last executing test programs: 4m19.27637881s ago: executing program 2 (id=138): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1) 4m19.086650277s ago: executing program 2 (id=139): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000100000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547e9f17dbe9abc89b6e0704", 0x0, 0x3696, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m18.931425241s ago: executing program 2 (id=141): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 4m18.726450598s ago: executing program 2 (id=144): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@nogrpid}, {@usrquota}, {@noauto_da_alloc}]}, 0xfd, 0x55a, &(0x7f0000000b80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 4m18.431374628s ago: executing program 2 (id=145): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xfe6a, &(0x7f00000014c0)=""/4098, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 4m17.566229756s ago: executing program 2 (id=148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 4m17.323150724s ago: executing program 32 (id=148): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000240)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) 4m12.060789555s ago: executing program 1 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcf14}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x34}}, 0x800) 4m11.957276178s ago: executing program 1 (id=188): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file1\x00', 0x200000, &(0x7f0000003e00)=ANY=[@ANYBLOB="009183ca169ea49b017c4525460e942861bdc4abce9dbb90bc2b4e8baf45173cca8416aad7588b75890f0417639f4a0f9733c06e63ecdf790818598bcab8ec62d21a3221757ec98d355e6d4f1794d2254f18beca38ff286a24f78e2ce4147c97a358e0d6f00bd0e176a499868ac13b8e5485922a1a05851e32a3147b22f9c663", @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="aad0927d171ab6ed4625a13e266c0fc192314db2fbb98e261d8bb2024b8bbe174b5cd9de54b443360b97bb1ec2ea52a5bd8083c08ae37ebed14821a37f56f7a8b7a7dc7a419aa6310594e1a1c5c69a710d1584b4931b3357683835e090e4234f0caca9f888acc15c31d0b8efbde555518749c84dc8708c6af12c2d163591b45ad4d5b77a8cc9cc304af3faf9f938cc1db64ad160437d1948fbc60fdb8217abf43bc44ca1d34f4334e0dc7e1d534e2e45c8a6b0071dd1b1028759fb0129cd4748a3796d4cb0e657566670aa7d903229ac1aeadf49dcf23344ffe21ad08ef0b51ae1bd57b0ead3fda73d1a68ab9d0d4f63b3a0076d0cb74a2354dc7b5b758d2fe053446a64ad81ca5195f9d1aef33b06b4b6d6f5d7a27b6d01ab4283cd0aafd31c1b1ed36667cf21af2c4bba83b50c0e4e6195599141dda87d81c5127fbb95fb0f0d6808ffbe03151d2470b7d589ecb81ade103c3de74961bb6cb0017e587b2120f223769bd9bb18e351e98ff84d1db7672a9049f94a750c58396a36161661600c3cf51fb217cbb3c953e43c156e368ad52fd0a62081af1dd6661015e57bfecf450d701d9154b80fb17c91d9dccf503fe35decdf426f37d53008c13d2d941a7adb27ae7959248b7e2445c758648d30a00936cbab5469f87ae311940cf50e688f145f6e08eab2ab67825b056c9149f799cd5593d196433877a3b01e2c6f2ea709c9b55462eb4aae8b77a94dd87eee2c3b5de11cb909a0f64022e501025678c92db65a2928e3c63800c8af5292f77f2822b83f25a2503159b4568ac6b54610af970c8908af5742d283c3e6f25528ecacfe27f81bf9e71c71fadb4e76ec95c6c0a262ea718d54589d36a7e10def28ea683cb35240d6725468e2356e03ebdb830c3503c4036e9ead8eab18f0f589f80069061e8dc0b5aa96968984117588bb6c65de427c0c4ae8ba28e0236a47b1dbac1570dc5a9124b0ad870f78eab27169c1f3a04b8f07e568ef30940601c0b1fb13e96b0124f0fb42cab0f56f5073de8df5428a74dfed45371e3529c5d60b8e052ddb86455e30cf4b68cbf462496be1efa9f5ebd492a134a4e6866d577f2e3c80bd5decd270665b7fbdfcb012d1a54f014b3575dfd74e6869f0f74da7928f7e9289a27647a0397304d5f97d00abca2221e83543047697d58c242f01f270f27153545f124bad9075bc0f8cf5d89f614ecab61c8d516c627fa669e6c290d41f25e0d1cd755839df4830cfc59fe1ea65daf9d7be8458d225a63d4176170e812987a1e8925b97981d94b07b560b2dde0274448efc78148695bf74aeacb4aef4c94b12a82480bd52b94931311ce44cd36cc60a56cd366200d02dfe6bc66a60617aabbf87795acadbd90130defb89ce7137d6c75d73f6a8f644a2130d7d7a49538c894cc37f17ba44850dc7e73c0c8fd5ecf10a04fc2094b67cc12304777d71f42248b03fe8d849c172e4a3dcbbb77619bd5cd09b38381380eac0800a3b20f6d92909dd31ec3fabaa82a2d1626ada5e3b9e848cfa18b6d5b6a82426af3c7cd906175b6c1882039897482d18c59bd2b1109d629ffb5e29c89f0f7cc06a9a049f2678df3df7f1796e6d256c1f9daa08a891d6759ea9fe83cf8261c30f68d08d4f347d5d5922fa76c37d7476d896f5cca2d5377097517f9fe49f4875d783ff19f11f332a61f18c2370307f7ddce5a8870325e05e12d24a876b2ee00da2cf67c3c559c394b072938088a3d64382674dfcd9644d552fcbbd7c1fce4a77afbe8a1479c3fa30d73064918468acef39aa96018bbfdc48f5b2a2c194c78f6dc8efc85f76d787c79d1f75d97b25da2d6eaa13ef6723668c09a3e0346750a6dbd3d471c2b836cab86fba06395d037c2c8a3000ab716ab8b7fe1fbc601e99f0bac1078b2fb16acaa4b268815e150585f48cf1a39ec645e70605610457953accec149f32f352df4d1d20fce8309a2efa8f39bd1aacd54475792b736cd150bdd58f5c17eb519b370f68fe401f462409f6659809e6d03819579e468f66feed5a52019a0797e73c95468bc5f764ca4c741504846478d7b8526efee07d7fde90d3af26e6c2a8395b224ac02fe048a3c14b7711dc676f49ae2b34bc6b6ef6eb52ae491484f87f5c7d03ebef3dc12755143c63fbf205cab7f27b383fbed3a978181a28209ee55e45f6540beef11a3260144e10c19ee4d31533e29d911e6b56d7d94c53d89935157451e2ce261482feaa104051d6b9cf5d3f33ef0d9215e3b1af2fa1a68f3908ab49fffef3047a7e3777a5a4a7b8a2fd131b059d5cd4a9ae88151591c7a8f8046f1493e88d9846ee3a4d18081f6fc9d056a80c0f3b1db85835fbb184ee7a9a75de1186fe4d53ab17b3187bd360a7f1c7f14a8c3abc9c6317f7f5fccd2d1c15d486c0d65075c3b7c892ff9635886ac636da49f8d9f7e68623212c695cf1d66e1e6817fe3032acf5d2f6ee4bb53fcfc490cb50ca3298e86a2e631725220e8779acf4be7d2b898edf66e5ba68c72422aa79c42132b5738340bd600bf45db23a7ef11ebcd725a699314af619a998980406466c616ad7b31dc13ca29e8ef55bb39106a8996ff6774e03b1ebdf7ab08fd540e731efd89e38fdf2d1ff1d795ab8019543e3d7022d20e4c379753517dc91df39d00a3608db47e9b61d40cc3e341170a76a5d89f28d65faf41e87033befbf36530cf4d638f974973b2623a19ebfe3f3443a920edfd7c8abd8bf9192ff2db078ab9a20507b3eb54b736877d2b26b8e21ae7df7a2b557de6e04e5760cfa81c1ba0eb9734c05be567b25bb1f283962229d0af9292d2845f718e36e53bb5a64eb2b9489cb3d5b73aa5d1f62a347ab21459be6b0e26788da9b97288a7488211b87a690607d2dd7d4cacf1d4564d315bbc8bf2a426101b67940387aa488ad800a61379ef7c9d70f46248716b02886ec58bf7ec7ae7fc884b498e3fd09df63e90606381a005057c5a3b3e2bdfa9d3e8dc4c413cdbf44aef2c48d76bf19271359dc56aa0660fbd5523b6ddeb76cf28d5040fd2fc59816008b13c93803e97d551a4ff6b0557b80906c901e83654bf561508ec8586b688045b90720881a39d133e2f0969cc3a179c6feed69dd8f896ec134a6bdea8156e31f4e6f4330caaadf1c765a24311fc198fd40112b871c8dfa8b9ec12ababe7dce063493569d695f09373059d2eb6d60a2363d6463b070196a053f48df85a1729b513ba8c75674d27b1f1b0cc93763d8fa6ea14576ffaf1f7f71554e389c7b1621547d4d988297b044fb089d268ff5058b5adbae5fc75b9bd1f10971e1d055070ec80841f21a590d9f743c2b27830f93ff4afb1d9d031161210585f88d80e50fbece834e329248a2b40606b2e76e8d92e076646647ce3320241b700c17d59c251cd2fbf8d49e29ae859b26e844037632f980d83f318b74a5870c4b750287b7fd15ef87e3df2234512a7011df63083f9c5859e4f105125a19564a8e9af12be0a6787cf41ed12c5704bf869ec586f6bb8b8decfb9558f94d0a771e5188cacb9c7c4b8b8aa50b20a5a491357b5df87dc6b3530600a92b92c48c01a7f7144c1626006e820d050f3c7002ab6a32efc18a20c1c21690f1f43abeeba42d8baa2e77b45a7bafc67fb37be4262c7af216094655ee622712d4c8bd3db7d97e5d2a3b30891f32b49fd3c64336af562c56f49d755a20446a3bb39e127cfd554b9682c70e33f2fa882496b5c68d85e942210d9f1de1623c96a34d1e4fd7ad75c9c1cf7211b1ef9396efa59ec272bbcda426d243b6cc66fc2c192080eb4e523472f4e5670cb1f6fb7e3570222e945309711252ae1c870755db923ac69c1cd290b835d5f231c7834b4a1d7167c42b812db027e445f78cdc7ccbb861fd89984a920fc69bf54b8fd18c19ffc5ce5be3cb5f916d483820471c0cb81ca828706b9b05e1c344b563e646f80c0e203246cb96bfe4978db00fb8a0c66d6f77e39ec6dec4e011efda43e103e11186d321bee59e081b87afdc4d394d57bbc1f207d009deb1cb3c1cd1c8c323f597bb6871311d46ef0ad72f16a8912c566f180383375ca1b49575357a3ee7f5728013030913e4f71c71575fb92be62e609bcd9b9664e60df73e9159aa1a3402b6b9e33bcfb6001ba87e67e85f68163d496f454f6cfa5d44add61607a299bddb2e056e0b3adaf9edc7719e1b68779fb140f69bd2733390b6598e6aa0d3932c46d5d829c4cc0f3fd1d8966b1c4480c4a8f9afb0653f9ae5509d9ebc3ebae21ca9af78c48cff27371ee5b9f70b9e6b7e88516458315042016bd7ab076fd0ef1e5d0b939cfbca5dc1960c17c1274cf4ff3e9fddfe13338d6022e04e7e88b891b6311cba8b40a33aa3856563a697e695ce6ff0dca7decd6fc95cbc5aa3527b78c985d9e161cc12ac759a142d29349a977b162af541e6fb36be1eede61e24453ca8ffae6374283ff33a080ce78536c09a00aa0c0271083dc8ff8925a71c85d66e8562de271a81167a8b1287e9559b9f00089729c98dacf90d6dda9906a9a218e88849f1e9420b93a3a9b47003cbb37cfcba02456ab80d1db7d74e385df3662a9c699939658d519801b979f97a9c09beb4f568dd78264714a4bdb59b9965de2ef56f583fe9544f27b256b2f4c47000f4864819d5c89844784e796c90d99e5f175061790787d57b5fe5960addeafdb68c57f773389ece6398e72f514f42ecb45914784a89bd4e65d85e0e8dd30832c480456d33fcd41b89ca3c8536952bfe9be375665b89efa1753ab03a29ee2aa2dc72c294d53ef58a8a3d7e487b7cd871df9780de74233816732dc7cc7e028573cf34fedd6f6c1dda57c705d2ffe91dd75f7aa29ee1bc92d593c6226607a5ad57f8d210bcdd1d9f1922521f593cdec30626636224fe2fe532ffde16545de47135bf4ba914deb80aecc543ef455e4ae53846f164f22c82596dc12002aff4c090bcad9110cbca34070023b57f0eb0b88bd34624f2b7ac21c1b4f6fe15c065330381c4464533b8c78438c14985f703890acb1399b161771e43d3d21e713c41de2ff507d6b601a270a35949aff09bf099478ad049b89ecc4b62639b72d7b907e8ba5e31341dbc71fa3a228e00bdaeac2c9046eca69cee1cabc0611bb0015a6aef8d379c0761feb8bfe220f2b83b1b12d4f69972cc90209f69daf155e7fe1454923dffbed497bf7e51224c49008de9adcc810d2c61ea2ff929f85e7e926a8b37628fb5bef548118ebe6370a202907f23624900d2709b9595bf7e6b2bcec7ba6e6a07f7a1bede794ef370cb2d359c35424303957bfcf4a9c2422d322cb97df85146d01cf8e1f10ffe2ff461ab891f8cd49cdc15931b1772a9f14f89169e4092959a0e2672472d8ae175af6dad036bef596cdda69aadce8e24a2098fcb65f33a670755bd481053b3a7e2d750f189f6c0759ed19520a43f4f3b07fdf4f24a696a956a365148843f217b4471aa783f2f8d55a14d998d27a476fc5a4e894a415670a3709c903a73efb6c4e54405da692a6eeb448eec4eed68db0640955d80d74f46f9fdd1ac26cac304593e383e893d175063967ff159d24ce2483ca08725a80f1abdb5ff468d71ce1e2bce458128ba17a12063602b99345ca39b7e60d9ab533db96e4d042573950571d48a4909a8a917433646dbe68f219d539d870ae3f9f4011b38c7b7d2c979d96316e01d85f9328b7ce16e1d30969a7fd3cb91048728cdf0273281f3d5e8a4d7f490480a71db36f87d7059a13589d56b2bb9c6a7af4bc458c8d4cba29cf244c1ad472e8fcfd2bbaa52854d409c"], 