last executing test programs: 4.455551118s ago: executing program 2 (id=1017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800c0001007061796c6f6164"], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890) 4.37656079s ago: executing program 1 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd700007000000830000000c009900fdfeffff3600000038000e80100000800a000100ffffffffffff0000240000800a00010008021100000100000a000100ffffff"], 0x58}, 0x1, 0x0, 0x0, 0x24004080}, 0x884) 4.160178445s ago: executing program 1 (id=1022): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={0x0, 0x7000000, &(0x7f0000000300)={&(0x7f00000006c0)={0x14, r1, 0x511}, 0x14}}, 0x0) 3.975606542s ago: executing program 2 (id=1024): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000006100)='./file0\x00', 0xc, &(0x7f0000000080)=ANY=[], 0xff, 0x1c3, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@isofs_parent={0x14, 0x2, {0x2e, 0x4, 0x7, 0xfe4b, 0x7d, 0x80101}}, 0x101000) 3.97537297s ago: executing program 1 (id=1025): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r0, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82) 3.837052182s ago: executing program 1 (id=1028): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000008) 3.605760327s ago: executing program 1 (id=1032): syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x59bd, &(0x7f0000000500)="$eJzs3Q2MHNWdIPBX3T0z7RmPPTawOBDGg8G7LGziMV8iH9p493aTFbDIEass5pzAgMesE9tYtlnAsIvZgxwIiEiUKEt2dWIjgo7EGyHBJTgohI+zuUCCuOTQiaAjdyQn5UQIVgAfinKZ00zX6+mp6Zrq6enxB/x+gqmu16//9erV65r6v65xBwAAAN4V9t+64+BFJ/z5M/8w+tZNf/GdLTeHvvJEeTVWGEiX1x2uFnIo9VSWTSyz4+IPbvj6z4eu/NPvP9j7tbf3bTh540/+7JgrH/30+Xvv+acn3ux/+HevFMWN4+n0yfXktSSE6ncPfOmz+549frwsCSGUk4HdISxJlj6xJMmEGP5NCGFDJl700FtnbRxf3nxHz5TyxZl6xvu7WzUdZ7sOXntGePlP1t3yw+Xf/NeuPa/unqySVBvGUwiLLm98fVcIYUH6/7g42pbFF6fLtSGE3obXnZfTnl994ZlzxpentNj+VTnrJ6bL7nTZVxAnPr8is17K1MuuR12ZZW/B9uYqrx3t1iuyMLM+eTL6clHXtiSvnbF8Sbr8dro8fZbxy/H/JJSSUKk3f3MyOUZCw3FLQjJRv1pfL9WPbUj3P7OeZNZLmfVyV2a/Jrab9l45SaaWx3qZ8ng6rqTlJzc59ze6OKf8Pemymr5R347rIfugpm/ag/p+TYjtOjBDWw6FUsM5qFl5/cCnB2N8d8bGxsb6kqXTXjPWRHxu37o7V5bXP7l/IKcdyYNJGj+Z2OZs4+/6wZKFn/rG7dcsy4t/eSmNX2or/k8veO71S2//6ldy498d45fbin/mY72vXfDUrSty++dA7J9KW/FHXnn6ruXHXrEnt/33xvjVtuKv2ftcT//Bxx7Pbf9w7J8FbcV/6UMf/dkDLzzyam78EOP3thV//d5tn+sZPHhabvzHY//0tTd+3thz7ouDg78Yyov/fIzf31L87sxz9+++54P3Lb7j/GbH9z80PO4LA221/8JTH71l4cFHTso7dyb3duo3J8C70zHpNdZt6Xq7eeZcNeQL/zhUqV0HLkz/7w9f6tyGMhef49tZ1LnoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDhuDP+y8f+1ycGXquk6z3pg5dKtWUs7w4hWRBC2LFzZPvOTVuvGvr01dds3zqyeWhk59Do1p3brx86+4+Gto9u2zxy/fizw+87q/a6pSGpLZOTpm27Z2xsrDQwtSxu79+cuufllef9n1+GMHzcjwcrue1fdc+W+45t8jMjWTP2kS3XXPTjc/4l3a+BtF0DTdo1NjY2FnLa9atLfnvfFw78/LQQhn9vpnY9/dIff29KgyYKJuOkSj2h1qCepLdpO+qtTtsT+6uycdPm0eGZ+3f89eWc/fi3N7z6m43Xff63tf6t5u5Hi/27YM3Y5tKX1134/758Y62gqF2H67gX9Xfci9i+2H/VtL8Xpfu1KGe/Kjn7desPH3/huyfc/ubuMFx5Y/n0bRftV1c6ALqS97S03biF3mTJlPJqWj8e8fi6VTu3bFu14/pd79u0ZeSq0atGt35g9dmrzx0+59xzVk3s+aoO73/c/u+3uP+HZjwt/tvd344/WxtPRe0q6o/xdhX3R2OL8t5/vRd/9osfuOepi2oFReM81q6fT9Jl7/hxXh0axtv0vmq2X0X9EEIYatYPr795fjj+v2+6peg81HhkGn9mJGvGnl3x638575+XfbhWcEjO840NavM8X2/1ZHsm+quaHo+xvP4tHd7+7QnldL/6mu7X6mef6rpz/y//rt6+7u5w3cjOndtX134uTFu6MDmxabuypXG/lk/8LIe0W0J9mDYZr+O6Qq192fNnrJ4dHX3pc33J0qb7lRWf27fuzpXl9U/uz+vp5MHaFheE/toyeW9Ozc2ZF5brDW62/SP1/Vc0PgY/9s8Pf+Lhb509bXycWftZtF9Jzn5984X7v/i1z//7bzXbr6629utjf/zcwK//x9+srBUcLeeVeqvT9iSN55UzQyh6/y0Pzfcj9/1Xar4/Re+/7HYm6zePN5RZ7wvltt6vZz7W+9oFT926Ivf9eqDV9+uNU9bKBe/XI2X8ZN9fSWVqO4rfXyG0d96YMlCSNWPfv+2Y3U/ctPaEWkHRuK7Xbjauz2oh/8jZr+9d+uLg1UP/7r917nz49T966LKfjKz5+1pB+8c9tqUzx72a9m81p3/rrY55Z2P/vv/KqzdvqJUfCde/u5te/6bLgvwnnkp2XL/rMyObN49u39HafrX6+zRuJ9vL7f4+jWe3pQX7VZq2X/P3oJX+avX9lra/nI0x2/fbLen7rS8kbf1e2PWDJQs/9Y3brxmY9qp0Q5eX0viltuL/9ILnXr/09q9+JTf+3TF+pa34I688fdfyY6/Ykxv/3iSNX20r/pq9z/X0H3zs8dz4w7H9C9qK/9KHPvqzB1545NXc+CHG72uv/9/Yc+6Lg4O/yI3/fJJuZ/waKYSH3jprY209mbh+rDa0o2tKu0J2PcmslzLr5cb1Um2utb6BcpJMLY/10vKTG9rSzF/nlMersOqy2vLtuB6yD2YuP9KUGs79zcqLrlMBAN7p4uf/8Ro0fv4/ml4o5c80wKS55mHLcuLGPGxyPqd7yvPL0vjx9XEecPD9YXh8efNQ7UK/Pj/x4S82bV92njO+H7KfI8TtnHbK1BjtznMWzb+vyKzHdtXmyysNeWhqel5TCS3Mv0/fzszz75ndL54fH7ptWrOGGuatssevK50xa3a/Q6a9lfEIeeMjOy8W7+cYXBTWTmwvOz5avI8mHofsfTRxOydkTpzt3kcz1/ERmz3D+Jho8vTjlz3w049fmKF/J49f02ZPO36zON7V8frz/flsB+YNm57SDt284fx+HmZeMid++gY70ucNY3ncj0qL84mfyClvaT7xf0/Wz5tPjKeL2K4DM7TlUDCfCLxTxfw//o4Yz//HL8D/b6Ze0XVo9qo/xsu9T2jaJ7w1RXnH9Pv0etv6Pb5+77bP9QwePC33OufxVu/72TZlrbfgvp+iflyZWS/sx5wJmqJ8L7udon7P3pfRF/rb6vf7d9/zwfsW33F+br+vrf0iLe73qXl8f0G/HwX5QvP48oV3Rb4w3/Nnhy0fSW98mq985K9yymd7f0PvtAf1/Zpw1OUjXYe2XQDA0SPm//XPz9L8/3/GCul1RFHeenpmPcbLzVtzrk/y8ta/TJfXZer3pX9RMdvr5gtPffSWhQcfOWniMrDJBWZyb6t56H+csjZQmIfOLW/OzSPWduZ+8dw8op5nzS1PzG1/PU+cW54+kDMlMpmnzy2Pzu2feh49t3mA3Pj1eYCjPc8tmK/LbCyutjpf947No9M/n52vPPrinPLZ5tF90x7U92uCPBoA4PCK+X+8jIv5/1OZenP9nD03L+jQdXv23wOpx3++c3ll0/gd+vy3OO+b77x1vvP6Oc1LLMgJP+3z31I4WvPi+Z4X6sA8WbP49x7m+12PlLw43ai8GACAI1nM/2OClZ//zy0/aZZ/dk3JTybz8xtnEV9+fkTk5y3cN/AO/9w6J/6RM/8l/+8O4eZY7nPx5uT/AADvbDH/j3/2GP/9v/+crmf/3Xqfo+fEl6fL02caPy3n6Z2fZwvuAzi898c33L1iHgAAgMOhayJTmv539p9Ml9m/s8/7u/xLc+q3qpJeHl+xc/vo6GXXbNswsnP0sq1Xbxjdcdm12zft3Dm6tVZvrnljbt6S5o1doZL2R/N62bxtcfpX5otz/j2EbP0Y9sSJB9P/PYTsZhcU/DsCk8evtfbmHb/SDPWbjY+8450X/69z6kf143/l35x52cYdl23aumnnppHNm3aNTq03nrX2zuJ7M2O3zOr7UjM/pinN/vs7O9OO0rR2dKX9kff97EmmHUvSlizJ+x7lnHY/81+/8Lenjv32gRCGjyu/d079l6wZ+0+XjP7lzv0/3jbe/tKM7a/XTNtV9H2l2fpxfyqbr96x84yNV1+zdUNu22cjzmeU6uvzNJ+Rvv3LLc5PrM8pn+19CuVpD45MLc9PAAAwRfz8P17Pxs8PP59eQMXy1vP0uX1+nJunD7eWp2e/l6woT8/Wj/vbap5eLczTa59Cttreojy9Wf1meXpe3p0X/69y6s9W6+Nkbvd55I6Ty1sbJ9nvMygaJ9n6sx0nyRznc7LbLxonzeo3GydNj3t3fvyPN6s/g9bHw9zuy8kdD3e3Nh7+MLNeNB6y9Wc7HkpzHA/Z7ReNh2b1m42HvOObF/+inPqtmjo+xgfGxLgYvezaq7d/pqHefH//xbiX59S++f3+j3a13v75ve9r/ts/v/eVtWjvVW23f273leW2//m5zYS13v75/X6Xdh2y+dr0ZrOi+8+K5nHXTd+BCbOdx+2e9uDIZB4XDp+Y/8ePe2L+f0e67PTHQJ28ThpbPPn40H1Pmu8xaxq/Q99jVnQdc9T/Pk8V/T7fff/U+n6fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyz9FSWTSz337rj4EUn/Pkz/zD61k1/8Z0tN//BDV//+dCVf/r9B3u/9va+DSdv/MmfHXPlo58+f+89//TEm/0P/+6VwsADEz8rp6er1RCS15IQqt898KXP7nv2+PGyJIRQTgZ2h7AkWfrEkiQTYfg3IYQN9XZOffKht87aOL68+Y6eKeWLM0Gy+xX6yrE9je0M4brCPeIoVE3H2a6D154RXv6Tdbf8cPk3/7Vrz6u7J6sk1YbxFMKiyxtf3xVCWJD+Py6OtmXxxelybQiht+F15xW065QW278qZ/3EdNmdLvsK4sTnV2TWS5l62fWoK7PsLdjeXOW1o916RRZm1rMno7nKa2csX5Iuv50uT59l/HL8PwmlJFTqzd+cTI6R0HDckpBMHMtqfb1UP7Yh3f/MepJZL2XWy12Z/ZrYbjrQykkytTzWy5TH03ElLT+58VzdxMU55e9Jl9X0jfp2XA/ZBzV90x7U92tCbNeBGdpyKJQazkHNyusHPj0YfWlZX7J02mvGmph4YlEI+9bdubK8/sn9AzntSB5M0vjJ7OOPn49/sGThp75x+zXL8uJfXkrjl9qK/9MLnnv90tu/+pXc+HfH+OW24p/5WO9rFzx164rc/jkQ+6fSVvyRV56+a/mxV+zJbf+9MX615fjdYTL+mr3P9fQffOzx3PYPx/5Z0Fb7X/rQR3/2wAuPvJobP8T4vW3FX7932+d6Bg+elhv/8dg/fe2Nnzf2nPvi4OAvhvLiPx/j97cV//7d93zwvsV3nJ97fNfG/hloK/6Fpz56y8KDj5yUd+5M7u3Ub06Ad6dj0mus29L1hjyzfzZ55lw15Av/OFSpXfMtTP/v7+SGMpLa5SIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMzKj248+5OXfOTj6ypJCElOnbEm4nPl7jVrhtrY7sgrT9+1/Ngr9jSWLWsjDgAAAFAs5uGlekk1LAvXJgvCiU3rxzmCE+NaMrU8O4cQ42TnCNqNU+pQnHKH4lQ6FKerQ3G6OxSnp0NxqgVxqqG1OAtmiFMZHxUttqd3xva0HqevQ3EWdihOf4fiLOpQnMUdijMwY5zWx+GSDsVZ2qE4x3QozrEdinNch+L8XofiHN+hONk55dmOw/605gl5cSYelAvjVJJy/Ylm8+nHp9s5aY7b6SvYTn/R7+MWt7Ogxe2cknldaZbbqba4nd+f43aSFrfzh3PcTqlgO3HcXpdtX9xOXGtx/F/foTi7OhTnhg7FubFDcf6uQ3H+vkNxbppjHIBWxfx/Mt8bCD2VD4fe9IyTnQWI+e7yiZ/Tf9/lnZBivPdmyruL4mUT9Uy85bNtX3YCIRNvRaa8a0q8Sj0fmSFetTHeysyThfubnVDItO/0THlPUbzsxAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzKMf3Xj2Jy/5yMfXhSSM/9fUWBPxuXL3mjVDbWx337o7V5bXP7m/sayn0kYgAAAAoFDMw7vqJdXQU1kdepLuKfWq6TxANV0vD9SWg4vC2vFlMlSaWO9Nlsz4ukr6ulU7t2xbteP6Xe/btGXkqtGrRrd+YPXZq88dPufcc1Zt3LR5dLj2M4SegnghhInphx3X7/rMyObNo9t31Aqz7V+Wvm5Zup6krxt8fxgeX96ctn9pwfZK07Y3fw+Kjx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/ZtdtQN8/6D+DXneQk2dn6b/7sKSvraejDqDq0rWfS6VhuEBxsbelhIMn0OIprcXi6lu501Bm3gttsUYSNQqn0hZU63By+2YMb4h4oTGa14KlFtqF7oS+UTTe60RfSEek5uXOSNGnO4uiTn8+L3Ml1/a7rd195ceB7nwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn11RtdLxSHqsORyFEPWrqXSRz6Wwclwbo+9UXtv4wN3JieetYLjPARgAAAEBfSQ4fao7kQy6TDulwzfSnxaFlIszmfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/PVG10vFIeq14ahRD1qKl3kcyls3FcGqDvW+8/9bnXR0b+3jpWHGAfAAAAoL8kh6eaI/lQDEvCUHRNW13ybGBBx/rOumSfhXOs63x20KtuyRzrrptj3Sf61K1rXHcEAAAAuPAl+T/THCmEXGZez/zfL9cndYs66tKN6yC/FQAAAAD+O0n+zzVHiiGXKTbz+lzz/uKOumR9v//bJ+uX9Vjf7//5axtX/6cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvHVG10vFIeq6ajEKIeNfUukrl0No5LA/Rd9eLwP2879PDi1rFcZoCNAAAAgL6SHD4bvfMhlxkOQ+HS6dw/csv+Z778zHOjIYSZmJ/NnqzX65PbVu3YMDm5bVVSt/LwoaEfvPrOd1rqwnTFypnXc3ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYzNVGx2vlMeql0QhRD1q6l0kc+lsHJcG6PvmF7701yeOPf9261hxgH0AAACA/pIcPpv986EYsiEbrpr+1Jr1T0l1rO/1zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4eNz7rfu/uWFiYuO2j/BmsFVn8c3OxuHOl/vxxpsL7s05/sMEAAB87BaFKNQ/oqvXn+u7BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzgdTtdHxSnmsmo9CiHrU1LtI5tLZOC4N0Dd+4Uhu3okXX24dKw6wDwAAANBfksNns38+FMNQGApXTn/q9kxgOv8XzuJNAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOeVqdroeKU8Vp0XhRD1qKl3kcyls3FcGqDv4zv3ff7g/O/f2jqWywywEQAAANBXksOzzZF8yGU+GXLh2sbnifYFUbpx7f5cYHbd1rZlw3NeV2tbl57zul0dJ8s0TjOzLp/sV5i5NteVTl9XallXDM32pbZ1YU/bqnl97jMAAADAOZTk/1xzpBBymVxLzv1ZW31BzgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAepiqjY5XymPVKAoh6lFT7yKZS2fjuDRA3/t/9/+Xfe3nu7e3jhUH2AcAAADoL8nhs9k/H4phYfi/sHA694dCe31S96/KyYOPvfe35SGsuOroSKZz2x8nb37z5s0vdb6EkGqvToUwv9Ev6tHvt3947L6l9ZNPhLDiyvS1p/ULZ+7XvmVcf7ayce3k1rC1z5cDAAAAF4kk/w+FMDQzUgi5zD0983+SvPvk/6bpAD7/vp2/vKLx2kjkHStShUa/VI9+X1z61F+Wrf7HO6fy/5n6fWbf5oNXtDWcGekQxfXy5u3rjt5wIJWceqZ/uqN/40sJX/n22//etOPRkzP98yHfGF+Q6db/9NcOl8T1idTe6poP99ba+2d6nP/h37987NcLdn9wqv/7i4ab/a87w/nP3H/49kf23Ljv0Lr2/iGEUrf+735wa7j6T3c/1Hn+4Y6NW7/51tem9xrX+uHFxw+s3l+8qb1/1NE/+f5/cezxPT999HvPJf2T34osXzLX/m3PnKK4/tquy3e+8uD6Be39Uz3O/9Idr49sKX33j53nv6tt10zPu+gQxfUnr3/6zjc2xA90TgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxcpmqj45XyWDUVhRD1qKl3kcyls3FcGqDvW7cdefeO3T/5UetYcYB9AAAAgP6SHD6b/fOhGLIhG4anc/+zlY1rJ189ujUUZmajxjUzseXeyU9t2rL9nrvO0Z0DAAAAc5Xk/0xzpBBymaVhqJH/y5u3rzt6w4FUkv9TSf7fdPfExhWhWffarst3vvLg+gXN5wQhTP8sIH+q7rOzdbfcfKRw/M/fWNa1btVs3eHFxw+s3l+8KakLrXUrQ/P5xJPXP33nGxviB5r311r36a9vmWg8nkj2Hb79kT037ju0rnmOxnW4sW9SN5HaW13z4d5aUpduXPONcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp5uqjY5XymPVkA4h6lFT7yKZS2fjuDRA3zVLf/XQZSeeX9g6lssMsBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwn7dhMZV9XEAPmcmeTPNJG3SvmBUTNOqKHVhURDRjYqKpFIKripFqv1YiIIgotSFqbRiqYobweqmiApqlIKCjcXSKqn4Vdy4UEGhuhBKMaAdiuAHmTl3MrmZ69RpFdTngcuZc+69v/nfe87cmQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfpa9npN4e2Xl/be15N3306JaTj9zyzr3bL3n41e/GNt3w4b7+l05Nb16x9csbl206cPf41J7nD/80+NavxzoGP9RoVqVuJYR4IoZQeXfmmcemPz5ndiyGEMpxaCKE4bj08HDMJaz+OYSwuVnn/J1vnrxy62y7fXffvPEluZD8dYVqOaunYWh+vfy7VNI621Z78LLw9fXrd3y6/I3XeyePT8wdEist6ymExRtbz+8NISxK26xstY1kJ6d2XQihv+W8qzvUdeFp1n95Qf/81P4vtdUOOdn+lbl+KXdcvp/pDeGXtel+hNy1/hWK6uj2uE4Gcv38w+hMFdWZjQ+n9u3UrvqT+eVsi6EUQ0+z/Hvi3BoJLfMWQ6zPZaXZLzXnNqTrz/Vjrl/K9cu9ueuqv29aaOUY549nx+XGs8dxTxpf0fqsbuO2gvFzU1tJH9RTWT/kXzRUF7xoXlddVtfMH9Tydyi1PIPajTcnPk1GNY1V49IF5/zWRrZvev0TF5c3vHdkqKCOuC+m/Ng5fygsyN/2yfDAHa/temCkKH9jKeWXuqr/mzVHf7h91wvPFeY/neWXu8q/4mD/iTXv71zZ5v4srufPZPenp6v8O4998OTy/9812W6u6/l7s/xKV/nXTR3tG6wdPFQ4v6uz+7Ooq/yvrr3521c+33+8MD9k+f1d5W+Yuu+pvtHapYX5hxofhWp9hXaxfn6cvOqL0dHvx4ryP8vu/2Cb/Ngx/+WJPde8uGT3eOH6XJfdn6HTrn98y9y+Wy86sGOgtv+Comdn3Hu2vjkB/puWpd9Yj6d+t/8zz1TL/4Vnx3oa30ADaRs8m2+UE7MfPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzODhwLAAAAAAjzt+4NYgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAKAAD//4QZJk4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x542, 0x1) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x5}}, 0x18) 3.511567913s ago: executing program 5 (id=1033): syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/129, 0x81) 3.230774183s ago: executing program 5 (id=1037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 3.179660054s ago: executing program 2 (id=1038): msgget$private(0x0, 0x4) setuid(0xee01) msgctl$MSG_STAT(0x0, 0xb, 0x0) 2.99698544s ago: executing program 3 (id=1041): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) linkat(r0, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 2.991108334s ago: executing program 5 (id=1042): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) 2.743441348s ago: executing program 0 (id=1044): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000040)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x366, &(0x7f0000001280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) 2.743269633s ago: executing program 5 (id=1045): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 2.717213821s ago: executing program 2 (id=1047): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x7ff, @local, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) 2.695525962s ago: executing program 3 (id=1048): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x9e, &(0x7f00000006c0)="$eJzszr2JAkEABeB3Gxx7yTZwwXVwNWgRVmBoaKQI2pCtWIKpkYGpyYjsCrKggYE/8H0wDG8eA29zXP+mScoyKaWs0ipn09l88p3b7nV8hqq76yR/TZv3w2SQ5Kvrt4fF+HJ630f1CzYDAACPqfLfz1cPu5/nLwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4L6cAAAD//6LYGgE=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 2.377897006s ago: executing program 3 (id=1049): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYRES16=r1, @ANYRESOCT], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.039160198s ago: executing program 0 (id=1050): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004bc0)={0x2c, r0, 0x203, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) 1.83310442s ago: executing program 1 (id=1051): io_setup(0x1, &(0x7f00000004c0)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0xa0, 0x1, 0x0, r1, 0x0}]) 1.684362031s ago: executing program 0 (id=1052): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @private=0xa0100fc}, 0x1, r1}) 1.669894966s ago: executing program 4 (id=1053): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) 1.529574899s ago: executing program 4 (id=1054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1.493812691s ago: executing program 2 (id=1055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a32000000001400000011000100"], 0x74}}, 0x0) 1.480768575s ago: executing program 0 (id=1056): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000005500)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000005540)={0x28, 0x10000, 0x0, r1, 0x16ebdb, 0x3, 0x2, 0x3b642}) 1.289133167s ago: executing program 4 (id=1057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) 1.211586328s ago: executing program 0 (id=1058): r0 = epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) epoll_pwait2(r0, &(0x7f0000000400)=[{}], 0x1, &(0x7f0000000740), 0x0, 0x0) 1.16378554s ago: executing program 5 (id=1059): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/420], 0xfe, 0x612b, &(0x7f0000006700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, 0x0, 0x0) 1.103623276s ago: executing program 0 (id=1060): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)=ANY=[], 0x200) 1.034325552s ago: executing program 2 (id=1061): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) 919.707748ms ago: executing program 4 (id=1062): r0 = socket(0x25, 0x1, 0x0) io_setup(0x3, &(0x7f0000001cc0)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='}', 0x1}]) 679.386324ms ago: executing program 4 (id=1063): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10405, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nouid32}, {@quota}]}, 0x3, 0x434, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 370.787203ms ago: executing program 3 (id=1064): msgget(0x3, 0x244) r0 = msgget(0x2, 0x618) msgctl$IPC_RMID(r0, 0x0) 179.692973ms ago: executing program 5 (id=1065): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x4000, @fd_index=0x3, 0x0, 0x40, 0x8020, 0x0, 0x1, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 164.334114ms ago: executing program 3 (id=1066): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000380)="$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") chdir(&(0x7f00000000c0)='./file0\x00') listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0xd1ea5fc3) 97.09478ms ago: executing program 4 (id=1067): r0 = syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000080)={[{@heartbeat_none}, {@heartbeat_none}, {@coherency_full}, {@inode64}, {@nouser_xattr}, {@barrier={'barrier', 0x3d, 0x5}}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchown(r0, r1, 0xffffffffffffffff) 0s ago: executing program 3 (id=1068): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x300, 0x0, @l2={'eth', 0x3a, 'macvlan0\x00'}}}}}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 98.872342][ T973] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.919839][ T6305] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.131: Failed to acquire dquot type 1 [ 98.921037][ T6313] [U] VÔ3¸ÂFŮľ"SÇÁ/ÉĘ4:ĂXTZ“WˇT‘’LWµ«= [ 98.942244][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 98.949182][ T24] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 98.961652][ T24] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 98.975852][ T24] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 98.977538][ T6305] EXT4-fs (loop0): 1 truncate cleaned up [ 98.986654][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 98.993544][ T6313] [U] J"—E:ŔĆ" [ 99.001622][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 99.013890][ T6305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.026565][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.031266][ T6313] [U] Ş‡Ó [ 99.035148][ T24] usb 3-1: Product: syz [ 99.041815][ T6305] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.042591][ T24] usb 3-1: Manufacturer: syz [ 99.071212][ T973] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 99.090813][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.100918][ T24] usb 3-1: SerialNumber: syz [ 99.112753][ T973] usb 2-1: config 0 descriptor?? [ 99.121107][ T973] cp210x 2-1:0.0: cp210x converter detected [ 99.132961][ T24] usb 3-1: config 0 descriptor?? [ 99.259812][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.299261][ T12] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 99.331290][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 99.366082][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 99.412898][ T5184] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.442260][ T5184] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.485716][ T6317] loop4: detected capacity change from 0 to 4096 [ 99.502466][ T5184] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.528888][ T973] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 99.561012][ T5184] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.582173][ T6317] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 99.614907][ T973] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 99.640620][ T973] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 99.670779][ T5184] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.671294][ T5184] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.677470][ T5838] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.698677][ T6317] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 99.718865][ T973] usb 2-1: cp210x converter now attached to ttyUSB0 [ 99.721568][ T6317] ntfs3(loop4): ino=19, mi_enum_attr [ 99.748827][ T973] usb 2-1: USB disconnect, device number 2 [ 99.773570][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 99.774024][ T973] cp210x 2-1:0.0: device disconnected [ 99.781453][ T6298] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 99.838515][ T52] usb 3-1: USB disconnect, device number 2 [ 99.995835][ T6315] loop3: detected capacity change from 0 to 32768 [ 100.070522][ T6315] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.200696][ T6330] loop4: detected capacity change from 0 to 2048 [ 100.250602][ T6334] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.279776][ T6315] XFS (loop3): Ending clean mount [ 100.294526][ T6315] XFS (loop3): Quotacheck needed: Please wait. [ 100.367678][ T6315] XFS (loop3): Quotacheck: Done. [ 100.428888][ T6336] hugetlbfs: Bad value 'e' for mount option 'size' [ 100.428888][ T6336] [ 100.593109][ T5843] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 101.268703][ T6331] loop5: detected capacity change from 0 to 32768 [ 101.342439][ T30] audit: type=1800 audit(1743057686.428:5): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.116" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 101.394910][ T6333] loop1: detected capacity change from 0 to 32768 [ 101.441901][ T6333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.139 (6333) [ 101.532175][ T973] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 101.539929][ T6333] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.570878][ T6333] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 101.592760][ T6333] BTRFS info (device loop1): disk space caching is enabled [ 101.600216][ T6333] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 101.714424][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.735606][ T973] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 101.807921][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.830803][ T6333] BTRFS info (device loop1): rebuilding free space tree [ 101.853497][ T973] usb 5-1: config 0 descriptor?? [ 101.902761][ T6378] mkiss: ax0: crc mode is auto. [ 101.947739][ T6333] BTRFS info (device loop1): disabling free space tree [ 101.981694][ T6333] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.029511][ T6333] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 102.073537][ T6346] loop0: detected capacity change from 0 to 32768 [ 102.111778][ T6346] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 102.138779][ T6346] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.296320][ T6389] loop5: detected capacity change from 0 to 256 [ 102.304714][ T973] apple 0003:05AC:027D.0003: hidraw0: USB HID vff.ff Device [HID 05ac:027d] on usb-dummy_hcd.4-1/input0 [ 102.404854][ T6354] loop2: detected capacity change from 0 to 32768 [ 102.474061][ T5832] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.492014][ T6354] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 102.492014][ T6354] [ 102.529126][ T52] usb 5-1: USB disconnect, device number 4 [ 102.549855][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 102.570802][ T6354] ERROR: (device loop2): remounting filesystem as read-only [ 102.612203][ T6354] jfs_create: dtInsert returned -EIO [ 102.632785][ T6354] ERROR: (device loop2): jfs_create: [ 102.632785][ T6354] [ 102.966330][ T5941] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.071673][ T6403] loop3: detected capacity change from 0 to 4096 [ 103.102796][ T6403] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 103.144016][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.185965][ T5941] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.236460][ T5941] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 103.293757][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.322474][ T5941] usb 6-1: config 0 descriptor?? [ 103.590527][ T6417] loop4: detected capacity change from 0 to 256 [ 103.617845][ T6417] exfat: Deprecated parameter 'utf8' [ 103.636653][ T6417] exfat: Deprecated parameter 'utf8' [ 103.653196][ T6417] exfat: Deprecated parameter 'utf8' [ 103.685386][ T6417] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 103.962368][ T5941] hid-led 0003:27B8:01ED.0004: probe with driver hid-led failed with error -71 [ 104.017510][ T5941] usb 6-1: USB disconnect, device number 3 [ 104.046391][ T6435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.197863][ T6439] loop0: detected capacity change from 0 to 256 [ 104.278153][ T6439] FAT-fs (loop0): Directory bread(block 64) failed [ 104.290381][ T6439] FAT-fs (loop0): Directory bread(block 65) failed [ 104.305304][ T6439] FAT-fs (loop0): Directory bread(block 66) failed [ 104.318699][ T6439] FAT-fs (loop0): Directory bread(block 67) failed [ 104.352367][ T6439] FAT-fs (loop0): Directory bread(block 68) failed [ 104.372160][ T6439] FAT-fs (loop0): Directory bread(block 69) failed [ 104.392234][ T6439] FAT-fs (loop0): Directory bread(block 70) failed [ 104.432346][ T6439] FAT-fs (loop0): Directory bread(block 71) failed [ 104.439107][ T6439] FAT-fs (loop0): Directory bread(block 72) failed [ 104.455149][ T6439] FAT-fs (loop0): Directory bread(block 73) failed [ 104.647020][ T6454] loop2: detected capacity change from 0 to 7 [ 104.683749][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.693191][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.712657][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.721827][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.732116][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.741299][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.764361][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.773650][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.782005][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.791248][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.800422][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.809640][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.821942][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.831170][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.839953][ T5199] ldm_validate_partition_table(): Disk read failed. [ 104.847073][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.856271][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.864403][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.873621][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.887901][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.897119][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 104.922998][ T5199] Dev loop2: unable to read RDB block 0 [ 104.953445][ T5199] loop2: unable to read partition table [ 104.960641][ T6464] tipc: Started in network mode [ 104.969558][ T5199] loop2: partition table beyond EOD, truncated [ 104.976393][ T6464] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 104.987498][ T6466] loop0: detected capacity change from 0 to 128 [ 104.996622][ T6454] ldm_validate_partition_table(): Disk read failed. [ 105.003687][ T6464] tipc: Enabled bearer , priority 18 [ 105.013320][ T6454] Dev loop2: unable to read RDB block 0 [ 105.019638][ T6454] loop2: unable to read partition table [ 105.031672][ T6454] loop2: partition table beyond EOD, truncated [ 105.039514][ T6462] loop5: detected capacity change from 0 to 4096 [ 105.051576][ T6454] loop_reread_partitions: partition scan of loop2 (ţ被xü—źŃŕ– ) failed (rc=-5) [ 105.068047][ T6466] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 105.094302][ T5199] ldm_validate_partition_table(): Disk read failed. [ 105.101038][ T6466] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.121970][ T5199] Dev loop2: unable to read RDB block 0 [ 105.135381][ T5199] loop2: unable to read partition table [ 105.141188][ T5199] loop2: partition table beyond EOD, truncated [ 105.358181][ T6473] Illegal XDP return value 32768 on prog (id 16) dev N/A, expect packet loss! [ 105.461566][ T6479] overlayfs: disabling nfs_export due to verity=on [ 105.775702][ T6448] loop4: detected capacity change from 0 to 32768 [ 105.866138][ T6448] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 106.003979][ T5893] tipc: Node number set to 10005162 [ 106.041315][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 106.360058][ T6501] loop2: detected capacity change from 0 to 512 [ 106.424199][ T6501] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.496687][ T6501] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.537472][ T6501] EXT4-fs (loop2): 1 truncate cleaned up [ 106.574834][ T6501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.606562][ T6501] EXT4-fs error (device loop2): ext4_generic_delete_entry:2687: inode #2: block 13: comm syz.2.206: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 106.654776][ T6481] loop5: detected capacity change from 0 to 32768 [ 106.661963][ T6481] btrfs: Deprecated parameter 'usebackuproot' [ 106.701178][ T6501] EXT4-fs error (device loop2) in ext4_delete_entry:2758: Corrupt filesystem [ 106.712253][ T6481] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 106.745715][ T6484] loop3: detected capacity change from 0 to 32768 [ 106.765443][ T6481] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.199 (6481) [ 106.782015][ T6484] XFS: ikeep mount option is deprecated. [ 106.784490][ T6509] loop4: detected capacity change from 0 to 1024 [ 106.829301][ T6481] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.858417][ T6496] loop0: detected capacity change from 0 to 32768 [ 106.875926][ T6484] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 106.890107][ T6481] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 106.965352][ T6509] hfsplus: bad catalog entry type [ 106.970893][ T6496] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.992953][ T6481] BTRFS info (device loop5): using free-space-tree [ 107.030893][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.080405][ T64] hfsplus: b-tree write err: -5, ino 4 [ 107.163124][ T6496] XFS (loop0): Ending clean mount [ 107.169633][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 107.251189][ T6481] BTRFS error (device loop5): failed to load root extent [ 107.258974][ T6481] BTRFS warning (device loop5): try to load backup roots slot 1 [ 107.285052][ T12] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 107.322793][ T6484] XFS (loop3): Ending clean mount [ 107.329863][ T6481] BTRFS warning (device loop5): couldn't read tree root [ 107.354912][ T6484] XFS (loop3): Quotacheck needed: Please wait. [ 107.362169][ T6481] BTRFS warning (device loop5): try to load backup roots slot 2 [ 107.386629][ T53] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 107.427650][ T6481] BTRFS warning (device loop5): couldn't read tree root [ 107.466580][ T5840] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.482341][ T6484] XFS (loop3): Quotacheck: Done. [ 107.491021][ T6481] BTRFS warning (device loop5): try to load backup roots slot 3 [ 107.521648][ T6555] tipc: Started in network mode [ 107.567812][ T6555] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 107.589791][ T6555] tipc: Enabling of bearer rejected, failed to enable media [ 107.603984][ T6481] BTRFS info (device loop5): rebuilding free space tree [ 107.709190][ T6481] BTRFS info (device loop5): checking UUID tree [ 107.729675][ T6563] loop2: detected capacity change from 0 to 64 [ 107.740374][ T5843] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.203815][ T5830] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.780071][ T6587] loop1: detected capacity change from 0 to 256 [ 108.912888][ T6585] loop3: detected capacity change from 0 to 4096 [ 109.235247][ T6571] loop0: detected capacity change from 0 to 32768 [ 109.243879][ T6595] loop5: detected capacity change from 0 to 1024 [ 109.288665][ T6574] loop4: detected capacity change from 0 to 32768 [ 109.352643][ T6571] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 109.413645][ T36] hfsplus: b-tree write err: -5, ino 4 [ 109.422005][ T6574] JFS: charset not found [ 109.461499][ T6571] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.650486][ T6602] usb usb8: usbfs: process 6602 (syz.5.233) did not claim interface 0 before use [ 109.684656][ T5840] ocfs2: Unmounting device (7,0) on (node local) [ 109.835595][ T6578] loop2: detected capacity change from 0 to 32768 [ 109.910261][ T6578] non-latin1 character 0x3ff found in JFS file name [ 109.919494][ T6578] mount with iocharset=utf8 to access [ 110.024727][ T6608] loop3: detected capacity change from 0 to 16 [ 110.057569][ T6608] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 110.185797][ T6593] loop1: detected capacity change from 0 to 32768 [ 110.278107][ T6593] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.620769][ T6593] XFS (loop1): Ending clean mount [ 110.644058][ T6634] loop0: detected capacity change from 0 to 2048 [ 110.652656][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 110.689834][ T6634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.789539][ T5832] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.588829][ T6668] loop0: detected capacity change from 0 to 128 [ 111.651851][ T6668] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 111.683077][ T6668] FAT-fs (loop0): Filesystem has been set read-only [ 111.849376][ T6649] loop5: detected capacity change from 0 to 32768 [ 111.926054][ T6649] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 111.936709][ T6677] warning: `syz.3.