last executing test programs: 6m36.389225798s ago: executing program 0 (id=4912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000403944e2300050200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001a30900006c000000ac1414aa000000000000000000000000000000000000800009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000070000000000000000000000000000001f00000000000000040000000000000004000000fcfffffffcffffff3abd7000043500000a0001fd20000000000000004800030064"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x24010) 6m36.165631099s ago: executing program 0 (id=4915): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x3}, 0x18) 6m35.939982681s ago: executing program 0 (id=4917): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={r0, 0xffffffffffffffff, 0x20}, 0x14) 6m35.704187334s ago: executing program 0 (id=4920): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f00000017c0)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@umask={'umask', 0x3d, 0x4}}, {@namecase}, {@namecase}, {@fmask={'fmask', 0x3d, 0x8}}, {@discard}, {@keep_last_dots}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@allow_utime={'allow_utime', 0x3d, 0x3}}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000000280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 6m35.160355182s ago: executing program 0 (id=4924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 6m34.307185998s ago: executing program 0 (id=4933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x3, 0x0, 0xe, 0x1ffd, 0x46, 0x2}) 6m33.955331987s ago: executing program 32 (id=4933): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x3, 0x0, 0xe, 0x1ffd, 0x46, 0x2}) 1m8.081625547s ago: executing program 2 (id=8757): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file1\x00', 0x3000010, &(0x7f0000000100)={[{@adinicb}, {@volume={'volume', 0x3d, 0x3}}, {@uid}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@gid_forget}, {@shortad}, {@uid_forget}, {@partition={'partition', 0x3d, 0x410a}}]}, 0x1, 0xc59, &(0x7f0000001640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 1m7.627089372s ago: executing program 2 (id=8760): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x11}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m7.429216143s ago: executing program 2 (id=8763): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@block={'block', 0x3d, 0x400}}, {@sbsector={'sbsector', 0x3d, 0xfffffffffffffff1}}, {@showassoc}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@map_off}, {@check_relaxed}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x50}}]}, 0x5, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 1m7.126026258s ago: executing program 2 (id=8764): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m6.218332196s ago: executing program 2 (id=8765): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) 1m4.561328954s ago: executing program 2 (id=8777): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJS2vwPlL8phx7gABLqmUSuWwVSQElAtIqIqxwQF+AlwKUXDn0LvIC+BsQLIFLCqQfCoPE+TzKerL02sXfWfj4fyZn5zbPjfSZfj2fXM7NPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxg7d+cqYXEZd/kxYci/hcDCL6Ect1vRr1zKX8+GFEHI/N5ng+IgaLEfX6m/88G3E+Ij59JuLe/Vtr9eKzu+zHhdM3rz/44ff/8fs/3Tn+s3d++nG7/cefP/fJH25HHPvRG588uL0/2w4AAAClqKqq6qW3+SfS+/t+150CAGYiH/+rJC9Xq9Vq9b7Wf+zPV3/UhdZN1WS3m0VEbDTXqV8zOB0PAIfMRnzWdRfokPyLNoyIp7ruBDDXel13gANx7/6ttV7Kt9c8HqyO2/PfKbfkv9F7eH/HdtNp2teYzOrn604M4rlt+rM8oz7Mk5x/v53/5XH7KD3uoPOfle3yH41vfSpOzn/Qzr9lS/5/johDm39/Yv6lyvkP95L/xmBf9v/B/mzCnsgfAAAAAIAS5L//H+v4/O/ik2/Krux0/nd1Rn0AAAAAAAAAgP32pOP/PWT8PwAAAJhb9Xv12l+eebRsu89iq5e/3Yt4uvV4oDCrjQ8HBAAAAAAAAAAAAABmYxixkq7rX4iIp1dWqqqqv5ra9V496fqHXenbDyXr+pc8AACMffpM617+XsRSRLydPutvYWVlpaqWlleqlWp5Mb+eHS0uVcuN97V5Wi9bHO3iBfFwVNXfbKmxXtO098vT2tvfr36uUTXYRcdmo8PAASAixkeje45IR0xVPRtdv8rhcLD/Hz32f3aj659TAAAA4OBVVVX10sd5n0jn/PtddwoAmIl8/G+fF1Cr1Wq1Wn306qZqstvNIiI2muvUrxkMxw8Ah8xGfNZ1F+iQ/Is2jIjjXXcCmGu9rjvAgbh3/9ZaL+Xbax4PVsft+VqQLflv9DbXy+tPmk7TvsZkVj9fd2IQz23Tn+dn1Id5kvPvt/O/PG7PQ/wfdP6zsl3+9XYe66A/Xcv5D9r5txyd/PsT8y9Vzn+4p/wH8gcAAAAAgDmW//5/zPnfvMkAAAAAAAAAcOjcu39rLd/3ms//f3HC43rNOfd/Hhk5/96u83f/71GS8++3829dkDNozN9981H+/75/a+3jm//6Qp7Off4Lg1H93Au9/mCYrvmpFt6Nq3Et1uP0Y48fbmk/81j7wpb2s1Pazz3WPqrblzfb36rrtfhlXIt3HrYvTrkwamlKezWlPec/sP8XKec/bHzV+a+k9l5rWrv7Uf+x/b45nfQ8l/72n5ce37tm704MHm5bU719Jzvoz+b/yVOj+PWN9euv//bKzZvXz0SabFl6NtJkn+X8F9JXzv/lF8ft+fd+c3+9+9Foz/nPizsx3Db/Fxvz9fa+MuO+dSHnP0pfOf98BJq8/x/m/Lff/1/toD8AAAAAAAAAAAAAAACwk6qqNm8RvRQRF9P9P13dmwkAzFY+/ldJXq6eXb00Z/1Rq9Vq9dGtm6qWB+0F4/X+3lynfs3wu0nfDACYZ/+NiH923Qk6I/+C5c/7q6df6rozwEzd+ODDn1+5dm39+o2uewIAAAAAAAAA/L/y+J+rjfGfN68Dao0bvWX81zdj9dCO/9kfDTbHOk8b9ELsPP73ydh5/O/hlOdbmNI+mtK+OKV9aUr7xBs9GnL+L6SMc/4n0oaVNP7ryx30p2s5/5NprOec/1daj2vmX/31MOff35L/qZvv/+rUjQ8+fO3q+1feW39v/RdnTl88f+7C+XMXLpx69+q19dPjfzvs8cHK+eexr10HWpacf85c/mXJ+X851fIvS87/pVTLvyw5//x6T/5lyfnn9z7yL0vO/5VUy78sOf+vplr+Zcn5v5pq+Zcl5/+1VMu/LDn/11It/7Lk/F9PtfzLkvM/lWr5lyXnn89wyb8sOf98ZYP8y5LzP5tq+Zcl538u1fIvS87/fKrlX5ac/4VUy78sOf+LqZZ/WXL+X0+1/MuS8/9GquVflpz/G6mWf1ly/t9MtfzLkvP/VqrlX5ac/7dTLf+y5Py/k+px/juNEsVRkvP/bqrt/2XJ+X8v1fIvy6PP/zdjxoyZPNP1byYAAAAAAAAAAAAAoG0WlxN3vY0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi71xi5yvt+4Gdv9tqQ4H8g3OKAbW4GFnbXN3CIwSQhf0p6oSSkTUtqHO/abOJbvbvchMqm0JYoSEVqVdEXTZMojSK1FaiKWiqRCKmR2nfNq0a8iVopL/wCKgcllVIFtjozz/PszOzsnPVl7JlzPp8I/+ydc2aeOXNmdr8bfWcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABpt/vj0nwxkWZb/V/tjQ5ZdnP99XbY3/+fCrgu9QgAAAOBsvVv78+8uSV/Yu4qdGrb512v+/buLi4uL2RfeOfneny0upgs2ZdnQ2iyrXRb92y9+vti4TfBcNjow2PDvwYKbHyq4fLjg8pGCy9cUXL624PLRgsuXHYBl1tV/H1O7sutrf91QP6TZZdlI7bLr2+z13MDawcH4u5yagdo+iyMHs5nscDadTSzbZ6D2vyx7fXN+W/dn8bYGG25rY5Zlp376zIG4hoFwjK/Pmm6spvGxe/vebNM7P33mwLfn3rqq3Sw8DMtWmmVbt+TrfD7Lln5dlQ1ka9MxiescbFjnxjbrHGpa50Btv/zvres8tcp1xvs9Gtb5ww7r3Bi+9uR1WZYtZCtu0+q5bDBb33Kr6XiP1s+I/Dryh/ID2fBpnSebV3Ge5Pv85Lrm86T1nIzHf3M4JsMrrKHx4Xj7y2uWHfczPU/ye90L52p+3Q/mNzo62vir1aZzNd/mmRtWPgfaPnZtzoF0LjecA1uKzoHBNUO1c2Bwac1bms6ByWX7DGYDtds6eUPnc2B87sjx8dmnnr5t5sj+Q9OHpo9OTuzasX3nju07d44fnDk8PVH/8/QOaR9Znw2mc3BLeK2J5+BNLds2npKL3zh3z4PRHnke5Pf9MzfmC7p4MFvhHM+3eX7r2T8P0vf9hufBcMPzoO1rapvnwfAqngf5Nqe2ru575nDDf+3W0K3Xwg0N58CF/H6Y3+YjN6/8WrgxrOuFW073++HQsnMg3q2B8NzLv5J+3hu9MxyX5efF1fkFF63J5menT9z+5P65uROTWRjnxaUNj1Xr+bK+4T5ly86XwdM+X/b+7S9vvLrN1zeEYzV6a+fHKt9mx1jnx6r26t7+eDZ9dVsWxjl2vo9nu+9m+fFMWaLD8cy3ef62s/9ZMOWShte/kaLXv6GR4frr31A6GiNNr3/LH5qh2sqy7NRtq3v9Gwn/ne/Xv8t65PUvP1aP3N75HMi3eWH8dM+B4Y6vf9eFORDWc3NIDKMNuf+92uUL9dO04bEsPG+Gh0fCeTMcb7H5vNm+bJ/82vLb3jpxZufN1uuaH6umn1tKeN7kx+rPJzqfN/k2b0ye/WvHuvjXhteONUXnwMjQmny9I+kkqL/eLa6L58Dt2YHsWHY4m0r75I9yfltj21Z3DqwJ/53v144re+QcyI/Vy9s6nwP5Nj/Yfm5/dtoavpK2afjZqfX3Cytl/quHl66v9bCd68yfr/MTOzr/bijf5q0dp5szOh+nW8NXLmpznFqfPyud01PZ+TlOV4Z1Ht7Z+XdT+TaX7Vrl+bQ3y7I3J9+s/b4r/H73H+b/47tNv/dt9zvlNyfffGD8oR+dzvoBADhz79X+XFhT/1mz4f+xXs3//w8AAAD0hZj7B8NM5H8AAAAojZj7h8JM5H8AAAAojZj7h8NMKpL/H7tz9yvvPpuldwNcDOLl8TA8eHd9u9jxXgj/3rS4JP/6x7418spXnl3dbQ9mWfbLBz7UdvvH7o7rqjse1/mR5q8vc+W1q7r9Rx9e2q7x/RNO7a5ff7w/qz0NYlf59fFttevd9NRkbb7xQFabDy288Fz9+uv/jtuf3F7f/q/Cm5bsPTjQtP/WsJ7rw9wU3lPmwb1LxyGfcb9XNl7zL5d+dun24n4DW95fu5sv/0H9euN7RL10aX37eL9XWv/3vvqdV/Ltn7yh/fqfHWy//pPhen8S5i/21LdvPOZfaVj/H4X1x9uL+93+ze+3Xf+rV9S3fzWcF18Ps3X99/7ph99t93jF29l7V32/ePsT/7Ojtl+8vnj9resffXay6Xi0Xv8b79SvZ8/jPxtq3D5+Pd5O9Ohdzef3QHh8m3rkWZZ954+zpuOcfbS+3z+3rD9e3/G72q//1pZ1Hh+4trb/0v3Z0HS/vvY329re37ievX+/oen+vHRfOH7vjP8gv96TD4XzMVz+vz+sX1/re5m+el/z603c/usb6s/beH3jLet/qWX9C9fmx654/fe/U1//q/esbVr/3k+G8+n++ixa/6G/vqRp/298u/54nHhi7Oix2fmZqYaj2vg8Xju6bv1FF7/v/ZeE19LWf+87NvfY9IlNE5smsmxTH75lYLfX/80w/7s+Fs79LdT96Gf18+7FT9W/b9308/q/XwpffzQ8nvH749f+cqTpfG193Bfuqc+zXf8tYR2rdcVX/+vaVW148vOvz//TH77V+nNBvD/HPzhau38vb768dtnAG/XLW1+vivznB5uf1z8enqjN18JxXQzvzLzl8vrttV5/fG+SFz9df/7Gn+Ti/lnL+4lsGGq+H2e7/h+Hn2O+f2Xz6188P157tuXdnDdkA/kSFsLrQ7ZQvzxuFY/3i6cub3t78X14soWrTmeZK5p9anb88MzR+SfH56Zn58Znn3p635Fj80fn9tXeu3TfF4v2X3p+r689v6emd+3Ias/2Y/XRZRd6/ccfPjB1x8SNU9MH988fnHv4+PSJQwdmZw9MT83euP/gweknivafmdozuW339ju2jR2amdpz5+7d23ePzRw9li+jvqgCuya+NHb0xL7aLrN7duye3Llzx8TYkWNT03vumJgYmy/av/a9aSzf+/GxE9OH98/NHJkem515enrP5O5du7YVvvvjkeMHZzeNn5g/Oj4/O31ivH5fNs3Vvpx/7yvan2qYPRZe71oMhJ/OP3frrvT+uLlvfXnFq6pv0vzjafZ2eC+o+P2t6N8x94+EmVQk/wMAAEAVxNwf3vh/6QL5HwAAAEoj5v61YSbyPwAAAJRGzP2jYSYVyf/6//r/+v8r9P//8Xv6//r/+v/ngP6//n8n+v/6//28fv3/1v5/fArq/7Ok1/r/Mfevy7JK5n8AAACogpj714eZyP8AAABQGjH3XxRmIv8DAABAacTcf3GYSTXy/0jrX/X/9f/1/xs//z9uq/+f6f/r/58h/X/9/070/0vc/39v8Jys8YKtvz/7/+t8/j+9ptf6/zH3vy/MpBr5HwAAACoh5v73h5nI/wAAAFAaMfdfEmYi/wMAAEBpxNy/IcykIvnf5//r/+v/d+r/+/z/Rvr/+v9nQv9f/78T/f8S9/99/n8FP/9f/5/leq3/H3P//wszqUj+BwAAgCqIuf8DYSbyPwAAAJRGzP2XhpnI/wAAAFAaMfdfFmZSkfyv/6//r/+v/6//r//fTfr/+v+d6P/r//fz+vX/9f8p1mv9/5j7PxhmUpH8DwAAAFUQc//lYSbyPwAAAJRGzP1XhJnI/wAAAFAaMfdfGWZSkfyv/6//r/+v/6//r//fTfr/+v+d6P/r//fz+vX/9f8p1mv9/5j7rwozqUj+BwAAgCqIuf/qMBP5HwAAAEoj5v4PhZnI/wAAAFAaMfdvDDOpSP7X/9f/1//X/9f/1//vpv7q/w+ueIn+f53+fzP9f/3/c9b/z38U1/+nhHqt/x9z/4fDTCqS/wEAAKAKYu6/JsxE/gcAAIDSiLn/2jAT+R8AAABKI+b+TWEmFcn/+v/6//r/vdz/r9/Tavb/X/uL1uOp/6//347P/9f/z/T/z9iF7s/3+/p9/r/+P8V6rf8fc//mMJOK5H8AAACogpj7t4SZyP8AAABQGjH3XxdmIv8DAABAacTcf32YSUXyv/6//r/+fy/3/33+f6b/r/9fQP9f/z/T/z9jF7o/3+/r1/9fXf9/TdEVUWrnsf8/nK2i/x9z/w1hJhXJ/wAAAFAFMfffGGYi/wMAAEBpxNx/U5iJ/A8AAAClEXP/1jCTiuR//X/9f/1//X/9f/3/btL/1//vRP9f/7+f16//7/P/KdZrn/8fc//NYSYVyf8AAABQBTH33xJmIv8DAABAacTcf2uYifwPAAAApRFz/1iYSUXyv/6//r/+v/6//r/+fzeVtf+fXkf1//X/9f/1//X/9f9ZUa/1/2Puvy3MpCL5HwAAAKog5v7bw0zkfwAAACiNmPvHw0zkfwAAACiNmPsnwkwqkv/1//X/9f/1//X/9f+7qaz9f5//r/+f6f/r/+v/6/9TqNf6/zH3T4aZVCT/AwAAQBXE3L8tzET+BwAAgNKIuX97mIn8DwAAAKURc/+OMJOK5H/9f/1//X/9f/1//f9u0v/X/+9E/1//v5/Xr/+v/0+zwTZf67X+f8z9O8NMKpL/AQAAoApi7t8VZiL/AwAAQGnE3H9HmIn8DwAAAKURc/+dYSYVyf9n0//P99D/r9P/b79+/X/9f/1//X/9f/3/TvT/9f/7ef36//r/FOu1/n/M/bvDTCqS/wEAAKAKYu7/SJiJ/A8AAAClEXP/XWEm8j8AAAD0lXafQxjF3P/RMJOK5H+f/1/2/v/iWv1//X/9/87r1//vLv1//f9O9P/1//t5/fr/+v8U67X+f8z9e8JMKpL/AQAAoApi7r87zET+BwAAgNKIuf+eMBP5HwAAAEoj5v69YSYVyf/6/2Xv//v8f/1//f+i9ev/d5f+v/5/J/r//dn/Dz+26P/3UP8/P4f0/+lFvdb/j7n/3jCTiuR/AAAAqIKY+z8WZiL/AwAAQGnE3P/xMBP5HwAAAEoj5v5PhJlUJP/r/+v/6//r/+v/6/93k/6//n8n+v/92f+P9P97p//v8//pVb3W/4+5/74wk4rkfwAAAKiCmPs/GWYi/wMAAEBpxNz//8NM5H8AAAAojZj77w8zqUj+1//X/9f/1//X/9f/7yb9f/3/TvT/9f/7ef36//r/FOu1/n/M/b8SZlKR/A8AAABVEHP/A2Em8j8AAACURsz9nwozkf8BAACgNGLu/9Uwk4rkf/3/89P/H0zXr/+v/6//r/+v/38u6f/r/2f6/2fsQvfn+339+v/6/xTrtf5/zP2/FmZSkfwPAAAAVRBz/6+Hmcj/AAAAUBox9/9GmIn8DwAAAKURc/+DYSYVyf/6/z7/X/9f/1//X/+/m/T/9f870f/X/+/n9ev/6/9TrNf6/zH3/2aYSUXyPwAAAFRBzP0PhZnI/wAAAFAaMfd/OsxE/gcAAIDSiLn/M2EmFcn/+v/6//r/+v/6//r/3aT/r//fif6//n8/r1//X/+fYr3W/4+5/+Ewk4rkfwAAAKiCmPs/G2Yi/wMAAEBpxNz/W2Em8j8AAACURsz9vx1mUpH8r/+v/6//r/+v/6//3036/8v7//lr2IXs/69ZzYb6/6ui/6//r/+v/09nvdb/j7n/c2EmFcn/AAAAUAUx9/9OmIn8DwAAAKURc//vhpnI/wAAAFAaMfc/EmZSkfyv/6//r/+v/6//3+3+/xv6//r/Pv9/Bfr/+v/9vH79f/1/ivVa/z/m/s+HmVQk/wMAAEAVxNz/e2Em8j8AAAD0vpHVbRZz/74wE/kfAAAASiPm/kfDTCqS//X/9f8vWP8/7KP/v7Sf/n94XEvX//f5//r/+v8r0f/X/+/n9ev/6/9TrNf6/zH37w8zqUj+BwAAgCqIuf8LYSbyPwAAAJRGzP0HwkzkfwAAACiNmPunwkwqkv/1//X/ff6//r/+v/5/N+n/6/93ov+v/9/P69f/1/+nWK/1/2Punw4zqUj+BwAAgCqIuf9gmIn8DwAAAKURc/+hMBP5HwAAAEoj5v7Hwkwqkv/1//X/9f/1//X/9f+7Sf9f/78T/X/9/35ev/6//j/Feq3/H3P/TJhJRfI/AAAAVEHM/V8MM5H/AQAAoDRi7v9SmIn8DwAAAKURc//hMJOK5H/9f/1//X/9/3b9//opqf+v/3/29P/1/zvR/9f/7+f16//r/1Os1/r/MfcfCTOpSP4HAACAKoi5/2iYifwPAAAApRFz/7EwE/kfAAAASiPm/uNhJhXJ//r/+v/6//r/Pv9f/7+b9P/1/zvR/9f/7+f16//r/1Os1/r/Mff/fphJRfI/AAAAVEHM/SfCTOR/AAAAKI2Y+2fDTOR/AAAAKI2Y++fCTArz/7ourur80f/X/9f/1//X/9f/7yb9f/3/TvT/9f/7ef36//r/FOu1/n/M/fNhJv7/fwAAACiNmPsfDzOR/wEAAKA0Yu5/Isz/Y+8+c/W6qjgOvzFKgoSAsTAChsAYmEUg9B5677333nvvvffeIRB6lYLgrrUcHOccX/sev/vs9TxfliA38Zb96S/rp1PsfwAAAJhG7v4b4pYm+1//r//X/w/T/590fvp//b/+/1T0//r/g/7/sh27n9/7+/X/+n/Wjdb/5+6/T9zSZP8DAABAB7n77xu32P8AAAAwjdz9N8Yt9j8AAABMI3f//eKWJvtf/6//1/8P0//7/n/+uer/9f+noP/X/x/0/5ft2P383t+v/9f/s260/j93//3jlib7HwAAADrI3f+AuMX+BwAAgGnk7n9g3GL/AwAAwDRy9z8obmmy//X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjdb/5+5/cNzSZP8DAABAB7n7HxK32P8AAAAwjdz9D41b7H8AAACYRu7+h8UtTfa//l//r//X/+v/9f9b0v/r/5fo//X/e36//l//z7rR+v/c/Q+PW5rsfwAAAOggd/8j4hb7HwAAAKaRu/+RcYv9DwAAANPI3f+ouKXJ/tf/6//1//p//b/+f0v6f/3/Ev2//n/P79f/6/9Zt3n/f6+b/ncvtf/P3X9T3NJk/wMAAEAHufsfHbfY/wAAADCN3P2PiVvsfwAAAJhG7v7Hxi1N9r/+X/9/vv+/9Rr9v/5f/3/+/9f/nw39v/5/if5/1P7/0n4n9P/6f/0/azbv/1d6/wv/d+7+x8UtTfY/AAAAdJC7//Fxi/0PAAAA08jd/4S4xf4HAACAaeTuf2Lc0mT/6//1/77/r//X/+v/t6T/1/8v0f+P2v/7/v+V9v/3vIT36//pYLT+P3f/k+KWJvsfAAAAOsjd/+S4xf4HAACAaeTuf0rcYv8DAADANHL3PzVuabL/9f/6f/2//l//r//fkv5f/79E/6//3/P7ff9f/8+60fr/3P1Pi1ua7H8AAADoIHf/0+MW+x8AAACmkbv/GXGL/Q8AAADTyN3/zLilyf7X/+v/9f/6/yvq/++k/9f/L9P/6/+X6P/1/3t+/yn7/+sv/Pf1/3QwWv+fu/9ZcUuT/Q8AAAAd5O5/dtxi/wMAAMA0cvc/J26x/wEAAGAaufufG7c02f/6f/2//l//7/v/+v8t6f+n6/+v0f+fp//X//v+v/6fZaP1/7n7nxe3NNn/AAAA0EHu/ufHLfY/AAAATCN3/wviFvsfAAAAppG7/4VxS5P9r//X/+v/9f/6f/3/lvT/0/X/vv9/G/p//b/+X//PstH6/9z9L4pbmux/AAAA6CB3/4vjFvsfAAAAppG7/yVxi/0PAAAA08jd/9K4pcn+H7L/v1b/v4/+/7rD4aD/1//r//X/y/T/+v8l+v+L9/93voNfT/8/1vv1//p/1o3W/+fuf1nc0mT/AwAAQAe5+18et9j/AAAAMI3c/a+IW+x/AAAAmEbu/lfGLU32/x31/7fc5eSf+/7/penZ//v+v/7//9+j/9f/X4z+X/+/RP/v+/97fr/+X//PutH6/9z9r4pbmux/AAAA6CB3/6vjFvsfAAAAppG7/zVxi/0PAAAA08jd/9q4pcn+H/L7//p//b/+v/47+n/9v/5/2cj9/7mD/n+N/l//v+f36//1/6wbrf/P3f+6uKXJ/gcAAIAOcve/Pm6x/wEAAGAaufvfELfY/wAAADCN3P1vjFua7H/9v/7/6P3/Of1/0v/Hn6v+X/9/CiP3/77/v07/r//f8/v1//p/1o3W/+fuf1Pc0mT/AwAAQAe5+98ct9j/AAAAMI3c/W+JW+x/AAAAmEbu/rfGLU32v/5f/3/0/t/3/4v+P/5cN+j///t7qP8/Dv2//n+J/l//v+f36//1/6wbrf/P3f+2uKXJ/gcAAIAOcve/PW6x/wEAAGAaufvfEbfY/wAAADCN3P3vjFua7H/9v/5f/6//79D/L71f/78t/b/+f4n+X/+/5/fr//X/rBut/8/d/664pcn+BwAAgA5y9787brH/AQAAYBq5+98Tt9j/AAAAMI3c/e+NW5rsf/3/3vv/e98cL9D/6//1//r/Ien/9f9L9P/6/z2/X/+v/2fdaP1/7v73xS1N9j8AAAB0kLv//XGL/Q8AAADTyN3/gbjF/gcAAIBp5O7/YNzSZP/36P+vvd2PzdP/+/6//l//r/8fm/5f/79E/6//3/P79f/6f9aN1v/n7v9Q3NJk/wMAAEAHufs/HLfY/wAAADCN3P0fiVvsfwAAAJhG7v6Pxi1N9n+P/v/29P8nzrz/v/Xu+n/9f9H/6/8P+n/9/wr9v/5/z+/X/+v/WTda/5+7/2NxS5P9DwAAAB3k7v943GL/AwAAwDRy938ibrH/AQAAYBq5+z8ZN9zjrsd70lWl/9f/+/6//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9U3OLv/wEAAGAaufs/HbfY/wAAADCN3P2fiVvsfwAAAJhG7v7Pxi1N9r/+X/+v/993/39O/6//H5z+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/XNzSZP8DAABAB7n7Px+32P8AAAAwjdz9X4hb7H8AAACYRu7+L8YtTfa//l//r//fd//v+//6/9Hp//X/S/T/+v89v1//r/9n3Wj9f+7+L8UtTfY/AAAAdJC7/8txi/0PAAAA08jd/5W4xf4HAACAaeTu/2rc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+1uKXJ/gcAAIAOcvd/PW6x/wEAAGAaufu/EbfY/wAAADCN3P3fjFua7P+Z+/+lH9P/n9D/6/8P+n/9/8b0//r/Jfp//f+e36//1/+zbrT+P3f/t+KWJvsfAAAAOsjd/+24xf4HAACAaeTu/07cYv8DAADANHL3fzduabL/Z+7/l+j/T+j/9f8H/b/+f2P6f/3/Ev2//n/P79f/6/9ZN1r/n7v/e3FLk/0PAAAAHeTu/37cYv8DAADANHL3/yBusf8BAABgGrn7fxi3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z9/8obmmy/wEAAKCD3P0/jlvsfwAAAJhG7v6fxC32PwAAAEwjd/9P45Ym+1//r//X/+v/9f/6/y3p//X/S/T/+v89v1//r/9n3Wj9f+7+n8UtTfY/AAAAdJC7/+dxi/0PAAAA08jd/4u4xf4HAACAaeTu/2Xc0mT/6//1//p//b/+X/+/Jf2//n+J/l//v+f36//1/6wbrf/P3f+ruKXJ/gcAAIAOcvf/Om6x/wEAAGAauft/E7fY/wAAADCN3P2/jVua7H/9v/5f/6//b9j/X3fbX0//vy39v/5/yVn1/zfceHL1/6dz7H5+7+/X/+v/WXdm/X/+wBX2/7n7b45bmux/AAAA6CB3/+/iFvsfAAAAppG7//dxi/0PAAAA08jdf0vc0mT/6//1/1P2/9fr//X/vv8/Cv2//n+J7//r//f8fv2//p91o33/P3f/H+KWJvsfAAAAOsjd/8e4xf4HAACAaeTu/1PcYv8DAADANHL3/zluabL/9f9Xtf+/24U/r//3/X/9v/5f/39l9P/6/4P+/7Idu5/f+/v1//p/1o3W/+fu/0vc0mT/AwAAQAe5+/8at9j/AAAAMI3c/X+LW+x/AAAAmEbu/r/HLRff/xdmo7un//f9f/2//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9H3OLv/wEAAGAaufv/GbfY/wAAADCN3P3/ilvsfwAAAJhG7v5/xy1N9r/+X/+v/9f/6//1/1vS/+v/l+j/9f97fr/+X//PutH6/9z9/wkAAP//vWU0QQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000001fa00)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) 1m4.098495549s ago: executing program 33 (id=8777): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000001fa00)='freezer.self_freezing\x00', 0x275a, 0x0) creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) 2.703146697s ago: executing program 3 (id=9192): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @empty, 0x5}, 0x1c) 2.489809998s ago: executing program 3 (id=9195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000003c0)={0x0, 0x2, 0x3, 0x2006}) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x7}) 2.291649359s ago: executing program 3 (id=9197): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x20}) 2.251809391s ago: executing program 1 (id=9198): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.216782423s ago: executing program 5 (id=9199): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000700)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7}, @in6={0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}], 0x58) 2.036427202s ago: executing program 1 (id=9201): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffd05) 1.978963725s ago: executing program 5 (id=9202): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@journal_ioprio}, {@quota}]}, 0x1, 0x501, &(0x7f0000000ac0)="$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") lchown(&(0x7f0000000200)='./file1\x00', 0xee00, 0xee01) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1.743525738s ago: executing program 4 (id=9204): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x80}}, {@noquota}, {@errors_remount}, {@auto_da_alloc}, {@discard}]}, 0x1, 