0x1, 0xee7, &(0x7f0000001e40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0x4, 0x0) getdents64(r0, 0x0, 0x10) 4m11.449406465s ago: executing program 1 (id=190): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x1, 0x40000171}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 4m11.161650484s ago: executing program 1 (id=192): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000280)={[{@nogrpid}, {@bh}, {@bsdgroups}]}, 0x0, 0x52c, &(0x7f0000000640)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r0, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x220) 4m10.276563444s ago: executing program 1 (id=197): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x298890, 0x5, 0x809, 0x7, 0x9, 0x0, 0x0, 0x20, 0x7bfd}}, 0x50) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 4m9.834341748s ago: executing program 1 (id=198): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 4m9.281644376s ago: executing program 33 (id=198): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 3m42.961780912s ago: executing program 4 (id=358): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x627b, &(0x7f0000000200)="$eJzs3U9vHGcdB/Df7D//KU2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihq5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4q3v//BsFRFv/yItOB7xuehH9CJWmnotIlbWjuf1BxHxbGw1xzMRMVyKqHLjUxGvRsTHxyLu3b+13iw6t89+fO9Pf//dj574wd/+MDz9nz/f6L82ab2bN3/977/cPvj+AgAAQInquq6r9DH/RPp83+u6UwDAXOTX/zrJy9ULV28uWH/UarVafQjrtnpvt9tFRGy2t2neMzgdDwCHzGZ80nUX6JD8izaIiCe67gSw0KquO8BM3Lt/a71K+Vbt14O17fZ8Lciu/Dernfs7Jk2nGb/GZF7PrzvRj6cn9GdlTn1YJDn/3lj+S6l9lKazzn9eJuU/2r71qTg5//748T/m6OTf2zP/UuX8B4+Uf1/+AAAAAACwwPK//x/v+Pzv0uPvyr487Pzv2pz6AAAAAAAAAACftccd/29HZfw/AAAAWFTNZ/XGb449WDbpu9ia5ZeqiCfH1gcKk26WWe26HwAAAAAAAAAAAABQksH2NbyXqohhRDy5ulrXdfPTNl4/qsfd/rArff+hZF3/kQcAgG0fHxu7l7+KWI6IS+m7/oarq6t1vbyyWq/WK0v5/exoableaX2uzdNm2dJoH2+IB6O6+WXLre3apn1entY+/vuaxxrV/X10bD46DBwAImL71eieV6Qjpq6fiq7f5XA4OP6PHsc/+9H18xQAAACYvbqu6yp9nfeJdM6/13WnAIC5yK//4+cF1Gq1Wq1WH726rd7b7XYREZvtbZr3DIbjB4BDZjM+6boLdEj+RRtExLNddwJYaFXXHWAm7t2/tV6lfKv260Ea3z1fC7Ir/81qa7u8/V7TacavMZnX8+tO9OPpCf15Zk59WCQ5/954/m9vt4/SerPOf14m5d/s5/EO+tO1nH9/PP8xRyf/3p75lyrnP3ik/PvyBwAAAACABZb//f/4Qp3/HR10d6Z62PnftZk9KgAAAAAAAADM1r37t9bzfa/5/P8X9ljP/Z9HU86/kn+Rcv7p/v+dC29eHFuv35q/++aD/P91/9b672/88/N5ut/8l/JMlZ5ZVXpGVOmRqkGaHnDHJrgz7I+aRxpWvf4gXfNTD9+NK3E1NuLMrnV76Xh40H52V3vT0+FWe93fbj+3q32w0563P7+rfZiudKpXcvupWI+fxtV4Z6u9aVuasv/LU9rrKe05/77jv0g5/0Hrp8l/NbVXY9PG3Y96/3fct6d7Pc4bV774qzOz352p7kR/Z9/amv17voP+bP0/eWIUP7++ce3Uzcs3blw7G2mya+m5SJPPWM5/mH5y/i++sN2e/+63j9e7H40eOf9FcScGE/N/oTXf7O9Lc+5bF3L+o/ST838nte99/B/m/Ccf/y930B8AAAAAAAAAAAAAAAB4mLqut24RfSMiLqT7f7q6NxMAmK/8+l8nefm86v5Bt//j7v3oqv9q9ZzrasH6M9f603rWj/fWQu2v+kD1fxesPwtXt9V7e71dRMRf29s07xl+udcvAwAW2acR8Y+uO0Fn5F+w/H1/zfRk150B5ur6Bx/++PLVqxvXrnfdEwAAAAAAAADgoPL4n2ut8Z9P1nV9e2y9XeO/vhlrjzv+5yDP7AwwOmGg6v6j79PD9CL6vdZw48/FpPG/hztzDxv/ezDl8YZT2kdT2pemtC9Pad/zRo+WnP9zrfHOT0bEibHh10sY/3V8zPsS5Pyfbz2fm/y/MrZeO//6t4c5/96u/E/feP9np69/8OErV96//N7Gexs/OX/27JnzFy5cvHjx9LtXrm6c2f5vhz2erZx/HvvadaBlyfnnzOVflpz/l1It/7Lk/L+cavmXJeef3+/Jvyw5//zZR/5lyfm/lGr5lyXn/9VUy78sOf+XUy3/suT8v5Zq+Zcl5/9KquVflpz/qVTLvyw5/9Op3mf+K7PuF/OR889nuBz/Zcn55ysb5F+WnP+5VMu/LDn/86mWf1ly/q+mWv5lyfl/PdXyL0vO/0Kq5V+WnP83Ui3/suT8L6Za/mXJ+X8z1fIvS87/W6mWf1ly/q+lWv5lyfl/O9XyL0vO/zupln9Zcv7fTbX8y5Lzfz3V8i/Lg+//N2PGjJk80/VfJgAAAAAAAAAAAABg3DwuJ+56HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzdW4xcd30H8DN789qBxEBIndQJG8ckIdlk13biC22KCdeGW0lICr1gu961WfANr10CjWpHgRIJo6KKtuGhLSDU5qUiqnigFaA8oFaVKkH7QF8QFSoPURVQQKpKK2CrOef//+/M7OzMrne8OXvO5yMlv+zMmTlnzvxndr92vjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtLr5DbOfbGRZ1mg0igu2ZtlLmnPzxNb8kte+uMcHAAAArN3P83+/cE264OAKbtSyzT/d9K2vLCwsLGTvHf7T0c8uLKQrJrJsdFOW5ddFz3z/fY3WbYInsvHGUMvXQ312P9zn+pE+14/2uX6sz/Wb+lw/3uf6JSdgic1ZI93Zzvw/txanNLs2G82v29nlVk80Ng01z126bdbIb7Mweiyby05ks9l02/bFto18+6/d3NzXW7O4r6GWfW1vrpAfP3Y0HkMjnOOdbftavM/oh6/PJn7y48eO/vW556/vNvuehrb7K47z9h3N4/x4uKQ41ka2KZ2TeJxDLce5vctzMtx2nI38ds3/7jzOF1Z4nMOLh7muOp/z8Wwo/+9v5+dppJF1OU/bw2U/vSXLsouLh925zZJ9ZUPZlrZLhhafn/FiRTbvo7mUXp6NrGqd3ryCddqcMzvb12nnayI+/zeH240scwytT9MPHx9red5/tnA56zRqPurlXiuda3DQr5WyrMG4Lr6dP+gnu67BneHxP3br8muw69rpsgbT425Zgzv6rcGhseH8mNOT0Mhvs7gGd7VtP5zvqZHP527tvQanzp08MzX/0Y/dNXfyyPHZ47On9uzaNb1n7979+/dPHZs7MTtd/Psyz3b5bcmG0mtgRzh38TVwW8e2rUt14QtjS95/L/d1ON7jdbi1Y9tBvw5HOh9cY31ekEvXdPHaeE/zpI9fGsqWeY3lz88da38dpsfd8jocaXkddv2e0uV1OLKC12FzmzN3rOxnlpGWf7odw/LfC9a2Bre2rMHOn0c61+Cgfx4pyxocD+viu3cs/71gezjeJydX+/PI8JI1mB5ueO9pXpJ+3h/fn49u6/KG5hVXjWXn52fP3v3okXPnzu7KwlgXr2hZK53rdUvLY8qWrNehVa/Xg3M3PXlDl8u3hnM1flfzX+PLPlfNbe65u/dzlX93634+2y7dnYUxYOt9Prt9N2+ez7Es+9w3H3/w64997g3Lns9m3vz41Np/Fk+5tOX9d3SZ99+Y+39R7C/d1RPDoyPF63c4nZ3Rtvfj9qdqJH/vauT7fmFqZe/Ho+Gf9X4/vrbH+/G2jm0H/X482vng4vtxo9+fdqxN5/M5HtbJiene78fNbbbtXu2aHOn5fnxLmI1w/l8TkkLKRS1rZ7l1m/Y1MjIaHtdI3EP7Ot3Ttv1oyGbNfT29+/LW6e23FPc1nB7dovVapxMd2w56naY/+1punTb6/enb5el8PsfDurh2T+912tzm2XvW/t65Of5ny3vnWL81ODo81jzm0bQI8/f7bGFzXIN3Z0ez09mJbCa/dixfT418X5P3rmwNjoV/1vu9cluPNXh7x7aDXoPp+9hya68xsvTBD0Dn8zke1sVT9/Zeg81t3rhvsD+73h4uSdu0/Oza+edry/2Z1w0dp+lKrZWRcJzf3Nf7z2ab25zYv9qc2fs83RkuuarLeep8/S73mprJ1uc8bQvH+fz+5c9T83ia23z2wArX08Esyy58+P78z3vD36/83fnvfKXt7126/Z3OhQ/f/6OXHvvH1Rw/ABvfL4qxpfhe1/I3Uyv5+38AAABgQ4i5fyjMRP4HAACAyoi5P/5f4Yn8DwAAAJURc/9ImElN8v+2Nz4/94sLWWrmLwTx+nQaHii2ix3X6fD1xMKi5uX3f2n2v//hwsr2PZRl2c8e+IOu2297IB5XYSIc5zNvar98ia/ctaJ9H374Qtpva3/98+H+4+NZ6TLoVsGdzrLsa9d8Ot/PxPsu5fPZBw7n88GLTz7R3OaFA8XX8fbPvaLY/i9C+ffgsSNtt38unIcfhDn9tu7nI97uy5des33fI4v7i7dr7Lg6f9hPvb+43/h7cj7zRLF9PM/LHf/XP/X0l5vbP/rq7sd/Yaj78T8d7vdLYf7vjcX2rc9B8+t4u0+E44/7i7e7+4vf6Hr8z3yy2P7Mm4vtDocZ9397+Hrnm5+faz1fjzaOtD2u7C3FdnH/09/54/z6eH/x/juPf/zQpbbz0bk+nv234n6mOraPl8f9RH/fsf/m/bSuz7j/p//ocNt57rf/Zx587sbm/Xbu/86O7c58+I58/4v31/4bm/7yE5/uur94PAf/9kzb4zn47vA6Dvt/6v1hPYbr/++Z4v46f7vC4Xe3v//E7T+/9ULb44ne+pNi/8+87ng+N41v3nLVS1569cVXNc9dln17U3F//fZ//K9Otx3/F64rzke8Pnb0O/e/nLj/sx+ZPHV6/vzcTDqrj12T/+6ctxfHE4/3mvDe2vn1odPnPjB7dmJ6YjrLJqr7K/Qu2xfD/FExLvbeemHJO+gdD4fn84Y//9qWW//1U/Hyf39PcfmltxXft257+Lkbxx7Jss+Ey7eG5291+1/qqZuvy1/fjWfDES4s/X3Ba7F953/tX9GG4fF3/lwQ1/uZV34gPw/N6/LvG/F1vcbj/95McT9fDed1Ifxm5h3XLe6vdfv4uxEuPVS83td8/sLbXHxe/yY83+/4QXH/8bji4/1e+DnmG9va3+9uC+voqxeGOu8//y0eF8P7SXaxuD5uFc/3pReu63p48feQZBevz7/+k3Q/16/qYS5n/qPzUyfmTp1/dOrc7Py5qfmPfuzQydPnT507lP8uz0Mf7Hf7xfenLfn708zs3nuy/N3qdDGuiJHSHP+Zh4/O7Ju+dWb22JHzx849fGb27PGj8/NHZ2fmbz1y7NjsR/rdfm7mvl27D+zZt3vy+NzMffsPHNhzYHLu1OnmYRQH1cfe6Q9Nnjp7KL/J/H33HNh17733TE+ePD0ze9++6enJ8/1un39vmmze+vcnz86eOHJu7uTs5Pzcx2bv23Vg797dfX8b4Mkzx+Ynps6ePzV1fn727FTxWCbO5Rc3v/f1uz3VNP8fxc+znRrFL+LL3nXn3vT7WZu+9Piyd1Vs0vELRJ8Pv4vmn192Zv9Kvo65fzTMpCb5HwAAAOog5v6xMBP5HwAAACoj5v5NYSbyPwAAAFRGzP3jYSY1yf+V6/9vu7Ci/ev/6/+3ni/9/5r1/x8qW/+/eL/Q/x+MtfbvV9P/36f/r/+v/9/mxen/l+f49f/1/1mqbP3/mPs3Z1kt8z8AAADUQcz9W8JM5H8AAACojJj7rwozkf8BAACgMmLuf0mYSU3yv/6//r/+v/6//n/3/ev/b0z6/73p//eh/z+V1av/f3GQx6//r//PUmXr/8fc/9Iwk5rkfwAAAKiDmPuvDjOR/wEAAKAyYu6/JsxE/gcAAIDKiLl/a5hJTfK//n+WDbWUl/X/9f/zC/T/9f/1/zcs/f/e9P/70P/3+f/6//r/DFTZ+v8x978szKQm+R8AAADqIOb+l4eZyP8AAABQPiOXd7OY+18RZrIk/1/mDgAAAIAXXcz912YdHwRfk7//1//3+f/l7/9vStfp/+v/Z6Xs/w9n+v/lof/fm/5/H/r/+v/6//r/DFTZ+v957s/Gs1eGmdQk/wMAAEAdxNx/XZiJ/A8AAACVEXP/L4WZyP8AAABQGTH3bwszqUn+1//X/y9//9/n/+v/l73/7/P/y0T/vzf9/z70//X/9f/1/xmosvX/Y+6/PsykJvkfAAAA6iDm/hvCTOR/AAAAqIyY+385zET+BwAAgMqIuX97mElN8r/+f8n7/7E5qv+v/6//r/+v/78i+v+96f/3of+v/6//r//PQJWt/x9z/41hJjXJ/wAAAFAHMfffFGYi/wMAAEBlxNz/qjAT+R8AAAAqI+b+iTCTmuR//f+S9/+LHvyYz//X/9f/1//X/18Z/f/e9P/70P/X/x9I/3/hgv6//j+FsvX/Y+6/OcykJvkfAAAA6iDm/h1hJvI/AAAAVEbM/beEmcj/AAAAUBkx9+8MM6lJ/tf/3xD9/0z/X/9f/1//X/9/ZfT/e9P/70P/X//f5//r/zNQZev/x9z/6jCTmuR/AAAAqIOY+28NM5H/AQAAoDJi7r8tzET+BwAAgMqIuf/2MJOa5H/9f/1//X/9f/3/7vvX/9+Y9P970//vQ/9f/1//X/+fgSpb/z/m/teEmdQk/wMAAEAdxNx/R5iJ/A8AAACVEXP/nWEm8j8AAABURsz9k2EmNcn/+v/6//r/+v/6/933r/+/Men/96b/34f+v/6//r/+PwNVtv5/zP13hZnUJP8DAABAHcTcf3eYifwPAAAAlRFz/1SYifwPAAAAlRFz/3SYSU3yv/6//r/+v/7/qvr/r1q8X/3/gv5/uej/96b/34f+v/7/i97/H9X/p1LK1v+PuX9XmElN8j8AAADUQcz9u8NM5H8AAACojJj794SZyP8AAABQGTH33xNmUpP8r/+v/6//r//v8/+771//f2PS/+9t8P3/+BD1//X/9f99/r/+P0uVrf8fc/+9YSY1yf8AAABQBzH37w0zkf8BAACgMmLu3xdmIv8DAABAZcTcvz/MpCb5X/9f/1//X/9f/7/7/vX/Nyb9/958/n8f+v/6//r/+v+s0UN/2PpV2fr/MfcfCDOpSf4HAACAOoi5/7VhJvI/AAAAVEbM/b8SZiL/AwAAQGXE3P+rYSY1yf/6/23d8+bD1f/X/9f/1//P6f9vTPr/ven/96H/r/+v/6//z0At2/8P0Xu9+/8x998XZlKT/A8AAAB1EHP/r4WZyP8AAABQGTH3vy7MRP4HAACAyoi5/2CYSU3yv/6/z//X/9f/1//vvv/17v+PxfvV/18T/f/e9P/70P/X/9f/1/9noMr2+f8x978+zKQm+R8AAADqIOb++8NM5H8AAACojJj73xBmIv8DAABAZcTc/8Ywk5rkf/1//f+N0v+/Sv9f/7/j8VSt/+/z/wdD/783/f8+9P/1//X/9f8ZqLL1/2Puf1OYSU3yPwAAANRBzP1vDjOR/wEAAKAyYu5/S5iJ/A8AAACVEXP/W8NMapL/9f/1/zdK/z/T/9f/73g8+v/6/93o//em/9+H/r/+v/6//j8DVbb+f8z9vx5mUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP1vCzOR/wEAAKAyYu5/e5hJTfK//r/+v/6//v+a+v+b9f/1/8tF/7+3Ddb///nV4XL9/4L+f7mPf7X9/5GOr69I///7y/X/FzZ13l7/nyuhbP3/mPvfEWZSk/wPAAAAdRBz/zvDTOR/AAAAqIyY+98VZiL/AwAAQGXE3P8bYSY1yf/6/83jWGwv6/9Xtf8/pP/v8//1/2tC/7+3Ddb/9/n/HfT/y338Pv9f/5+lytb/j7n/3WEmNcn/AAAAUAcx9z8YZiL/AwAAQGXE3P9QmIn8DwAAAJURc/97wkxqkv/1/33+fz36/z7/P9P/1/+vibX170f1/yP9f/1//f9y9P//U/+fja1s/f+Y+x8OM6lJ/gcAAIA6iLn/kTAT+R8AAAAqI+b+3wwzkf8BAACgMmLuf2+YSU3yv/7/Run/T2zQ/v/j+v9XsP9/09XFdvr/+v8s8vn/ven/96H/r/9ftv6/z/9ngytb/z/m/veFmaw8/4+veEsAAADgyuj8i6QOMff/VphJTf7+HwAAAOog5v7fDjOR/wEAAKAyYu7/nTCTmuR//f+N0v/3+f+Z/r/P/+94PPr/+v/drF//P77z6P/r/+v/R/r/+v/6/3QqW/8/5v7fDTOpSf4HAACAOoi5//1hJvI/AAAAbAjd/p/sTjH3Hwozkf8BAACgMmLuPxxmUpP8r/+v/6//X9L+/5/t+Jfvfuudh3fp/+v/6/+vyrp+/n/zxe/z//X/9f8T/X/9f/1/OpWt/x9z/5Ewk5rkfwAAAKiDmPt/L8xE/gcAAIDKiLn/aJiJ/A8AAACVEXP/TJhJTfK//r/+v/5/Sfv/G/jz/+P50P9vN7D+f3zT1f/vqujfp1V0Zfv/jyz2xPX/V9v/H+t6qf6//v9GPn79f/1/lipb/z/m/tkwk5rkfwAAAKiDkPuHjhVz8Qr5HwAAACoj5v7jYSbyPwAAAFRGzP0fCDOpSf7X/9f/1//X//f5/93336v/3xjx+f9llfr3P81fKPr/HcrT/+9O/1//fyMfv/6//j9Lla3/H3P/XJhJTfI/AAAA1EHM/R8MM5H/AQAAoDJi7v9QmIn8DwAAAJURc/+JMJOa5H/9f/1//X/9f/3/7vsv7ef/6//3tNb+vf5/oP9f7/7//+j/6//r/zMYZev/x9x/MsykJvkf+H/27qTJsjqt4/hJLaiswIULI1y4McKlL4GFrvUFuHDjxgjDBQ6oOFM4jygozorgPIAKgogKTj1Bd9N00zN0Nz3PAz3RdBPVUZnP82Rl5s1zc7h57zn//+ezqEfSSu5tojqLH8m3DwAA0IPc/TfFLfY/AAAANCN3/w/ELfY/AAAANCN3/w/GLZ3sf/3/Wfr/vUpZ/7///S/v//MVz7H//zb9/1Gvr//X/7dM/z9O/7/E4v7/+mEY+ur/Pf9f/6//Z0Wm1v/n7v+huKWT/Q8AAAA9yN3/w3GL/Q8AAADNyN1/c9xi/wMAAEAzcvf/SNzSyf4/0P9vDX32/5nxev6/5//r/4/q/3d+0P/r/6dvvf3/bVe/8un/j93/33/nspedaP/f4vP/r1/0wU3382e16fd/zP7/4lGfr/+nRVPr/3P3/2jc0sn+BwAAgB7k7v+xuMX+BwAAgGbk7r8lbrH/AQAAoBm5+388bulk/6/u+f+Xdj4+0/6/6P/1/zsf0P97/r/+f7Y8/39cT8//v/mZG2564eFveuQkr99R/7/Qpvv5ub9/z//X/3PY1Pr/3P0/Ebd0sv8BAACgB7n7fzJusf8BAACgGbn7fypusf8BAACgGbn7fzpu6WT/r67/n/Xz/4v+X/+/8wH9v/5f/z9b+v9xPfX/p3l9/b/+X/+v/2e1ptb/5+7/mbilk/0PAAAAPcjd/7Nxi/0PAAAAzcjdf2vcYv8DAABAM3L3X45bOtn/+v/z7/9f1v/r/+Pq//X/+v/zp/8fp/9fQv+v/9f/6/9Zqan1/7n7b4tbOtn/AAAA0IPc/T8Xt9j/AAAA0Izc/T8ft9j/AAAA0Izc/b8Qt3Sy//X/nv+v/9f/6/8Xv77+f570/+P0/0vo/8/az1+n/9f/6/+51gn7/5dGvmyvpP/P3f+LcUsn+x8AAAB6kLv/l+IW+x8AAACakbv/l+MW+x8AAACakbv/V+KWTva//l//r//X/5+6/z/8S2+H/n8x/f966P/HTab/37qw8MP6/9n3/57/r//X/7PP1J7/n7v/V+OWTvY/AAAA9CB3/6/FLSP7/8T/MB8AAADYqNz9vx63+P4/AAAAzF5WZ7n7fyNu6WT/6//1//p//b/n/y9+/bH+/5Fr3p/+f1r0/+Mm0/8fQf+v/5/z+9f/6/85bGr9f+7+34xbOtn/AAAA0IPc/bfHLfY/AAAANCN3/2/FLfY/AAAANCN3/2/HLZ3s/8X9/97/X/9/PPr//e9f/7/418eq+v/8M+r/R/v/b/f8/z7p/8etv/+/qP/f/+fX/5+jTb//xvv/S8s+X//PIlPr/3P33xG3dLL/AQAAoAe5+++MW+x/AAAAaEbu/t+JW+x/AAAAaEbu/t+NWzrZ/57/r//X/8+v//f8/12bfP7/sPb+/4L+/5j0/+M8/38J/b/+X//v+f+s1NT6/9z9d8Utnex/AAAA6MFdLw47u//3hsH+BwAAgDm69t8dOPgvlIbc/b8ft9j/AAAA0Izc/X8Qt3Sy//X/+n/9v/5f/7/49U/a/y97MLLn/6+H/n+c/n8J/f959PMXGuv/7z7q86fQ/9+q/2di9vX/j+19fFP9f+7+P4xbOtn/AAAA0IPc/X8Ut9j/AAAA0Izc/X8ct9j/AAAA0Izc/X8St3Sy/8+9/x8JYvX/+n/9v/6/pf5/Gf3/euj/x+n/l9D/e/6/5//r/1mpvf5//9fDTfX/ufv/NG7pZP8DAABAD3L3/1ncYv8DAABAM3L33x232P8AAADQjNz9fx63dLL/Pf9f/6//1//r/xe/vv5/nvT/4/T/S+j/9f/6f/0/K7Xv+f/X2FT/n7v/nrilk/0PAAAAPcjdf2/cYv8DAABAM3L3/0XcYv8DAABAM3L3/2Xc0sn+1/+fb/+fH9f/6/8H/b/+X/+/Ft32/1uLfic67Ij+/8nvu/yd+z+i/9f/6//1//p/VmAS/f+Vvb+7zN3/V3FLJ/sfAAAAepC7/6/jFvsfAAAAmpG7/2/iFvsfAAAAmpG7/2/jlhPu/69f6btaH/2/5//r//X/+v/Fr6//n6du+/9j8vz/JfT/+n/9v/6flZpE/3/NH+fu/7u4xff/AQAAoBm5+/8+brH/AQAAoBm5+/8hbrH/AQAAoBm5+/8xbulk/+v/9f/6f/2//n/x65+2/98eFtP/r4f+f5z+fwn9v/5f/6//Z6Wm1v/n7r8vbulk/wMAAEAPcvffH7fY/wAAANCM3P3/FLfY/wAAANCM3P3/HLd0sv/1//p//b/+X/+/+PU9/3+e9P/j9P/DMDww8gYW9f9XLur/9f/6f/0/pzS1/j93/7/ELZ3sfwAAAOhB7v4H4hb7HwAAAJqRu//BuMX+BwAAgGbk7v/XuKWT/a//1//r//X/+v/Fr6//nyf9/zj9/xKe/6//1//r/1mpqfX/ufsfils62f8AAADQg9z9D8ct9j8AAAA0I3f/v8Ut9j8AAAA0I3f/I3FLJ/tf/6//1//r/8+l/7+s/z9I/78e59f/D/p//b/+fwn9v/5f/89B6+r/X4qv98v6/9z9/x63dLL/AQAAoAe5+x+NW+x/AAAAaEbu/v+IW+x/AAAAaEbu/v+MWzrZ//p//b/+X//v+f+LX1//P0+e/z9O/7+E/l//f6L3/w37/kj/r//nsHX1/0f1/gf/OHf/f8Utnex/AAAA6EHu/sfiFvsfAAAAmpG7//G4xf4HAACAZuTu/++4pZP9r//X/+/v/4dB/6//1//vWkP/vz3o/1dO/z9O/7+E/r/N/v9rhoae/3/pyM/X/zNFU+v/c/f/T9zSyf4HAACAHuTu/9+4xf4HAACAZuTu/7+4xf4HAACAZuTu//+4paX9//LR6dv8+/+LBz5R/z8Mw7O3eP6//n/k9fX/k+n/66+q/n919P/j9P9L6P/b7P/X9P49/1//z2FT6/9z978ibmlp/wMAAEDncve/Mm6x/wEAAKAZuftfFbfY/wAAANCM3P2vjls62f/z7/8PfqL+fzjT8//1/zsf0P/r//X/s3XW/v6e7fg9Tf+v/z+y/7909Xe8bvv/rSP+vmfQ/+v/9f8sMLX+P3f/a+KWTvY/AAAA9CB3/xNxi/0PAAAAzcjd/2TcYv8DAABAM3L3vzZu6WT/6//1//r/efb/2/p//b/+f6GpPP//xhu/42n9f6v9v+f/H0X/r//X/3PQ1Pr/3P2vi1s62f8AAADQg9z9r49b7H8AAABoRu7+p+IW+x8AAACa8dROyLk9vGEYutz/h/v/64bdQnXXov4/GjX9/zX0//vfv/5/8a8Pz//X/+v/z99U+n/P/z/d+9f/6//n/P5P1P9/8+HP1//Toqn1/7n7n45bOtn/AAAA0IPc/W+MW+x/AAAAaEbu/jfFLfY/AAAANCN3/zNxSyf73/P/z7n/v07/r//X/9evS/2//n8N9P/j9P9L6P/P3s/nV1X9/3yf//+1+n9WZ2r9f+7+N8ctO8PvW77ulP8xAQAAgAnJ3f+WuKWT7/8DAABAD3L3vzVusf8BAACgGbn73xa3dLL/9f+e/6//1//r/xe/vv5/nvT/4/T/S/TT/28v+uCm+/mz2vT732D/v/PLwvP/maKp9f+5+98et3Sy/wEAAKBtL+78mLv/HXGL/Q8AAADNyN3/zrjF/gcAAIBm5O5/Nm7pZP/Psf+/pP/X/5+o//8e/f+B19f/6/9bpv/P39EX0/8v0U//v9Cm+/mVvf+r/yXoq//fof9niqbW/+fufy5u6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAAMFMXD30kd/974pYm9v+FpT9jjv2/5/+fvv/fGnrs/z3/X/+v/+/JfPr/exf+Ju35//p//f9837/+X//PYVPr/3P3P791ocH9DwAAAO36rm/9/ueO+3Of3/lxe3hv3GL/AwAAQDNy978vbrH/AQAAoBm5+98ft3Sy//X/ffX/fT7/X/+v/9f/92Q+/f9i+n/9v/5/vu9f/6//57Cp9f+5+z8Qt1wz/Jb/r+gBAAAAa3X9yX567v4Pxi2dfP8fAAAAepC7/0Nxy6H9f+WY/1Y7AAAAMDW5+z8ct3Ty/X/9/8T7/+Gc+v/4efr/Xevu/7cO/Hz9/y79v/5/FfT/487Y/1/Z0v/r/0fo//X/+n8Omlr/n7v/0YeGLvc/AAAANGrfP1H4yM6P28NH45bj7v+D36gCAAAAJid3/8fiFt//BwAAgGbk7v943NLJ/tf/T7z/P9Xz/y/V/+X5/9Ps/9f2/P/btxe+vv5f/98y/f84z/9fQv+v/9f/6/9ZqRP0/zuD9Lz7/9z9n4hbOtn/AAAA0IPc/Z+MW+x/AAAAaEbu/k/FLfY/AAAANCN3/6fjlk72v/5/A/3/HReH4Vz7/2M8/1//30f/f8Trt9P/f+MNl5/47u998D79P3vW2f/nrwX9v/5f/79L/6//1/9z0NSe/5+7/zNxSyf7HwAAAHqQu/+FuMX+BwAAgGbk7v9s3HJ1/z++qXcFAAAArFLu/s/FLZ18/1//3+Lz/+fZ/+df6w30/5fn1/9nU9x7/+/5//r/wzz/f5z+fwn9v/5f/6//Z6Wm1v/n7v983NLJ/gcAAIAe5O7/QtyS+3/rxP/oHgAAAJiY3P1fjFt8/x8AAACakbv/xbilk/2v/9f/T6X/T57/v/d5nv+/S/+v/z8J/f84/f8S+n/9v/5f/89KTa3/z93/pbilk/0PAAAAPcjd/1LcYv8DAABAM3L3fzlusf8BAACgGbn7vxK3dLL/9f/6f/2//n/9/f/u11r9/95fVf3/6uj/x+n/l9D/6//1//p/Vmpq/X/u/q8GAAD//y+MZ1o=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x20000, 0x3) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x10000, 0x8) getdents(r1, &(0x7f0000006480)=""/206, 0xce) 3m41.921841866s ago: executing program 4 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000800) 3m41.258023568s ago: executing program 4 (id=369): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0xfffff000}, 0x3}}, 0x10) close(0x3) 3m41.050186175s ago: executing program 4 (id=373): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000440)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@nogrpid}, {@usrquota}, {@noauto_da_alloc}]}, 0xfd, 0x55a, &(0x7f0000000b80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/174, 0xff56) 3m40.559309751s ago: executing program 4 (id=375): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/62, 0x3e}], 0x1}, 0x7}], 0x1, 0x1, 0x0) 3m38.410184091s ago: executing program 4 (id=382): io_setup(0x5, &(0x7f0000000000)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x40c0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20f42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xc, r1, &(0x7f0000000040)="89ce", 0x2, 0x8000}]) 3m38.146983609s ago: executing program 34 (id=382): io_setup(0x5, &(0x7f0000000000)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000014}, 0x40c0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x20f42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xc, r1, &(0x7f0000000040)="89ce", 0x2, 0x8000}]) 3m38.072164321s ago: executing program 5 (id=386): r0 = syz_io_uring_setup(0x2b06, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0xfffff}, &(0x7f0000ffd000), &(0x7f0000ffe000), &(0x7f0000000000)) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0xf7ffffff, 0x2, 0xe, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}}}, 0x90) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x14, &(0x7f00000003c0), 0x2) 3m37.743779332s ago: executing program 5 (id=391): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) 3m37.522366529s