair 0003:1B1C:1B02.004E: unknown main item tag 0x0 [ 682.007487][ T23] corsair 0003:1B1C:1B02.004E: unknown main item tag 0x0 [ 682.017429][ T23] corsair 0003:1B1C:1B02.004E: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 682.179261][ T23] corsair 0003:1B1C:1B02.004E: Failed to get K90 initial state (error -71). [ 682.193865][ T23] usb 6-1: USB disconnect, device number 39 [ 682.200033][ T5778] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 682.308071][T20284] loop6: detected capacity change from 0 to 65536 [ 682.325470][T20284] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 682.349532][T20284] XFS (loop6): Ending clean mount [ 682.364776][T20284] XFS (loop6): Quotacheck needed: Please wait. [ 682.405688][ T5778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 682.418723][ T5778] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 682.418734][T20284] XFS (loop6): Quotacheck: Done. [ 682.450157][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.473607][ T5778] usb 1-1: config 0 descriptor?? [ 682.492998][T17937] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 682.859215][T20305] loop5: detected capacity change from 0 to 1024 [ 682.904810][ T5778] aquacomputer_d5next 0003:0C70:F0BD.004F: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.0-1/input0 [ 682.926564][ T28] audit: type=1800 audit(1752765188.197:157): pid=20305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5502" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 682.936318][T20305] hfsplus: request for non-existent node 16777216 in B*Tree [ 682.968994][T20305] hfsplus: request for non-existent node 16777216 in B*Tree [ 683.106731][T14017] usb 1-1: USB disconnect, device number 57 [ 683.649853][T20319] loop5: detected capacity change from 0 to 32768 [ 683.652592][ T23] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 683.665741][T20319] XFS: ikeep mount option is deprecated. [ 683.682694][T20319] XFS: noikeep mount option is deprecated. [ 683.736862][T20332] loop0: detected capacity change from 0 to 1024 [ 683.747393][T20319] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 683.778197][T20332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.793206][T20332] ext4 filesystem being mounted at /1483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.805479][T20319] XFS (loop5): Ending clean mount [ 683.817173][T20319] XFS (loop5): Quotacheck needed: Please wait. [ 683.828871][T20332] EXT4-fs error (device loop0): ext4_free_blocks:6681: comm syz.0.5514: Freeing blocks not in datazone - block = 0, count = 16 [ 683.870287][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 683.891913][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 683.901144][T20332] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 683.910207][ T23] usb 3-1: config 0 has no interface number 0 [ 683.947904][ T23] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 683.948240][T20319] XFS (loop5): Quotacheck: Done. [ 683.981924][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.019497][ T23] usb 3-1: Product: syz [ 684.034358][ T23] usb 3-1: Manufacturer: syz [ 684.047413][ T9905] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 684.058584][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.067823][ T23] usb 3-1: SerialNumber: syz [ 684.077007][ T23] usb 3-1: config 0 descriptor?? [ 684.096877][ T23] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 684.110288][ T23] usb 3-1: selecting invalid altsetting 1 [ 684.119784][ T23] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 684.132709][ T23] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 684.148649][ T23] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 684.157837][ T23] usb 3-1: media controller created [ 684.182865][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.299798][ T23] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 684.313361][ T23] zl10353_read_register: readreg error (reg=127, ret==-71) [ 684.324837][ T23] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 684.401089][ T23] usb 3-1: USB disconnect, device number 40 [ 684.466829][T20360] loop0: detected capacity change from 0 to 512 [ 684.496505][T20360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.520829][T20360] ext4 filesystem being mounted at /1485/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 684.575382][T20360] EXT4-fs error (device loop0): ext4_xattr_block_find:1886: inode #15: comm syz.0.5524: corrupted xattr block 33: invalid ea_ino [ 684.589152][T20360] EXT4-fs (loop0): Remounting filesystem read-only [ 684.616113][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.632070][ T48] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 684.642874][ T48] Quota error (device loop0): write_blk: dquota write failed [ 684.650555][ T48] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 684.662157][ T48] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 684.672823][ T48] Quota error (device loop0): write_blk: dquota write failed [ 684.680549][ T48] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 684.690728][ T48] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 684.700900][ T48] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 684.810086][ T785] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 684.928033][T20370] loop0: detected capacity change from 0 to 4096 [ 684.945284][T20370] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 684.963008][T20370] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 684.979829][T20370] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 684.997005][T20370] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 685.000038][ T785] usb 7-1: Using ep0 maxpacket: 8 [ 685.019222][T20370] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 