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.140108][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 112.413006][ T6694] sctp: [Deprecated]: syz.1.273 (pid 6694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.413006][ T6694] Use struct sctp_sack_info instead [ 112.516139][ T6692] loop0: detected capacity change from 0 to 4096 [ 112.756545][ T6706] syz.4.277 (6706): /proc/6703/oom_adj is deprecated, please use /proc/6703/oom_score_adj instead. [ 112.920424][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 113.092177][ T973] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.282852][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 113.321691][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.352720][ T973] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 113.361821][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.422432][ T973] usb 3-1: config 0 descriptor?? [ 113.597778][ T6735] loop4: detected capacity change from 0 to 256 [ 113.685431][ T6707] loop1: detected capacity change from 0 to 32768 [ 113.722096][ T6707] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.278 (6707) [ 113.770845][ T6707] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.798116][ T6707] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 113.837968][ T6707] BTRFS info (device loop1): disk space caching is enabled [ 113.857589][ T973] hid-alps 0003:044E:121E.0005: hidraw0: USB HID v0.02 Device [HID 044e:121e] on usb-dummy_hcd.2-1/input0 [ 113.860232][ T6707] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 113.900191][ T6745] mmap: syz.4.297 (6745) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.042206][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.069390][ T52] usb 3-1: USB disconnect, device number 3 [ 114.081951][ T6707] BTRFS info (device loop1): rebuilding free space tree [ 114.136401][ T6707] BTRFS info (device loop1): disabling free space tree [ 114.169251][ T6707] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.203337][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 114.208771][ T6707] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.221608][ T10] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 114.252969][ T10] usb 4-1: config 0 has no interface number 0 [ 114.259255][ T10] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 114.309232][ T10] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 114.374292][ T10] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 114.393414][ T10] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 114.407170][ T5832] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.415241][ T10] usb 4-1: Manufacturer: syz [ 114.422962][ T10] usb 4-1: SerialNumber: syz [ 114.438417][ T10] usb 4-1: config 0 descriptor?? [ 114.460923][ T6740] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.654264][ T6774] loop0: detected capacity change from 0 to 1024 [ 114.751704][ T6774] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 114.772634][ T6774] hfsplus: xattr searching failed [ 114.793122][ T6776] loop2: detected capacity change from 0 to 64 [ 114.929948][ T10] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 114.954509][ T10] usb 4-1: USB disconnect, device number 4 [ 115.261415][ T6787] loop0: detected capacity change from 0 to 1024 [ 115.320759][ T6787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.327487][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.1.310'. [ 115.367671][ T6787] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.672605][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.930413][ T6788] loop5: detected capacity change from 0 to 40427 [ 115.933041][ T6807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.317'. [ 115.987797][ T6778] loop4: detected capacity change from 0 to 32768 [ 116.009699][ T6788] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1fffff [ 116.048931][ T6788] F2FS-fs (loop5): invalid crc value [ 116.082806][ T6812] loop2: detected capacity change from 0 to 256 [ 116.110135][ T6788] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.110275][ T6812] exfat: Deprecated parameter 'namecase' [ 116.136437][ T6812] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 116.342960][ T6778] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,noinodes_use_key_cache,gc_reserve_bytes=6.00 EiB,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 116.369006][ T6799] loop3: detected capacity change from 0 to 32768 [ 116.407360][ T6778] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 116.415637][ T6799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.314 (6799) [ 116.460878][ T6778] bcachefs (loop4): Version upgrade required: [ 116.460878][ T6778] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 116.460878][ T6778] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 116.460878][ T6778] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 116.531788][ T6788] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 116.567351][ T6799] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.638586][ T6799] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 116.651415][ T6778] bcachefs (loop4): dropping and reconstructing all alloc info [ 116.709410][ T6799] BTRFS info (device loop3): using free-space-tree [ 116.753188][ T6778] bcachefs (loop4): accounting_read... done [ 116.773615][ T6833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.323'. [ 116.783423][ T6778] bcachefs (loop4): alloc_read... done [ 116.783512][ T6778] bcachefs (loop4): stripes_read... done [ 116.783568][ T6778] bcachefs (loop4): snapshots_read... done [ 116.802129][ T6778] bcachefs (loop4): done starting filesystem [ 116.811396][ T5830] bio_check_eod: 104 callbacks suppressed [ 116.811418][ T5830] syz-executor: attempt to access beyond end of device [ 116.811418][ T5830] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.895771][ T5830] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 116.928041][ T5842] bcachefs (loop4): shutting down [ 117.023068][ T5842] bcachefs (loop4): shutdown complete [ 117.063255][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.146623][ T5843] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.266113][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 117.274701][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.317126][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.378686][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.443483][ T5893] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 117.482107][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.534885][ T5893] usb 1-1: config 0 descriptor?? [ 118.026351][ T6876] netlink: 32 bytes leftover after parsing attributes in process `syz.5.338'. [ 118.064717][ T5893] ryos 0003:1E7D:31CE.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.0-1/input0 [ 118.273320][ T973] usb 1-1: USB disconnect, device number 3 [ 118.311370][ T6886] loop2: detected capacity change from 0 to 512 [ 118.418378][ T6886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.453591][ T6892] loop1: detected capacity change from 0 to 1024 [ 118.467496][ T6886] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.488941][ T6886] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 118.500584][ T6886] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 118.511308][ T6886] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.343: Failed to acquire dquot type 1 [ 118.618961][ T6896] loop3: detected capacity change from 0 to 1024 [ 118.678362][ T6896] syz.3.347: attempt to access beyond end of device [ 118.678362][ T6896] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 118.705343][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.764888][ T6899] syz.3.347: attempt to access beyond end of device [ 118.764888][ T6899] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 118.880585][ T6903] loop1: detected capacity change from 0 to 512 [ 118.953636][ T6905] Invalid logical block size (32) [ 118.996697][ T6903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.287831][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.486030][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.533598][ T6928] loop5: detected capacity change from 0 to 1024 [ 119.592867][ T6928] netlink: 48 bytes leftover after parsing attributes in process `syz.5.362'. [ 119.702171][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 119.714519][ T10] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 119.757948][ T10] usb 4-1: config 2 has no interface number 0 [ 119.782376][ T10] usb 4-1: config 2 interface 31 has no altsetting 0 [ 119.829728][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 119.859298][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.894645][ T10] usb 4-1: Product: syz [ 119.909065][ T10] usb 4-1: Manufacturer: syz [ 119.923955][ T10] usb 4-1: SerialNumber: syz [ 119.989571][ T6945] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.368'. [ 120.011281][ T6945] openvswitch: netlink: Message has 2 unknown bytes. [ 120.563908][ T6962] loop1: detected capacity change from 0 to 256 [ 120.566737][ T10] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 120.592895][ T6962] exfat: Deprecated parameter 'utf8' [ 120.610931][ T6962] exfat: Deprecated parameter 'namecase' [ 120.650245][ T10] usb 4-1: USB disconnect, device number 5 [ 120.674567][ T6962] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 120.700343][ T6964] loop5: detected capacity change from 0 to 512 [ 120.725312][ T6964] EXT4-fs error (device loop5): __ext4_fill_super:5497: inode #2: comm syz.5.377: casefold flag without casefold feature [ 120.762681][ T6964] EXT4-fs (loop5): get root inode failed [ 120.798993][ T6964] EXT4-fs (loop5): mount failed [ 121.060132][ T6971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.380'. [ 121.160368][ T6955] loop2: detected capacity change from 0 to 32768 [ 121.177994][ T6955] btrfs: Deprecated parameter 'usebackuproot' [ 121.228341][ T6955] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 121.279358][ T6955] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.373 (6955) [ 121.341163][ T6985] loop4: detected capacity change from 0 to 1024 [ 121.352927][ T6955] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.391191][ T6955] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 121.434310][ T6955] BTRFS info (device loop2): using free-space-tree [ 121.583115][ T6985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.655087][ T6955] BTRFS info (device loop2): rebuilding free space tree [ 121.675075][ T7015] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.403'. [ 121.722197][ T7015] openvswitch: netlink: Message has 2 unknown bytes. [ 121.856535][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.886343][ T7017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.392'. [ 121.932227][ T5829] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.229511][ T7028] loop0: detected capacity change from 0 to 512 [ 122.276375][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.352737][ T7031] netlink: 44 bytes leftover after parsing attributes in process `syz.4.397'. [ 122.372135][ T970] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.461972][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.564049][ T970] usb 4-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.597505][ T970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.623813][ T970] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 122.659587][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.690118][ T970] usb 4-1: config 0 descriptor?? [ 122.788243][ T7042] loop2: detected capacity change from 0 to 512 [ 122.882928][ T7042] EXT4-fs error (device loop2): __ext4_fill_super:5497: inode #2: comm syz.2.399: casefold flag without casefold feature [ 122.942839][ T7042] EXT4-fs (loop2): get root inode failed [ 122.948693][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 122.959515][ T7042] EXT4-fs (loop2): mount failed [ 123.058734][ T7026] loop1: detected capacity change from 0 to 32768 [ 123.079131][ T7026] btrfs: Deprecated parameter 'usebackuproot' [ 123.122164][ T7026] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 123.131436][ T970] macally 0003:060B:0001.0007: hidraw0: USB HID v8.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0 [ 123.213989][ T7026] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.410 (7026) [ 123.301179][ T7026] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.347796][ T7026] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 123.368802][ T5941] usb 4-1: USB disconnect, device number 6 [ 123.387703][ T7026] BTRFS info (device loop1): using free-space-tree [ 123.478906][ T7062] loop5: detected capacity change from 0 to 1024 [ 123.557565][ T7079] loop4: detected capacity change from 0 to 1024 [ 123.601340][ T7026] BTRFS info (device loop1): rebuilding free space tree [ 123.638392][ T7062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.707628][ T7085] loop0: detected capacity change from 0 to 512 [ 123.818189][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.861839][ T7085] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.884598][ T5832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.902203][ T7085] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 123.920116][ T7085] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 123.946496][ T7085] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.414: Failed to acquire dquot type 1 [ 123.959270][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.969662][ T7091] loop4: detected capacity change from 0 to 512 [ 124.058900][ T7091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.112225][ T7007] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 124.252652][ T7100] loop5: detected capacity change from 0 to 512 [ 124.268309][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.311986][ T7100] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.416: corrupted in-inode xattr: invalid ea_ino [ 124.338685][ T7105] loop3: detected capacity change from 0 to 512 [ 124.354995][ T7100] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.416: couldn't read orphan inode 15 (err -117) [ 124.409166][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.444627][ T7105] EXT4-fs error (device loop3): __ext4_fill_super:5497: inode #2: comm syz.3.423: casefold flag without casefold feature [ 124.459749][ T7100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.526569][ T7105] EXT4-fs (loop3): get root inode failed [ 124.567297][ T5830] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.579836][ T7105] EXT4-fs (loop3): mount failed [ 124.979650][ T7102] loop2: detected capacity change from 0 to 32768 [ 125.100428][ T7124] loop0: detected capacity change from 0 to 1024 [ 125.156615][ T7102] JBD2: Ignoring recovery information on journal [ 125.246121][ T7124] syz.0.431: attempt to access beyond end of device [ 125.246121][ T7124] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 125.278170][ T7102] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 125.289637][ T7124] syz.0.431: attempt to access beyond end of device [ 125.289637][ T7124] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 125.474854][ T7134] loop5: detected capacity change from 0 to 4096 [ 125.514598][ T7134] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 125.527769][ T5829] ocfs2: Unmounting device (7,2) on (node local) [ 125.615770][ T7134] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 125.658421][ T7134] ntfs3(loop5): ino=19, mi_enum_attr [ 126.383813][ T7163] loop1: detected capacity change from 0 to 64 [ 126.552288][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.729833][ T7165] loop1: detected capacity change from 0 to 4096 [ 126.744140][ T52] usb 1-1: config 0 has an invalid interface number: 217 but max is 0 [ 126.774712][ T52] usb 1-1: config 0 has no interface number 0 [ 126.814391][ T52] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 126.826401][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.864361][ T52] usb 1-1: Product: syz [ 126.868734][ T52] usb 1-1: Manufacturer: syz [ 126.896262][ T52] usb 1-1: SerialNumber: syz [ 126.920854][ T7165] ntfs3(loop1): failed to convert "0080" to cp437 [ 126.930810][ T52] usb 1-1: config 0 descriptor?? [ 126.945534][ T7151] loop5: detected capacity change from 0 to 32768 [ 126.955683][ T52] hub 1-1:0.217: bad descriptor, ignoring hub [ 126.963103][ T52] hub 1-1:0.217: probe with driver hub failed with error -5 [ 126.982691][ T7165] ntfs3(loop1): failed to convert name for inode 1e. [ 127.002664][ T7165] ntfs3(loop1): ino=1f, mi_enum_attr [ 127.008148][ T7165] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 127.033628][ T7165] ntfs3(loop1): ino=1f, mi_enum_attr [ 127.053511][ T7155] loop4: detected capacity change from 0 to 32768 [ 127.087710][ T7155] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.445 (7155) [ 127.122011][ T7155] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.163972][ T52] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 127.176433][ T7151] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 127.193423][ T7155] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 127.224498][ T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.242284][ T7155] BTRFS info (device loop4): disk space caching is enabled [ 127.249572][ T7155] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 127.288528][ T52] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 127.299023][ T7151] bcachefs (loop5): initializing new filesystem [ 127.312467][ T52] usb 1-1: media controller created [ 127.333380][ T7151] bcachefs (loop5): going read-write [ 127.379397][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.390827][ T7151] bcachefs (loop5): marking superblocks [ 127.468484][ T7151] bcachefs (loop5): initializing freespace [ 127.484521][ T7151] bcachefs (loop5): done initializing freespace [ 127.496133][ T7155] BTRFS info (device loop4): rebuilding free space tree [ 127.505617][ T7157] loop2: detected capacity change from 0 to 40427 [ 127.513609][ T7151] bcachefs (loop5): reading snapshots table [ 127.542470][ T7157] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 127.546059][ T7151] bcachefs (loop5): reading snapshots done [ 127.558009][ T7161] loop3: detected capacity change from 0 to 40427 [ 127.571346][ T7155] BTRFS info (device loop4): disabling free space tree [ 127.589235][ T52] DVB: Unable to find symbol dib7000p_attach() [ 127.598250][ T7161] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 127.607218][ T7155] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 127.620927][ T7157] F2FS-fs (loop2): invalid crc value [ 127.640584][ T52] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 127.651953][ T7155] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 127.669825][ T7157] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.678157][ T7151] bcachefs (loop5): done starting filesystem [ 127.700948][ T7161] F2FS-fs (loop3): invalid crc value [ 127.752862][ T7161] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.804425][ T7155] BTRFS error (device loop4): unable to set label with more than 255 bytes [ 127.823455][ T52] rc_core: IR keymap rc-dib0700-rc5 not found [ 127.836410][ T52] Registered IR keymap rc-empty [ 127.871443][ T52] dvb-usb: could not initialize remote control. [ 127.881494][ T52] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 127.892597][ T7157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.902192][ T5842] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.945996][ T52] usb 1-1: USB disconnect, device number 4 [ 127.985991][ T7161] F2FS-fs (loop3): Start checkpoint disabled! [ 128.018948][ T52] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 128.041954][ T7161] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 128.086917][ T7151] syz.5.443 (7151) used greatest stack depth: 12256 bytes left [ 128.119605][ T5830] bcachefs (loop5): shutting down [ 128.134390][ T5830] bcachefs (loop5): going read-only [ 128.149926][ T5830] bcachefs (loop5): finished waiting for writes to stop [ 128.200215][ T5830] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 128.233460][ T5829] syz-executor: attempt to access beyond end of device [ 128.233460][ T5829] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.248050][ T7181] loop1: detected capacity change from 0 to 32768 [ 128.258519][ T5829] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 128.336764][ T7181] JBD2: Ignoring recovery information on journal [ 128.401260][ T5830] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3 [ 128.431843][ T5830] bcachefs (loop5): clean shutdown complete, journal seq 4 [ 128.445465][ T5830] bcachefs (loop5): marking filesystem clean [ 128.496925][ T7181] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 128.586238][ T12] kworker/u8:0: attempt to access beyond end of device [ 128.586238][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 128.615198][ T5830] bcachefs (loop5): shutdown complete [ 128.626364][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 128.648818][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 128.737754][ T5832] ocfs2: Unmounting device (7,1) on (node local) [ 128.822244][ T52] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 129.011164][ T52] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 129.032368][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.053193][ T52] usb 5-1: config 0 descriptor?? [ 129.054992][ T52] cp210x 5-1:0.0: cp210x converter detected [ 129.292367][ T973] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.408203][ T7222] loop3: detected capacity change from 0 to 4096 [ 129.415957][ T7222] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 129.463320][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 129.463355][ T7222] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 129.473941][ T973] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 129.486028][ T52] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 129.511424][ T52] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 129.518070][ T7222] ntfs3(loop3): ino=19, mi_enum_attr [ 129.529372][ T973] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 129.541865][ T52] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 129.567084][ T973] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 129.587044][ T52] usb 5-1: cp210x converter now attached to ttyUSB0 [ 129.594548][ T973] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.618575][ T52] usb 5-1: USB disconnect, device number 5 [ 129.636059][ T973] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 129.665306][ T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 129.675400][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.697739][ T52] cp210x 5-1:0.0: device disconnected [ 129.708884][ T973] usb 1-1: Product: syz [ 129.723444][ T973] usb 1-1: Manufacturer: syz [ 129.742569][ T973] usb 1-1: SerialNumber: syz [ 129.764000][ T973] usb 1-1: config 0 descriptor?? [ 130.003570][ T973] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 130.032453][ T5184] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.096178][ T5184] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.151615][ T5184] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.180318][ T7246] loop4: detected capacity change from 0 to 64 [ 130.228581][ T5184] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.319520][ T7214] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.402425][ T5184] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 130.455975][ T970] usb 1-1: USB disconnect, device number 5 [ 130.469888][ T5835] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 130.595843][ T7254] loop3: detected capacity change from 0 to 128 [ 130.641897][ T7254] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.692389][ T7254] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.936202][ T5843] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.857129][ T7309] [U]  [ 132.193165][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.199754][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.981567][ T7305] loop3: detected capacity change from 0 to 32768 [ 133.023029][ T7305] XFS: noikeep mount option is deprecated. [ 133.076859][ T7305] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 133.143143][ T7324] loop4: detected capacity change from 0 to 32768 [ 133.154534][ T7353] loop1: detected capacity change from 0 to 512 [ 133.161767][ T7353] EXT4-fs: Ignoring removed i_version option [ 133.164277][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:3' failed: Read-only file system [ 133.167917][ T7353] EXT4-fs: Ignoring removed nobh option [ 133.192192][ T7353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.250985][ T7305] XFS (loop3): Ending clean mount [ 133.278051][ T7324] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 133.305101][ T7353] EXT4-fs (loop1): 1 truncate cleaned up [ 133.311656][ T7353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.326901][ T7325] loop0: detected capacity change from 0 to 32768 [ 133.338965][ T7305] XFS (loop3): Quotacheck needed: Please wait. [ 133.380733][ T7325] XFS: attr2 mount option is deprecated. [ 133.422150][ T7324] (syz.4.509,7324,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 133.423605][ T5838] udevd[5838]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 133.441954][ T7325] XFS: attr2 mount option is deprecated. [ 133.499726][ T6488] udevd[6488]: symlink '../../loop0' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:0' failed: Read-only file system [ 133.502757][ T7305] XFS (loop3): Quotacheck: Done. [ 133.554037][ T5835] udevd[5835]: symlink '../../loop4' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:4' failed: Read-only file system [ 133.597378][ T7325] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 133.618342][ T7374] trusted_key: encrypted_key: insufficient parameters specified [ 133.637411][ T7325] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.641305][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 133.663258][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.822096][ T5843] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 133.925325][ T7325] XFS (loop0): Ending clean mount [ 133.949543][ T7325] XFS (loop0): Quotacheck needed: Please wait. [ 134.062028][ T7325] XFS (loop0): Quotacheck: Done. [ 134.267670][ T5840] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.469729][ T7397] loop3: detected capacity change from 0 to 16 [ 134.517722][ T7397] erofs (device loop3): mounted with root inode @ nid 36. [ 134.568859][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:3' failed: Read-only file system [ 134.610185][ T7400] loop1: detected capacity change from 0 to 512 [ 134.611084][ T30] audit: type=1800 audit(1743057719.698:6): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.531" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 134.711593][ T5853] udevd[5853]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 134.918546][ T7400] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.959348][ T30] audit: type=1326 audit(1743057720.038:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.3.540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc12ad8d169 code=0x0 [ 134.980987][ C1] vkms_vblank_simulate: vblank timer overrun [ 135.015074][ T7400] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 135.057582][ T7400] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 135.076771][ T7414] netlink: 'syz.0.541': attribute type 2 has an invalid length. [ 135.095309][ T7400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.130682][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 135.149659][ T7393] loop4: detected capacity change from 0 to 32768 [ 135.171827][ T7414] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 135.226134][ T7393] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 135.226134][ T7393] [ 135.228474][ T5853] udevd[5853]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 135.289880][ T7393] ERROR: (device loop4): remounting filesystem as read-only [ 135.322250][ T7393] jfs_create: dtInsert returned -EIO [ 135.344902][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.352583][ T7393] ERROR: (device loop4): jfs_create: [ 135.352583][ T7393] [ 135.644396][ T7429] loop1: detected capacity change from 0 to 256 [ 135.682726][ T52] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.698079][ T7429] FAT-fs (loop1): Directory bread(block 64) failed [ 135.720150][ T7429] FAT-fs (loop1): Directory bread(block 65) failed [ 135.729504][ T7429] FAT-fs (loop1): Directory bread(block 66) failed [ 135.739041][ T7429] FAT-fs (loop1): Directory bread(block 67) failed [ 135.746251][ T7429] FAT-fs (loop1): Directory bread(block 68) failed [ 135.753018][ T7429] FAT-fs (loop1): Directory bread(block 69) failed [ 135.759913][ T7429] FAT-fs (loop1): Directory bread(block 70) failed [ 135.766728][ T7429] FAT-fs (loop1): Directory bread(block 71) failed [ 135.780879][ T7429] FAT-fs (loop1): Directory bread(block 72) failed [ 135.812207][ T7429] FAT-fs (loop1): Directory bread(block 73) failed [ 135.887326][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.922377][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.965201][ T52] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 135.985818][ T7436] overlayfs: disabling nfs_export due to verity=on [ 135.994063][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.036598][ T52] usb 1-1: config 0 descriptor?? [ 136.324005][ T7449] loop1: detected capacity change from 0 to 512 [ 136.358402][ T7449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.430109][ T7449] EXT4-fs (loop1): 1 truncate cleaned up [ 136.438013][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.467451][ T7449] EXT4-fs error (device loop1): ext4_generic_delete_entry:2687: inode #2: block 13: comm syz.1.556: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 136.510330][ T7449] EXT4-fs error (device loop1) in ext4_delete_entry:2758: Corrupt filesystem [ 136.698586][ T52] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 136.698883][ T7458] netlink: 'syz.3.561': attribute type 6 has an invalid length. [ 136.723210][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.735168][ T52] usb 1-1: USB disconnect, device number 6 [ 136.753536][ T7461] netlink: 56 bytes leftover after parsing attributes in process `syz.2.560'. [ 136.788634][ T7439] loop5: detected capacity change from 0 to 32768 [ 136.820071][ T7462] loop4: detected capacity change from 0 to 2048 [ 136.854374][ T7439] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 136.977429][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system [ 136.987665][ T7468] tipc: Enabling of bearer rejected, failed to enable