ago: executing program 5 (id=392): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") utimes(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 3m36.934746109s ago: executing program 5 (id=395): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000007300)={[{@quota}, {@nodiscard}, {@gid}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x4}}, {@discard_size={'discard', 0x3d, 0x6}}, {@quota}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 3m35.692558179s ago: executing program 5 (id=402): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="b0"]) 3m34.214262927s ago: executing program 5 (id=410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 3m33.791738301s ago: executing program 35 (id=410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$inet(0x2, 0x3, 0x33) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 2m8.065108301s ago: executing program 0 (id=935): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 2m7.899212107s ago: executing program 0 (id=937): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000008"], 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xc0002011}) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) 2m7.649251985s ago: executing program 0 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x1000000}, 0x80) 2m7.392291623s ago: executing program 0 (id=944): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m5.870204823s ago: executing program 0 (id=951): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x21, 0x1, 0xb5}}) 2m4.974260322s ago: executing program 0 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000012c0)=""/4095, 0xfff, 0x40000003, 0x0, 0x0) 2m4.783330238s ago: executing program 36 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000012c0)=""/4095, 0xfff, 0x40000003, 0x0, 0x0) 50.194236366s ago: executing program 6 (id=1455): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 49.16925315s ago: executing program 6 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x11, "d2483a585e2f5411d9cad2e1896b5c"}]}}}}}}}, 0x0) 49.004209175s ago: executing program 6 (id=1467): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 48.610151748s ago: executing program 6 (id=1469): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x20f, &(0x7f0000000840)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, 0x0) rename(0x0, 0x0) 48.316004438s ago: executing program 6 (id=1471): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8080}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f00000033c0)={0xa0, 0x0, r1, {{0x0, 0x1, 0x2, 0x3, 0x80000001, 0x6, {0x2, 0x0, 0xf1, 0xb6e, 0x2, 0x1, 0x0, 0x6, 0x4, 0x6000, 0x40, r2, r3, 0xf3f, 0xfd}}, {0x0, 0x6}}}, 0xa0) 47.818236353s ago: executing program 6 (id=1475): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x0, 0x3c, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 47.401225157s ago: executing program 37 (id=1475): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x0, 0x3c, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 3.68741947s ago: executing program 9 (id=1799): socketpair$unix(0x1, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3.462944007s ago: executing program 9 (id=1804): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000005c0)={0x34, r0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x99}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 3.257718144s ago: executing program 9 (id=1808): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x2eb, &(0x7f00000004c0)="$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") r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x95, @remote, 0x4121}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) 2.944959804s ago: executing program 9 (id=1812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2.665021373s ago: executing program 9 (id=1815): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xa, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xff, 0xb, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x1, "fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \b.'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.44928491s ago: executing program 3 (id=1819): openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.643145877s ago: executing program 8 (id=1824): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) 1.5457183s ago: executing program 7 (id=1825): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0xfb, 0x6a0, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x60) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2000, 0x2dd8806920477201, 0x0) 1.490155791s ago: executing program 8 (id=1826): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000017c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "92f89b67ce2c516ff04cc08f5ea4ccd1c06fb92eeb8857cc0d9904c1e03646dd", "663e119acc72f7f6bc59b684f071cc1e", {"0ece4e03338f0fc7e9a94bd38d44a2bf", "016a855c3f66f1ea10a37a8184750893"}}}}}}}, 0x0) readv(r0, &(0x7f0000001780)=[{&(0x7f0000000380)=""/4090, 0xc96}, {0x0, 0x2e00}], 0x2) 1.489910361s ago: executing program 3 (id=1827): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4) 1.415305014s ago: executing program 3 (id=1828): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r0, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}}, 0x40) 1.369415606s ago: executing program 8 (id=1829): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) socket(0x1e, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 1.210566931s ago: executing program 7 (id=1830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 1.20882344s ago: executing program 3 (id=1831): syz_mount_image$squashfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x200402, &(0x7f0000000200)=ANY=[], 0x1, 0x19c, &(0x7f0000000040)="$eJzsVb1uGkEQ/pbb40iUgjptUCBFwt2RoLxBqFLlAXKCC0E+/MMh2SCKc8WjIPkpXPgdXFhygwsKu8ClJeus3Z07FsmFJdsySPtJt983s7Mzs4s0/I8PYgfA/XLSRhkSDB9wwRg4gCpTvt+O4tui4ibZC67YI/8J8RVxPBojiKJwEI/GO0ExE9EzREqlc8/j0RZeotjbCYaNaMOIrRUlbEQbryPspwSvzF/HBdzIWXa+nLSF+AsgTdNU+DrqY3qMBeBMi/nI5ccspHkMl9MSqAKoD/v79Xg0/trrB92wG+76fqPpfnfdH379Xy8KXbUyrURBDTII/gJADLZ32r4N4JIG7Hu52sjAtNZon+lnxfxdJCqg9glrKGhn9Rwq72megwYtxFP8wWeUABwmTPNWZDYOebUWGCwyPK71qWqW5Ma39l7UmYKBZcdm4HkObw47N3zdaPxMshanxBXiFvGMeE7ssPX/JC4zXJNVS1aXFq6jYDgceEJL5ec+v5zQbyMfTlS9K65fruLAwMDAwMDAwGBL8BAAAP//KbFdPg==") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) 1.146064183s ago: executing program 8 (id=1832): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x19c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x150, 0x2, [@TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x251d, 0x0, 0xff16}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xb, 0x3, 0xfffa}, {0x80000001, 0x9, 0x6, 0x62af}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xf36d, 0x7, 0x8000}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x7f}, {0x1}}}]}]}, @TCA_BASIC_ACT={0x88, 0x3, [@m_sample={0x50, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x19, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x34, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.011778217s ago: executing program 3 (id=1833): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x0, 0x0) 958.078189ms ago: executing program 8 (id=1834): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 830.284073ms ago: executing program 7 (id=1835): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) 808.967624ms ago: executing program 9 (id=1836): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 598.128901ms ago: executing program 7 (id=1837): unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000540)=[{0x2, 0x42, 0x1000}, {0x4, 0xd6, 0x800}], 0x2, 0x0) unshare(0x8000000) 414.559267ms ago: executing program 7 (id=1838): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 222.116463ms ago: executing program 7 (id=1839): syz_usb_connect(0x6, 0xca3, 0x0, &(0x7f0000001580)={0x0, 0x0, 0x3d, &(0x7f0000000fc0)={0x5, 0xf, 0x3d, 0x1, [@generic={0x38, 0x10, 0x4, "f87f420013f594dc0341fff02f74e60dbe62d11e3eceae26721c2df772d02358a150eabe0a74935c7ece0cd097b3c7293209ba67d0"}]}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 192.39µs ago: executing program 8 (id=1840): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) 0s ago: executing program 3 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) kernel console output (not intermixed with test programs): ric 0006:0004:0009.000B: unknown main item tag 0x0 [ 230.869881][ T9] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 230.891763][ T9] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 230.909463][ T9] hid-generic 0006:0004:0009.000B: unknown main item tag 0x0 [ 230.931549][ T1144] bond0 (unregistering): Released all slaves [ 230.942993][ T9] hid-generic 0006:0004:0009.000B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 231.041254][ T9781] loop3: detected capacity change from 0 to 32768 [ 231.138024][ T9794] fido_id[9794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 