685.027866][ T785] usb 7-1: config 0 interface 0 has no altsetting 0 [ 685.038705][T20370] ntfs: volume version 3.1. [ 685.047399][ T785] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 685.070299][ T785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.080958][ T785] usb 7-1: config 0 descriptor?? [ 685.510767][ T785] a4tech 0003:09DA:001A.0050: hidraw0: USB HID v0.00 Device [HID 09da:001a] on usb-dummy_hcd.6-1/input0 [ 685.626272][T20372] loop2: detected capacity change from 0 to 32768 [ 685.651221][T20372] XFS: ikeep mount option is deprecated. [ 685.657084][T20372] XFS: noikeep mount option is deprecated. [ 685.698014][T20372] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 685.722234][ T785] usb 7-1: USB disconnect, device number 9 [ 685.762760][T20372] XFS (loop2): Ending clean mount [ 685.773505][T20372] XFS (loop2): Quotacheck needed: Please wait. [ 685.842806][T20393] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 685.851306][T20393] macvtap1: entered promiscuous mode [ 685.855920][T20372] XFS (loop2): Quotacheck: Done. [ 685.856906][T20393] macvtap1: entered allmulticast mode [ 685.867446][T20393] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 685.917701][ T5787] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 685.994381][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.008062][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.299379][T20396] loop5: detected capacity change from 0 to 8192 [ 686.315038][T20396] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 686.328361][T20396] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 686.338062][T20396] REISERFS (device loop5): using ordered data mode [ 686.344781][T20396] reiserfs: using flush barriers [ 686.359186][T20396] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 686.394685][T20396] REISERFS (device loop5): checking transaction log (loop5) [ 686.428351][T20404] loop2: detected capacity change from 0 to 8 [ 686.566410][T20404] SQUASHFS error: xz decompression failed, data probably corrupt [ 686.585155][T20404] SQUASHFS error: Failed to read block 0xa8: -5 [ 686.621532][T20404] SQUASHFS error: xz decompression failed, data probably corrupt [ 686.626503][T20396] REISERFS (device loop5): Using tea hash to sort names [ 686.638406][T20396] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 686.648530][T20404] SQUASHFS error: Failed to read block 0xa8: -5 [ 686.936581][T20397] loop0: detected capacity change from 0 to 32768 [ 686.948028][T20397] XFS: ikeep mount option is deprecated. [ 686.954287][T20397] XFS: noikeep mount option is deprecated. [ 686.973232][T20397] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 687.024756][T20422] loop5: detected capacity change from 0 to 256 [ 687.033783][T20397] XFS (loop0): Ending clean mount [ 687.044155][T20397] XFS (loop0): Quotacheck needed: Please wait. [ 687.062481][T20422] FAT-fs (loop5): Directory bread(block 64) failed [ 687.069093][T20422] FAT-fs (loop5): Directory bread(block 65) failed [ 687.077191][T20422] FAT-fs (loop5): Directory bread(block 66) failed [ 687.095341][T20422] FAT-fs (loop5): Directory bread(block 67) failed [ 687.101078][T20397] XFS (loop0): Quotacheck: Done. [ 687.108428][T20422] FAT-fs (loop5): Directory bread(block 68) failed [ 687.115525][T20422] FAT-fs (loop5): Directory bread(block 69) failed [ 687.123704][T20422] FAT-fs (loop5): Directory bread(block 70) failed [ 687.131159][T20422] FAT-fs (loop5): Directory bread(block 71) failed [ 687.138014][T20422] FAT-fs (loop5): Directory bread(block 72) failed [ 687.144974][T20422] FAT-fs (loop5): Directory bread(block 73) failed [ 687.182805][ T5796] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 687.200045][ T785] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 687.241401][T14017] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 687.380128][ T785] usb 7-1: Using ep0 maxpacket: 16 [ 687.411801][ T785] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 687.426182][ T785] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 687.444776][T14017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.460712][ T785] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.490387][T14017] usb 3-1: New USB device found, idVendor=05ac, idProduct=029a, bcdDevice= 0.00 [ 687.499571][T14017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.529098][ T785] usb 7-1: config 1 interface 0 has no altsetting 0 [ 687.544127][ T785] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 687.556873][T14017] usb 3-1: config 0 descriptor?? [ 687.562053][ T785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.574693][ T785] usb 7-1: Product: syz [ 687.579737][ T785] usb 7-1: Manufacturer: syz [ 687.596654][ T785] usb 7-1: SerialNumber: syz [ 687.605792][T20428] loop0: detected capacity change from 0 to 4096 [ 687.613875][T20430] loop5: detected capacity change from 0 to 512 [ 687.623504][T20430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 687.666599][T20430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.686008][T20430] ext4 filesystem being mounted at /1081/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.764422][ T9905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.816419][ T5798] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 687.828963][ T785] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 687.845465][ T785] usb 7-1: USB disconnect, device number 10 [ 687.857021][ T785] usblp0: removed [ 688.017528][T14017] apple 0003:05AC:029A.0051: hidraw0: USB HID v0.00 Device [HID 05ac:029a] on usb-dummy_hcd.2-1/input0 [ 688.213485][ T5778] usb 3-1: USB disconnect, device number 41 [ 688.706809][T20446] loop6: detected capacity change