0x5b3, &(0x7f0000000a40)="$eJzs3U9oHNcZAPBvZrWWbKuVCy20xQfTFlwwXkn+07o9yddSg8GHQqG0YrUWRiut0UqtJQSV76Y0h5AEX5xbLjkm5JBDyCXHXHNJyDlgYhGD5UOyYXdn5bW866xkrzbW/n4w2vdmZud7b2a/p51hhg1gaJ2q/0kjfhURV5OIibZlI5EtPNVcb3tro/h4a6OYRK127eskkoh4tLVRbK2fZK/HI2IzIn4ZER/nI86kO5s80ipU19YXZsvl0nJWn1xZvDlZXVs/e2Nxdr40X1o6/8c/Xbx04eL0uen25j6utdfye+vrnS9e+9+dT/9ybybePblZfH02iZkYz5a19+Nlau6TfMzsmn+hH8EGKBl0A9iXXJbn9VT6RUxELsv6Tmrtg8PogTQP6KPaaERtR1sRGAKJpIch1foeUD//bU0H+f3j/uXmCUg97vbWRvG/0Yo/0rw2EWONc5Nj3yRPnZnUzzdPHGRDOZQ2bzdeRp79/CfZ52//pl68efTZR5ebB+rZ45/ujD/RYfwZb107fUGt8W87G/+2O8TPZfHH2t5XH/+u9hjj279/+VbX+LdH49cd4yc78ZMO/U8j4l89xr/7tw8udVtWezvidHSO35I8//rw5PUb5dJU82/HGB+ePvnn7v2PONYlfvOa7VijIe39P5K1Ke2x/+9/8t5vNp8T//e/ff7x77T/j0bE/3uM/7NH7/y127L7t5MH9W8BXY9/6zA88/83H/d6jP+HmVOfZ0VXDQEAAAAAAAAA4CVKG/eyJWlhp5ymhULzGd6fx7G0XKmunLleWV2aa97zdiLyaetOq4lmPanXp7P7cVv1c7vq53NZwNzRRr1QrJTnBtx3AAAAAAAAAAAAAAAAAAAA+LE4vuv5/4e5xvP/u3+uGjisuv/kdwcP/9G/hgAHbk/5DxwqT+d/MrB2AAfP/38YWjX5D8NL/sPwkv8wvOQ/DC/5D8NL/sPwkv8AAAAAAAAAAAAAAAAAAAAAAAAAANAXV69cqU+1x1sbxXp9bmRtdaHy77NzpepCYXG1WChWlm8W5iuV+XKpUKws/tD2kkrl5lQsrd6aXClVVyara+v/XKysLrV+U7SU73uPAAAAAAAAAAAAAAAAAAAA4NUz3piStBCRb9bTtFCI+ElEnEgiuX6jXJqKiJ9GxGe5/Gi9Pj3oRgMAAAAAAAAAAAAAAAAAAMAhU11bX5gtl0vL/SuMZKH6GOLpwlh0X2dkLxuMiM2X28L6Fvf8rny2Aw9g1x3+Qu7gPoevdmGAgxIAAAAAAAAAAAAAAAAAAAypJw/99vqO7/rbIAAAAAAAAAAAAAAAAAAAABhK6VdJRNSn0xO/G9+99EiynWu8RsR/7l5749bsysrydH3+g535K29m888Nov1Ar1p5mkZEPY8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ6pr6wuz5XJpeZ+F0R7WGXQfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbj+wAAAP//nZLNlg==") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="85", 0x1}], 0x1, 0x2, 0x0, 0xb) 1.733536778s ago: executing program 1 (id=9205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x7}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.51542331s ago: executing program 1 (id=9206): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000eca54e29c65e8679b20d98d48fa21ea397a84b80b30433133a369b3e352b61d328761e6f663332a038e2a841e39c02591a163c7cccd6800a32811c530cc499aec69b772ee8f3655ec37836bb54462c902521fef449c5d7e2525e42ec621c802bae4ce5e433d8b55918a1534b7db1d61792d25304851c560bb1ed776d2e17f4f873d6d87e82f27cc8de6be4d80315c164f47dcd438a08198599d00f47f2e78718429cee027d2af6f210a12d850f68f000ca984b0c882e9611b1e56c828bc7e41b741219f3e3"], 0x50) r0 = syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0xffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffc003, '\x00', @p_u16=&(0x7f0000000400)=0x3260}}) 1.410693655s ago: executing program 5 (id=9207): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) 1.106487772s ago: executing program 1 (id=9208): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$eJzs279rE2Ecx/HPXS7pNdpWrDqIQlGsLjb+mBxE3Tr1H+hU2qjFE6tVsEWwWdRB6OTm4iQIDo4idRMn/wAHwU0pdgg4OfTkzvvR5JLmB5ecpO/X0ueez/Pkee7oJd82iQDsWVc1IUOGCt7BMfvA+riR9ZYA9Ikb/Ny23JgZhgAG282RrHcAIBtb16SXp6Rf1UfzyhXCssCrAL5tStqYfKo1Bbk5JOn1F8mK6oetinTUCnLD1nB9ffFKOh3ON4q14UNbqkjFKN+3IxyWKq7/+GdOhuvv14hGNZb38oMaD9ZfiOYfaVnvWJ2XSAAADBxDU63yXQeYur7olM81zfN+fr5pXvDzCy3yi9HxUNSafTHz4IN7edvLp+bvOAu7bRNAA2YX9//X43E71+L+t5rc//V/JwDov+WV1VtzjuM+lvxG+V7QEzTC/wjEPbnEmFQa4XsObQwO36FMRN5j7OjJJaevTybPPb2zMOONjUnqzYX6jxtqEH2f/ndNoh6zF1e+pnHi558nS8/fvW9n8NsOlzCj37rZjXK1boxMqYfnNZG4C+Ycu73pxprrdrhow6eL+MMBdtrPRAD6rXT/9lJpeWX17GJO0o1yPnzBn/6x6Vf2pZr6Pp/dTgGkLX7Rb5RWEj1u7eHMp8+/q5fePOti5SuSPha7mAgAAAAAAAAAAAAAAOoc0uGstwAAAACgT5Lf/rk7mvZXl7I+RwAAAAAAAAAAAAAAAAAABs3fAAAA///PtQqI") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 1.074705593s ago: executing program 4 (id=9209): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x3}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000)) syz_io_uring_setup(0x5e2, &(0x7f00000004c0)={0x0, 0x0, 0x864, 0x0, 0x0, 0x0, r0}, 0x0, 0x0, &(0x7f0000000000)) 995.953317ms ago: executing program 3 (id=9210): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001600010a2dbd70000325b400fd0004"], 0x1c}}, 0x40040) 858.177054ms ago: executing program 5 (id=9211): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80306e85, &(0x7f0000001740)={@id={0x2, 0x0, @d}}) 669.988395ms ago: executing program 4 (id=9212): unshare(0x26020480) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000240)=0xb) 459.039135ms ago: executing program 4 (id=9213): r0 = memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\x00\x00\x00\x00\x00\x00\r\x17\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x1f37\x02\xb9\xb2\x9a3\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\x826`M\xab\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~A\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8\x01\x00j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xd8\x84\n\x13\x9a\x85&\v\xfeU\x18\x17o6m\x84\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/675, 0x3) fcntl$addseals(r0, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) 355.511681ms ago: executing program 1 (id=9214): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505072404"], 0x0) 354.816361ms ago: executing program 3 (id=9215): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000040000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 332.282602ms ago: executing program 5 (id=9216): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x28, r1, 0xe29, 0x30bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x60044095}, 0x24040044) 199.06184ms ago: executing program 4 (id=9217): r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(r0) 33.271619ms ago: executing program 5 (id=9218): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 32.455808ms ago: executing program 3 (id=9219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdafc, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 0s ago: executing program 4 (id=9220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): ): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 0 [ 762.399019][ T5767] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 762.426942][ T5813] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 762.442428][ T5767] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 762.492989][ T5767] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 762.756654][ T2458] IPv6: NLM_F_CREATE should be specified when creating new route [ 762.971384][ T2473] bridge0: port 1(ip6gretap0) entered blocking state [ 762.996879][ T2473] bridge0: port 1(ip6gretap0) entered disabled state [ 763.020107][ T2478] netlink: 368 bytes leftover after parsing attributes in process `syz.1.8141'. [ 763.029508][ T2473] ip6gretap0: entered allmulticast mode [ 763.040352][ T2473] ip6gretap0: entered promiscuous mode [ 763.337577][ T2493] netlink: 'syz.1.8144': attribute type 13 has an invalid length. [ 763.483359][ T2497] netlink: 'syz.4.8146': attribute type 1 has an invalid length. [ 763.711514][ T2503] loop3: detected capacity change from 0 to 4096 [ 763.777798][ T2503] ntfs: volume version 3.1. [ 763.800424][ T2503] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 763.854297][ T2503] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 763.909160][ T2503] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 763.960177][ T2503] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 764.032163][ T2503] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 764.090733][ T2503] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 764.502289][ T2547] loop2: detected capacity change from 0 to 256 [ 764.632120][ T2547] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe39e9277, utbl_chksum : 0x7319d30d) [ 764.763894][ T2556] loop1: detected capacity change from 0 to 4096 [ 764.830218][ T2556] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 764.903684][ T2575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8161'. [ 765.001417][ T2575] unsupported nla_type 216 [ 765.103365][ T2573] loop4: detected capacity change from 0 to 4096 [ 765.175608][ T2573] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 765.294411][ T2589] netlink: 'syz.2.8164': attribute type 9 has an invalid length. [ 765.437551][ T2573] ntfs3: loop4: ino=5, "/" directory corrupted [ 765.444686][ T2573] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 765.550448][ T1190] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 765.605248][ T2608] syz.2.8166 uses old SIOCAX25GETINFO [ 765.767410][ T1190] usb 4-1: Using ep0 maxpacket: 32 [ 765.779969][ T1190] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 765.809916][ T1190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.859622][ T1190] usb 4-1: config 0 descriptor?? [ 765.889821][ T1190] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 766.097159][ T1190] gspca_vc032x: reg_r err -71 [ 766.107161][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.134548][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.162623][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.187488][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.197927][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.219267][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.224653][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.277876][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.283657][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.326082][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.345965][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.363649][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.383123][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.400809][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.406197][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.445584][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.457593][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.474439][ T1190] gspca_vc032x: I2c Bus Busy Wait 00 [ 766.487373][ T1190] gspca_vc032x: Unknown sensor... [ 766.493253][ T1190] vc032x: probe of 4-1:0.0 failed with error -22 [ 766.523811][ T1190] usb 4-1: USB disconnect, device number 46 [ 766.760803][ T2680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8178'. [ 767.032645][ T2699] loop4: detected capacity change from 0 to 1024 [ 767.124598][ T2712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8185'. [ 767.169285][ T2712] netlink: 31 bytes leftover after parsing attributes in process `syz.2.8185'. [ 767.227438][ T2712] netlink: 'syz.2.8185': attribute type 3 has an invalid length. [ 767.235264][ T2712] netlink: 'syz.2.8185': attribute type 2 has an invalid length. [ 767.317757][ T2712] netlink: 31 bytes leftover after parsing attributes in process `syz.2.8185'. [ 767.333334][ T2720] loop3: detected capacity change from 0 to 256 [ 767.412276][ T2720] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 767.850472][ T2782] loop3: detected capacity change from 0 to 1024 [ 767.865840][ T2737] loop2: detected capacity change from 0 to 4096 [ 767.894386][ T2782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 767.923736][ T2782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 767.947069][ T2782] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38790!=20869) [ 767.986478][ T2782] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 768.049409][ T2782] JBD2: no valid journal superblock found [ 768.073828][ T2737] ntfs: volume version 3.1. [ 768.088870][ T2782] EXT4-fs (loop3): Could not load journal inode [ 768.150430][ T5785] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 768.317152][ T2796] loop1: detected capacity change from 0 to 4096 [ 768.499552][ T2796] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 768.574940][ T2796] ntfs3: loop1: Failed to load $Extend (-22). [ 768.574973][ T2796] ntfs3: loop1: Failed to initialize $Extend. [ 768.994182][ T2848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8204'. [ 769.443761][ T2869] netlink: 'syz.2.8210': attribute type 2 has an invalid length. [ 769.457411][ T2869] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8210'. [ 769.855546][ T2879] loop2: detected capacity change from 0 to 4096 [ 769.916781][ T2879] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 770.443331][ T2909] loop1: detected capacity change from 0 to 1024 [ 770.539388][ T2909] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 770.590223][ T2909] syz.1.8224: attempt to access beyond end of device [ 770.590223][ T2909] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 770.651387][ T2909] Buffer I/O error on dev loop1, logical block 458752, async page read [ 770.685482][ T2909] syz.1.8224: attempt to access beyond end of device [ 770.685482][ T2909] loop1: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 770.703052][ T2922] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 770.726813][ T2924] xt_cgroup: invalid path, errno=-2 [ 770.752882][ T2909] Buffer I/O error on dev loop1, logical block 458752, async page read [ 771.263484][ T2955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8237'. [ 771.382596][ T2961] netlink: 'syz.4.8239': attribute type 21 has an invalid length. [ 771.392180][ T2961] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8239'. [ 771.496889][ T2965] veth0_macvtap: left promiscuous mode [ 771.663934][ T2967] netlink: 'syz.2.8241': attribute type 5 has an invalid length. [ 771.926109][ T2988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8246'. [ 772.307872][T29113] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 772.351493][ T3018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.377808][ T3018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.418846][ T3018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.440480][ T3018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.454763][ T3018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.470637][ T3018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.497449][T29113] usb 4-1: Using ep0 maxpacket: 16 [ 772.525804][T29113] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 772.556708][T29113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.599359][T29113] usb 4-1: Product: syz [ 772.603626][T29113] usb 4-1: Manufacturer: syz [ 772.644962][T29113] usb 4-1: SerialNumber: syz [ 772.655627][T29113] r8152-cfgselector 4-1: config 0 descriptor?? [ 772.787623][ T3040] netlink: 'syz.1.8258': attribute type 29 has an invalid length. [ 772.796022][ T3040] netlink: 'syz.1.8258': attribute type 29 has an invalid length. [ 772.913070][ T3045] loop4: detected capacity change from 0 to 256 [ 773.044548][ T3045] FAT-fs (loop4): Directory bread(block 64) failed [ 773.067364][ T3045] FAT-fs (loop4): Directory bread(block 65) failed [ 773.074172][ T3045] FAT-fs (loop4): Directory bread(block 66) failed [ 773.117518][ T3045] FAT-fs (loop4): Directory bread(block 67) failed [ 773.123783][T29113] r8152-cfgselector 4-1: Unknown version 0x0000 [ 773.124464][ T3045] FAT-fs (loop4): Directory bread(block 68) failed [ 773.147180][T29113] r8152-cfgselector 4-1: USB disconnect, device number 47 [ 773.186689][ T3045] FAT-fs (loop4): Directory bread(block 69) failed [ 773.228053][ T3045] FAT-fs (loop4): Directory bread(block 70) failed [ 773.234822][ T3045] FAT-fs (loop4): Directory bread(block 71) failed [ 773.310735][ T3045] FAT-fs (loop4): Directory bread(block 72) failed [ 773.339844][ T3045] FAT-fs (loop4): Directory bread(block 73) failed [ 773.465879][ T5433] veth0_macvtap: entered promiscuous mode [ 773.799884][ T3094] netlink: 268 bytes leftover after parsing attributes in process `syz.2.8268'. [ 773.849056][ T3097] loop4: detected capacity change from 0 to 2048 [ 773.887857][ T3097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 773.957503][T20166] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 774.167996][T20166] usb 2-1: Using ep0 maxpacket: 32 [ 774.207041][T20166] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 162 [ 774.223157][T20166] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 774.236285][T20166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.253164][T20166] usb 2-1: Product: syz [ 774.277591][T20166] usb 2-1: Manufacturer: syz [ 774.282282][T20166] usb 2-1: SerialNumber: syz [ 774.307020][T20166] usb 2-1: config 0 descriptor?? [ 774.338227][ T3086] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 774.346894][T20166] hub 2-1:0.0: bad descriptor, ignoring hub [ 774.365676][T20166] hub: probe of 2-1:0.0 failed with error -5 [ 774.401944][T20166] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input36 [ 774.518580][ T3133] netlink: 372 bytes leftover after parsing attributes in process `syz.4.8275'. [ 774.949674][T20166] usb 2-1: USB disconnect, device number 55 [ 774.955716][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 775.212834][ T3173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8282'. [ 775.771629][ T3204] vivid-004: disconnect [ 775.786269][ T3202] vivid-004: reconnect [ 776.077999][ T3222] loop3: detected capacity change from 0 to 736 [ 776.283605][ T3222] rock: directory entry would overflow storage [ 776.299360][ T3222] rock: sig=0x3b10, size=4, remaining=3 [ 776.497643][T20166] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 776.743273][T20166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 776.771133][T20166] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 776.786004][T20166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.796342][T20166] usb 2-1: Product: syz [ 776.810076][T20166] usb 2-1: Manufacturer: syz [ 776.814784][T20166] usb 2-1: SerialNumber: syz [ 776.826215][T20166] usb 2-1: config 0 descriptor?? [ 776.836534][ T3230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 776.853747][ T3230] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 776.876464][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 776.894499][ C0] port100 2-1:0.0: NFC: Urb failure (status -71) [ 776.917603][T20166] port100 2-1:0.0: NFC: Could not get supported command types [ 777.144448][T20166] usb 2-1: USB disconnect, device number 56 [ 777.267637][T29113] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 777.386926][ T3302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8314'. [ 777.468590][T29113] usb 4-1: Using ep0 maxpacket: 8 [ 777.480704][T29113] usb 4-1: unable to get BOS descriptor or descriptor too short [ 777.494829][T29113] usb 4-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 777.498101][ T5813] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 777.506029][T29113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.520181][T29113] usb 4-1: Product: syz [ 777.524681][T29113] usb 4-1: Manufacturer: syz [ 777.531979][T29113] usb 4-1: SerialNumber: syz [ 777.707339][ T5813] usb 5-1: Using ep0 maxpacket: 32 [ 777.716655][ T5813] usb 5-1: config 0 has an invalid interface number: 202 but max is 1 [ 777.738603][ T5813] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 777.756020][ T5813] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 777.766501][ T5813] usb 5-1: config 0 has no interface number 0 [ 777.777626][ T5813] usb 5-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 777.793500][ T5813] usb 5-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 777.807108][ T5813] usb 5-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 777.840914][ T5813] usb 5-1: config 0 interface 202 has no altsetting 0 [ 777.856030][T29113] usb 4-1: 1:1 : bogus bTerminalLink 3 [ 777.876936][ T5813] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 777.884349][T29113] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8211); report any issues to g@b4.vu [ 777.915207][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.919574][T29113] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 777.933435][ T5813] usb 5-1: Product: syz [ 777.941415][ T5813] usb 5-1: Manufacturer: syz [ 777.946085][ T5813] usb 5-1: SerialNumber: syz [ 777.962849][ T5813] usb 5-1: config 0 descriptor?? [ 778.005934][T29113] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 778.026127][ T5813] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 778.042807][T29113] usb 4-1: USB disconnect, device number 48 [ 778.168050][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.304305][ T5814] usb 5-1: USB disconnect, device number 24 [ 778.313120][ T1085] usb 5-1: Failed to submit usb control message: -71 [ 778.331316][ T1085] usb 5-1: unable to send the bmi data to the device: -71 [ 778.347350][ T1085] usb 5-1: unable to get target info from device [ 778.364025][ T1085] usb 5-1: could not get target info (-71) [ 778.374182][ T1085] usb 5-1: could not probe fw (-71) [ 778.451698][ T3362] loop1: detected capacity change from 0 to 64 [ 778.977902][ T5813] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 779.168659][ T3405] loop4: detected capacity change from 0 to 8 [ 779.183778][ T3405] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 779.199817][ T5813] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 779.210459][ T5813] usb 4-1: config 1 has no interface number 0 [ 779.216723][ T5813] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 779.247195][ T3405] cramfs: Error -5 while decompressing! [ 779.264173][ T5813] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 779.295430][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop4 [ 779.302849][ T3405] cramfs: ffffffff973fb368(26)->ffff888073232000(4096) [ 779.311268][ T5813] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 779.328356][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.335663][ T3405] cramfs: Error -3 while decompressing! [ 779.356317][ T3405] cramfs: ffffffff973fb382(26)->ffff888057958000(4096) [ 779.376558][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop4 [ 779.393698][ T5813] usb 4-1: Product: syz [ 779.399904][ T3405] cramfs: Error -3 while decompressing! [ 779.407199][ T3405] cramfs: ffffffff973fb39c(16)->ffff88806bdc2000(4096) [ 779.414649][ T5813] usb 4-1: Manufacturer: syz [ 779.419823][ T3405] cramfs: Error -5 while decompressing! [ 779.429962][ T3405] cramfs: ffffffff973fb368(26)->ffff888073232000(4096) [ 779.435069][ T5813] usb 4-1: SerialNumber: syz [ 779.473569][ T3379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.511428][ T3379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.645292][ T3422] ip6tnl4: entered allmulticast mode [ 779.765717][ T3379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.789138][ T3379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.847634][ T5813] usb 4-1: No status endpoint found [ 780.076595][T29113] usb 4-1: USB disconnect, device number 49 [ 780.191695][ T3461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8343'. [ 780.430636][ T3473] netlink: 'syz.1.8348': attribute type 4 has an invalid length. [ 780.477907][ T3473] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.8348'. [ 780.618944][ T3482] netlink: 766 bytes leftover after parsing attributes in process `syz.4.8351'. [ 780.709774][ T3485] netlink: 'syz.1.8352': attribute type 2 has an invalid length. [ 780.730295][ T3485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8352'. [ 780.784481][ T3489] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8353'. [ 781.225980][ T3476] loop2: detected capacity change from 0 to 32768 [ 781.286490][ T3476] JBD2: Ignoring recovery information on journal [ 781.332224][ T3520] loop3: detected capacity change from 0 to 64 [ 781.532666][ T3476] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 781.709682][ T3476] (syz.2.8350,3476,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 781.737386][ T3476] (syz.2.8350,3476,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 781.758786][ T3476] (syz.2.8350,3476,0):ocfs2_mknod:298 ERROR: status = -2 [ 781.766032][ T3476] (syz.2.8350,3476,0):ocfs2_mknod:502 ERROR: status = -2 [ 781.922618][ T3544] xt_TCPMSS: Only works on TCP SYN packets [ 781.999989][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 782.158880][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8372'. [ 782.339087][ T3557] loop1: detected capacity change from 0 to 4096 [ 782.367393][ T3557] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 782.567883][ T3557] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 782.610880][ T3573] netlink: 'syz.4.8377': attribute type 29 has an invalid length. [ 782.626230][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8377'. [ 782.660928][ T3573] netlink: 'syz.4.8377': attribute type 29 has an invalid length. [ 782.687732][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8377'. [ 782.906713][ T3581] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8379'. [ 783.166750][ T3559] loop3: detected capacity change from 0 to 32768 [ 783.189314][ T1190] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 783.224975][ T3559] ERROR: (device loop3): diAllocAG: nfreeinos = 0, but iag on freelist [ 783.224975][ T3559] [ 783.277642][ T3559] ialloc: diAlloc returned -5! [ 783.397397][ T1190] usb 5-1: Using ep0 maxpacket: 8 [ 783.405070][ T1190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 783.442658][ T1190] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 783.456571][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8386'. [ 783.462369][ T1190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.494352][ T1190] usb 5-1: Product: syz [ 783.507712][ T1190] usb 5-1: Manufacturer: syz [ 783.524779][ T1190] usb 5-1: SerialNumber: syz [ 783.546254][ T1190] usb 5-1: config 0 descriptor?? [ 783.581138][ T1190] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 783.851675][ T1190] usb 5-1: USB disconnect, device number 25 [ 784.035642][ T3642] loop1: detected capacity change from 0 to 256 [ 784.130282][ T3642] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x268716bb, utbl_chksum : 0xe619d30d) [ 784.377908][ T3657] openvswitch: netlink: Actions may not be safe on all matching packets [ 784.579351][ T3670] loop4: detected capacity change from 0 to 1024 [ 784.630003][ T3670] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 784.677629][ T3670] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 784.695129][ T3670] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 784.709677][ T3670] EXT4-fs error (device loop4): ext4_get_journal_inode:5820: inode #5: comm syz.4.8402: unexpected bad inode w/o EXT4_IGET_BAD [ 784.725628][ T3670] EXT4-fs (loop4): no journal found [ 784.732586][ T3670] EXT4-fs (loop4): can't get journal size [ 784.746292][ T3670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 784.932391][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.007829][ T3685] netlink: 'syz.2.8405': attribute type 21 has an invalid length. [ 785.036198][ T3685] netlink: 'syz.2.8405': attribute type 1 has an invalid length. [ 785.333438][ T3660] loop1: detected capacity change from 0 to 32768 [ 785.370581][ T3695] loop4: detected capacity change from 0 to 64 [ 785.423237][ T3660] jfs_rename did not expect dtDelete to return rc = -2 [ 785.437410][ T3660] ERROR: (device loop1): jfs_rename: [ 785.437410][ T3660] [ 785.473715][ T3660] ERROR: (device loop1): remounting filesystem as read-only [ 785.885549][ T3712] netlink: 'syz.4.8413': attribute type 15 has an invalid length. [ 785.917196][ T3712] __nla_validate_parse: 2 callbacks suppressed [ 785.917213][ T3712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8413'. [ 786.796086][ T3766] loop1: detected capacity change from 0 to 2048 [ 786.833032][ T3769] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 786.867412][ T5814] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 786.935452][ T3766] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=104, inode=18446744073709551376, rec_len=255, name_len=5 [ 786.979346][ T3766] Remounting filesystem read-only [ 787.077861][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 787.100573][ T5814] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 787.149454][ T5814] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 787.177540][ T5814] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 787.185735][ T5814] usb 5-1: Product: syz [ 787.217494][ T5814] usb 5-1: Manufacturer: syz [ 787.227340][ T5814] usb 5-1: SerialNumber: syz [ 787.291310][ T3785] loop2: detected capacity change from 0 to 164 [ 787.299726][ T3787] Zero length message leads to an empty skb [ 787.475517][ T5814] usb 5-1: Invalid connection information received from device [ 787.725042][ T5813] usb 5-1: USB disconnect, device number 26 [ 787.834639][ T3799] loop2: detected capacity change from 0 to 4096 [ 787.878960][ T3799] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 788.004243][ T3799] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 788.112260][ T3772] loop3: detected capacity change from 0 to 32768 [ 788.463379][ T3832] PKCS7: Unknown OID: [4] 0.0 [ 788.477449][ T3832] PKCS7: Only support pkcs7_signedData type [ 789.011337][ T3858] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 789.179610][ T3854] loop3: detected capacity change from 0 to 4096 [ 789.253677][ T3854] ntfs: volume version 3.1. [ 789.272973][ T3871] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 789.390768][ T3854] ntfs: (device loop3): ntfs_truncate(): Inode 0x43 has unknown attribute type 0x80. Aborting truncate. [ 789.749199][ T3886] loop2: detected capacity change from 0 to 256 [ 789.778974][ T3886] exfat: Deprecated parameter 'utf8' [ 789.826252][ T3886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 790.076625][ T3907] netlink: 'syz.1.8457': attribute type 1 has an invalid length. [ 790.124391][ T3907] netlink: 10916 bytes leftover after parsing attributes in process `syz.1.8457'. [ 790.581719][ T3937] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 790.662625][ T3932] loop4: detected capacity change from 0 to 4096 [ 790.722270][ T3932] ntfs: volume version 3.1. [ 790.765803][ T3932] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 790.793545][ T3932] ntfs: (device loop4): load_and_init_quota(): Failed to find inode number for $Quota. [ 790.821928][ T3932] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 790.851240][ T3932] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 790.863639][ T3932] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 790.877533][ T3932] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 791.332977][ T3970] futex_wake_op: syz.2.8477 tries to shift op by 32; fix this program [ 791.712116][ T3994] loop3: detected capacity change from 0 to 2048 [ 791.771042][ T3994] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.860311][ T3994] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 791.907732][T20166] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 792.147785][T20166] usb 3-1: Using ep0 maxpacket: 16 [ 792.158467][T20166] usb 3-1: config 0 has no interfaces? [ 792.169331][T20166] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 792.182674][ T4018] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 792.197766][T20166] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.213221][T20166] usb 3-1: Product: syz [ 792.237496][T20166] usb 3-1: Manufacturer: syz [ 792.242236][T20166] usb 3-1: SerialNumber: syz [ 792.279833][T20166] r8152-cfgselector 3-1: config 0 descriptor?? [ 792.499108][T20166] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 792.654310][ T4041] xt_SECMARK: invalid mode: 2 [ 792.701095][T20166] usb 3-1: USB disconnect, device number 44 [ 793.138501][ T4071] loop1: detected capacity change from 0 to 2048 [ 793.906104][ T4112] netlink: 'syz.1.8519': attribute type 8 has an invalid length. [ 793.925213][ T4118] netlink: 'syz.3.8522': attribute type 46 has an invalid length. [ 794.742304][ T4170] loop2: detected capacity change from 0 to 64 [ 794.787743][T20166] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 794.802199][ T4170] syz.2.8537: attempt to access beyond end of device [ 794.802199][ T4170] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 794.847638][ T4170] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 795.018096][T20166] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 795.051068][T20166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.071932][T20166] usb 4-1: Product: syz [ 795.076265][T20166] usb 4-1: Manufacturer: syz [ 795.085810][T20166] usb 4-1: SerialNumber: syz [ 795.128403][T20166] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 795.153158][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 795.836216][ T4188] loop2: detected capacity change from 0 to 32768 [ 795.896718][ T4188] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 796.079942][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 796.117586][ T4198] loop4: detected capacity change from 0 to 40427 [ 796.163229][ T4198] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 796.194734][ T4198] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 796.267309][ T4198] F2FS-fs (loop4): invalid crc value [ 796.284809][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 796.317613][ T4198] F2FS-fs (loop4): Found nat_bits in checkpoint [ 796.327034][ T9] ath9k_htc: Failed to initialize the device [ 796.457537][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 796.572570][ T4198] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30 [ 796.600837][ T4198] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 796.724970][ T4233] loop1: detected capacity change from 0 to 256 [ 796.790079][ T9] usb 4-1: USB disconnect, device number 50 [ 796.806178][ T4233] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e4c, chksum : 0x8a43d0b8, utbl_chksum : 0xe619d30d) [ 797.086052][ T4252] loop1: detected capacity change from 0 to 256 [ 797.165975][ T4252] FAT-fs (loop1): Directory bread(block 64) failed [ 797.176350][ T4252] FAT-fs (loop1): Directory bread(block 65) failed [ 797.186171][ T4252] FAT-fs (loop1): Directory bread(block 66) failed [ 797.196932][ T4252] FAT-fs (loop1): Directory bread(block 67) failed [ 797.205168][ T4252] FAT-fs (loop1): Directory bread(block 68) failed [ 797.216872][ T4252] FAT-fs (loop1): Directory bread(block 69) failed [ 797.225101][ T4252] FAT-fs (loop1): Directory bread(block 70) failed [ 797.235555][ T4252] FAT-fs (loop1): Directory bread(block 71) failed [ 797.244260][ T4252] FAT-fs (loop1): Directory bread(block 72) failed [ 797.254742][ T4252] FAT-fs (loop1): Directory bread(block 73) failed [ 797.584659][ T4270] loop3: detected capacity change from 0 to 128 [ 797.614985][ T4270] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 797.696579][ T4280] loop2: detected capacity change from 0 to 64 [ 797.728630][ T4278] loop4: detected capacity change from 0 to 2048 [ 797.849711][ T1368] sysv_free_block: flc_count > flc_size [ 797.880207][ T1368] sysv_free_block: flc_count > flc_size [ 797.885865][ T1368] sysv_free_block: flc_count > flc_size [ 797.919071][ T1368] sysv_free_block: flc_count > flc_size [ 797.934938][ T1368] sysv_free_block: flc_count > flc_size [ 797.947785][ T1368] sysv_free_block: flc_count > flc_size [ 797.963693][ T1368] sysv_free_block: flc_count > flc_size [ 797.971106][ T1368] sysv_free_block: flc_count > flc_size [ 797.995059][ T1368] sysv_free_block: flc_count > flc_size [ 798.003875][ T1368] sysv_free_block: flc_count > flc_size [ 798.020349][ T1368] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 798.072759][ T4297] loop2: detected capacity change from 0 to 256 [ 