231.212155][ T9781] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.547558][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 231.611622][ T9607] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 232.093297][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.207386][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.305533][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.312777][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.400970][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.408232][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.426517][ T1144] IPVS: stop unused estimator thread 0... [ 232.507956][ T9835] loop3: detected capacity change from 0 to 512 [ 232.555615][ T9607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.582667][ T9835] EXT4-fs (loop3): 1 truncate cleaned up [ 232.598221][ T9835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.688782][ T27] audit: type=1800 audit(1780405481.623:45): pid=9835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1018" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 232.712934][ T9835] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1018: bg 0: block 465: padding at end of block bitmap is not set [ 232.782627][ T9835] EXT4-fs (loop3): Remounting filesystem read-only [ 232.879842][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.151246][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.741443][ T9845] loop6: detected capacity change from 0 to 32768 [ 233.805047][ T9845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1020 (9845) [ 233.866654][ T9845] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 233.924579][ T9845] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 233.960295][ T9845] BTRFS info (device loop6): turning on sync discard [ 234.001051][ T9845] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 234.029231][ T9845] BTRFS info (device loop6): use zstd compression, level 3 [ 234.037661][ T9607] veth0_vlan: entered promiscuous mode [ 234.037934][ T9845] BTRFS info (device loop6): turning on async discard [ 234.080382][ T9607] veth1_vlan: entered promiscuous mode [ 234.091860][ T9845] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 234.138227][ T9845] BTRFS info (device loop6): trying to use backup root at mount time [ 234.171027][ T9845] BTRFS info (device loop6): enabling auto defrag [ 234.202072][ T9845] BTRFS info (device loop6): using free space tree [ 234.205254][ T9607] veth0_macvtap: entered promiscuous mode [ 234.251028][ T9607] veth1_macvtap: entered promiscuous mode [ 234.319388][ T1144] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 234.387945][ T9902] syz.3.1030: attempt to access beyond end of device [ 234.387945][ T9902] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 234.408685][ T9845] BTRFS error (device loop6): failed to load root extent [ 234.439703][ T9845] BTRFS warning (device loop6): try to load backup roots slot 1 [ 234.480180][ T9902] EXT4-fs (loop7): unable to read superblock [ 234.494775][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.513338][ T11] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 234.541519][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.571367][ T9845] BTRFS warning (device loop6): couldn't read tree root [ 234.578909][ T9845] BTRFS warning (device loop6): try to load backup roots slot 2 [ 234.588644][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.603501][ T42] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 234.632158][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.642218][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.651851][ T9845] BTRFS warning (device loop6): couldn't read tree root [ 234.652748][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.659714][ T9845] BTRFS warning (device loop6): try to load backup roots slot 3 [ 234.671247][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.704336][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.719199][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.759735][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.787723][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.806740][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.854075][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.881758][ T9845] BTRFS info (device loop6): enabling ssd optimizations [ 234.890317][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.933063][ T9845] BTRFS info (device loop6): rebuilding free space tree [ 234.956461][ T9607] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.994989][ T9607] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.012454][ T9845] BTRFS info (device loop6): checking UUID tree [ 235.032034][ T9607] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.048915][ T9607] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.339632][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.370522][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.397876][ T7231] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.419885][ T9926] loop3: detected capacity change from 0 to 2048 [ 235.460055][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.495458][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.535434][ T9926] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 235.917569][ T9933] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 236.156100][ T9938] loop6: detected capacity change from 0 to 256 [ 236.195890][ T9938] FAT-fs (loop6): "posix" option is obsolete, not supported now [ 236.201081][ T9941] binder: 9939:9941 ioctl 541b 0 returned -22 [ 236.229141][ T9940] loop8: detected capacity change from 0 to 1024 [ 236.391490][ T9940] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.397638][ T9922] loop7: detected capacity change from 0 to 40427 [ 236.449423][ T9922] F2FS-fs (loop7): invalid crc value [ 236.544590][ T9922] F2FS-fs (loop7): Found nat_bits in checkpoint [ 236.650623][ T9955] loop6: detected capacity change from 0 to 256 [ 236.668592][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.719893][ T9955] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 236.766767][ T9922] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 236.966249][ T9922] syz.7.1034: attempt to access beyond end of device [ 236.966249][ T9922] loop7: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 236.971955][ T27] audit: type=1800 audit(1780405485.883:46): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1034" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 237.144522][ T7323] syz-executor: attempt to access beyond end of device [ 237.144522][ T7323] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.202972][ T7323] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 238.513983][ T9972] loop8: detected capacity change from 0 to 32768 [ 238.525489][T10000] loop6: detected capacity change from 0 to 128 [ 238.616331][T10003] loop7: detected capacity change from 0 to 128 [ 238.653422][ T9972] ialloc: diAlloc returned -28! [ 238.699985][T10003] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.785860][T10003] ext4 filesystem being mounted at /147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.885451][ T7358] kernel read not supported for file /dsp1 (pid: 7358 comm: kworker/1:6) [ 238.905884][T10003] fscrypt (loop7, inode 12): Can't use IV_INO_LBLK_64 policy on filesystem 'loop7' because it doesn't have stable inode numbers [ 239.025622][ T9990] [U]  [ 239.044032][ T7323] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.354731][T10020] loop8: detected capacity change from 0 to 256 [ 239.431885][T10020] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 239.520244][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1059'. [ 239.568113][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1059'. [ 240.042173][T10042] loop8: detected capacity change from 0 to 128 [ 240.061384][T10017] loop3: detected capacity change from 0 to 32768 [ 240.119791][T10017] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1058 (10017) [ 240.159426][ T5766] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.188544][T10017] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.232293][T10017] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 240.271806][T10017] BTRFS info (device loop3): turning on sync discard [ 240.278552][T10017] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 240.341848][T10017] BTRFS info (device loop3): use zstd compression, level 3 [ 240.349143][T10017] BTRFS info (device loop3): turning on async discard [ 240.419145][T10017] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 240.491763][T10017] BTRFS info (device loop3): trying to use backup root at mount time [ 240.499921][T10017] BTRFS info (device loop3): enabling auto defrag [ 240.561876][T10017] BTRFS info (device loop3): using free space tree [ 240.686175][T10064] Bluetooth: MGMT ver 1.22 [ 240.792948][ T3477] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 240.865850][T10017] BTRFS error (device loop3): failed to load root extent [ 240.881928][T10017] BTRFS warning (device loop3): try to load backup roots slot 1 [ 240.925069][ T59] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 240.968124][T10017] BTRFS warning (device loop3): couldn't read tree root [ 240.999678][T10017] BTRFS warning (device loop3): try to load backup roots slot 2 [ 241.009583][ T3477] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 241.081887][T10017] BTRFS warning (device loop3): couldn't read tree root [ 241.088892][T10017] BTRFS warning (device loop3): try to load backup roots slot 3 [ 241.155129][T10088] lo: entered promiscuous mode [ 241.162432][T10017] BTRFS info (device loop3): enabling ssd optimizations [ 241.182623][T10087] lo: left promiscuous mode [ 241.189353][T10084] loop8: detected capacity change from 0 to 4096 [ 241.192769][T10017] BTRFS info (device loop3): rebuilding free space tree [ 241.248794][T10084] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.282747][T10017] BTRFS info (device loop3): checking UUID tree [ 241.418574][T10103] loop6: detected capacity change from 0 to 1024 [ 241.527953][T10103] hfsplus: inconsistency in B*Tree (1,0,1,1,0) [ 241.550475][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.582403][T10103] hfsplus: failed to load root directory [ 241.694183][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 242.230245][T10123] loop7: detected capacity change from 0 to 4096 [ 242.260492][T10127] loop6: detected capacity change from 0 to 128 [ 242.268161][T10123] EXT4-fs: Ignoring removed orlov option [ 242.290853][T10123] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.311852][T10123] EXT4-fs (loop7): Test dummy encryption mode enabled [ 242.370276][T10131] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 242.389022][T10127] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 242.461314][T10123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.483475][T10127] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.571909][ T27] audit: type=1800 audit(1780405491.503:47): pid=10123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1086" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 242.695003][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 242.735346][ T7231] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.802122][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.912013][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 242.926828][ T9] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 242.954424][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.010323][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.055067][ T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.102305][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.143880][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.160480][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.202055][ T23] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 243.389684][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 243.402672][ T9] usbtmc 9-1:16.0: can't read capabilities [ 243.410884][ T23] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 243.440727][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.462827][ T23] usb 7-1: Product: syz [ 243.467043][ T23] usb 7-1: Manufacturer: syz [ 243.496850][ T23] usb 7-1: SerialNumber: syz [ 243.522249][ T23] usb 7-1: config 0 descriptor?? [ 243.536557][ T23] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 243.603233][ T1190] usb 9-1: USB disconnect, device number 2 [ 244.341992][ T23] gspca_sunplus: reg_w_riv err -71 [ 244.352299][ T23] sunplus: probe of 7-1:0.0 failed with error -71 [ 244.368588][ T23] usb 7-1: USB disconnect, device number 9 [ 244.743761][T10189] loop8: detected capacity change from 0 to 40427 [ 244.767506][T10189] F2FS-fs (loop8): Invalid log blocks per segment (1) [ 244.780901][T10189] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 244.812972][T10189] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x35f7 [ 244.821940][T10189] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 244.830365][T10189] F2FS-fs (loop8): Image doesn't support compression [ 244.875025][T10189] F2FS-fs (loop8): invalid crc value [ 244.895921][T10189] F2FS-fs (loop8): Found nat_bits in checkpoint [ 245.032521][T10203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1106'. [ 245.063307][T10189] F2FS-fs (loop8): Start checkpoint disabled! [ 245.121333][T10189] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 245.136210][T10189] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 245.196360][T10209] loop3: detected capacity change from 0 to 2048 [ 245.308172][T10209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.335423][T10209] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.412779][ T2946] F2FS-fs (loop8): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xbe0/0x1a40 [ 245.423471][ T2946] kworker/u4:7: attempt to access beyond end of device [ 245.423471][ T2946] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 245.438766][ T2946] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 245.446222][ T2946] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 245.463018][ T2946] F2FS-fs (loop8): Stopped filesystem due to reason: 1 [ 245.547020][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.559505][T10219] loop6: detected capacity change from 0 to 136 [ 245.584094][T10219] Attempt to read inode for relocated directory [ 245.851832][ T1190] IPVS: starting estimator thread 0... [ 245.962296][T10229] IPVS: using max 20 ests per chain, 48000 per kthread [ 246.460708][T10251] loop3: detected capacity change from 0 to 1024 [ 246.866875][T10264] vivid-002: disconnect [ 246.876809][T10263] vivid-002: reconnect [ 247.139803][T10266] loop3: detected capacity change from 0 to 4096 [ 247.675375][T10274] netlink: 'syz.3.1133': attribute type 30 has an invalid length. [ 247.705469][T10274] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.715495][T10274] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.724449][T10274] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.733241][T10274] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.797286][T10272] loop6: detected capacity change from 0 to 32768 [ 247.822059][T10272] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.1132 (10272) [ 247.856854][T10272] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.872516][T10272] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 247.881733][T10272] BTRFS info (device loop6): setting nodatacow, compression disabled [ 247.889856][T10272] BTRFS info (device loop6): turning on flush-on-commit [ 247.898697][T10272] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 247.912916][T10272] BTRFS info (device loop6): use lzo compression, level 0 [ 247.921093][T10274] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.930926][T10274] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.940256][T10274] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.949581][T10274] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.951906][T10272] BTRFS info (device loop6): setting nodatasum [ 248.000479][T10272] BTRFS info (device loop6): use no compression [ 248.033273][T10272] BTRFS info (device loop6): trying to use backup root at mount time [ 248.075034][T10272] BTRFS info (device loop6): max_inline at 0 [ 248.100527][T10272] BTRFS info (device loop6): using free space tree [ 248.226725][T10282] loop7: detected capacity change from 0 to 4096 [ 248.296883][ T2946] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 248.350973][T10272] BTRFS warning (device loop6): couldn't read tree root [ 248.363525][T10299] loop3: detected capacity change from 0 to 64 [ 248.395863][T10272] BTRFS warning (device loop6): try to load backup roots slot 1 [ 248.441988][ T11] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 248.520329][T10272] BTRFS warning (device loop6): couldn't read tree root [ 248.549430][T10272] BTRFS warning (device loop6): try to load backup roots slot 2 [ 248.606240][ T2946] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 248.647308][T10272] BTRFS warning (device loop6): couldn't read tree root [ 248.676009][T10272] BTRFS warning (device loop6): try to load backup roots slot 3 [ 248.749145][T10272] BTRFS info (device loop6): enabling ssd optimizations [ 248.782589][T10272] BTRFS info (device loop6): auto enabling async discard [ 248.836882][T10272] BTRFS info (device loop6): rebuilding free space tree [ 248.905761][T10272] BTRFS info (device loop6): checking UUID tree [ 248.967160][ T27] audit: type=1800 audit(1780405497.903:48): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1132" name="file1" dev="loop6" ino=257 res=0 errno=0 [ 249.355136][ T7231] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.395233][T10279] loop8: detected