from 0 to 32768 [ 688.720894][T20446] XFS: ikeep mount option is deprecated. [ 688.726912][T20446] XFS: noikeep mount option is deprecated. [ 688.796315][T20446] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 688.853538][T20464] loop2: detected capacity change from 0 to 64 [ 688.901801][T20446] XFS (loop6): Ending clean mount [ 688.913317][T20446] XFS (loop6): Quotacheck needed: Please wait. [ 689.049722][T20446] XFS (loop6): Quotacheck: Done. [ 689.137803][T17937] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 689.341292][T20480] netlink: 'syz.5.5568': attribute type 11 has an invalid length. [ 689.805247][T20495] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.5573'. [ 689.973850][T20478] loop2: detected capacity change from 0 to 32768 [ 690.024420][T20478] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.030166][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5576'. [ 690.104362][T20478] XFS (loop2): Ending clean mount [ 690.153853][T20514] netlink: 'syz.0.5578': attribute type 298 has an invalid length. [ 690.188154][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 690.612713][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5587'. [ 691.194163][T20531] loop2: detected capacity change from 0 to 32768 [ 691.249044][T20531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 691.429219][ T5787] ocfs2: Unmounting device (7,2) on (node local) [ 691.553920][T20548] loop5: detected capacity change from 0 to 32768 [ 691.596092][T20548] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 691.714697][T20564] loop0: detected capacity change from 0 to 2048 [ 691.737469][T20551] loop6: detected capacity change from 0 to 32768 [ 691.754265][T20548] XFS (loop5): Ending clean mount [ 691.763819][T20551] [ 691.763819][T20551] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 691.763819][T20551] [ 691.792834][T20568] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 691.801812][T20551] ERROR: (device loop6): diWrite: ixpxd invalid [ 691.801812][T20551] [ 691.833362][T20551] ERROR: (device loop6): txCommit: [ 691.833362][T20551] [ 691.886401][T20571] team0: Device gtp0 is of different type [ 691.948530][ T9905] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 691.958214][T17937] [ 691.958214][T17937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 691.958214][T17937] [ 691.976853][T17937] [ 691.976853][T17937] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 691.976853][T17937] [ 693.181932][T20594] loop5: detected capacity change from 0 to 32768 [ 693.189453][T20594] XFS: attr2 mount option is deprecated. [ 693.220198][T14017] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 693.242458][T20594] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 693.377271][T20604] loop6: detected capacity change from 0 to 40427 [ 693.384949][T20594] XFS (loop5): Ending clean mount [ 693.392632][T20604] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 693.399412][T20604] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 693.414228][T20594] XFS (loop5): Quotacheck needed: Please wait. [ 693.427363][T20604] F2FS-fs (loop6): Found nat_bits in checkpoint [ 693.435248][T14017] usb 1-1: Using ep0 maxpacket: 16 [ 693.452450][T14017] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 693.467605][T14017] usb 1-1: config 0 has no interface number 0 [ 693.477433][T14017] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 693.494375][T14017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.512704][T14017] usb 1-1: Product: syz [ 693.519207][T20604] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 693.528103][T14017] usb 1-1: Manufacturer: syz [ 693.528602][T20594] XFS (loop5): Quotacheck: Done. [ 693.537850][T14017] usb 1-1: SerialNumber: syz [ 693.546571][T14017] usb 1-1: config 0 descriptor?? [ 693.551903][T20604] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 693.555523][T14017] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 693.616830][T17937] syz-executor: attempt to access beyond end of device [ 693.616830][T17937] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 693.644915][T17937] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 693.652265][ T9905] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 693.800447][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0x00, error -71) [ 693.830547][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0112, value 0x01, error -71) [ 693.860367][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 693.890339][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 693.930546][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 693.960019][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 693.980013][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 694.010151][T14017] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 694.030566][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 694.060379][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 694.081441][T14017] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 694.106407][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 694.127696][T14017] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 694.148188][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 694.170084][T14017] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 694.195868][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 694.221167][T14017] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 694.247534][T14017] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 694.270775][T14017] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 694.282852][T14017] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input60 [ 694.331625][T14017] usb 1-1: USB