media [ 137.014983][ T7462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.090850][ T5838] udevd[5838]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 137.113005][ T7474] loop2: detected capacity change from 0 to 64 [ 137.133710][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 137.173057][ T7474] hfs: bad catalog entry type 0 [ 137.203666][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.428229][ T7476] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.570'. [ 137.723593][ T7470] loop3: detected capacity change from 0 to 32768 [ 137.758478][ T7470] btrfs: Deprecated parameter 'usebackuproot' [ 137.781764][ T7470] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 137.822796][ T7470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.566 (7470) [ 137.913982][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 137.957765][ T7470] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.979375][ T7497] loop4: detected capacity change from 0 to 1024 [ 137.992865][ T7470] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 138.024049][ T7470] BTRFS info (device loop3): using free-space-tree [ 138.055145][ T7494] loop2: detected capacity change from 0 to 4096 [ 138.218924][ T53] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 138.284583][ T992] hfsplus: b-tree write err: -5, ino 4 [ 138.319065][ T5835] udevd[5835]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 138.352532][ T7470] BTRFS error (device loop3): failed to load root extent [ 138.380068][ T7470] BTRFS warning (device loop3): try to load backup roots slot 1 [ 138.390436][ T5835] udevd[5835]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system [ 138.421720][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 138.472713][ T7470] BTRFS warning (device loop3): couldn't read tree root [ 138.479736][ T7470] BTRFS warning (device loop3): try to load backup roots slot 2 [ 138.518583][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 138.577040][ T7498] loop0: detected capacity change from 0 to 32768 [ 138.584387][ T7470] BTRFS warning (device loop3): couldn't read tree root [ 138.602472][ T7470] BTRFS warning (device loop3): try to load backup roots slot 3 [ 138.644469][ T7498] jfs_lookup: iget failed on inum 32 [ 138.669375][ T7498] jfs_lookup: iget failed on inum 32 [ 138.709588][ T7470] BTRFS info (device loop3): rebuilding free space tree [ 138.736112][ T5835] udevd[5835]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system [ 138.773838][ T7470] BTRFS info (device loop3): checking UUID tree [ 138.809863][ T7492] loop5: detected capacity change from 0 to 32768 [ 138.987563][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system [ 139.008326][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 139.124624][ T7486] loop1: detected capacity change from 0 to 32768 [ 139.164428][ T5843] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.232911][ T7486] JBD2: Ignoring recovery information on journal [ 139.427667][ T7486] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.537884][ T5853] udevd[5853]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 139.648564][ T7486] (syz.1.574,7486,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 139.659871][ T7543] loop5: detected capacity change from 0 to 2048 [ 139.732227][ T7543] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.732821][ T7486] (syz.1.574,7486,0):ocfs2_trim_mainbm:7621 ERROR: status = -12 [ 139.775064][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 139.829065][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 139.940073][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 139.989352][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 140.098284][ T5832] ocfs2: Unmounting device (7,1) on (node local) [ 140.194223][ T7555] loop3: detected capacity change from 0 to 4096 [ 140.372165][ T7555] ntfs3(loop3): failed to convert "0080" to cp850 [ 140.402724][ T7555] ntfs3(loop3): failed to convert name for inode 1e. [ 140.439636][ T7555] ntfs3(loop3): ino=1f, mi_enum_attr [ 140.473868][ T7555] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 140.492853][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 140.872772][ T7581] sctp: [Deprecated]: syz.5.609 (pid 7581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.872772][ T7581] Use struct sctp_sack_info instead [ 140.980199][ T7549] loop2: detected capacity change from 0 to 32768 [ 141.074910][ T7549] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.256302][ T7601] loop5: detected capacity change from 0 to 256 [ 141.360423][ T7601] FAT-fs (loop5): Directory bread(block 64) failed [ 141.370798][ T7549] XFS (loop2): Ending clean mount [ 141.382376][ T7601] FAT-fs (loop5): Directory bread(block 65) failed [ 141.413670][ T7601] FAT-fs (loop5): Directory bread(block 66) failed [ 141.420277][ T7601] FAT-fs (loop5): Directory bread(block 67) failed [ 141.441806][ T7601] FAT-fs (loop5): Directory bread(block 68) failed [ 141.470757][ T7601] FAT-fs (loop5): Directory bread(block 69) failed [ 141.480991][ T7607] netlink: 'syz.3.618': attribute type 15 has an invalid length. [ 141.497851][ T7601] FAT-fs (loop5): Directory bread(block 70) failed [ 141.509116][ T7601] FAT-fs (loop5): Directory bread(block 71) failed [ 141.519476][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.548755][ T7601] FAT-fs (loop5): Directory bread(block 72) failed [ 141.587709][ T7601] FAT-fs (loop5): Directory bread(block 73) failed [ 141.850879][ T7576] loop4: detected capacity change from 0 to 32768 [ 141.879444][ T7609] loop3: detected capacity change from 0 to 2048 [ 141.971185][ T7576] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 142.023508][ T7576] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 142.049443][ T7593] loop0: detected capacity change from 0 to 32768 [ 142.061609][ T7619] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.117480][ T7593] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.298747][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 142.419356][ T7593] XFS (loop0): Ending clean mount [ 142.470372][ T7593] XFS (loop0): Quotacheck needed: Please wait. [ 142.616989][ T7593] XFS (loop0): Quotacheck: Done. [ 142.838852][ T5840] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.839978][ T7648] loop1: detected capacity change from 0 to 512 [ 142.882924][ T7648] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 143.045513][ T7655] loop3: detected capacity change from 0 to 1024 [ 143.072311][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.136067][ T7655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.247277][ T5941] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 143.272314][ T7655] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.272360][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 143.336844][ T10] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 143.347283][ T10] usb 3-1: config 0 has no interface number 0 [ 143.362148][ T10] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 143.378303][ T7662] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.396065][ T10] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 143.431715][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.437715][ T10] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 143.471159][ T10] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 143.493885][ T5941] usb 2-1: config 0 has an invalid interface number: 120 but max is 0 [ 143.505323][ T10] usb 3-1: Manufacturer: syz [ 143.509931][ T10] usb 3-1: SerialNumber: syz [ 143.519012][ T5941] usb 2-1: config 0 has no interface number 0 [ 143.553091][ T5941] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 37658, setting to 64 [ 143.570267][ T10] usb 3-1: config 0 descriptor?? [ 143.583296][ T7649] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 143.609733][ T5941] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 143.629008][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.666633][ T5941] usb 2-1: config 0 descriptor?? [ 143.676696][ T7648] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.694898][ T5941] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input12 [ 143.722625][ T7669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.639'. [ 143.912008][ T52] usb 2-1: USB disconnect, device number 3 [ 144.044566][ T10] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 144.094832][ T10] usb 3-1: USB disconnect, device number 4 [ 144.711775][ T7699] Invalid logical block size (32) [ 144.730451][ T7700] loop4: detected capacity change from 0 to 128 [ 144.910727][ T7704] loop2: detected capacity change from 0 to 1764 [ 145.148837][ T7683] loop3: detected capacity change from 0 to 32768 [ 145.172830][ T7683] XFS: ikeep mount option is deprecated. [ 145.200099][ T7683] XFS: noikeep mount option is deprecated. [ 145.210176][ T7714] bond0: option arp_all_targets: invalid value (254) [ 145.233783][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.233783][ T12] loop4: rw=1, sector=137, nr_sectors = 8 limit=128 [ 145.282230][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.282230][ T12] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 145.288827][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:3' failed: Read-only file system [ 145.298971][ T7683] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 145.337024][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.337024][ T12] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 145.353578][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.353578][ T12] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 145.368831][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.368831][ T12] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 145.382532][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.382532][ T12] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 145.418795][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.418795][ T12] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 145.437998][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.437998][ T12] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 145.521218][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.521218][ T12] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 145.521324][ T12] kworker/u8:0: attempt to access beyond end of device [ 145.521324][ T12] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 145.575666][ T7683] XFS (loop3): Ending clean mount [ 145.576100][ T7734] loop2: detected capacity change from 0 to 256 [ 145.593424][ T7683] XFS (loop3): Quotacheck needed: Please wait. [ 145.603518][ T7734] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 145.653921][ T7683] XFS (loop3): Quotacheck: Done. [ 145.715684][ T30] audit: type=1800 audit(1743057730.808:8): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.657" name="file1" dev="loop3" ino=1062 res=0 errno=0 [ 145.832258][ T973] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.847523][ T5843] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 145.992273][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 146.001053][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.001094][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.001122][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.001164][ T973] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 146.001192][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.003005][ T973] usb 1-1: config 0 descriptor?? [ 146.415411][ T973] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max [ 146.448756][ T973] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 146.480914][ T973] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 146.512592][ T973] microsoft 0003:045E:07DA.0009: no inputs found [ 146.521090][ T973] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 146.618749][ T973] usb 1-1: USB disconnect, device number 7 [ 146.688047][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 146.905085][ T7767] netlink: 'syz.5.683': attribute type 2 has an invalid length. [ 146.988593][ T7741] loop2: detected capacity change from 0 to 32768 [ 147.013590][ T7741] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.671 (7741) [ 147.103459][ T7741] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.129241][ T7741] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 147.171745][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system [ 147.182669][ T30] audit: type=1326 audit(2000000000.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.5.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4df558d169 code=0x0 [ 147.217235][ T7741] BTRFS info (device loop2): using free-space-tree [ 147.440824][ T7741] BTRFS info (device loop2): checking UUID tree [ 147.528010][ T7795] loop0: detected capacity change from 0 to 4096 [ 147.594419][ T7795] NILFS (loop0): mounting unchecked fs [ 147.621397][ T7795] NILFS (loop0): recovery required for readonly filesystem [ 147.682940][ T7795] NILFS (loop0): write access will be enabled during recovery [ 147.717902][ T7795] NILFS (loop0): invalid segment: Checksum error in segment payload [ 147.731110][ T5835] udevd[5835]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system [ 147.756729][ T7795] NILFS (loop0): trying rollback from an earlier position [ 147.781030][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.857901][ T7795] NILFS (loop0): recovery complete [ 148.741071][ T7807] loop3: detected capacity change from 0 to 40427 [ 148.818905][ T7813] loop4: detected capacity change from 0 to 32768 [ 148.835701][ T7807] F2FS-fs (loop3): invalid crc value [ 148.871421][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system [ 148.957466][ T7813] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.009300][ T7807] F2FS-fs (loop3): Found nat_bits in checkpoint [ 149.059053][ T5835] udevd[5835]: symlink '../../loop4' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:4' failed: Read-only file system [ 149.121954][ T7852] loop5: detected capacity change from 0 to 64 [ 149.134317][ T7807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 149.154656][ T7813] XFS (loop4): Ending clean mount [ 149.191941][ T7813] XFS (loop4): Quotacheck needed: Please wait. [ 149.328143][ T7813] XFS (loop4): Quotacheck: Done. [ 149.563029][ T5843] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 149.600954][ T7864] loop0: detected capacity change from 0 to 4096 [ 149.643872][ T5842] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.687556][ T5853] udevd[5853]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 149.687984][ T7862] loop5: detected capacity change from 0 to 4096 [ 149.713164][ T7862] ntfs3(loop5): ino=3, Correct links count -> 2. [ 149.858000][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 149.919289][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system [ 150.143669][ T973] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 150.360202][ T973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.386436][ T973] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 150.411656][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.448225][ T973] usb 2-1: Product: syz [ 150.453049][ T973] usb 2-1: Manufacturer: syz [ 150.457716][ T973] usb 2-1: SerialNumber: syz [ 150.492965][ T973] usb 2-1: config 0 descriptor?? [ 150.501509][ T973] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 150.716423][ T973] usb 2-1: USB disconnect, device number 4 [ 150.784816][ T7884] netlink: 165 bytes leftover after parsing attributes in process `syz.5.723'. [ 150.808623][ T7868] loop2: detected capacity change from 0 to 32768 [ 150.821577][ T7868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.717 (7868) [ 150.848933][ T7868] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.881063][ T7870] loop0: detected capacity change from 0 to 32768 [ 150.896534][ T7868] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 