capacity change from 0 to 40427 [ 249.454188][T10279] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x7ffff [ 249.498186][T10279] F2FS-fs (loop8): invalid crc value [ 249.535102][T10323] loop3: detected capacity change from 0 to 128 [ 249.585913][T10323] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 249.601294][T10279] F2FS-fs (loop8): Found nat_bits in checkpoint [ 249.744519][T10323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.861881][T10279] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 249.884922][ T27] audit: type=1800 audit(1780405498.823:49): pid=10323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1147" name="file2" dev="loop3" ino=105 res=0 errno=0 [ 250.267091][T10339] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1149'. [ 250.293411][ T9607] syz-executor: attempt to access beyond end of device [ 250.293411][ T9607] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 250.336294][ T9607] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 250.363847][T10337] loop3: detected capacity change from 0 to 4096 [ 250.370604][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.382572][ T9607] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 250.415444][T10339] bridge_slave_1: left allmulticast mode [ 250.446302][T10339] bridge_slave_1: left promiscuous mode [ 250.509776][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.657106][T10320] loop7: detected capacity change from 0 to 32768 [ 250.782608][T10320] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.039968][T10320] XFS (loop7): Ending clean mount [ 251.291255][T10372] program syz.6.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.293147][ T7323] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.478560][ T3429] Bluetooth: hci4: Frame reassembly failed (-84) [ 251.510071][T10375] loop6: detected capacity change from 0 to 512 [ 251.558598][T10375] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 251.649218][T10375] EXT4-fs (loop6): 1 truncate cleaned up [ 251.669593][T10375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.800183][T10375] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.6.1159: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 251.865960][T10375] EXT4-fs (loop6): Remounting filesystem read-only [ 251.875701][T10377] loop8: detected capacity change from 0 to 32768 [ 251.904440][T10381] loop7: detected capacity change from 0 to 512 [ 251.940716][T10381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.958837][T10377] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.971535][ T7231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.010437][T10381] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.072120][T10381] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.155177][T10377] XFS (loop8): Ending clean mount [ 252.276100][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.304451][ T9607] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.686468][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 252.783870][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1163'. [ 253.018646][T10415] loop6: detected capacity change from 0 to 2048 [ 253.059963][T10415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.472510][T10424] loop8: detected capacity change from 0 to 512 [ 253.484221][ T5776] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 253.486951][ T51] Bluetooth: hci4: command 0xfc11 tx timeout [ 253.567985][T10424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.584039][T10427] loop6: detected capacity change from 0 to 128 [ 253.595559][T10424] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.628762][T10427] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 253.855900][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.920787][T10437] loop3: detected capacity change from 0 to 512 [ 253.969271][T10437] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.973131][T10439] loop8: detected capacity change from 0 to 256 [ 253.993573][T10439] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 254.038098][T10439] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 254.067314][T10443] loop6: detected capacity change from 0 to 256 [ 254.069555][T10437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.074672][T10443] exfat: Deprecated parameter 'utf8' [ 254.092323][T10443] exfat: Deprecated parameter 'utf8' [ 254.141969][T10439] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 254.147208][T10443] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 254.149638][T10439] UDF-fs: Scanning with blocksize 512 failed [ 254.192268][T10437] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.218108][T10439] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 254.260873][T10439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.570378][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.574124][T10450] loop7: detected capacity change from 0 to 24 [ 254.875969][T10456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.976647][T10456] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.034447][T10465] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.081876][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 255.086348][T10469] exfat: Deprecated parameter 'utf8' [ 255.127150][T10465] EXT4-fs (loop8): shut down requested (0) [ 255.139170][T10469] exfat: Deprecated parameter 'utf8' [ 255.200311][T10469] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 255.260704][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.283104][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 255.312924][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.321065][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.346747][ T23] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 255.402199][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.443230][ T23] usb 7-1: config 0 descriptor?? [ 255.695201][ T23] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 255.729315][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.738495][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.944072][ T23] usb 7-1: USB disconnect, device number 10 [ 256.182055][T10504] syz_tun: entered allmulticast mode [ 256.204235][T10503] syz_tun: left allmulticast mode [ 257.634140][T10536] set_capacity_and_notify: 3 callbacks suppressed [ 257.634155][T10536] loop3: detected capacity change from 0 to 32768 [ 257.753170][T10536] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.801020][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 257.865812][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1212'. [ 258.080041][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 258.814866][T10585] loop3: detected capacity change from 0 to 4096 [ 258.853385][T10585] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 259.585263][T10589] loop6: detected capacity change from 0 to 32768 [ 259.641999][T10589] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 259.833755][T10589] XFS (loop6): Ending clean mount [ 260.060526][ T7231] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 260.086421][T10634] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1229'. [ 260.155815][T10637] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1230'. [ 260.532084][T10646] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 260.766090][T10653] loop8: detected capacity change from 0 to 512 [ 260.806410][T10653] EXT4-fs: Ignoring removed oldalloc option [ 260.857358][T10656] loop6: detected capacity change from 0 to 512 [ 260.925242][T10653] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1236: invalid indirect mapped block 4294967295 (level 1) [ 260.991853][T10653] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1236: invalid indirect mapped block 4294967295 (level 1) [ 261.007918][T10656] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.6.1237: corrupted xattr block 95: invalid header [ 261.086596][T10653] EXT4-fs (loop8): 2 truncates cleaned up [ 261.106065][T10653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.153157][T10656] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.1237: bg 0: block 7: invalid block bitmap [ 261.226759][T10656] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 261.276916][T10656] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #11: comm syz.6.1237: corrupted xattr block 95: invalid header [ 261.357174][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.366914][T10656] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 261.434055][T10656] EXT4-fs (loop6): 1 orphan inode deleted [ 261.441066][T10656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.788477][ T7231] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.833783][T10649] loop3: detected capacity change from 0 to 40427 [ 261.890297][T10649] F2FS-fs (loop3): invalid crc value [ 261.989687][T10649] F2FS-fs (loop3): Found nat_bits in checkpoint [ 