disconnect, device number 58 [ 694.651189][T20626] loop2: detected capacity change from 0 to 40427 [ 694.679544][T20626] F2FS-fs (loop2): invalid crc value [ 694.703628][T20626] F2FS-fs (loop2): Found nat_bits in checkpoint [ 694.805286][T20626] F2FS-fs (loop2): Start checkpoint disabled! [ 694.824133][T20626] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 694.874538][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 694.874554][ T28] audit: type=1800 audit(1752765200.147:159): pid=20626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5621" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 694.902096][ C1] vkms_vblank_simulate: vblank timer overrun [ 694.947807][T20626] syz.2.5621: attempt to access beyond end of device [ 694.947807][T20626] loop2: rw=2049, sector=77824, nr_sectors = 2056 limit=40427 [ 694.981508][T20626] syz.2.5621: attempt to access beyond end of device [ 694.981508][T20626] loop2: rw=2049, sector=79880, nr_sectors = 512 limit=40427 [ 695.019637][T20652] loop6: detected capacity change from 0 to 4096 [ 695.072289][T20656] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 695.137990][T20658] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5635'. [ 695.262002][ T48] kworker/u4:3: attempt to access beyond end of device [ 695.262002][ T48] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 695.292446][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 695.300248][ T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 695.307588][T20661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5638'. [ 695.502611][T20670] loop0: detected capacity change from 0 to 256 [ 695.554741][T20670] FAT-fs (loop0): Directory bread(block 64) failed [ 695.580007][T20670] FAT-fs (loop0): Directory bread(block 65) failed [ 695.586700][T20670] FAT-fs (loop0): Directory bread(block 66) failed [ 695.603168][T20670] FAT-fs (loop0): Directory bread(block 67) failed [ 695.615381][T20670] FAT-fs (loop0): Directory bread(block 68) failed [ 695.640023][T20670] FAT-fs (loop0): Directory bread(block 69) failed [ 695.650221][T20670] FAT-fs (loop0): Directory bread(block 70) failed [ 695.662401][T20673] loop6: detected capacity change from 0 to 2048 [ 695.669057][T20670] FAT-fs (loop0): Directory bread(block 71) failed [ 695.677556][T20670] FAT-fs (loop0): Directory bread(block 72) failed [ 695.688477][T20673] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 695.702017][T20670] FAT-fs (loop0): Directory bread(block 73) failed [ 696.303474][T20674] loop5: detected capacity change from 0 to 32768 [ 696.332376][T20674] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5643 (20674) [ 696.390131][T20674] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.440236][T20674] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 696.449081][T20674] BTRFS info (device loop5): using free space tree [ 696.587728][T20674] BTRFS info (device loop5): enabling ssd optimizations [ 696.607372][T20674] BTRFS info (device loop5): auto enabling async discard [ 696.728811][T20719] loop6: detected capacity change from 0 to 4096 [ 696.770702][T20722] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 696.787010][ T9905] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 696.810002][ T28] audit: type=1800 audit(1752765202.077:160): pid=20719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5657" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 696.930072][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 696.974920][T20726] tmpfs: Cannot change global quota limit on remount [ 697.141866][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 697.161410][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 697.178474][ T9] usb 3-1: config 0 has no interface number 0 [ 697.191406][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 697.210087][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=9 [ 697.238530][ T9] usb 3-1: Product: syz [ 697.259501][ T9] usb 3-1: Manufacturer: syz [ 697.274869][ T9] usb 3-1: SerialNumber: syz [ 697.305816][ T9] usb 3-1: config 0 descriptor?? [ 697.325151][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 697.560941][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 697.606799][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 697.946163][T20754] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 697.947607][T20756] loop0: detected capacity change from 0 to 64 [ 697.965040][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 697.965520][ T785] usb 3-1: USB disconnect, device number 42 [ 698.000639][ T785] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 698.022504][ T785] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 698.034213][T20756] hfs: small file entry [ 698.046692][T20758] loop6: detected capacity change from 0 to 256 [ 698.051217][ T785] quatech2 3-1:0.51: device disconnected [ 698.058959][T20758] exfat: Deprecated parameter 'namecase' [ 698.083742][T20758] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 698.196551][T20762] loop0: detected capacity change from 0 to 128 [ 698.217774][T20762] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 698.235998][T20762] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 698.245704][T20765] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5681'. [ 698.326503][T20768] loop6: detected capacity change from 0 to 128 [ 698.476017][T20770] loop0: detected capacity change from 0 to 4096 [ 698.486388][T20770] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 698.515117][T20770] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 698.553387][T20770] ntfs3: loop0: ino=5, "/" directory corrupted [ 698.563182][T20770] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 698.584570][T20770] ntfs3: loop0: ino=5, "/" directory corrupted [ 698.626360][T20780] loop2: detected capacity change from 0 to 256 [ 698.652186][ T5796] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 698.671148][T20779] loop6: detected capacity change from 0 to 1764 [ 698.697993][T20779] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 698.894207][T20786] loop5: detected capacity change from 0 to 2048 [ 698.919233][T20793] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 699.150193][T15505] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 699.297968][T20796] loop0: detected capacity change from 0 to 32768 [ 699.338915][T20796] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 699.347337][T15505] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 699.379991][T15505] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 699.391337][T15505] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 699.401816][T15505] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 699.415804][T15505] usb 7-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 699.424950][T15505] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.441117][T15505] usb 7-1: config 0 descriptor?? [ 699.468680][ T5796] (syz-executor,5796,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 699.490609][ T5796] ocfs2: Unmounting device (7,0) on (node local) [ 699.857898][T15505] kye 0003:0458:501B.0052: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 699.911293][T15505] kye 0003:0458:501B.0052: unknown main item tag 0x0 [ 699.937748][T15505] kye 0003:0458:501B.0052: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.6-1/input0 [ 699.959416][T15505] kye 0003:0458:501B.0052: tablet-enabling feature report not found [ 699.979671][T15505] kye 0003:0458:501B.0052: tablet enabling failed [ 700.065802][ T5871] usb 7-1: USB disconnect, device number 11 [ 700.147606][T20824] loop2: detected capacity change from 0 to 64 [ 700.359970][T20812] loop5: detected capacity change from 0 to 32768 [ 700.367566][T20812] XFS: ikeep mount option is deprecated. [ 700.425761][T20812] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 700.474741][T20812] XFS (loop5): Ending clean mount [ 700.504976][T20812] XFS (loop5): Quotacheck needed: Please wait. [ 700.598363][T20812] XFS (loop5): Quotacheck: Done. [ 700.646816][T20820] loop0: detected capacity change from 0 to 40427 [ 700.679162][T20820] F2FS-fs (loop0): invalid crc value [ 700.693199][T20820] F2FS-fs (loop0): Found nat_bits in checkpoint [ 700.774388][ T9905] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 700.836272][T20820] F2FS-fs (loop0): Start checkpoint disabled! [ 700.898259][T20820] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 700.926744][ T28] audit: type=1800 audit(1752765206.197:161): pid=20820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5705" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 701.070125][ T5778] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 701.097554][T20820] syz.0.5705: attempt to access beyond end of device [ 701.097554][T20820] loop0: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 701.260076][ T5778] usb 7-1: Using ep0 maxpacket: 8 [ 701.284676][ T5778] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 701.310000][ T5778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.318060][ T5778] usb 7-1: Product: syz [ 701.340008][ T5778] usb 7-1: Manufacturer: syz [ 701.341321][T20840] loop2: detected capacity change from 0 to 32768 [ 701.344866][ T5778] usb 7-1: SerialNumber: syz [ 701.386787][ T5778] usb 7-1: config 0 descriptor?? [ 701.387432][T20840] jfs_lookup: dtSearch returned -5 [ 701.413355][ T5778] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 701.427985][ T5778] usb 7-1: setting power ON [ 701.433511][T18073] kworker/u4:5: attempt to access beyond end of device [ 701.433511][T18073] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 701.450848][ T5778] dvb-usb: bulk message failed: -22 (2/0) [ 701.461867][ T5778] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 701.471333][T18073] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 701.478554][T18073] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 701.487615][ T5778] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 701.520472][ T5778] usb 7-1: media controller created [ 701.582130][ T5778] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 701.642562][ T5778] usb 7-1: selecting invalid altsetting 6 [ 701.648378][ T5778] usb 7-1: digital interface selection failed (-22) [ 701.670794][ T5778] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 701.690388][ T5778] usb 7-1: setting power OFF [ 701.702239][ T5778] dvb-usb: bulk message failed: -22 (2/0) [ 701.717602][ T5778] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 701.731099][ T5778] (NULL device *): no alternate interface [ 701.809065][ T5778] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 701.840181][ T5778] usb 7-1: USB disconnect, device number 12 [ 702.421580][T20887] loop5: detected capacity change from 0 to 64 [ 703.222709][ T28] audit: type=1326 audit(1752765208.497:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20882 comm="syz.2.5734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7fc00000 [ 703.301116][T20912] loop6: detected capacity change from 0 to 4096 [ 703.331611][T20912] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 703.425525][T20912] ntfs: volume version 3.1. [ 703.455688][T20919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5749'. [ 703.772049][T20929] loop5: detected capacity change from 0 to 64 [ 703.820183][T20929] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 704.110909][T20917] loop0: detected capacity change from 0 to 40427 [ 704.150519][T20917] F2FS-fs (loop0): Wrong CP boundary, start(512) end(2365457920) blocks(1024) [ 704.159507][T20917] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 704.205416][T20917] F2FS-fs (loop0): invalid crc value [ 704.241705][T20943] loop5: detected capacity change from 0 to 512 [ 704.244731][T20945] loop6: detected capacity change from 0 to 512 [ 704.257564][T20945] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 704.272012][T20917] F2FS-fs (loop0): Found nat_bits in checkpoint [ 704.282691][T20945] EXT4-fs (loop6): 1 truncate cleaned up [ 704.289753][T20945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.327818][T20943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 704.336821][T20943] EXT4-fs (loop5): orphan cleanup on readonly fs [ 704.336885][T20945] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.5762: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 704.344275][T20943] EXT4-fs error (device loop5): ext4_quota_enable:7129: inode #15: comm syz.5.5761: iget: bad i_size value: 360287970189639690 [ 704.379568][T20917] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 704.388006][T20945] EXT4-fs (loop6): Remounting filesystem read-only [ 704.388094][T20917] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 704.413835][T20943] EXT4-fs error (device loop5): ext4_quota_enable:7132: comm syz.5.5761: Bad quota inode: 15, type: 2 [ 704.426668][T20945] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.5762: Deleting old file: nlink 4, error=-117 [ 704.451553][T20943] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 704.490666][T20943] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 704.498919][T20943] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 704.562823][T20943] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 704.577427][T17937] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.625254][T20943] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 704.687584][T20943] EXT4-fs error (device loop5): ext4_quota_enable:7129: inode #15: comm syz.5.5761: iget: bad i_size value: 360287970189639690 [ 704.733515][T20943] EXT4-fs error (device loop5): ext4_quota_enable:7132: comm syz.5.5761: Bad quota inode: 15, type: 2 [ 704.768677][T20943] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 704.774230][T20964] loop2: detected capacity change from 0 to 256 [ 704.798923][T20964] exfat: Deprecated parameter 'utf8' [ 704.804732][T20964] exfat: Deprecated parameter 'namecase' [ 704.816358][T20964] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 704.905003][ T9905] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.013218][T20969] loop5: detected capacity change from 0 to 256 [ 705.420261][ T23] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 705.620273][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 705.628028][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.642777][ T23] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 705.666766][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.685033][ T23] usb 3-1: config 0 descriptor?? [ 706.108814][ T23] megaworld 0003:07B5:0312.0053: item fetching failed at offset 10/11 [ 706.122138][ T23] megaworld 0003:07B5:0312.0053: parse failed [ 706.128341][ T23] megaworld: probe of 0003:07B5:0312.0053 failed with error -22 [ 706.139128][ T5871] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 706.252292][T21005] bridge0: entered promiscuous mode [ 706.258712][T21005] macsec1: entered promiscuous mode [ 706.268199][T21005] bridge0: port 3(macsec1) entered blocking state [ 706.274847][T21005] bridge0: port 3(macsec1) entered disabled state [ 706.281657][T21005] macsec1: entered allmulticast mode [ 706.287007][T21005] bridge0: entered allmulticast mode [ 706.294357][T21005] macsec1: left allmulticast mode [ 706.299453][T21005] bridge0: left allmulticast mode [ 706.308388][T21005] bridge0: left promiscuous mode [ 706.338836][ T9] usb 3-1: USB disconnect, device number 43 [ 706.353010][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.380870][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.404619][ T5871] usb 6-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 706.418268][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.429053][ T5871] usb 6-1: config 0 descriptor?? [ 706.874930][ T5871] waltop 0003:172F:0038.0054: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.5-1/input0 [ 706.961637][T21023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5796'. [ 707.078474][ T5871] usb 6-1: USB disconnect, device number 40 [ 707.119552][T21017] loop0: detected capacity change from 0 to 32768 [ 707.135050][T21017] XFS: ikeep mount option is deprecated. [ 707.163886][T21017] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 707.311406][T21017] XFS (loop0): Ending clean mount [ 707.320873][T21017] XFS (loop0): Quotacheck needed: Please wait. [ 707.412499][T21017] XFS (loop0): Quotacheck: Done. [ 707.458785][T21017] XFS (loop0): syz.0.5793 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 707.475702][T21048] loop2: detected capacity change from 0 to 128 [ 707.533818][ T5796] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 707.834593][T21056] loop5: detected capacity change from 0 to 4096 [ 707.882080][T21058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5810'. [ 707.896416][T21056] ntfs: volume version 3.1. [ 707.916988][T21058] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5810'. [ 707.958398][T21061] loop0: detected capacity change from 0 to 256 [ 707.966179][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5811'. [ 707.979095][T21061] exfat: Deprecated parameter 'utf8' [ 707.984824][T21061] exfat: Deprecated parameter 'namecase' [ 707.990969][T21061] exfat: Deprecated parameter 