150.911676][ T7870] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.718 (7870) [ 150.929505][ T7868] BTRFS info (device loop2): disk space caching is enabled [ 150.941904][ T7868] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 150.993758][ T7870] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.020368][ T7870] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 151.031386][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:0' failed: Read-only file system [ 151.042319][ T7870] BTRFS info (device loop0): using free-space-tree [ 151.075037][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:2' failed: Read-only file system [ 151.142348][ T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 151.146061][ T7868] BTRFS info (device loop2): rebuilding free space tree [ 151.168531][ T7912] usb usb8: usbfs: process 7912 (syz.3.727) did not claim interface 0 before use [ 151.220052][ T7868] BTRFS info (device loop2): disabling free space tree [ 151.230065][ T7870] BTRFS info (device loop0): rebuilding free space tree [ 151.247105][ T7868] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 151.285530][ T7868] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 151.322294][ T10] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 151.381590][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 151.416950][ T10] usb 5-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 151.465144][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.467192][ T7930] loop1: detected capacity change from 0 to 128 [ 151.497625][ T10] usb 5-1: config 0 descriptor?? [ 151.564627][ T7930] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.602546][ T7930] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.631547][ T5838] udevd[5838]: symlink '../../loop1' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:1' failed: Read-only file system [ 151.674904][ T5829] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.692260][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.758222][ T5840] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.843042][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 151.857005][ T7926] loop5: detected capacity change from 0 to 32768 [ 151.868914][ T5941] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 151.900772][ T5832] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.916412][ T5941] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 151.935094][ T10] uclogic 0003:2179:0077.000A: interface is invalid, ignoring [ 151.967217][ T5941] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 151.994221][ T5941] usb 4-1: config 0 interface 0 has no altsetting 0 [ 152.002615][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 152.036008][ T5941] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 152.056205][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.067166][ T5941] usb 4-1: Product: syz [ 152.077984][ T5941] usb 4-1: Manufacturer: syz [ 152.087622][ T5941] usb 4-1: SerialNumber: syz [ 152.095685][ T5941] usb 4-1: config 0 descriptor?? [ 152.154135][ T24] usb 5-1: USB disconnect, device number 6 [ 152.315919][ T5941] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 152.438537][ T7939] loop0: detected capacity change from 0 to 512 [ 152.500667][ T7939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.550879][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 152.582163][ T7928] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 152.606174][ T7939] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.686071][ T24] usb 4-1: USB disconnect, device number 7 [ 152.717027][ T7945] netlink: 'syz.5.735': attribute type 2 has an invalid length. [ 152.730199][ T7947] loop1: detected capacity change from 0 to 512 [ 152.771596][ T7947] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 152.855027][ T7950] loop4: detected capacity change from 0 to 128 [ 152.894979][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.928849][ T7950] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.987855][ T6007] udevd[6007]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 153.026775][ T7950] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.080021][ T7957] loop1: detected capacity change from 0 to 1024 [ 153.133879][ T7950] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.739: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 153.194256][ T5853] udevd[5853]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 153.222762][ T5853] udevd[5853]: symlink '../../loop1' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:1' failed: Read-only file system [ 153.395934][ T30] audit: type=1326 audit(2000000007.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 153.476634][ T5842] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.505190][ T30] audit: type=1326 audit(2000000007.170:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 153.610552][ T30] audit: type=1326 audit(2000000007.170:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 153.726887][ T30] audit: type=1326 audit(2000000007.170:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 153.790587][ T30] audit: type=1326 audit(2000000007.170:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 153.893312][ T30] audit: type=1326 audit(2000000007.170:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 154.046941][ T30] audit: type=1326 audit(2000000007.170:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.3.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ad8d169 code=0x7ffc0000 [ 154.069089][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.193843][ T7995] loop2: detected capacity change from 0 to 1024 [ 154.308562][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system [ 154.353530][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:2' failed: Read-only file system [ 154.458016][ T36] hfsplus: b-tree write err: -5, ino 4 [ 154.625774][ T8009] tipc: Started in network mode [ 154.641640][ T8009] tipc: Node identity , cluster identity 4711 [ 154.648435][ T8009] tipc: Failed to obtain node identity [ 154.654353][ T8009] tipc: Enabling of bearer rejected, failed to enable media [ 155.185099][ T5941] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 155.333132][ T8031] loop1: detected capacity change from 0 to 64 [ 155.410960][ T5941] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.428155][ T5941] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 155.458296][ T5941] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 155.475795][ T8004] loop0: detected capacity change from 0 to 32768 [ 155.477864][ T5941] usb 3-1: config 0 interface 0 has no altsetting 0 [ 155.502382][ T8004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.762 (8004) [ 155.515238][ T5941] usb 3-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 155.515277][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.517150][ T5941] usb 3-1: config 0 descriptor?? [ 155.575154][ T8004] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.589578][ T8018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 155.605463][ T8004] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 155.673937][ T8004] BTRFS info (device loop0): using free-space-tree [ 155.795358][ T8055] loop1: detected capacity change from 0 to 128 [ 155.980996][ T8063] loop3: detected capacity change from 0 to 1024 [ 156.040827][ T8065] loop5: detected capacity change from 0 to 1024 [ 156.056932][ T5941] nzxt-smart2 0003:1E71:200E.000B: hidraw0: USB HID v0.08 Device [HID 1e71:200e] on usb-dummy_hcd.2-1/input0 [ 156.154419][ T5840] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.204424][ T992] hfsplus: b-tree write err: -5, ino 4 [ 156.206192][ T5838] udevd[5838]: symlink '../../loop5' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:5' failed: Read-only file system [ 156.243867][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 156.266931][ T5835] udevd[5835]: symlink '../../loop3' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:3' failed: Read-only file system [ 156.315115][ T5941] usb 3-1: USB disconnect, device number 5 [ 156.361080][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system [ 156.453981][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:3' failed: Read-only file system [ 156.571154][ T12] bio_check_eod: 105 callbacks suppressed [ 156.571178][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.571178][ T12] loop1: rw=1, sector=137, nr_sectors = 8 limit=128 [ 156.637581][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.637581][ T12] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 156.658532][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.658532][ T12] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 156.678663][ T5893] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.714035][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.714035][ T12] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 156.729427][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.729427][ T12] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 156.750683][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.750683][ T12] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 156.787913][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.787913][ T12] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 156.817090][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.817090][ T12] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 156.842011][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.842011][ T12] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 156.859241][ T12] kworker/u8:0: attempt to access beyond end of device [ 156.859241][ T12] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 156.874603][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 156.883194][ T5893] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 156.891817][ T5893] usb 6-1: config 0 has no interface number 0 [ 156.904158][ T5893] usb 6-1: config 0 interface 184 has no altsetting 0 [ 156.927634][ T5893] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 156.952436][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.968873][ T5893] usb 6-1: Product: syz [ 156.994004][ T5893] usb 6-1: Manufacturer: syz [ 157.003238][ T5893] usb 6-1: SerialNumber: syz [ 157.021984][ T5893] usb 6-1: config 0 descriptor?? [ 157.038200][ T5893] smsc75xx v1.0.0 [ 157.112323][ T973] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.302970][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 157.317524][ T973] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 157.340125][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.357156][ T973] usb 1-1: Product: syz [ 157.368194][ T973] usb 1-1: Manufacturer: syz [ 157.378644][ T973] usb 1-1: SerialNumber: syz [ 157.396838][ T973] usb 1-1: config 0 descriptor?? [ 157.410873][ T973] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.514160][ T973] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 157.589819][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.615363][ T8096] loop3: detected capacity change from 0 to 4096 [ 157.642239][ T973] usb 1-1: USB disconnect, device number 8 [ 157.655145][ T5893] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 157.675246][ T8096] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 157.692616][ T5893] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 157.735639][ T5893] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 157.777236][ T5893] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 157.805099][ T5838] udevd[5838]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 157.843213][ T5893] usb 6-1: USB disconnect, device number 4 [ 157.863919][ T5838] udevd[5838]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system [ 157.911366][ T8085] loop2: detected capacity change from 0 to 32768 [ 157.936811][ T8085] XFS: noikeep mount option is deprecated. [ 157.997130][ T8085] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.014678][ T8108] loop3: detected capacity change from 0 to 128 [ 158.057248][ T973] IPVS: starting estimator thread 0... [ 158.121926][ T5838] udevd[5838]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system [ 158.162646][ T8116] IPVS: using max 24 ests per chain, 57600 per kthread [ 158.219676][ T8085] XFS (loop2): Ending clean mount [ 158.254692][ T8085] XFS (loop2): Quotacheck needed: Please wait. [ 158.332198][ T973] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.345004][ T8085] XFS (loop2): Quotacheck: Done. [ 158.447981][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.502172][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 158.521575][ T973] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 158.544246][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.597607][ T973] usb 5-1: Product: syz [ 158.601889][ T973] usb 5-1: Manufacturer: syz [ 158.643190][ T973] usb 5-1: SerialNumber: syz [ 158.713349][ T973] r8152-cfgselector 5-1: Unknown version 0x0000 [ 158.719716][ T973] r8152-cfgselector 5-1: config 0 descriptor?? [ 158.967249][ T8130] loop0: detected capacity change from 0 to 64 [ 159.167836][ T8118] loop1: detected capacity change from 0 to 32768 [ 159.198166][ T973] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 159.225269][ T8118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.806 (8118) [ 159.290523][ T8118] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.324487][ T5853] udevd[5853]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 159.338969][ T8137] loop2: detected capacity change from 0 to 2048 [ 159.352206][ T8118] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 159.361125][ T8118] BTRFS info (device loop1): disk space caching is enabled [ 159.412178][ T8118] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 159.431137][ T8142] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.575971][ T8142] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 159.611010][ T8118] BTRFS info (device loop1): rebuilding free space tree [ 159.621448][ T8142] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 159.640876][ T8142] Remounting filesystem read-only [ 159.662393][ T8118] BTRFS info (device loop1): disabling free space tree [ 159.669343][ T8118] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 159.746366][ T8118] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 159.809237][ T5829] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 159.878768][ T8170] loop5: detected capacity change from 0 to 256 [ 159.931577][ T8118] BTRFS info (device loop1 state M): max_inline set to 8 [ 159.976026][ T8170] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 160.145561][ T5832] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.573119][ T8135] loop3: detected capacity change from 0 to 32768 [ 160.598101][ T8135] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.813 (8135) [ 160.691962][ T8135] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 160.738294][ T8135] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 160.807770][ T8135] BTRFS info (device loop3): using free-space-tree [ 161.165398][ T5843] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 161.199689][ T8171] loop4: detected capacity change from 0 to 32768 [ 161.214667][ T8171] btrfs: Deprecated parameter 'usebackuproot' [ 161.235852][ T8171] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 161.260091][ T8171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.823 (8171) [ 161.375275][ T5853] udevd[5853]: symlink '../../loop4' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:4' failed: Read-only file system [ 161.398343][ T8171] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.495846][ T8171] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 161.549223][ T8171] BTRFS info (device loop4): using free-space-tree [ 161.784563][ T8171] BTRFS info (device loop4): rebuilding