798.101138][ T4297] exfat: Deprecated parameter 'utf8' [ 798.159428][ T4297] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 798.528543][ T4317] netlink: 'syz.1.8570': attribute type 4 has an invalid length. [ 798.638804][ T5814] hid-generic 0002:0001:0D97.0001: item fetching failed at offset 0/2 [ 798.689663][ T5814] hid-generic: probe of 0002:0001:0D97.0001 failed with error -22 [ 798.725549][ T4331] loop2: detected capacity change from 0 to 512 [ 798.745732][ T4331] EXT4-fs: Ignoring removed nobh option [ 798.858130][ T4331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.882925][ T4335] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8575'. [ 798.908334][ T4331] ext4 filesystem being mounted at /2170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 798.930311][ T4343] loop4: detected capacity change from 0 to 1024 [ 798.949071][ T4344] loop3: detected capacity change from 0 to 256 [ 799.037061][ T4343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.090359][ T4344] FAT-fs (loop3): Directory bread(block 64) failed [ 799.098352][ T4344] FAT-fs (loop3): Directory bread(block 65) failed [ 799.105072][ T4344] FAT-fs (loop3): Directory bread(block 66) failed [ 799.125409][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.157543][ T4344] FAT-fs (loop3): Directory bread(block 67) failed [ 799.168556][ T4344] FAT-fs (loop3): Directory bread(block 68) failed [ 799.175294][ T4344] FAT-fs (loop3): Directory bread(block 69) failed [ 799.209785][ T4344] FAT-fs (loop3): Directory bread(block 70) failed [ 799.216423][ T4344] FAT-fs (loop3): Directory bread(block 71) failed [ 799.243681][ T4343] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 799.243878][ T4344] FAT-fs (loop3): Directory bread(block 72) failed [ 799.287476][ T4344] FAT-fs (loop3): Directory bread(block 73) failed [ 799.380651][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.837520][ T4382] loop4: detected capacity change from 0 to 2048 [ 799.913605][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.928943][ T4382] ext4 filesystem being mounted at /886/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 800.130333][ T4400] loop2: detected capacity change from 0 to 1024 [ 800.146325][ T4401] loop1: detected capacity change from 0 to 1024 [ 800.205161][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.225734][ T4400] hfsplus: bad catalog entry type [ 800.240414][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 800.384643][ T49] hfsplus: b-tree write err: -5, ino 25 [ 800.404672][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.433786][ T49] hfsplus: b-tree write err: -5, ino 4 [ 800.473971][ T49] hfsplus: b-tree write err: -5, ino 2 [ 801.456993][ T4430] loop2: detected capacity change from 0 to 32768 [ 801.477112][ T4464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8606'. [ 801.530405][ T4430] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 801.587085][ T4430] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 801.805704][ T4476] loop3: detected capacity change from 0 to 2048 [ 801.834984][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 801.875116][ T4476] loop3: p3 < > p4 < > [ 801.900727][ T4476] loop3: partition table partially beyond EOD, truncated [ 801.925258][ T4476] loop3: p3 start 4284289 is beyond EOD, truncated [ 802.068949][ T4492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8613'. [ 802.101390][ T5785] udevd[5785]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 802.380248][ T4505] loop1: detected capacity change from 0 to 64 [ 803.091145][ T4528] loop1: detected capacity change from 0 to 4096 [ 803.763620][ T4564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8632'. [ 804.666374][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 804.720490][ T28] audit: type=1326 audit(2000000167.040:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.720550][ T28] audit: type=1326 audit(2000000167.040:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.720771][ T28] audit: type=1326 audit(2000000167.040:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.722104][ T28] audit: type=1326 audit(2000000167.040:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.722155][ T28] audit: type=1326 audit(2000000167.040:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.722383][ T28] audit: type=1326 audit(2000000167.040:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.747446][ T28] audit: type=1326 audit(2000000167.050:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.904499][ T28] audit: type=1326 audit(2000000167.110:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.904558][ T28] audit: type=1326 audit(2000000167.210:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 804.904604][ T28] audit: type=1326 audit(2000000167.210:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.2.8648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f81bed9cdd9 code=0x7ffc0000 [ 805.019945][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 805.020617][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 805.021828][ T9] usb 2-1: config 1 interface 0 altsetting 204 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 805.021863][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 805.024100][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 805.024129][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.024160][ T9] usb 2-1: Product: syz [ 805.024175][ T9] usb 2-1: Manufacturer: syz [ 805.024191][ T9] usb 2-1: SerialNumber: syz [ 805.045381][ T4598] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 805.263866][ T9] usb 2-1: bad CDC descriptors [ 805.272589][ T9] usb 2-1: USB disconnect, device number 57 [ 806.101080][ T4681] loop2: detected capacity change from 0 to 128 [ 806.150981][ T4681] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 806.171820][ T4683] loop3: detected capacity change from 0 to 2048 [ 806.206019][ T4681] ext4 filesystem being mounted at /2191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 806.286207][ T4683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.420019][ T1368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.440044][ T4698] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8667'. [ 806.496231][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 807.211172][ T4725] loop4: detected capacity change from 0 to 1024 [ 807.359567][ T4703] loop1: detected capacity change from 0 to 32768 [ 807.407602][T14244] hfsplus: b-tree write err: -5, ino 25 [ 807.413472][T14244] hfsplus: b-tree write err: -5, ino 4 [ 807.430625][ T4703] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 807.449225][T14244] hfsplus: b-tree write err: -5, ino 2 [ 807.548272][ T4703] XFS (loop1): Ending clean mount [ 807.569584][ T4712] loop2: detected capacity change from 0 to 32768 [ 807.600001][ T4703] XFS (loop1): Quotacheck needed: Please wait. [ 807.676181][ T4712] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 807.801060][ T4703] XFS (loop1): Quotacheck: Done. [ 807.857619][ T4712] XFS (loop2): Ending clean mount [ 808.116772][ T5771] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 808.193166][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 808.763959][ T4749] loop4: detected capacity change from 0 to 40427 [ 808.775561][ T4770] program syz.1.8677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.786845][ T4749] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 808.813021][ T4749] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 808.875724][ T4775] program syz.1.8677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.898116][ T4775] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 808.953052][ T4749] F2FS-fs (loop4): Found nat_bits in checkpoint [ 809.094742][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.101767][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.126615][ T4749] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 809.143407][ T4749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 809.229296][ T4749] F2FS-fs (loop4): Unrecognized mount option "stripe=0x0000000000000000" or missing value [ 809.725582][ T4811] nbd: couldn't find device at index 10240 [ 810.014522][ T4824] loop4: detected capacity change from 0 to 512 [ 810.028665][ T4824] EXT4-fs: Ignoring removed orlov option [ 810.035230][ T4824] EXT4-fs (loop4): Test dummy encryption mode enabled [ 810.046932][ T4824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 810.081781][ T4824] EXT4-fs (loop4): 1 truncate cleaned up [ 810.109446][ T4824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.251415][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.566314][ T4847] loop4: detected capacity change from 0 to 256 [ 810.692538][ T4847] FAT-fs (loop4): Directory bread(block 64) failed [ 810.709485][ T4847] FAT-fs (loop4): Directory bread(block 65) failed [ 810.723995][ T4847] FAT-fs (loop4): Directory bread(block 66) failed [ 810.733323][ T4847] FAT-fs (loop4): Directory bread(block 67) failed [ 810.772086][ T4847] FAT-fs (loop4): Directory bread(block 68) failed [ 810.796859][ T4847] FAT-fs (loop4): Directory bread(block 69) failed [ 810.818196][ T4847] FAT-fs (loop4): Directory bread(block 70) failed [ 810.827109][ T4847] FAT-fs (loop4): Directory bread(block 71) failed [ 810.840318][ T4847] FAT-fs (loop4): Directory bread(block 72) failed [ 810.849914][ T4847] FAT-fs (loop4): Directory bread(block 73) failed [ 811.038938][ T4847] syz.4.8698: attempt to access beyond end of device [ 811.038938][ T4847] loop4: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 811.073634][ T4847] syz.4.8698: attempt to access beyond end of device [ 811.073634][ T4847] loop4: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 811.109827][ T28] audit: type=1800 audit(2000000173.420:339): pid=4847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8698" name="file1" dev="loop4" ino=1048703 res=0 errno=0 [ 811.326627][ T4888] vivid-000: disconnect [ 811.361811][ T4878] vivid-000: reconnect [ 811.452979][ T4895] loop1: detected capacity change from 0 to 512 [ 811.466334][ T4895] EXT4-fs: Ignoring removed nomblk_io_submit option [ 811.499453][ T4895] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 811.508836][ T4886] loop3: detected capacity change from 0 to 4096 [ 811.543212][ T4895] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 811.633279][ T4895] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.8709: Allocating blocks 41-42 which overlap fs metadata [ 811.689434][ T4886] ntfs3: loop3: failed to convert "0000" to iso8859-9 [ 811.740385][ T9] kernel write not supported for file /snd/midiC2D0 (pid: 9 comm: kworker/0:1) [ 811.777070][ T4895] EXT4-fs (loop1): Remounting filesystem read-only [ 811.793862][ T4886] ntfs3: loop3: failed to convert name for inode 1e. [ 811.808676][ T4895] Quota error (device loop1): write_blk: dquota write failed [ 811.816179][ T4895] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 811.875361][ T4895] Quota error (device loop1): write_blk: dquota write failed [ 811.921908][ T4895] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 811.934869][ T4915] program syz.4.8713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.963515][ T4895] EXT4-fs (loop1): 1 truncate cleaned up [ 811.985916][ T4895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.099942][ T4920] loop3: detected capacity change from 0 to 64 [ 812.230226][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.503730][ T4948] netlink: 'syz.3.8719': attribute type 2 has an invalid length. [ 812.521000][ T4945] loop1: detected capacity change from 0 to 2048 [ 812.522525][ T4948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8719'. [ 812.668273][ T4945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.880877][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.037852][T29113] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 813.251533][T29113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.272998][T29113] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.298357][T29113] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 813.312197][T29113] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 813.322332][T29113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.344458][T29113] usb 3-1: config 0 descriptor?? [ 813.487699][T20166] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 813.583793][ T5004] loop3: detected capacity change from 0 to 2048 [ 813.605571][ T5004] EXT4-fs: Ignoring removed mblk_io_submit option [ 813.646647][ T5004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.667409][T20166] usb 2-1: Using ep0 maxpacket: 16 [ 813.674703][T20166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.691754][T20166] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.701928][T20166] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 813.715006][T20166] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 813.724458][T20166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.737082][T20166] usb 2-1: config 0 descriptor?? [ 813.795611][ T5004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.8735: bg 0: block 234: padding at end of block bitmap is not set [ 813.832112][T29113] uclogic 0003:28BD:0055.0002: interface is invalid, ignoring [ 813.865616][ T5004] EXT4-fs (loop3): Remounting filesystem read-only [ 813.879841][ T5004] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 813.964744][ T1368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.069213][T29113] usb 3-1: USB disconnect, device number 45 [ 814.164623][T20166] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 814.186300][ T5037] loop3: detected capacity change from 0 to 256 [ 814.189240][T20166] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 814.257555][T20166] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input37 [ 814.336970][ T5037] FAT-fs (loop3): Directory bread(block 64) failed [ 814.351757][ T5037] FAT-fs (loop3): Directory bread(block 65) failed [ 814.395666][ T5037] FAT-fs (loop3): Directory bread(block 66) failed [ 814.405206][ T5037] FAT-fs (loop3): Directory bread(block 67) failed [ 814.419930][ T5037] FAT-fs (loop3): Directory bread(block 68) failed [ 814.431153][ T5037] FAT-fs (loop3): Directory bread(block 69) failed [ 814.436082][T20166] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 814.457771][ T5037] FAT-fs (loop3): Directory bread(block 70) failed [ 814.481063][ T5037] FAT-fs (loop3): Directory bread(block 71) failed [ 814.492852][ T5037] FAT-fs (loop3): Directory bread(block 72) failed [ 814.502432][ T5037] FAT-fs (loop3): Directory bread(block 73) failed [ 814.527459][T20166] usb 2-1: USB disconnect, device number 58 [ 814.667950][ T5063] CIFS mount error: No usable UNC path provided in device string! [ 814.667950][ T5063] [ 814.719341][ T5037] syz.3.8738: attempt to access beyond end of device [ 814.719341][ T5037] loop3: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 814.728289][ T5063] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 814.768637][ T5049] fido_id[5049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 814.785567][ T5037] syz.3.8738: attempt to access beyond end of device [ 814.785567][ T5037] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 814.848226][ T28] audit: type=1800 audit(2000000177.160:340): pid=5037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8738" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1048704 res=0 errno=0 [ 815.706291][ T5073] loop4: detected capacity change from 0 to 32768 [ 815.781262][ T5073] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 816.025399][ T5073] XFS (loop4): Ending clean mount [ 816.215519][T21271] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 816.356351][ T5104] loop3: detected capacity change from 0 to 32768 [ 816.642375][ T5130] loop2: detected capacity change from 0 to 256 [ 816.799540][ T5130] FAT-fs (loop2): Directory bread(block 64) failed [ 816.819897][ T5130] FAT-fs (loop2): Directory bread(block 65) failed [ 816.857908][ T5130] FAT-fs (loop2): Directory bread(block 66) failed [ 816.864536][ T5130] FAT-fs (loop2): Directory bread(block 67) failed [ 816.876983][ T5130] FAT-fs (loop2): Directory bread(block 68) failed [ 816.885145][ T5130] FAT-fs (loop2): Directory bread(block 69) failed [ 816.899533][ T5130] FAT-fs (loop2): Directory bread(block 70) failed [ 816.906239][ T5130] FAT-fs (loop2): Directory bread(block 71) failed [ 816.916937][ T5130] FAT-fs (loop2): Directory bread(block 72) failed [ 816.933482][ T5130] FAT-fs (loop2): Directory bread(block 73) failed [ 816.945528][ T5099] loop1: detected capacity change from 0 to 40427 [ 816.969918][ T5099] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 816.999383][ T5099] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 817.048566][ T5099] F2FS-fs (loop1): invalid crc value [ 817.102570][ T5130] syz.2.8754: attempt to access beyond end of device [ 817.102570][ T5130] loop2: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 817.117537][ T5130] syz.2.8754: attempt to access beyond end of device [ 817.117537][ T5130] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 817.152088][ T28] audit: type=1800 audit(2000000179.470:341): pid=5130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8754" name="file1" dev="loop2" ino=1048705 res=0 errno=0 [ 817.202048][ T5146] tipc: Started in network mode [ 817.227522][ T5146] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 