'namecase' [ 707.997401][T21061] exfat: Deprecated parameter 'utf8' [ 708.057768][T21061] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 708.155379][T21066] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5812'. [ 708.774240][T21096] loop5: detected capacity change from 0 to 256 [ 708.788392][T21096] exfat: Deprecated parameter 'utf8' [ 708.794380][T21096] exfat: Deprecated parameter 'namecase' [ 708.803537][T21096] exfat: Deprecated parameter 'namecase' [ 708.809274][T21096] exfat: Deprecated parameter 'utf8' [ 708.835553][T21096] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 709.234725][ T28] audit: type=1326 audit(1752765214.507:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.303148][ T28] audit: type=1326 audit(1752765214.507:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.360500][ T28] audit: type=1326 audit(1752765214.537:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="syz.2.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.411464][ T28] audit: type=1326 audit(1752765214.537:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.438525][T21125] loop0: detected capacity change from 0 to 64 [ 709.488819][ T28] audit: type=1326 audit(1752765214.537:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.495188][T21125] [ 709.512700][T21125] ====================================================== [ 709.519745][T21125] WARNING: possible circular locking dependency detected [ 709.526811][T21125] 6.6.98-syzkaller #0 Not tainted [ 709.531864][T21125] ------------------------------------------------------ [ 709.538911][T21125] syz.0.5841/21125 is trying to acquire lock: [ 709.545005][T21125] ffff88805e1e6f78 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 709.549771][ T28] audit: type=1326 audit(1752765214.547:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.555823][T21125] [ 709.555823][T21125] but task is already holding lock: [ 709.555832][T21125] ffff88807bc220b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 709.594114][T21125] [ 709.594114][T21125] which lock already depends on the new lock. [ 709.594114][T21125] [ 709.604558][T21125] [ 709.604558][T21125] the existing dependency chain (in reverse order) is: [ 709.613601][T21125] [ 709.613601][T21125] -> #1 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 709.621764][T21125] __mutex_lock+0x129/0xcc0 [ 709.626838][T21125] hfs_find_init+0x15f/0x1d0 [ 709.631996][T21125] hfs_extend_file+0x2ef/0x1220 [ 709.637432][T21125] hfs_bmap_reserve+0x107/0x430 [ 709.642471][ T28] audit: type=1326 audit(1752765214.547:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.642899][T21125] hfs_cat_create+0x1b4/0x620 [ 709.669695][T21125] hfs_create+0x66/0xd0 [ 709.674413][T21125] path_openat+0x1277/0x3190 [ 709.679572][T21125] do_filp_open+0x1c5/0x3d0 [ 709.684651][T21125] do_sys_openat2+0x12c/0x1c0 [ 709.689890][T21125] __x64_sys_openat+0x139/0x160 [ 709.695294][T21125] do_syscall_64+0x55/0xb0 [ 709.700268][T21125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.706729][T21125] [ 709.706729][T21125] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 709.712146][ T28] audit: type=1326 audit(1752765214.547:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21116 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572038e929 code=0x7ffc0000 [ 709.715965][T21125] __lock_acquire+0x2ddb/0x7c80 [ 709.737411][ C1] vkms_vblank_simulate: vblank timer overrun [ 709.742780][T21125] lock_acquire+0x197/0x410 [ 709.753833][T21125] __mutex_lock+0x129/0xcc0 [ 709.758899][T21125] hfs_extend_file+0xdb/0x1220 [ 709.764222][T21125] hfs_bmap_reserve+0x107/0x430 [ 709.769643][T21125] __hfs_ext_write_extent+0x1fa/0x470 [ 709.775574][T21125] __hfs_ext_cache_extent+0x6b/0x9b0 [ 709.781416][T21125] hfs_extend_file+0x317/0x1220 [ 709.786831][T21125] hfs_get_block+0x3d8/0xbd0 [ 709.791973][T21125] __block_write_begin_int+0x566/0x1ad0 [ 709.798087][T21125] block_write_begin+0x9a/0x1e0 [ 709.803502][T21125] cont_write_begin+0x5c8/0x7e0 [ 709.808971][T21125] hfs_write_begin+0x8b/0xd0 [ 709.814122][T21125] cont_write_begin+0x2ad/0x7e0 [ 709.819559][T21125] hfs_write_begin+0x8b/0xd0 [ 709.824785][T21125] hfs_file_truncate+0x191/0x9b0 [ 709.830286][T21125] hfs_inode_setattr+0x4af/0x6e0 [ 709.835797][T21125] notify_change+0xb0d/0xe10 [ 709.840946][T21125] do_truncate+0x19b/0x220 [ 709.845921][T21125] vfs_truncate+0x266/0x300 [ 709.850984][T21125] do_sys_truncate+0xe0/0x1a0 [ 709.852629][T21142] loop5: detected capacity change from 0 to 256 [ 709.856196][T21125] do_syscall_64+0x55/0xb0 [ 709.856225][T21125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.873883][T21125] [ 709.873883][T21125] other info that might help us debug this: [ 709.873883][T21125] [ 709.884114][T21125] Possible unsafe locking scenario: [ 709.884114][T21125] [ 709.891652][T21125] CPU0 CPU1 [ 709.897037][T21125] ---- ---- [ 709.902420][T21125] lock(&tree->tree_lock#2/1); [ 709.907312][T21125] lock(&HFS_I(tree->inode)->extents_lock); [ 709.915835][T21125] lock(&tree->tree_lock#2/1); [ 709.923239][T21125] lock(&HFS_I(tree->inode)->extents_lock); [ 709.929235][T21125] [ 709.929235][T21125] *** DEADLOCK *** [ 709.929235][T21125] [ 709.937384][T21125] 4 locks held by syz.0.5841/21125: [ 709.942585][T21125] #0: ffff8880266c8418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 709.951850][T21125] #1: ffff88805e1e5db8 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: do_truncate+0x187/0x220 [ 709.962237][T21125] #2: ffff88805e1e5bf8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xdb/0x1220 [ 709.972960][T21125] #3: ffff88807bc220b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15f/0x1d0 [ 709.982916][T21125] [ 709.982916][T21125] stack backtrace: [ 