free space tree [ 162.073020][ T8247] loop3: detected capacity change from 0 to 256 [ 162.088628][ T5842] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.106760][ T8191] loop0: detected capacity change from 0 to 32768 [ 162.160046][ T8191] find_entry called with index >= next_index [ 162.178023][ T8191] find_entry called with index >= next_index [ 162.219703][ T8191] find_entry called with index >= next_index [ 162.234854][ T8247] FAT-fs (loop3): Directory bread(block 64) failed [ 162.262806][ T8247] FAT-fs (loop3): Directory bread(block 65) failed [ 162.282298][ T8191] find_entry called with index >= next_index [ 162.291895][ T8247] FAT-fs (loop3): Directory bread(block 66) failed [ 162.310074][ T5853] udevd[5853]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system [ 162.324014][ T8191] find_entry called with index >= next_index [ 162.338982][ T8247] FAT-fs (loop3): Directory bread(block 67) failed [ 162.365570][ T8191] find_entry called with index >= next_index [ 162.381181][ T8247] FAT-fs (loop3): Directory bread(block 68) failed [ 162.387044][ T8191] find_entry called with index >= next_index [ 162.424600][ T8247] FAT-fs (loop3): Directory bread(block 69) failed [ 162.452270][ T8247] FAT-fs (loop3): Directory bread(block 70) failed [ 162.499040][ T8247] FAT-fs (loop3): Directory bread(block 71) failed [ 162.509033][ T8247] FAT-fs (loop3): Directory bread(block 72) failed [ 162.548665][ T8247] FAT-fs (loop3): Directory bread(block 73) failed [ 162.644905][ T8237] loop2: detected capacity change from 0 to 32768 [ 162.767211][ T8237] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 162.885815][ T5835] udevd[5835]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system [ 163.098985][ T5829] ocfs2: Unmounting device (7,2) on (node local) [ 163.291311][ T8273] loop3: detected capacity change from 0 to 512 [ 163.345708][ T8275] loop4: detected capacity change from 0 to 512 [ 163.399250][ T8273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.435613][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 163.449580][ T8275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.472935][ T8273] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.533504][ T8275] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 163.581167][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 163.621558][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.643419][ T8275] EXT4-fs (loop4): 1 truncate cleaned up [ 163.649638][ T5835] udevd[5835]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 163.693164][ T8275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.736009][ T5853] udevd[5853]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 163.802797][ T8275] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1025 (only 1 groups) [ 164.011729][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.917439][ T8293] loop2: detected capacity change from 0 to 32768 [ 164.938041][ T8324] loop0: detected capacity change from 0 to 64 [ 164.954955][ T8293] XFS: ikeep mount option is deprecated. [ 164.979105][ T8299] loop5: detected capacity change from 0 to 32768 [ 165.049381][ T8293] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.060854][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:2' failed: Read-only file system [ 165.125394][ T8293] XFS (loop2): Ending clean mount [ 165.155391][ T5853] udevd[5853]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 165.185444][ T8293] XFS (loop2): Quotacheck needed: Please wait. [ 165.203594][ T5835] udevd[5835]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 165.274062][ T8293] XFS (loop2): Quotacheck: Done. [ 165.360040][ T5829] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.473262][ T8337] loop0: detected capacity change from 0 to 4096 [ 165.579153][ T8337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.609586][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 165.645650][ T973] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.741853][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.840311][ T8343] loop2: detected capacity change from 0 to 764 [ 165.872301][ T973] usb 5-1: config index 0 descriptor too short (expected 32820, got 52) [ 165.890417][ T8343] rock: directory entry would overflow storage [ 165.912138][ T973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.921072][ T8343] rock: sig=0x4654, size=5, remaining=4 [ 165.949475][ T973] usb 5-1: too many endpoints for config 0 interface 0 altsetting 141: 164, using maximum allowed: 30 [ 165.997220][ T973] usb 5-1: config 0 interface 0 altsetting 141 has 0 endpoint descriptors, different from the interface descriptor's value: 164 [ 166.057310][ T973] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.069989][ T973] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97 [ 166.101585][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.121132][ T8323] loop1: detected capacity change from 0 to 40427 [ 166.129742][ T973] usb 5-1: Product: syz [ 166.152446][ T973] usb 5-1: Manufacturer: syz [ 166.157405][ T973] usb 5-1: SerialNumber: syz [ 166.177830][ T8323] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1fffff [ 166.191610][ T973] usb 5-1: config 0 descriptor?? [ 166.208489][ T8325] loop3: detected capacity change from 0 to 32768 [ 166.217878][ T973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.232795][ T8323] F2FS-fs (loop1): invalid crc value [ 166.248412][ T8323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 166.273436][ T973] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 166.332378][ T5941] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 166.445452][ T10] usb 5-1: USB disconnect, device number 8 [ 166.480583][ T8323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.511391][ T8355] bio_check_eod: 218 callbacks suppressed [ 166.511415][ T8355] f2fs_ckpt-7:1: attempt to access beyond end of device [ 166.511415][ T8355] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.532441][ T5941] usb 6-1: Using ep0 maxpacket: 8 [ 166.542932][ T8355] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 166.553782][ T5941] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 166.566210][ T5941] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 166.577225][ T5941] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 166.586941][ T5941] usb 6-1: config 250 has no interface number 0 [ 166.593629][ T5941] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 166.605495][ T5941] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 166.616228][ T5941] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.627268][ T5941] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.638620][ T5941] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 166.653984][ T5941] usb 6-1: config 250 interface 228 has no altsetting 0 [ 166.665188][ T5941] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 166.675188][ T5941] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 166.692319][ T973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.692326][ T5941] usb 6-1: Product: syz [ 166.712124][ T5941] usb 6-1: SerialNumber: syz [ 166.733781][ T5941] hub 6-1:250.228: bad descriptor, ignoring hub [ 166.750779][ T5941] hub 6-1:250.228: probe with driver hub failed with error -5 [ 166.852451][ T973] usb 3-1: Using ep0 maxpacket: 8 [ 166.893243][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.909433][ T8359] loop0: detected capacity change from 0 to 32768 [ 166.914897][ T973] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 166.941135][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.944077][ T5941] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 166.976586][ T973] usb 3-1: config 0 descriptor?? [ 167.007314][ T8359] find_entry called with index >= next_index [ 167.080502][ T5853] udevd[5853]: symlink '../../loop0' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:0' failed: Read-only file system [ 167.303084][ T52] usb 6-1: USB disconnect, device number 5 [ 167.374559][ T52] usblp0: removed [ 167.447184][ T973] nintendo 0003:057E:200E.000C: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 167.488432][ T8376] loop3: detected capacity change from 0 to 512 [ 167.495632][ T8376] EXT4-fs: Ignoring removed orlov option [ 167.504345][ T8376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.566141][ T6007] udevd[6007]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 167.590639][ T8378] loop1: detected capacity change from 0 to 4096 [ 167.595491][ T8376] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.604524][ T973] nintendo 0003:057E:200E.000C: Failed charging grip handshake [ 167.637952][ T8378] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 167.649101][ T973] nintendo 0003:057E:200E.000C: Failed to initialize controller; ret=-110 [ 167.675430][ T6488] udevd[6488]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 167.687503][ T8376] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.897: bg 0: block 248: padding at end of block bitmap is not set [ 167.705117][ T6488] udevd[6488]: symlink '../../loop1' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:1' failed: Read-only file system [ 167.748783][ T973] nintendo 0003:057E:200E.000C: probe - fail = -110 [ 167.764586][ T8376] Quota error (device loop3): write_blk: dquota write failed [ 167.765943][ T973] nintendo 0003:057E:200E.000C: probe with driver nintendo failed with error -110 [ 167.790195][ T8378] ntfs3(loop1): ino=19, mi_enum_attr [ 167.796270][ T8376] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 167.817464][ T973] usb 3-1: USB disconnect, device number 6 [ 167.822431][ T8378] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 167.852399][ T8376] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.897: Failed to acquire dquot type 1 [ 167.922503][ T8376] EXT4-fs (loop3): 1 truncate cleaned up [ 167.991460][ T8376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.057718][ T5853] udevd[5853]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 168.147374][ T8376] EXT4-fs: Ignoring removed orlov option [ 168.175098][ T8376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.183209][ T8393] loop0: detected capacity change from 0 to 64 [ 168.208896][ T30] audit: type=1800 audit(2000000021.890:17): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.903" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 168.290436][ T8376] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 168.380078][ T8376] EXT4-fs error (device loop3): __ext4_remount:6738: comm syz.3.897: Abort forced by user [ 168.431807][ T8376] EXT4-fs (loop3): Remounting filesystem read-only [ 168.447777][ T8376] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 168.523813][ T8376] ext4 filesystem being remounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.586681][ T8407] loop0: detected capacity change from 0 to 24 [ 168.664547][ T8407] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 168.729277][ T8407] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 168.743339][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.785043][ T5853] udevd[5853]: symlink '../../loop0' '/dev/disk/by-label/rom\x20637cf1fa.tmp-b7:0' failed: Read-only file system [ 169.190824][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.919'. [ 169.762182][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.974208][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.996572][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.010075][ T10] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 170.049073][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.088279][ T10] usb 5-1: config 0 descriptor?? [ 170.126133][ T8479] mkiss: ax0: crc mode is auto. [ 170.254522][ T8483] loop1: detected capacity change from 0 to 1024 [ 170.322936][ T8483] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.351318][ T8487] usb usb8: usbfs: process 8487 (syz.0.938) did not claim interface 0 before use [ 170.396303][ T5835] udevd[5835]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 170.476291][ T5835] udevd[5835]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 170.521148][ T8492] loop5: detected capacity change from 0 to 64 [ 170.554385][ T10] ortek 0003:1223:3F07.000D: Fixing up logical maximum in report descriptor (Skycable) [ 170.595250][ T5832] UDF-fs: warning (device loop1): udf_evict_inode: Inode 861 (mode 120777) has inode size 271 different from extent length 512. Filesystem need not be standards compliant. [ 170.613943][ T10] ortek 0003:1223:3F07.000D: invalid report_size -1671208668 [ 170.621359][ T10] ortek 0003:1223:3F07.000D: item 0 4 1 7 parsing failed [ 170.681533][ T10] ortek 0003:1223:3F07.000D: probe with driver ortek failed with error -22 [ 170.770829][ T10] usb 5-1: USB disconnect, device number 9 [ 170.895917][ T8462] loop3: detected capacity change from 0 to 32768 [ 170.952484][ T5893] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 171.046215][ T8462] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 171.064297][ T8462] bcachefs (loop3): initializing new filesystem [ 171.083898][ T8462] bcachefs (loop3): going read-write [ 171.116730][ T5893] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 171.146307][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.166842][ T8462] bcachefs (loop3): marking superblocks [ 171.193714][ T5893] usb 1-1: Product: syz [ 171.206081][ T5893] usb 1-1: Manufacturer: syz [ 171.220195][ T5893] usb 1-1: SerialNumber: syz [ 171.229237][ T5893] usb 1-1: config 0 descriptor?? [ 171.270966][ T8519] loop5: detected capacity change from 0 to 2048 [ 171.280335][ T8462] bcachefs (loop3): initializing freespace [ 171.303874][ T8462] bcachefs (loop3): done initializing freespace [ 171.333346][ T8519] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.352726][ T8462] bcachefs (loop3): reading snapshots table [ 171.359084][ T8462] bcachefs (loop3): reading snapshots done [ 171.388999][ T5835] udevd[5835]: symlink '../../loop5' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:5' failed: Read-only file system [ 171.404715][ T8521] loop1: detected capacity change from 0 to 4096 [ 171.417180][ T8462] bcachefs (loop3): done starting filesystem [ 171.439616][ T8524] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.490882][ T8525] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.628329][ T5835] udevd[5835]: symlink '../../loop1' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:1' failed: Read-only file system [ 171.785993][ T8529] loop5: detected capacity change from 0 to 2048 [ 171.822654][ T8529] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 171.863190][ T5893] usb 1-1: f81604_read: reg: 105 failed: -EPROTO [ 171.886428][ T5893] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 171.895385][ T8529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.922210][ T5893] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 171.935494][ T5843] bcachefs (loop3): shutting down [ 171.941624][ T5843] bcachefs (loop3): going read-only [ 171.952225][ T5843] bcachefs (loop3): finished waiting for writes to stop [ 171.983909][ T5893] usb 1-1: USB disconnect, device number 9 [ 171.990161][ T5843] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 172.117627][ T5843] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 172.143270][ T5843] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 172.151488][ T5843] bcachefs (loop3): marking filesystem clean [ 172.312566][ T5893] IPVS: starting estimator thread 0... [ 172.312691][ T8545] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 172.356377][ T5843] bcachefs (loop3): shutdown complete [ 172.422261][ T8546] IPVS: using max 25 ests per chain, 60000 per kthread [ 172.753405][ T30] audit: type=1326 audit(2000000026.470:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.4.965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ec2b8d169 code=0x0 [ 172.890978][ T8566] syz.2.966: attempt to access beyond end of device [ 172.890978][ T8566] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 172.922966][ T8566] XFS (loop2): SB validate failed with error -5. [ 173.086636][ T11] blk_print_req_error: 35 callbacks suppressed [ 173.086661][ T11] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 173.918124][ T8597] loop1: detected capacity change from 0 to 4096 [ 174.033299][ T5835] udevd[5835]: symlink '../../loop1' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:1' failed: Read-only file system [ 174.061631][ T8601] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.181820][ T8586] loop5: detected capacity change from 0 to 32768 [ 174.196443][ T8603] loop2: detected capacity change from 0 to 2048 [ 174.307328][ T8603] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 174.353236][ T8586] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 174.394131][ T8603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.428981][ T5835] udevd[5835]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system [ 174.453233][ T30] audit: type=1800 audit(2000000028.160:19): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.981" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 174.500220][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 174.521688][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 174.551174][ T8613] loop4: detected capacity change from 0 to 1024 [ 174.584932][ T8613] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 174.609298][ T5853] udevd[5853]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 174.616721][ T5830] ocfs2: Unmounting device (7,5) on (node local) [ 174.658329][ T5853] udevd[5853]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system [ 175.121593][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 175.840762][ T8656] loop1: detected capacity change from 0 to 128 [ 176.099033][ T8666] loop3: detected capacity change from 0 to 512 [ 176.207069][ T8666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.282295][ T8666] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.308999][ T8071] udevd[8071]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 176.322540][ T8678] loop0: detected capacity change from 0 to 1024 [ 176.340071][ T8678] hfsplus: Unknown parameter '˙0177777777777777777777701777777777777777777777' [ 176.446439][ T8678] ax25_connect(): syz.0.1013 uses autobind, please contact jreuter@yaina.de [ 176.494677][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.706769][ T8685] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1017'. [ 176.760941][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 177.091367][ T8703] loop2: detected capacity change from 0 to 16 [ 177.188098][ T8703] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 177.247594][ T5853] udevd[5853]: symlink '../../loop2' '/dev/disk/by-uuid/72b14b28-1ccd-4731-be5e-c43bd7b347d4.tmp-b7:2' failed: Read-only file system [ 177.288245][ T8703] erofs (device loop2): mounted with root inode @ nid 36. [ 177.395073][ T8703] syz.2.1024: attempt to access beyond end of device [ 177.395073][ T8703] loop2: rw=0, sector=4282368000, nr_sectors = 8 limit=16 [ 177.416129][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.424442][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.488236][ T8719] loop5: detected capacity change from 0 to 16 [ 177.503705][ T8719] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 177.560673][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-label/Compressed.tmp-b7:5' failed: Read-only file system [ 178.359562][ T8746] loop0: detected capacity change from 0 to 128 [ 178.374686][ T30] audit: type=1326 audit(2000000032.090:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8747 comm="syz.4.1046" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ec2b8d169 code=0x0 [ 178.377184][ T8749] loop3: detected capacity change from 0 to 64 [ 178.415175][ T8749] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 178.425503][ T8717] loop1: detected capacity change from 0 to 32768 [ 178.576729][ T8717] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 178.639593][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.689477][ T8717] invalid bkey in superblock btree=backpointers level=1: u64s 11 type btree_ptr_v2 6:U64_MAX:U32_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key 678604832768:0:0 durability: 0 (invalid extent entry 0000000000000000) [ 178.689512][ T8717] min_key > key: delete?, fixing [ 178.751993][ T8717] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 178.756335][ T8717] bcachefs (loop1): Version upgrade required: [ 178.756335][ T8717] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 178.756335][ T8717] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 178.756335][ T8717] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 178.756915][ T8717] bcachefs (loop1): dropping and reconstructing all alloc info [ 178.888556][ T8717] invalid bkey in btree_node btree=xattrs level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.˙˙˙tr2:xattr2 [ 178.888588][ T8717] value too small (2 < 8066): delete?, fixing [ 178.889134][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.889134][ T53] loop0: rw=1, sector=137, nr_sectors = 8 limit=128 [ 178.927759][ T8717] bcachefs (loop1): accounting_read... done [ 178.928422][ T8717] bcachefs (loop1): alloc_read... done [ 178.928473][ T8717] bcachefs (loop1): stripes_read... done [ 178.928521][ T8717] bcachefs (loop1): snapshots_read... done [ 178.928643][ T8717] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 178.936763][ T8717] bcachefs (loop1): done starting filesystem [ 178.982145][ T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 178.988923][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.988923][ T53] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 178.989031][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989031][ T53] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 178.989197][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989197][ T53] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 178.989293][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989293][ T53] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 178.989387][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989387][ T53] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 178.989479][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989479][ T53] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 178.989573][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989573][ T53] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 178.989664][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989664][ T53] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 178.989760][ T53] kworker/u8:3: attempt to access beyond end of device [ 178.989760][ T53] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 179.118131][ T5832] bcachefs (loop1): shutting down [ 179.172690][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 179.351453][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.351490][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.355431][ T10] usb 4-1: config 0 descriptor?? [ 179.356255][ T8760] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.361243][ T10] hub 4-1:0.0: USB hub found [ 179.400322][ T5832] bcachefs (loop1): shutdown complete [ 179.563981][ T10] hub 4-1:0.0: 2 ports detected [ 179.976275][ T10] hub 4-1:0.0: set hub depth failed [ 180.007634][ T10] usb 4-1: USB disconnect, device number 8 [ 180.331446][ T8787] loop4: detected capacity change from 0 to 512 [ 180.379495][ T8787] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.400900][ T5853] udevd[5853]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 180.422897][ T8787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 180.432502][ T8787] System zones: 1-12 [ 180.453374][ T8787] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.528582][ T8787] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 180.566585][ T8779] loop5: detected capacity change from 0 to 32768 [ 180.622193][ T8787] EXT4-fs (loop4): 1 truncate cleaned up [ 180.653061][ T8787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.731470][ T5853] udevd[5853]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 180.827129][ T8793] loop3: detected capacity change from 0 to 8 [ 180.851036][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.875964][ T8793] SQUASHFS error: Failed to read block 0x2d7: -5 [ 180.911231][ T8793] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 180.986094][ T8781] loop0: detected capacity change from 0 to 40427 [ 181.055721][ T8781] F2FS-fs (loop0): invalid crc value [ 181.096535][ T8781] F2FS-fs (loop0): Found nat_bits in checkpoint [ 181.101930][ T8798] tipc: Started in network mode [ 181.117381][ T8798] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 181.143863][ T8798] tipc: Enabled bearer , priority 10 [ 181.160372][ T5838] udevd[5838]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 181.207540][ T5832] ------------[ cut here ]------------ [ 181.213377][ T5832] online_reserved not 0 at shutdown: 1792 [ 181.220373][ T5832] WARNING: CPU: 1 PID: 5832 at fs/bcachefs/super.c:585 bch2_fs_release+0x744/0x7b0 [ 181.235962][ T5832] Modules linked in: [ 181.239885][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 181.251810][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.262270][ T5832] RIP: 0010:bch2_fs_release+0x744/0x7b0 [ 181.267872][ T5832] Code: 41 5e 41 5f 5d e9 1c af 23 fd e8 e7 07 3a fd e9 06 fd ff ff e8 dd 07 3a fd 90 48 c7 c7 20 cd 75 8c 4c 89 ee e8 4d 2c f9 fc 90 <0f> 0b 90 90 e9 13 fd ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 18 fb ff [ 181.288335][ T5832] RSP: 0018:ffffc90002e6fcc8 EFLAGS: 00010246 [ 181.294726][ T5832] RAX: 6840e1681cb00e00 RBX: ffff88802a984a10 RCX: ffff8880277e3c00 [ 181.303111][ T5832] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 181.311215][ T5832] RBP: 1ffff11005530942 R08: ffffffff81829db2 R09: 1ffff110170e47d2 [ 181.319712][ T5832] R10: dffffc0000000000 R11: ffffed10170e47d3 R12: 00000000fffffff8 [ 181.327818][ T5832] R13: 0000000000000700 R14: dffffc0000000000 R15: 0000607edaa443b8 [ 181.336133][ T5832] FS: 00005555642d3500(0000) GS:ffff888125324000(0000) knlGS:0000000000000000 [ 181.345252][ T5832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.351869][ T5832] CR2: 000000110c3bb98c CR3: 0000000062146000 CR4: 0000000000350ef0 [ 181.359946][ T5832] Call Trace: [ 181.363314][ T5832] [ 181.366262][ T5832] ? __warn+0x165/0x4d0 [ 181.370445][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.375490][ T5832] ? report_bug+0x2b3/0x500 [ 181.380034][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.386302][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.391286][ T5832] ? bch2_fs_release+0x746/0x7b0 [ 181.396356][ T5832] ? handle_bug+0x89/0x170 [ 181.401178][ T5832] ? exc_invalid_op+0x1a/0x50 [ 181.406311][ T5832] ? asm_exc_invalid_op+0x1a/0x20 [ 181.411381][ T5832] ? __warn_printk+0x2a2/0x360 [ 181.416319][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.421298][ T5832] ? bch2_fs_release+0x743/0x7b0 [ 181.426502][ T5832] kobject_put+0x231/0x480 [ 181.430950][ T5832] deactivate_locked_super+0xc6/0x130 [ 181.436450][ T5832] cleanup_mnt+0x422/0x4c0 [ 181.440911][ T5832] ? lockdep_hardirqs_on+0x9d/0x150 [ 181.446307][ T5832] task_work_run+0x253/0x310 [ 181.450946][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 181.456170][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.461931][ T5832] syscall_exit_to_user_mode+0x13f/0x340 [ 181.467914][ T5832] do_syscall_64+0x100/0x230 [ 181.472632][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.478588][ T5832] RIP: 0033:0x7fa374f8e497 [ 181.483108][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 181.503130][ T5832] RSP: 002b:00007ffe6409f9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 181.512009][ T5832] RAX: 0000000000000000 RBX: 00007fa37500e08c RCX: 00007fa374f8e497 [ 181.520415][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6409fa90 [ 181.522639][ T8781] F2FS-fs (loop0): Start checkpoint disabled! [ 181.528468][ T5832] RBP: 00007ffe6409fa90 R08: 0000000000000000 R09: 0000000000000000 [ 181.542720][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe640a0b20 [ 181.551333][ T5832] R13: 00007fa37500e08c R14: 000000000002bb3d R15: 00007ffe640a0b60 [ 181.554923][ T8781] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 181.559417][ T5832] [ 181.569912][ T5832] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 181.577214][ T5832] CPU: 1 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.14.0-syzkaller-03576-g1e1ba8d23dae #0 PREEMPT(full) [ 181.589175][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.599260][ T5832] Call Trace: [ 181.602557][ T5832] [ 181.605510][ T5832] dump_stack_lvl+0x241/0x360 [ 181.610219][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.615556][ T5832] ? __pfx__printk+0x10/0x10 [ 181.620182][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.625843][ T5832] ? vscnprintf+0x5d/0x90 [ 181.630187][ T5832] panic+0x349/0x880 [ 181.634095][ T5832] ? __warn+0x174/0x4d0 [ 181.638688][ T5832] ? __pfx_panic+0x10/0x10 [ 181.643119][ T5832] __warn+0x344/0x4d0 [ 181.647102][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.652069][ T5832] report_bug+0x2b3/0x500 [ 181.656419][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.661363][ T5832] ? bch2_fs_release+0x744/0x7b0 [ 181.666309][ T5832] ? bch2_fs_release+0x746/0x7b0 [ 181.671298][ T5832] handle_bug+0x89/0x170 [ 181.675563][ T5832] exc_invalid_op+0x1a/0x50 [ 181.680070][ T5832] asm_exc_invalid_op+0x1a/0x20 [ 181.684926][ T5832] RIP: 0010:bch2_fs_release+0x744/0x7b0 [ 181.690502][ T5832] Code: 41 5e 41 5f 5d e9 1c af 23 fd e8 e7 07 3a fd e9 06 fd ff ff e8 dd 07 3a fd 90 48 c7 c7 20 cd 75 8c 4c 89 ee e8 4d 2c f9 fc 90 <0f> 0b 90 90 e9 13 fd ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 18 fb ff [ 181.710126][ T5832] RSP: 0018:ffffc90002e6fcc8 EFLAGS: 00010246 [ 181.716215][ T5832] RAX: 6840e1681cb00e00 RBX: ffff88802a984a10 RCX: ffff8880277e3c00 [ 181.724220][ T5832] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 181.732193][ T5832] RBP: 1ffff11005530942 R08: ffffffff81829db2 R09: 1ffff110170e47d2 [ 181.740171][ T5832] R10: dffffc0000000000 R11: ffffed10170e47d3 R12: 00000000fffffff8 [ 181.748152][ T5832] R13: 0000000000000700 R14: dffffc0000000000 R15: 0000607edaa443b8 [ 181.756136][ T5832] ? __warn_printk+0x2a2/0x360 [ 181.760923][ T5832] ? bch2_fs_release+0x743/0x7b0 [ 181.765878][ T5832] kobject_put+0x231/0x480 [ 181.770322][ T5832] deactivate_locked_super+0xc6/0x130 [ 181.775705][ T5832] cleanup_mnt+0x422/0x4c0 [ 181.780177][ T5832] ? lockdep_hardirqs_on+0x9d/0x150 [ 181.785395][ T5832] task_work_run+0x253/0x310 [ 181.790001][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 181.795129][ T5832] ? srso_alias_return_thunk+0x5/0xfbef5 [ 181.800771][ T5832] syscall_exit_to_user_mode+0x13f/0x340 [ 181.806425][ T5832] do_syscall_64+0x100/0x230 [ 181.811049][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.816958][ T5832] RIP: 0033:0x7fa374f8e497 [ 181.821375][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 181.840996][ T5832] RSP: 002b:00007ffe6409f9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 181.849464][ T5832] RAX: 0000000000000000 RBX: 00007fa37500e08c RCX: 00007fa374f8e497 [ 181.857539][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6409fa90 [ 181.865523][ T5832] RBP: 00007ffe6409fa90 R08: 0000000000000000 R09: 0000000000000000 [ 181.873499][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe640a0b20 [ 181.881496][ T5832] R13: 00007fa37500e08c R14: 000000000002bb3d R15: 00007ffe640a0b60 [ 181.889510][ T5832] [ 181.892801][ T5832] Kernel Offset: disabled [ 181.897137][ T5832] Rebooting in 86400 seconds..