817.251415][ T5146] tipc: Enabled bearer , priority 10 [ 817.466048][ T5099] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 817.480652][ T5099] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 817.497050][ T5152] loop2: detected capacity change from 0 to 2048 [ 817.529272][ T5152] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.664706][ T5139] f2fs_ckpt-7:1: attempt to access beyond end of device [ 817.664706][ T5139] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 817.727160][ T5139] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 818.064411][ T5178] loop2: detected capacity change from 0 to 1764 [ 818.077567][T20166] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 818.250454][ T9] tipc: Node number set to 4269801488 [ 818.297530][T20166] usb 4-1: Using ep0 maxpacket: 32 [ 818.332791][T20166] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 818.347344][T20166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.355831][T20166] usb 4-1: Product: syz [ 818.368891][T20166] usb 4-1: Manufacturer: syz [ 818.373592][T20166] usb 4-1: SerialNumber: syz [ 818.394542][T20166] usb 4-1: config 0 descriptor?? [ 818.418771][T20166] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 818.467051][T20166] dvb-usb: bulk message failed: -22 (4/0) [ 818.479597][T20166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 818.500510][T20166] dvb-usb: bulk message failed: -22 (5/0) [ 818.506450][T20166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 818.512949][ T5191] loop1: detected capacity change from 0 to 256 [ 818.541606][ T5186] loop2: detected capacity change from 0 to 4096 [ 818.578496][T20166] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 818.603036][ T5197] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 818.623053][ T5191] FAT-fs (loop1): Directory bread(block 64) failed [ 818.640483][T20166] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 818.657527][ T5191] FAT-fs (loop1): Directory bread(block 65) failed [ 818.677861][T20166] usb 4-1: media controller created [ 818.690897][ T5191] FAT-fs (loop1): Directory bread(block 66) failed [ 818.715836][ T5191] FAT-fs (loop1): Directory bread(block 67) failed [ 818.733035][ T5191] FAT-fs (loop1): Directory bread(block 68) failed [ 818.751354][ T5191] FAT-fs (loop1): Directory bread(block 69) failed [ 818.764419][ T5191] FAT-fs (loop1): Directory bread(block 70) failed [ 818.791614][T20166] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 818.802513][ T5191] FAT-fs (loop1): Directory bread(block 71) failed [ 818.838457][ T5191] FAT-fs (loop1): Directory bread(block 72) failed [ 818.859330][T20166] usb 4-1: selecting invalid altsetting 3 [ 818.860298][ T5191] FAT-fs (loop1): Directory bread(block 73) failed [ 818.865130][T20166] ttusb2: set interface to alts=3 failed [ 818.904952][ T5175] loop4: detected capacity change from 0 to 32768 [ 818.925807][ T5186] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 818.974598][ T5186] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 819.058469][T20166] DVB: Unable to find symbol tda10086_attach() [ 819.061134][ T5175] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root [ 819.061134][ T5175] [ 819.064697][T20166] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 819.098882][T20166] dvb-usb: bulk message failed: -22 (4/0) [ 819.117899][T20166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 819.160026][T20166] dvb-usb: bulk message failed: -22 (5/0) [ 819.171086][ T5175] ERROR: (device loop4): remounting filesystem as read-only [ 819.197743][T20166] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 819.266453][T20166] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 819.343644][T20166] usb 4-1: USB disconnect, device number 51 [ 819.365754][ T5767] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 819.404157][ T5767] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 819.477580][ T5767] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 819.506981][T20166] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 819.538854][ T5767] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 819.582250][ T5767] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 819.594050][ T5216] loop3: detected capacity change from 0 to 1024 [ 819.628364][ T5767] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 11 [ 819.647721][ T5767] Remounting filesystem read-only [ 819.657779][ T5767] NILFS error (device loop2): nilfs_lookup: deleted inode referenced: 11 [ 819.704906][ T5216] hfsplus: bad catalog entry type [ 819.816200][ T1135] hfsplus: b-tree write err: -5, ino 25 [ 819.828665][ T1135] hfsplus: b-tree write err: -5, ino 4 [ 819.834307][ T1135] hfsplus: b-tree write err: -5, ino 2 [ 819.874498][ T5231] loop1: detected capacity change from 0 to 512 [ 819.927204][ T5231] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 819.952734][ T5238] Bluetooth: MGMT ver 1.22 [ 820.016163][ T5231] EXT4-fs (loop1): 1 truncate cleaned up [ 820.024883][ T5231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.132999][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.154667][ T5767] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 820.179514][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 820.186299][ T5767] NILFS (loop2): discard dirty block: blocknr=14, size=4096 [ 820.224359][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 820.231545][ T5767] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 820.241995][ T5767] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 820.257055][ T5767] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 820.281487][ T5767] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 820.302814][ T5767] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 820.330525][ T5767] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 820.360113][ T5767] NILFS (loop2): discard dirty block: blocknr=28, size=4096 [ 820.393751][ T5767] NILFS (loop2): discard dirty page: offset=4096, ino=3 [ 820.408547][ T5767] NILFS (loop2): discard dirty block: blocknr=29, size=4096 [ 820.416145][ T5767] NILFS (loop2): discard dirty page: offset=8192, ino=3 [ 820.440374][ T5767] NILFS (loop2): discard dirty block: blocknr=30, size=4096 [ 820.451551][ T1738] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.469393][ T5767] NILFS (loop2): discard dirty page: offset=139264, ino=3 [ 820.489902][ T5767] NILFS (loop2): discard dirty block: blocknr=31, size=4096 [ 820.509689][ T5767] NILFS (loop2): discard dirty page: offset=401408, ino=3 [ 820.546199][ T5767] NILFS (loop2): discard dirty block: blocknr=0, size=4096 [ 820.566792][ T5767] NILFS (loop2): discard dirty page: offset=663552, ino=3 [ 820.576265][ T5767] NILFS (loop2): discard dirty block: blocknr=34, size=4096 [ 820.606622][ T5767] NILFS (loop2): discard dirty page: offset=794624, ino=3 [ 820.626205][ T5265] loop4: detected capacity change from 0 to 64 [ 820.632936][ T5767] NILFS (loop2): discard dirty block: blocknr=35, size=4096 [ 820.644767][ T5767] NILFS (loop2): discard dirty page: offset=925696, ino=3 [ 820.688269][ T5767] NILFS (loop2): discard dirty block: blocknr=36, size=4096 [ 820.720511][ T5265] Trying to free block not in datazone [ 820.729789][ T1738] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.839148][ T5260] tipc: Started in network mode [ 820.848051][ T5260] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 820.875805][ T5260] tipc: Enabled bearer , priority 10 [ 821.023917][ T1738] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.187063][ T1738] batman_adv: batadv0: Removing interface: netdevsim0 [ 821.196478][ T1738] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.386746][ T5283] binder_alloc: binder_alloc_mmap_handler: 5282 200000ffd000-200000fff000 already mapped failed -16 [ 821.422147][ T5287] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 821.510808][ T5287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 821.945169][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.073379][ T5321] set_capacity_and_notify: 1 callbacks suppressed [ 822.073396][ T5321] loop4: detected capacity change from 0 to 64 [ 822.089664][ T1738] ip6gretap0 (unregistering): left allmulticast mode [ 822.109190][ T1738] ip6gretap0 (unregistering): left promiscuous mode [ 822.116009][ T1738] bridge0: port 1(ip6gretap0) entered disabled state [ 822.232225][ T5314] loop1: detected capacity change from 0 to 4096 [ 822.310937][ T5314] NILFS (loop1): invalid segment: Checksum error in segment payload [ 822.336685][ T5314] NILFS (loop1): trying rollback from an earlier position [ 822.388643][ T9] tipc: Node number set to 4269801488 [ 822.442149][ T5314] NILFS (loop1): recovery complete [ 822.477523][ T5336] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 822.565915][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 822.628485][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 822.640133][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 822.648613][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 822.665701][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 822.679280][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 822.767748][ T28] audit: type=1800 audit(2000000185.080:342): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8787" name="file0" dev="loop1" ino=12 res=0 errno=0 [ 822.847656][ T5350] tipc: Started in network mode [ 822.852622][ T5350] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 822.900375][ T5350] tipc: Enabled bearer , priority 10 [ 823.323505][ T5366] ipvlan2: entered promiscuous mode [ 823.349541][ T5366] bridge0: port 3(ipvlan2) entered blocking state [ 823.377386][ T5366] bridge0: port 3(ipvlan2) entered disabled state [ 823.407680][ T5366] ipvlan2: entered allmulticast mode [ 823.418005][ T5366] bridge0: entered allmulticast mode [ 823.440401][ T5366] ipvlan2: left allmulticast mode [ 823.459509][ T5366] bridge0: left allmulticast mode [ 823.963936][ T5343] loop4: detected capacity change from 0 to 32768 [ 824.055298][ T5343] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 824.075632][ T1190] tipc: Node number set to 4269801488 [ 824.256494][ T5343] XFS (loop4): Ending clean mount [ 824.382451][ T5460] loop3: detected capacity change from 0 to 164 [ 824.471969][ T5460] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 824.493852][T21271] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 824.763697][T27561] Bluetooth: hci0: command tx timeout [ 824.802049][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 825.772635][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.796443][ T5565] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 825.805822][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.845351][ T5337] bridge_slave_0: entered allmulticast mode [ 825.885395][ T5337] bridge_slave_0: entered promiscuous mode [ 825.928080][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.935307][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.979120][ T5337] bridge_slave_1: entered allmulticast mode [ 826.000056][ T5337] bridge_slave_1: entered promiscuous mode [ 826.387189][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.415068][ T5611] netlink: 'syz.3.8811': attribute type 5 has an invalid length. [ 826.490978][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.604976][ T5643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8813'. [ 826.619613][ T5814] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 826.651125][ T5337] team0: Port device team_slave_0 added [ 826.722500][ T5337] team0: Port device team_slave_1 added [ 826.838985][T27561] Bluetooth: hci0: command tx timeout [ 826.847405][ T5814] usb 5-1: Using ep0 maxpacket: 16 [ 826.860308][ T5814] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.872087][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.883236][ T5814] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.936937][ T5814] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 826.957446][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.002821][ T5814] usb 5-1: config 0 descriptor?? [ 827.055306][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.067376][ T5813] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 827.087460][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.130886][ T5587] loop1: detected capacity change from 0 to 32768 [ 827.175205][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.209894][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.238127][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 827.270137][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.284981][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 827.319373][ T1738] hsr_slave_0: left promiscuous mode [ 827.325880][ T1738] hsr_slave_1: left promiscuous mode [ 827.336958][ T5813] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 827.358267][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.365828][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.380565][ T5813] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 827.407338][ T5813] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 827.407549][ T1738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.426760][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.452876][ T5813] usb 4-1: config 0 descriptor?? [ 827.477583][ T1738] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.489188][ T5649] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 827.577569][ T5814] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf3 found [ 827.585345][ T5814] hid-picolcd 0003:04D8:F002.0004: No report with id 0xf4 found [ 827.641812][ T1738] veth1_macvtap: left promiscuous mode [ 827.652706][ T1738] veth0_macvtap: left promiscuous mode [ 827.672412][ T1738] veth1_vlan: left promiscuous mode [ 827.693422][ T1738] veth0_vlan: left promiscuous mode [ 827.730678][T21796] usb 5-1: USB disconnect, device number 27 [ 827.912194][ T5813] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x2 [ 827.937792][ T5813] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 827.944542][ T1738] infiniband syz2: set down [ 827.977851][ T5813] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 827.995586][ T5813] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 828.023925][ T5813] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 828.044174][ T5813] gt683r_led 0003:1770:FF00.0005: unknown main item tag 0x0 [ 828.097619][ T5813] gt683r_led 0003:1770:FF00.0005: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 828.231483][ T5813] usb 4-1: USB disconnect, device number 52 [ 828.278876][T21796] gt683r_led 0003:1770:FF00.0005: failed to send set report request: -19 [ 828.406353][ T5711] fido_id[5711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 828.684838][ T1738] bond5 (unregistering): Released all slaves [ 828.711889][ T1738] bond4 (unregistering): Released all slaves [ 828.917457][T27561] Bluetooth: hci0: command tx timeout [ 829.143814][ T1738] bond3 (unregistering): Released all slaves [ 829.180098][ T1738] pimreg (unregistering): left allmulticast mode [ 829.473783][ T1738] bond2 (unregistering): Released all slaves [ 829.763324][ T1738] bond1 (unregistering): Released all slaves [ 830.293807][ T1097] smc: removing ib device syz2 [ 830.752511][ T1738] team_slave_1 (unregistering): left promiscuous mode [ 830.772781][ T1738] team0 (unregistering): Port device team_slave_1 removed [ 830.844131][ T1738] team_slave_0 (unregistering): left promiscuous mode [ 830.855596][ T1738] team0 (unregistering): Port device team_slave_0 removed [ 831.002794][T27561] Bluetooth: hci0: command tx timeout [ 831.581345][ T1190] infiniband syz2: ib_query_port failed (-19) [ 832.058057][ T5337] hsr_slave_0: entered promiscuous mode [ 832.079554][ T5337] hsr_slave_1: entered promiscuous mode [ 832.205201][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 832.257316][ T5337] Cannot create hsr debugfs directory [ 832.617070][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8832'. [ 832.700636][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.145072][ T5876] loop4: detected capacity change from 0 to 512 [ 833.184243][ T5876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 833.348099][ T5876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.369138][ T5889] loop1: detected capacity change from 0 to 4096 [ 833.460276][ T5876] ext4 filesystem being mounted at /953/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 833.470973][ T5889] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 833.508106][ T5889] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 833.532123][ T5889] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 833.544914][ T5889] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 833.617393][ T5889] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 833.655915][ T5889] ntfs: volume version 3.1. [ 833.698384][ T5889] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 833.750463][ T5830] loop3: detected capacity change from 0 to 40427 [ 833.790191][ T5830] F2FS-fs (loop3): invalid crc value [ 833.815938][ T5889] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 833.852824][ T5830] F2FS-fs (loop3): Found nat_bits in checkpoint [ 833.866923][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.899656][ T5889] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 833.938883][ T5889] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 