709.988807][T21125] CPU: 0 PID: 21125 Comm: syz.0.5841 Not tainted 6.6.98-syzkaller #0 [ 709.996888][T21125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.006958][T21125] Call Trace: [ 710.010251][T21125] [ 710.013193][T21125] dump_stack_lvl+0x16c/0x230 [ 710.017885][T21125] ? load_image+0x3b0/0x3b0 [ 710.022404][T21125] ? show_regs_print_info+0x20/0x20 [ 710.027623][T21125] ? print_circular_bug+0x12b/0x1a0 [ 710.032841][T21125] check_noncircular+0x2bd/0x3c0 [ 710.037792][T21125] ? look_up_lock_class+0x75/0x140 [ 710.042940][T21125] ? print_deadlock_bug+0x5d0/0x5d0 [ 710.048168][T21125] ? lockdep_lock+0xe0/0x220 [ 710.052780][T21125] ? check_noncircular+0x175/0x3c0 [ 710.057923][T21125] ? _find_first_zero_bit+0xd3/0x100 [ 710.063237][T21125] __lock_acquire+0x2ddb/0x7c80 [ 710.068118][T21125] ? hlock_conflict+0x5d/0x1f0 [ 710.073019][T21125] ? verify_lock_unused+0x140/0x140 [ 710.078230][T21125] ? __bfs+0x2a3/0x5c0 [ 710.082313][T21125] ? check_path+0x40/0x40 [ 710.086661][T21125] ? check_path+0x21/0x40 [ 710.091018][T21125] ? check_noncircular+0x175/0x3c0 [ 710.096143][T21125] ? look_up_lock_class+0x75/0x140 [ 710.101290][T21125] lock_acquire+0x197/0x410 [ 710.105811][T21125] ? hfs_extend_file+0xdb/0x1220 [ 710.110784][T21125] ? __might_sleep+0xe0/0xe0 [ 710.115389][T21125] ? __lock_acquire+0x2b6b/0x7c80 [ 710.120426][T21125] ? read_lock_is_recursive+0x20/0x20 [ 710.125817][T21125] __mutex_lock+0x129/0xcc0 [ 710.130337][T21125] ? hfs_extend_file+0xdb/0x1220 [ 710.135285][T21125] ? lock_chain_count+0x20/0x20 [ 710.140151][T21125] ? hfs_extend_file+0xdb/0x1220 [ 710.145095][T21125] ? verify_lock_unused+0x140/0x140 [ 710.150307][T21125] ? mutex_lock_nested+0x20/0x20 [ 710.155273][T21125] hfs_extend_file+0xdb/0x1220 [ 710.160054][T21125] ? hfs_get_block+0xbd0/0xbd0 [ 710.164835][T21125] ? __mutex_trylock_common+0x153/0x250 [ 710.170391][T21125] ? trace_raw_output_contention_end+0xd0/0xd0 [ 710.176554][T21125] ? rcu_is_watching+0x15/0xb0 [ 710.181333][T21125] ? hfs_brec_find+0x18f/0x500 [ 710.186118][T21125] ? __mutex_lock+0x304/0xcc0 [ 710.190817][T21125] hfs_bmap_reserve+0x107/0x430 [ 710.195699][T21125] __hfs_ext_write_extent+0x1fa/0x470 [ 710.201081][T21125] __hfs_ext_cache_extent+0x6b/0x9b0 [ 710.206376][T21125] ? hfs_find_init+0x15f/0x1d0 [ 710.211158][T21125] hfs_extend_file+0x317/0x1220 [ 710.216014][T21125] ? verify_lock_unused+0x140/0x140 [ 710.221223][T21125] ? hfs_get_block+0xbd0/0xbd0 [ 710.225993][T21125] ? __asan_memset+0x22/0x40 [ 710.230607][T21125] ? lockdep_init_map_type+0xa1/0x880 [ 710.236005][T21125] hfs_get_block+0x3d8/0xbd0 [ 710.240611][T21125] ? hfs_free_extents+0x430/0x430 [ 710.245644][T21125] ? do_raw_spin_unlock+0x121/0x230 [ 710.250858][T21125] ? _raw_spin_unlock+0x28/0x40 [ 710.255726][T21125] ? folio_create_empty_buffers+0x540/0x730 [ 710.261641][T21125] ? folio_add_lru+0x320/0xd50 [ 710.266418][T21125] __block_write_begin_int+0x566/0x1ad0 [ 710.272001][T21125] ? hfs_free_extents+0x430/0x430 [ 710.277035][T21125] ? folio_zero_new_buffers+0x550/0x550 [ 710.282609][T21125] ? hfs_free_extents+0x430/0x430 [ 710.287645][T21125] block_write_begin+0x9a/0x1e0 [ 710.292518][T21125] ? hfs_free_extents+0x430/0x430 [ 710.297554][T21125] cont_write_begin+0x5c8/0x7e0 [ 710.302433][T21125] ? generic_cont_expand_simple+0x200/0x200 [ 710.308337][T21125] ? __block_commit_write+0x23f/0x350 [ 710.313726][T21125] ? put_page+0xea/0x270 [ 710.317992][T21125] hfs_write_begin+0x8b/0xd0 [ 710.322593][T21125] ? hfs_free_extents+0x430/0x430 [ 710.327627][T21125] cont_write_begin+0x2ad/0x7e0 [ 710.332507][T21125] ? generic_cont_expand_simple+0x200/0x200 [ 710.338427][T21125] hfs_write_begin+0x8b/0xd0 [ 710.343028][T21125] ? hfs_free_extents+0x430/0x430 [ 710.348062][T21125] hfs_file_truncate+0x191/0x9b0 [ 710.353013][T21125] ? __up_read+0x280/0x670 [ 710.357443][T21125] ? up_read+0x20/0x20 [ 710.361523][T21125] ? up_read+0x20/0x20 [ 710.365604][T21125] ? hfs_extend_file+0x1220/0x1220 [ 710.370729][T21125] ? unmap_mapping_range+0xdf/0x170 [ 710.375984][T21125] ? unmap_mapping_pages+0x150/0x150 [ 710.381288][T21125] ? pagecache_isize_extended+0x116/0x580 [ 710.387038][T21125] hfs_inode_setattr+0x4af/0x6e0 [ 710.391991][T21125] ? bpf_lsm_inode_setattr+0x9/0x10 [ 710.397202][T21125] ? try_break_deleg+0x79/0x120 [ 710.402064][T21125] ? hfs_evict_inode+0x110/0x110 [ 710.407009][T21125] notify_change+0xb0d/0xe10 [ 710.411636][T21125] do_truncate+0x19b/0x220 [ 710.416061][T21125] ? put_page_bootmem+0x2c0/0x2c0 [ 710.421099][T21125] ? bpf_lsm_path_truncate+0x9/0x10 [ 710.426316][T21125] vfs_truncate+0x266/0x300 [ 710.430828][T21125] do_sys_truncate+0xe0/0x1a0 [ 710.435530][T21125] ? break_lease+0xd0/0xd0 [ 710.439956][T21125] ? lockdep_hardirqs_on+0x98/0x150 [ 710.445171][T21125] do_syscall_64+0x55/0xb0 [ 710.449598][T21125] ? clear_bhb_loop+0x40/0x90 [ 710.454285][T21125] ? clear_bhb_loop+0x40/0x90 [ 710.458971][T21125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.464887][T21125] RIP: 0033:0x7f9a5f78e929 [ 710.469317][T21125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.488937][T21125] RSP: 002b:00007f9a60628038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 710.497363][T21125] RAX: ffffffffffffffda RBX: 00007f9a5f9b5fa0 RCX: 00007f9a5f78e929 [ 710.505349][T21125] RDX: 0000000000000000 RSI: 0000000000206b12 RDI: 0000200000000240 [ 710.513334][T21125] RBP: 00007f9a5f810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 710.521309][T21125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.529288][T21125] R13: 0000000000000000 R14: 00007f9a5f9b5fa0 R15: 00007ffcd6169788 [ 710.537281][T21125] [ 710.593150][T21142] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ca973fa, utbl_chksum : 0xe619d30d)