834.017454][ T5889] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 834.070528][ T5830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 834.189652][ T5949] loop4: detected capacity change from 0 to 8 [ 834.302257][ T1368] syz-executor: attempt to access beyond end of device [ 834.302257][ T1368] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 834.383222][ T1368] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 834.619594][ T5961] loop4: detected capacity change from 0 to 16 [ 834.732682][ T5961] erofs: (device loop4): mounted with root inode @ nid 36. [ 834.757129][ T5337] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 834.822371][ T5961] syz.4.8840: attempt to access beyond end of device [ 834.822371][ T5961] loop4: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 834.875341][ T5337] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 834.936303][ T5337] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 835.008106][ T5337] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 835.285570][ T5989] sp0: Synchronizing with TNC [ 835.321608][ T5988] [U] è [ 835.540056][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.621510][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.643671][ T1738] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.650965][ T1738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.684993][ T1738] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.692297][ T1738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.347929][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.640371][ T6034] loop4: detected capacity change from 0 to 2048 [ 836.703845][ T5999] loop1: detected capacity change from 0 to 40427 [ 836.732752][ T5999] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 836.776336][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.808240][ T5999] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 836.869951][ T6034] ext4 filesystem being mounted at /960/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 836.892218][ T5999] F2FS-fs (loop1): invalid crc value [ 836.905380][ T6013] loop3: detected capacity change from 0 to 32768 [ 836.933681][ T5999] F2FS-fs (loop1): Found nat_bits in checkpoint [ 837.116913][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.120723][ T6013] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 837.289985][ T5999] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 837.327958][ T6066] loop4: detected capacity change from 0 to 512 [ 837.335616][ T6066] EXT4-fs: Ignoring removed bh option [ 837.342058][ T6066] EXT4-fs: Ignoring removed mblk_io_submit option [ 837.349296][ T5999] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 837.391179][ T5999] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 837.418737][ T6066] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.8849: corrupted in-inode xattr: e_value size too large [ 837.507155][ T5337] veth0_vlan: entered promiscuous mode [ 837.545878][ T6066] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.8849: couldn't read orphan inode 15 (err -117) [ 837.589599][ T6066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.618148][ T5337] veth1_vlan: entered promiscuous mode [ 837.785972][ T5337] veth0_macvtap: entered promiscuous mode [ 837.839140][ T6013] XFS (loop3): Ending clean mount [ 837.860398][ T5337] veth1_macvtap: entered promiscuous mode [ 837.921767][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.003588][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.037690][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.093743][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.153194][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.207879][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.233963][ T6086] loop4: detected capacity change from 0 to 512 [ 838.247445][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.271834][ T6086] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 838.287299][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.297206][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.342058][ T6086] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.8853: invalid indirect mapped block 9 (level 0) [ 838.357544][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.382120][ T1368] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 838.396726][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.436870][ T6086] EXT4-fs (loop4): 1 truncate cleaned up [ 838.447454][ T6086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 838.462309][ T5337] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.487386][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 838.487403][ T28] audit: type=1800 audit(2000000200.800:344): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8853" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 838.523271][ T5337] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.534980][ T5337] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.544365][ T5337] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.740213][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.773471][ T6097] loop1: detected capacity change from 0 to 164 [ 838.945893][ T6097] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 838.977788][ T1698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.985697][ T1698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.124031][ T1698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.156822][ T1698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.316378][ T6127] loop3: detected capacity change from 0 to 8 [ 839.345621][ T6125] loop1: detected capacity change from 0 to 512 [ 839.369968][ T6125] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 839.462473][ T6125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 839.479714][ T6127] SQUASHFS error: Unable to read inode 0xa7 [ 839.503861][ T6125] EXT4-fs (loop1): 1 truncate cleaned up [ 839.511176][ T6125] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.630246][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.220120][ T6168] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8865'. [ 840.256711][ T6168] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8865'. [ 840.472143][ T28] audit: type=1326 audit(2000000202.790:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 840.495607][ T28] audit: type=1326 audit(2000000202.790:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 840.554207][ T28] audit: type=1326 audit(2000000202.840:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 840.667569][ T28] audit: type=1326 audit(2000000202.840:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6179 comm="syz.5.8869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 840.722915][ T6177] loop4: detected capacity change from 0 to 8192 [ 840.767692][ T6177] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 840.794535][ T6193] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8872'. [ 840.819034][ T6177] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 840.877581][ T6177] REISERFS (device loop4): using ordered data mode [ 840.884233][ T6177] reiserfs: using flush barriers [ 840.967307][ T6177] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 841.038133][ T6177] REISERFS (device loop4): checking transaction log (loop4) [ 841.245709][ T6203] loop5: detected capacity change from 0 to 4096 [ 841.288918][ T6203] EXT4-fs: inline encryption not supported [ 841.335383][ T6203] EXT4-fs (loop5): Test dummy encryption mode enabled [ 841.354717][ T6177] REISERFS (device loop4): Using tea hash to sort names [ 841.374573][ T6177] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 841.419013][ T6203] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 841.434404][ T6215] loop1: detected capacity change from 0 to 256 [ 841.469662][ T6203] System zones: 0-5 [ 841.506687][ T6215] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 841.548165][ T6215] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 841.561333][ T6203] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.829245][ T5337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.915016][ T6231] loop3: detected capacity change from 0 to 736 [ 842.464828][ T6262] loop1: detected capacity change from 0 to 512 [ 842.488851][ T6260] loop3: detected capacity change from 0 to 256 [ 842.622329][ T6260] FAT-fs (loop3): Directory bread(block 64) failed [ 842.650323][ T6260] FAT-fs (loop3): Directory bread(block 65) failed [ 842.659517][ T6260] FAT-fs (loop3): Directory bread(block 66) failed [ 842.666252][ T6260] FAT-fs (loop3): Directory bread(block 67) failed [ 842.674829][ T6262] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.8885: bg 0: block 393: padding at end of block bitmap is not set [ 842.676031][ T6260] FAT-fs (loop3): Directory bread(block 68) failed [ 842.703529][ T6260] FAT-fs (loop3): Directory bread(block 69) failed [ 842.714512][ T6260] FAT-fs (loop3): Directory bread(block 70) failed [ 842.721519][ T6260] FAT-fs (loop3): Directory bread(block 71) failed [ 842.728886][ T6260] FAT-fs (loop3): Directory bread(block 72) failed [ 842.735791][ T6260] FAT-fs (loop3): Directory bread(block 73) failed [ 842.787863][ T6262] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 842.830956][ T6262] EXT4-fs (loop1): 2 truncates cleaned up [ 842.852339][ T6262] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.930284][ T28] audit: type=1326 audit(2000000205.250:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.5.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 843.044366][ T28] audit: type=1326 audit(2000000205.250:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.5.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 843.129876][ T6262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 843.167458][ T28] audit: type=1326 audit(2000000205.270:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.5.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 843.219247][ T6262] EXT4-fs (loop1): can't enable nombcache during remount [ 843.275370][ T28] audit: type=1326 audit(2000000205.290:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.5.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 843.376481][ T28] audit: type=1326 audit(2000000205.290:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.5.8887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f87d6b9cdd9 code=0x7ffc0000 [ 843.452013][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.579150][ T6299] bridge_slave_0: invalid flags given to default FDB implementation [ 843.884560][ T6307] set_capacity_and_notify: 1 callbacks suppressed [ 843.884575][ T6307] loop3: detected capacity change from 0 to 4096 [ 843.944876][ T6307] __ntfs_warning: 20 callbacks suppressed [ 843.944894][ T6307] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 844.085475][ T6307] ntfs: volume version 3.1. [ 844.402740][ T6307] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 844.547358][ T27] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 844.799331][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 844.831463][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 844.863480][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.910130][ T27] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 844.928235][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.949198][ T6309] loop1: detected capacity change from 0 to 32768 [ 844.978480][ T27] usb 5-1: config 0 descriptor?? [ 844.987915][ T6333] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 845.034073][ T6309] JBD2: Ignoring recovery information on journal [ 845.229876][ T6309] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 845.486528][ T27] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x2 [ 845.523975][ T27] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 845.554813][ T27] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 845.593561][ T27] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 845.607312][ T27] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 845.622639][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 845.633925][ T27] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x0 [ 845.685393][ T27] gt683r_led 0003:1770:FF00.0006: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 845.781145][ T27] usb 5-1: USB disconnect, device number 28 [ 845.811686][ T1190] gt683r_led 0003:1770:FF00.0006: failed to send set report request: -19 [ 845.880115][ T6401] ip6gretap1: entered allmulticast mode [ 846.005688][ T6397] fido_id[6397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 846.482034][ T6426] loop5: detected capacity change from 0 to 4096 [ 846.518192][ T6432] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.8916'. [ 846.581334][ T6432] netlink: 5364 bytes leftover after parsing attributes in process `syz.1.8916'. [ 846.591874][ T6439] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 846.609183][ T6438] tipc: Disabling bearer [ 848.143188][ T6498] loop5: detected capacity change from 0 to 4096 [ 848.177064][ T6507] loop4: detected capacity change from 0 to 256 [ 848.185600][ T6498] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 848.185644][ T6507] exfat: Deprecated parameter 'utf8' [ 848.200185][ T6507] exfat: Deprecated parameter 'utf8' [ 848.206074][ T6507] exfat: Deprecated parameter 'namecase' [ 848.213730][ T6507] exfat: Deprecated parameter 'namecase' [ 848.232548][ T6507] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 848.334871][ T6498] ntfs3: loop5: Failed to load $Extend (-22). [ 848.345679][ T6498] ntfs3: loop5: Failed to initialize $Extend. [ 848.377451][ T28] audit: type=1800 audit(2000000210.680:374): pid=6507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8936" name="file1" dev="loop4" ino=1048714 res=0 errno=0 [ 848.560751][ T28] audit: type=1800 audit(2000000210.880:375): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8934" name="bus" dev="loop5" ino=33 res=0 errno=0 [ 848.618617][ T6498] ntfs3: loop5: ino=21, "bus" fallocate(0x11) is not supported [ 849.870512][ T6531] loop5: detected capacity change from 0 to 32768 [ 849.960664][ T6531] JBD2: Ignoring recovery information on journal [ 850.145904][ T6531] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 850.370705][ T28] audit: type=1800 audit(2000000212.690:376): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8942" name="file1" dev="loop5" ino=17058 res=0 errno=0 [ 850.613959][ T5337] ocfs2: Unmounting device (7,5) on (node local) [ 851.228016][ T6596] nbd: must specify at least one socket [ 851.534231][ T6562] loop3: detected capacity change from 0 to 32768 [ 851.799098][ T6562] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 852.026209][ T6592] loop5: detected capacity change from 0 to 32768 [ 852.119531][ T6592] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 852.163842][ T6592] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 852.470543][ T6592] XFS (loop5): Ending clean mount [ 852.475870][ T6562] XFS (loop3): Ending clean mount [ 852.935090][ T5337] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 852.989943][ T1368] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 853.613801][ T6674] loop5: detected capacity change from 0 to 128 [ 853.817871][ T5785] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 853.924479][ T6682] loop4: detected capacity change from 0 to 2048 [ 854.034289][ T6682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.333896][ T6697] loop1: detected capacity change from 0 to 1024 [ 854.446418][ T6697] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 854.537683][ T6697] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 854.618160][ T6697] EXT4-fs (loop1): orphan cleanup on readonly fs [ 854.701141][ T6697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.8978: Invalid inode table block 0 in block_group 0 [ 854.761160][ T6697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 854.791466][ T6697] EXT4-fs error (device loop1): ext4_quota_write:7342: inode #3: comm syz.1.8978: mark_inode_dirty error [ 854.829290][ T6697] Quota error (device loop1): write_blk: dquota write failed [ 854.864325][ T6697] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 854.901733][ T6697] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.8978: Failed to acquire dquot type 0 [ 854.938916][ T6697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.8978: Invalid inode table block 0 in block_group 0 [ 854.982566][ T6697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 855.012364][ T6697] EXT4-fs error (device loop1): ext4_ext_truncate:4519: inode #15: comm syz.1.8978: mark_inode_dirty error [ 855.059226][ T6697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.8978: Invalid inode table block 0 in block_group 0 [ 855.059527][ T6697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 855.059756][ T6697] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 855.059956][ T6697] EXT4-fs error (device loop1): __ext4_get_inode_loc:4496: comm syz.1.8978: Invalid inode table block 0 in block_group 0 [ 855.060110][ T6697] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 855.060262][ T6697] EXT4-fs error (device loop1): ext4_truncate:4301: inode #15: comm syz.1.8978: mark_inode_dirty error [ 855.060423][ T6697] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 855.060672][ T6697] EXT4-fs (loop1): 1 truncate cleaned up [ 855.062189][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 855.453754][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.169374][ T28] audit: type=1326 audit(2000000218.490:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2c39cdd9 code=0x7ffc0000 [ 856.194835][ T6757] loop5: detected capacity change from 0 to 128 [ 856.228039][ T28] audit: type=1326 audit(2000000218.490:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2c39cdd9 code=0x7ffc0000 [ 856.275973][ T6756] loop4: detected capacity change from 0 to 1024 [ 856.313675][ T6757] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 856.353895][ T28] audit: type=1326 audit(2000000218.490:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2c39cdd9 code=0x7ffc0000 [ 856.379891][ T6757] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 856.396290][ T28] audit: type=1326 audit(2000000218.510:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f2f2c39cdd9 code=0x7ffc0000 [ 856.503485][ T28] audit: type=1326 audit(2000000218.510:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2c39cdd9 code=0x7ffc0000 [ 856.607532][ T28] audit: type=1326 audit(2000000218.580:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f2c35d60e code=0x7ffc0000 [ 856.660714][ T5337] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 856.701414][ T28] audit: type=1326 audit(2000000218.580:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f2c35d60e code=0x7ffc0000 [ 856.802306][ T28] audit: type=1326 audit(2000000218.580:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f2c35d60e code=0x7ffc0000 [ 856.907804][ T28] audit: type=1326 audit(2000000218.580:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f2c35d60e code=0x7ffc0000 [ 857.041378][ T28] audit: type=1326 audit(2000000218.580:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.8993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2f2c35d60e code=0x7ffc0000 [ 857.308233][ T6731] loop3: detected capacity change from 0 to 32768 [ 857.337468][T29113] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 857.423414][ T6731] JBD2: Ignoring recovery information on journal [ 857.543445][T29113] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 857.552914][T29113] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.561323][T29113] usb 6-1: Product: syz [ 857.566537][T29113] usb 6-1: Manufacturer: syz [ 857.571341][T29113] usb 6-1: SerialNumber: syz [ 857.593659][T29113] usb 6-1: config 0 descriptor?? [ 857.630983][T29113] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 857.766830][ T6731] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 858.090304][T29113] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 858.356290][ T27] usb 6-1: USB disconnect, device number 2 [ 858.377108][ T1368] ocfs2: Unmounting device (7,3) on (node local) [ 858.917671][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8999'. [ 858.940488][ T6839] block nbd0: Unsupported socket: should be TCP or UNIX. [ 859.208889][ T6788] loop1: detected capacity change from 0 to 32768 [ 859.248375][ T6788] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 859.755086][ T6868] loop3: detected capacity change from 0 to 64 [ 859.827035][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9006'. [ 859.961566][ T6865] bridge0: entered promiscuous mode [ 860.058299][ T6865] macsec1: entered promiscuous mode [ 860.063777][ T6865] macsec1: entered allmulticast mode [ 860.159793][ T6865] bridge0: entered allmulticast mode [ 860.201068][ T6865] bridge0: port 3(macsec1) entered blocking state [ 860.248610][ T6865] bridge0: port 3(macsec1) entered disabled state [ 860.252867][ T6881] loop3: detected capacity change from 0 to 512 [ 860.319710][ T6881] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 860.335297][ T6865] bridge0: left allmulticast mode [ 860.346653][ T6881] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.9009: iget: bad i_size value: 12154757448730 [ 860.370415][ T6865] bridge0: left promiscuous mode [ 860.494254][ T6881] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.9009: couldn't read orphan inode 13 (err -117) [ 860.525287][ T6881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.575084][ T6847] loop5: detected capacity change from 0 to 32768 [ 860.616610][ T6847] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.9003 (6847) [ 860.722218][ T6847] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 860.768604][ T6847] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 860.779468][ T1368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.790464][ T6847] BTRFS info (device loop5): using free space tree [ 860.965498][ T6847] BTRFS info (device loop5): enabling ssd optimizations [ 861.013541][ T6847] BTRFS info (device loop5): auto enabling async discard [ 861.229829][ T6929] loop3: detected capacity change from 0 to 8 [ 861.363529][ T5337] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 861.400564][ T6926] loop1: detected capacity change from 0 to 2048 [ 861.570786][ T6926] NILFS (loop1): invalid segment: Magic number mismatch [ 861.611144][T21796] IPVS: starting estimator thread 0... [ 861.671204][ T6926] NILFS (loop1): trying rollback from an earlier position [ 861.767747][ T6945] IPVS: using max 18 ests per chain, 43200 per kthread [ 861.867355][ T6926] NILFS (loop1): recovery complete [ 861.924679][ T6955] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 863.527969][ T6970] loop4: detected capacity change from 0 to 40427 [ 863.611047][ T6970] F2FS-fs (loop4): invalid crc value [ 863.632148][ T6986] loop3: detected capacity change from 0 to 32768 [ 863.674541][ T6970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 863.683537][ T6986] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.9026 (6986) [ 863.780169][ T6986] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 863.825800][ T6986] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 863.886800][ T6986] BTRFS info (device loop3): using free space tree [ 863.910491][ T6970] F2FS-fs (loop4): Start checkpoint disabled! [ 863.968414][ T6970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 864.148249][ T7026] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 864.154800][ T7026] comedi comedi3: 8255: I/O port conflict (0xffffffffffffff00,4) [ 864.163666][ T7026] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 864.171435][ T7026] comedi comedi3: 8255: I/O port conflict (0x80007,4) [ 864.179966][ T7026] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 864.186507][ T7026] comedi comedi3: 8255: I/O port conflict (0x100,4) [ 864.194060][ T7026] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 864.204332][ T7026] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 864.217512][ T7026] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 864.244916][ T6986] BTRFS info (device loop3): enabling ssd optimizations [ 864.297678][ T6986] BTRFS info (device loop3): auto enabling async discard [ 864.329919][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9021'. [ 864.375520][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9021'. [ 864.778393][ T1368] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 865.012670][ T5920] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop3 scanned by udevd (5920) [ 865.543764][ T7068] loop5: detected capacity change from 0 to 8192 [ 865.594740][ T7068] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 865.676263][ T7068] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 865.686322][ T7068] REISERFS (device loop5): using ordered data mode [ 865.693235][ T7068] reiserfs: using flush barriers [ 865.703322][ T7068] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 865.778685][ T7068] REISERFS (device loop5): checking transaction log (loop5) [ 865.819616][ T7068] REISERFS (device loop5): Using r5 hash to sort names [ 865.827130][ T7068] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 865.971721][ T7001] loop1: detected capacity change from 0 to 40427 [ 866.023593][ T7001] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 866.062927][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 866.062945][ T28] audit: type=1326 audit(2000000228.380:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b99cdd9 code=0x7ffc0000 [ 866.157973][ T7001] F2FS-fs (loop1): invalid crc value [ 866.169502][ T28] audit: type=1326 audit(2000000228.380:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b99cdd9 code=0x7ffc0000 [ 866.206187][ T7001] F2FS-fs (loop1): Found nat_bits in checkpoint [ 866.314471][ T28] audit: type=1326 audit(2000000228.420:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c8b95d60e code=0x7ffc0000 [ 866.462690][ T28] audit: type=1326 audit(2000000228.420:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6c8b95d60e code=0x7ffc0000 [ 866.588567][ T28] audit: type=1326 audit(2000000228.420:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b99cdd9 code=0x7ffc0000 [ 866.697623][ T28] audit: type=1326 audit(2000000228.430:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f6c8b99cdd9 code=0x7ffc0000 [ 866.805693][ T28] audit: type=1326 audit(2000000228.430:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b99cdd9 code=0x7ffc0000 [ 866.912416][ T28] audit: type=1326 audit(2000000228.430:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.9039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8b99cdd9 code=0x7ffc0000 [ 867.049144][ T7112] Invalid ELF header magic: != ELF [ 867.080355][ T7123] loop4: detected capacity change from 0 to 512 [ 867.108975][ T7123] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 867.487356][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 867.552324][ T7145] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 867.934887][ T7164] loop5: detected capacity change from 0 to 256 [ 868.080885][ T7164] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xa393d547, utbl_chksum : 0xe619d30d) [ 868.206626][ T7175] loop1: detected capacity change from 0 to 4096 [ 868.245635][ T7183] loop4: detected capacity change from 0 to 64 [ 868.415116][ T7191] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 868.613373][ T7175] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 868.697615][ T7175] Remounting filesystem read-only [ 868.854213][ T5771] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 868.854292][ T5771] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 868.854320][ T5771] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 868.854336][ T5771] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 868.854359][ T5771] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 868.854374][ T5771] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 869.070639][ T7215] loop1: detected capacity change from 0 to 512 [ 869.095445][ T7215] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 869.147841][ T7215] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #17: comm syz.1.9066: inode has both inline data and extents flags [ 869.148290][ T7215] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.9066: couldn't read orphan inode 17 (err -117) [ 869.169663][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.383648][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.764587][ T7238] loop5: detected capacity change from 0 to 4096 [ 869.874953][ T7238] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 870.077037][ T7248] loop1: detected capacity change from 0 to 4096 [ 870.164285][ T7248] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 870.330570][ T7248] ntfs3: loop1: Failed to load $Extend (-22). [ 870.339919][ T7213] loop4: detected capacity change from 0 to 32768 [ 870.359852][ T7248] ntfs3: loop1: Failed to initialize $Extend. [ 870.500345][ T7213] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 870.524678][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.531600][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.751850][ T7213] XFS (loop4): Ending clean mount [ 870.849160][ T7284] dummy0: entered promiscuous mode [ 870.909004][ T7284] dummy0: left promiscuous mode [ 871.115793][T21271] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 872.095013][ T7333] loop1: detected capacity change from 0 to 1024 [ 872.308003][ T7345] loop3: detected capacity change from 0 to 512 [ 872.319195][ T7333] hfsplus: request for non-existent node 33554434 in B*Tree [ 872.334715][ T7333] hfsplus: request for non-existent node 33554434 in B*Tree [ 872.359203][ T7345] EXT4-fs (loop3): orphan cleanup on readonly fs [ 872.373870][ T7313] loop5: detected capacity change from 0 to 32768 [ 872.387651][ T7345] EXT4-fs error (device loop3): ext4_find_extent:945: inode #4: comm syz.3.9091: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 872.435041][ T7332] hfsplus: request for non-existent node 33554434 in B*Tree [ 872.467731][ T7345] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 872.479671][ T7332] hfsplus: request for non-existent node 33554434 in B*Tree [ 872.484765][ T7345] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 872.524073][ T7313] JBD2: Ignoring recovery information on journal [ 872.590341][ T7345] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 872.609428][ T1698] hfsplus: request for non-existent node 33554434 in B*Tree [ 872.614583][ T7345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 872.635239][ T1698] hfsplus: request for non-existent node 33554434 in B*Tree [ 872.668373][ T7313] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 872.889164][ T1368] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.956447][ T7313] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 873.023678][ T7313] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 873.033843][ T7313] OCFS2: File system is now read-only. [ 873.039647][ T7313] (syz.5.9083,7313,0):ocfs2_trim_mainbm:7610 ERROR: status = -30 [ 873.053123][ T7370] loop4: detected capacity change from 0 to 16 [ 873.092967][ T7370] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 873.150526][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop4 [ 873.218905][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop4 [ 873.274851][ T5337] ocfs2: Unmounting device (7,5) on (node local) [ 873.686536][ T7398] loop4: detected capacity change from 0 to 128 [ 873.730591][ T7398] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 873.826781][ T7404] vivid-000: disconnect [ 873.827450][ T7401] vivid-000: reconnect [ 873.950047][T21271] sysv_free_block: trying to free block not in datazone [ 873.980234][T21271] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 874.150979][ T7419] loop3: detected capacity change from 0 to 64 [ 874.523670][ T7442] loop3: detected capacity change from 0 to 256 [ 874.603553][ T7447] loop1: detected capacity change from 0 to 128 [ 874.633241][ T7447] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 874.650310][ T7447] ext4 filesystem being mounted at /2294/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 874.786613][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 874.986784][ T7462] loop3: detected capacity change from 0 to 4096 [ 874.998949][ T7462] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 875.015258][ T7462] NILFS (loop3): mounting unchecked fs [ 875.156465][ T7462] NILFS (loop3): recovery complete [ 875.169270][ T7470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 875.246285][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9122'. [ 875.277029][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9121'. [ 875.541993][ T7486] loop1: detected capacity change from 0 to 16 [ 875.603199][ T7486] erofs: (device loop1): mounted with root inode @ nid 36. [ 875.784687][ T7494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0003] [ 875.823446][ T7494] System zones: 1-3, 19-19, 35-36 [ 875.861447][ T7494] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 875.893835][ T7502] sch_fq: defrate 36451 ignored. [ 875.935354][ T7494] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 875.986118][ T7510] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 876.054203][ T7494] EXT4-fs warning (device loop3): verify_group_input:151: Cannot add at group 129 (only 1 groups) [ 876.071165][ T5920] udevd[5920]: incorrect cramfs checksum on /dev/loop4 [ 876.146366][ T5920] udevd[5920]: incorrect cramfs checksum on /dev/loop4 [ 876.162534][ T7516] netlink: 'syz.1.9133': attribute type 4 has an invalid length. [ 876.194903][ T7516] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9133'. [ 876.275841][ T1368] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 876.320295][ T7522] exfat: Deprecated parameter 'namecase' [ 876.367567][ T7522] exfat: Deprecated parameter 'namecase' [ 876.426523][ T7522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 876.855534][ T7554] netlink: 'syz.5.9141': attribute type 11 has an invalid length. [ 876.923309][ T7557] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9142'. [ 877.727449][ T5813] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 877.953947][ T5813] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 877.973951][ T5813] usb 4-1: config 0 has no interface number 0 [ 877.990666][ T5813] usb 4-1: config 0 interface 1 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 877.994835][ T7580] set_capacity_and_notify: 4 callbacks suppressed [ 877.994890][ T7580] loop1: detected capacity change from 0 to 32768 [ 878.012033][ T7595] loop5: detected capacity change from 0 to 32768 [ 878.030678][ T5813] usb 4-1: config 0 interface 1 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.102073][ T5813] usb 4-1: config 0 interface 1 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.148655][ T5813] usb 4-1: config 0 interface 1 has no altsetting 0 [ 878.169807][ T5813] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 878.183054][ T7580] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 878.218384][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.282569][ T5813] usb 4-1: config 0 descriptor?? [ 878.411745][ T7598] loop4: detected capacity change from 0 to 32768 [ 878.532858][ T7617] loop5: detected capacity change from 0 to 256 [ 878.553995][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 878.593515][ T7598] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 878.720885][ T7598] XFS (loop4): Ending clean mount [ 878.785386][ T7628] loop1: detected capacity change from 0 to 256 [ 878.876403][ T5813] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0007/input/input39 [ 878.936403][ T7628] FAT-fs (loop1): Directory bread(block 64) failed [ 878.958083][T21271] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 878.970658][ T7628] FAT-fs (loop1): Directory bread(block 65) failed [ 879.004954][ T7628] FAT-fs (loop1): Directory bread(block 66) failed [ 879.047387][ T7628] FAT-fs (loop1): Directory bread(block 67) failed [ 879.054196][ T7628] FAT-fs (loop1): Directory bread(block 68) failed [ 879.103546][ T7628] FAT-fs (loop1): Directory bread(block 69) failed [ 879.161456][ T7628] FAT-fs (loop1): Directory bread(block 70) failed [ 879.234760][ T7628] FAT-fs (loop1): Directory bread(block 71) failed [ 879.277554][ T7628] FAT-fs (loop1): Directory bread(block 72) failed [ 879.301904][ T5813] holtek_kbd 0003:04D9:A055.0007: input,hidraw0: USB HID v0.20 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 879.315009][ T7628] FAT-fs (loop1): Directory bread(block 73) failed [ 879.427829][ T5813] usb 4-1: USB disconnect, device number 53 [ 879.688949][ T7654] fido_id[7654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 880.113094][ T7687] loop4: detected capacity change from 0 to 2048 [ 880.151621][ T7687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 880.643122][ T28] audit: type=1326 audit(2000000242.960:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 880.725867][ T28] audit: type=1326 audit(2000000242.980:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 880.854920][ T28] audit: type=1326 audit(2000000242.990:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 880.947361][ T28] audit: type=1326 audit(2000000243.000:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 880.985393][ T7721] loop4: detected capacity change from 0 to 4096 [ 881.007373][ T28] audit: type=1326 audit(2000000243.000:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 881.077101][ T28] audit: type=1326 audit(2000000243.000:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 881.100072][ T7729] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 881.156107][ T28] audit: type=1326 audit(2000000243.000:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.3.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb119cdd9 code=0x7ffc0000 [ 881.282636][ T7721] NILFS (loop4): nilfs_ioctl_move_inode_block: invalid virtual block address (node): ino=2048, cno=5, offset=63330, blocknr=0, vblocknr=34359803903 [ 881.300845][ T7721] NILFS (loop4): error -2 preparing GC: cannot read source blocks [ 881.426741][ T7696] loop1: detected capacity change from 0 to 40427 [ 881.471029][ T7696] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x7ffff [ 881.501006][ T7696] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 881.523282][ T7696] F2FS-fs (loop1): Image doesn't support compression [ 881.560177][ T7744] loop4: detected capacity change from 0 to 1024 [ 881.571893][ T7696] F2FS-fs (loop1): invalid crc value [ 881.604292][ T7696] F2FS-fs (loop1): Found nat_bits in checkpoint [ 881.734526][ T1698] hfsplus: b-tree write err: -5, ino 25 [ 881.748682][ T1698] hfsplus: b-tree write err: -5, ino 4 [ 881.762878][ T1698] hfsplus: b-tree write err: -5, ino 2 [ 881.775433][ T7696] F2FS-fs (loop1): Start checkpoint disabled! [ 881.805520][ T7696] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 881.955222][ T7760] loop3: detected capacity change from 0 to 256 [ 882.190851][ T1738] kworker/u4:9: attempt to access beyond end of device [ 882.190851][ T1738] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 882.228144][ T1738] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 882.235293][ T1738] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 882.417971][ T7775] nbd: socks must be embedded in a SOCK_ITEM attr [ 882.567762][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9189'. [ 882.608483][ T7782] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9189'. [ 882.956057][ T7797] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 883.009504][ T7797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.484648][ T7825] set_capacity_and_notify: 1 callbacks suppressed [ 883.484666][ T7825] loop5: detected capacity change from 0 to 512 [ 883.589502][ T7825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.724295][ T7825] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 883.854875][ T7839] loop4: detected capacity change from 0 to 1024 [ 883.904448][ T7811] loop3: detected capacity change from 0 to 32768 [ 883.940204][ T7811] JBD2: Ignoring recovery information on journal [ 883.958088][ T7839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 883.976515][ T5337] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.988565][ T7839] ext4 filesystem being mounted at /1049/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 884.012775][ T7811] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 884.140713][ T28] audit: type=1800 audit(2000000246.450:473): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9204" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 884.220578][ T28] audit: type=1800 audit(2000000246.510:474): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9197" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 884.330323][T21271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 884.417019][ T7862] loop1: detected capacity change from 0 to 64 [ 884.505775][ T7862] syz.1.9208: attempt to access beyond end of device [ 884.505775][ T7862] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 884.582718][ T7862] Buffer I/O error on dev loop1, logical block 512, async page read [ 884.622842][ T7862] syz.1.9208: attempt to access beyond end of device [ 884.622842][ T7862] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 884.624738][ T1368] ocfs2: Unmounting device (7,3) on (node local) [ 884.684316][ T7862] Buffer I/O error on dev loop1, logical block 56576, async page read [ 884.795781][ T7872] loop5: detected capacity change from 0 to 4096 [ 884.860837][ T7882] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 885.229691][ T7895] netlink: 'syz.3.9215': attribute type 3 has an invalid length. [ 885.472697][ T7914] [ 885.475152][ T7914] ====================================================== [ 885.478092][T29113] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 885.482214][ T7914] WARNING: possible circular locking dependency detected [ 885.482248][ T7914] syzkaller #0 Not tainted [ 885.501315][ T7914] ------------------------------------------------------ [ 885.508383][ T7914] syz.4.9220/7914 is trying to acquire lock: [ 885.514467][ T7914] ffffffff97691fd8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 885.524657][ T7914] [ 885.524657][ T7914] but task is already holding lock: [ 885.532159][ T7914] ffff88802e93ccb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 885.542637][ T7914] [ 885.542637][ T7914] which lock already depends on the new lock. [ 885.542637][ T7914] [ 885.553089][ T7914] [ 885.553089][ T7914] the existing dependency chain (in reverse order) is: [ 885.562153][ T7914] [ 885.562153][ T7914] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 885.570489][ T7914] __mutex_lock+0x136/0xcc0 [ 885.575607][ T7914] nf_tables_dumpreset_obj+0x72/0xa0 [ 885.581486][ T7914] netlink_dump+0x747/0xe50 [ 885.586585][ T7914] __netlink_dump_start+0x5f1/0x810 [ 885.592427][ T7914] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 885.598713][ T7914] nf_tables_getobj_reset+0x1e1/0x630 [ 885.604673][ T7914] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 885.610344][ T7914] netlink_rcv_skb+0x241/0x4d0 [ 885.615783][ T7914] nfnetlink_rcv+0x2c9/0x24a0 [ 885.621095][ T7914] netlink_unicast+0x751/0x8d0 [ 885.626470][ T7914] netlink_sendmsg+0x8d0/0xbf0 [ 885.631825][ T7914] ____sys_sendmsg+0x5ba/0x960 [ 885.637159][ T7914] ___sys_sendmsg+0x2a6/0x360 [ 885.642673][ T7914] __se_sys_sendmsg+0x1c2/0x2b0 [ 885.648107][ T7914] do_syscall_64+0x55/0xa0 [ 885.653128][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.659613][ T7914] [ 885.659613][ T7914] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 885.667927][ T7914] __mutex_lock+0x136/0xcc0 [ 885.673010][ T7914] __netlink_dump_start+0xf4/0x810 [ 885.678726][ T7914] ip_set_dump+0x15c/0x1f0 [ 885.683897][ T7914] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 885.689512][ T7914] netlink_rcv_skb+0x241/0x4d0 [ 885.694866][ T7914] nfnetlink_rcv+0x2c9/0x24a0 [ 885.698358][T29113] usb 2-1: Using ep0 maxpacket: 8 [ 885.700114][ T7914] netlink_unicast+0x751/0x8d0 [ 885.710506][ T7914] netlink_sendmsg+0x8d0/0xbf0 [ 885.715877][ T7914] ____sys_sendmsg+0x5ba/0x960 [ 885.721226][ T7914] ___sys_sendmsg+0x2a6/0x360 [ 885.722352][T29113] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 885.726459][ T7914] __se_sys_sendmsg+0x1c2/0x2b0 [ 885.726486][ T7914] do_syscall_64+0x55/0xa0 [ 885.745074][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.751637][ T7914] [ 885.751637][ T7914] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 885.759515][ T7914] __lock_acquire+0x2df1/0x7d40 [ 885.760210][T29113] usb 2-1: config 0 has no interface number 0 [ 885.764933][ T7914] lock_acquire+0x19e/0x420 [ 885.764957][ T7914] __mutex_lock+0x136/0xcc0 [ 885.781315][ T7914] ip_set_nfnl_get_byindex+0x67/0x230 [ 885.787277][ T7914] set_match_v1_checkentry+0x71/0x230 [ 885.793238][ T7914] xt_check_match+0x4ea/0xc50 [ 885.798595][ T7914] __nft_match_init+0x67a/0x8d0 [ 885.804032][ T7914] nf_tables_newrule+0x176c/0x2880 [ 885.809726][ T7914] nfnetlink_rcv+0x113e/0x24a0 [ 885.815081][ T7914] netlink_unicast+0x751/0x8d0 [ 885.817906][T29113] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 885.820409][ T7914] netlink_sendmsg+0x8d0/0xbf0 [ 885.834852][ T7914] ____sys_sendmsg+0x5ba/0x960 [ 885.840248][ T7914] ___sys_sendmsg+0x2a6/0x360 [ 885.845595][ T7914] __se_sys_sendmsg+0x1c2/0x2b0 [ 885.849716][T29113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.851006][ T7914] do_syscall_64+0x55/0xa0 [ 885.864009][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.870722][ T7914] [ 885.870722][ T7914] other info that might help us debug this: [ 885.870722][ T7914] [ 885.881007][ T7914] Chain exists of: [ 885.881007][ T7914] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 885.881007][ T7914] [ 885.895528][ T7914] Possible unsafe locking scenario: [ 885.895528][ T7914] [ 885.898562][T29113] usb 2-1: Product: syz [ 885.903097][ T7914] CPU0 CPU1 [ 885.903105][ T7914] ---- ---- [ 885.903112][ T7914] lock(&nft_net->commit_mutex); [ 885.903237][ T7914] lock(nlk_cb_mutex-NETFILTER); [ 885.928451][T29113] usb 2-1: Manufacturer: syz [ 885.930975][ T7914] lock(&nft_net->commit_mutex); [ 885.931000][ T7914] lock(nfnl_subsys_ipset [ 885.938463][T29113] usb 2-1: SerialNumber: syz [ 885.943251][ T7914] ); [ 885.943259][ T7914] [ 885.943259][ T7914] *** DEADLOCK *** [ 885.943259][ T7914] [ 885.943265][ T7914] 1 lock held by syz.4.9220/7914: [ 885.943278][ T7914] #0: ffff88802e93ccb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 885.980011][ T7914] [ 885.980011][ T7914] stack backtrace: [ 885.985962][ T7914] CPU: 0 PID: 7914 Comm: syz.4.9220 Not tainted syzkaller #0 [ 885.993445][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.003741][ T7914] Call Trace: [ 886.007076][ T7914] [ 886.010061][ T7914] dump_stack_lvl+0x18c/0x250 [ 886.014817][ T7914] ? load_image+0x420/0x420 [ 886.019389][ T7914] ? show_regs_print_info+0x20/0x20 [ 886.019993][T29113] usb 2-1: config 0 descriptor?? [ 886.024642][ T7914] ? print_circular_bug+0x12b/0x1a0 [ 886.024678][ T7914] check_noncircular+0x2fc/0x400 [ 886.040157][ T7914] ? print_deadlock_bug+0x5d0/0x5d0 [ 886.045437][ T7914] ? lockdep_lock+0xf5/0x230 [ 886.050101][ T7914] ? _find_first_zero_bit+0xd3/0x100 [ 886.055538][ T7914] __lock_acquire+0x2df1/0x7d40 [ 886.060500][ T7914] ? mark_lock+0x94/0x320 [ 886.064951][ T7914] ? verify_lock_unused+0x140/0x140 [ 886.070212][ T7914] ? __lock_acquire+0x1273/0x7d40 [ 886.075398][ T7914] lock_acquire+0x19e/0x420 [ 886.080048][ T7914] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 886.085800][ T7914] ? __might_sleep+0xe0/0xe0 [ 886.090729][ T7914] ? __lock_acquire+0x1347/0x7d40 [ 886.095809][ T7914] ? read_lock_is_recursive+0x20/0x20 [ 886.101254][ T7914] __mutex_lock+0x136/0xcc0 [ 886.105825][ T7914] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 886.111461][ T7914] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 886.117071][ T7914] ? ip_set_pernet+0x23/0x230 [ 886.121808][ T7914] ? mutex_lock_nested+0x20/0x20 [ 886.126811][ T7914] ? ip_set_pernet+0x23/0x230 [ 886.131550][ T7914] ? ip_set_pernet+0x23/0x230 [ 886.136290][ T7914] ip_set_nfnl_get_byindex+0x67/0x230 [ 886.141718][ T7914] set_match_v1_checkentry+0x71/0x230 [ 886.147157][ T7914] xt_check_match+0x4ea/0xc50 [ 886.151909][ T7914] ? xt_check_proc_name+0x270/0x270 [ 886.157187][ T7914] ? __stack_depot_save+0x1f/0x630 [ 886.162356][ T7914] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 886.168761][ T7914] __nft_match_init+0x67a/0x8d0 [ 886.173681][ T7914] ? ___sys_sendmsg+0x2a6/0x360 [ 886.178596][ T7914] ? nft_match_large_dump+0x50/0x50 [ 886.183876][ T7914] ? nf_tables_newrule+0x150e/0x2880 [ 886.189235][ T7914] ? rcu_is_watching+0x15/0xb0 [ 886.194062][ T7914] ? nf_tables_newrule+0x150e/0x2880 [ 886.199424][ T7914] ? __kmalloc+0xe2/0x230 [ 886.203825][ T7914] nf_tables_newrule+0x176c/0x2880 [ 886.209011][ T7914] ? nf_tables_delchain+0x1060/0x1060 [ 886.214450][ T7914] ? __lock_acquire+0x7d40/0x7d40 [ 886.219533][ T7914] ? mutex_unlock+0x10/0x10 [ 886.224119][ T7914] ? __nla_parse+0x40/0x50 [ 886.228592][ T7914] nfnetlink_rcv+0x113e/0x24a0 [ 886.233440][ T7914] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 886.239173][ T7914] ? __lock_acquire+0x7d40/0x7d40 [ 886.244259][ T7914] ? netlink_deliver_tap+0x2e/0x1b0 [ 886.249523][ T7914] netlink_unicast+0x751/0x8d0 [ 886.254361][ T7914] netlink_sendmsg+0x8d0/0xbf0 [ 886.259194][ T7914] ? netlink_getsockopt+0x590/0x590 [ 886.264461][ T7914] ? aa_sock_msg_perm+0x94/0x150 [ 886.269460][ T7914] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 886.274817][ T7914] ? security_socket_sendmsg+0x80/0xa0 [ 886.280342][ T7914] ? netlink_getsockopt+0x590/0x590 [ 886.285709][ T7914] ____sys_sendmsg+0x5ba/0x960 [ 886.290620][ T7914] ? __asan_memset+0x22/0x40 [ 886.295286][ T7914] ? __sys_sendmsg_sock+0x30/0x30 [ 886.300429][ T7914] ? __import_iovec+0x5f2/0x850 [ 886.305339][ T7914] ? import_iovec+0x73/0xa0 [ 886.309907][ T7914] ___sys_sendmsg+0x2a6/0x360 [ 886.314659][ T7914] ? __sys_sendmsg+0x2a0/0x2a0 [ 886.319529][ T7914] __se_sys_sendmsg+0x1c2/0x2b0 [ 886.324527][ T7914] ? __x64_sys_sendmsg+0x80/0x80 [ 886.329530][ T7914] ? lockdep_hardirqs_on+0x98/0x150 [ 886.334808][ T7914] do_syscall_64+0x55/0xa0 [ 886.339286][ T7914] ? clear_bhb_loop+0x40/0x90 [ 886.344143][ T7914] ? clear_bhb_loop+0x40/0x90 [ 886.348900][ T7914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 886.354861][ T7914] RIP: 0033:0x7f6c8b99cdd9 [ 886.359339][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.379009][ T7914] RSP: 002b:00007f6c8c892028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.387579][ T7914] RAX: ffffffffffffffda RBX: 00007f6c8bc15fa0 RCX: 00007f6c8b99cdd9 [ 886.395620][ T7914] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 886.403735][ T7914] RBP: 00007f6c8ba32d69 R08: 0000000000000000 R09: 0000000000000000 [ 886.407057][T29113] usb 2-1: USB disconnect, device number 59 [ 886.411744][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.411762][ T7914] R13: 00007f6c8bc16038 R14: 00007f6c8bc15fa0 R15: 00007ffceb5538a8 [ 886.411786][ T7914] [ 886.411869][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.443420][ C0] vkms_vblank_simulate: vblank timer overrun [ 886.795445][ T7923] loop5: detected capacity change from 0 to 40427 [ 886.807550][ T7923] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 886.816101][ T7923] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 886.830927][ T7923] F2FS-fs (loop5): invalid crc value [ 886.841124][ T7923] F2FS-fs (loop5): Found nat_bits in checkpoint [ 886.912178][ T7923] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 886.921313][ T7923] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 886.979979][ T5337] syz-executor: attempt to access beyond end of device [ 886.979979][ T5337] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 886.996789][ T5337] F2FS-fs (loop5): Stopped filesystem due to reason: 3