262.082019][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1242'. [ 262.232984][T10689] loop7: detected capacity change from 0 to 1024 [ 262.250206][T10649] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 262.341758][T10689] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=802c018, mo2=0002] [ 262.351350][T10689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.377498][T10649] syz.3.1235: attempt to access beyond end of device [ 262.377498][T10649] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.558842][T10689] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1244: bg 0: block 88: padding at end of block bitmap is not set [ 262.631421][ T5775] syz-executor: attempt to access beyond end of device [ 262.631421][ T5775] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 262.673213][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.680864][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 263.031160][T10713] loop7: detected capacity change from 0 to 2048 [ 263.120300][T10713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.248541][T10713] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #12: block 2: comm syz.7.1249: lblock 0 mapped to illegal pblock 2 (length 1) [ 263.408954][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.877148][T10736] Bluetooth: MGMT ver 1.22 [ 264.027670][T10726] loop8: detected capacity change from 0 to 32768 [ 264.100029][T10726] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 264.163454][T10726] XFS (loop8): Ending clean mount [ 264.187399][T10726] XFS (loop8): Quotacheck needed: Please wait. [ 264.312575][T10726] XFS (loop8): Quotacheck: Done. [ 264.325431][T10717] loop6: detected capacity change from 0 to 40427 [ 264.387406][T10717] F2FS-fs (loop6): Invalid log_blocksize (64), supports only 12 [ 264.433536][T10717] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 264.500518][T10717] F2FS-fs (loop6): invalid crc value [ 264.649704][T10765] loop7: detected capacity change from 0 to 512 [ 264.889836][T10717] F2FS-fs (loop6): Start checkpoint disabled! [ 264.944701][T10717] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 264.969354][T10717] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 265.125868][ T9607] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 265.189583][T10717] syz.6.1252: attempt to access beyond end of device [ 265.189583][T10717] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.271442][T10748] loop3: detected capacity change from 0 to 40427 [ 265.338017][T10748] F2FS-fs (loop3): invalid crc value [ 265.379170][T10748] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.436780][ T1144] kworker/u4:6: attempt to access beyond end of device [ 265.436780][ T1144] loop6: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 265.511804][ T1144] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 265.547268][T10783] loop7: detected capacity change from 0 to 128 [ 265.605541][T10748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.654180][T10783] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 265.709172][T10783] hpfs: filesystem error: improperly stopped [ 265.723313][T10783] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 265.790697][T10783] hpfs: You really don't want any checks? You are crazy... [ 265.852127][T10783] hpfs: hpfs_map_sector(): read error [ 265.857557][T10783] hpfs: code page support is disabled [ 265.921848][T10783] hpfs: hpfs_map_4sectors(): unaligned read [ 265.927913][T10783] hpfs: hpfs_map_4sectors(): unaligned read [ 265.955208][ T5776] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 265.965805][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 265.976930][T10783] hpfs: filesystem error: unable to find root dir [ 266.075106][ T5775] syz-executor: attempt to access beyond end of device [ 266.075106][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 266.149259][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 266.467364][T10806] loop7: detected capacity change from 0 to 64 [ 267.197680][ T51] Bluetooth: hci3: link tx timeout [ 267.204090][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.286871][ T5776] Bluetooth: hci3: link tx timeout [ 267.293758][ T5776] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.760478][ T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.860706][T10812] loop7: detected capacity change from 0 to 40427 [ 267.900071][T10812] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 267.938936][T10812] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 268.015334][T10812] F2FS-fs (loop7): invalid crc value [ 268.105588][ T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.297019][T10812] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 268.316013][T10812] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 268.328997][ T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.456891][ T5776] Bluetooth: hci3: link tx timeout [ 268.462152][ T5776] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 268.517501][ T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.561847][T10812] syz.7.1271: attempt to access beyond end of device [ 268.561847][T10812] loop7: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 268.753091][ T1190] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 268.783875][ T7323] syz-executor: attempt to access beyond end of device [ 268.783875][ T7323] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.834548][ T7323] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 268.847687][T10869] loop8: detected capacity change from 0 to 4096 [ 268.976201][ T1190] usb 4-1: Using ep0 maxpacket: 8 [ 269.003905][ T1190] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 269.031991][ T1190] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.071977][ T1190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.105181][ T1190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.116714][T10869] ntfs: volume version 3.1. [ 269.165169][ T1190] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.178702][ T1190] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 269.189117][ T1190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.251826][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 269.456768][ T1190] usb 4-1: GET_CAPABILITIES returned 0 [ 269.482704][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.495449][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.503433][ T1190] usbtmc 4-1:16.0: can't read capabilities [ 269.513880][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.528135][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.540468][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.548533][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.763994][T10155] usb 4-1: USB disconnect, device number 18 [ 269.923372][ T27] audit: type=1326 audit(1780405518.843:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 269.986907][ T27] audit: type=1326 audit(1780405518.863:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 270.056245][ T27] audit: type=1326 audit(1780405518.863:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 270.096638][ T27] audit: type=1326 audit(1780405518.863:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 270.147020][ T27] audit: type=1326 audit(1780405518.863:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 270.188174][ T27] audit: type=1326 audit(1780405518.863:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 270.262930][ T27] audit: type=1326 audit(1780405518.863:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.8.1286" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f135e59ce59 code=0x7ffc0000 [ 271.076659][T10919] xt_hashlimit: size too large, truncated to 1048576 [ 271.301052][T10874] chnl_net:caif_netlink_parms(): no params data found [ 271.632105][ T5776] Bluetooth: hci2: command tx timeout [ 272.002039][ T11] hsr_slave_0: left promiscuous mode [ 272.032614][ T11] hsr_slave_1: left promiscuous mode [ 272.091897][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.132713][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.165811][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.182376][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.200004][ T11] bridge_slave_0: left allmulticast mode [ 272.219441][ T11] bridge_slave_0: left promiscuous mode [ 272.247165][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.367373][T10952] loop8: detected capacity change from 0 to 2048 [ 272.376185][ T11] veth1_macvtap: left promiscuous mode [ 272.407982][ T11] veth0_macvtap: left promiscuous mode [ 272.415541][ T11] veth1_vlan: left promiscuous mode [ 272.439266][ T11] veth0_vlan: left promiscuous mode [ 272.469783][T10952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.649676][T10952] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 272.710775][T10952] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 272.741738][T10952] EXT4-fs (loop8): This should not happen!! Data will be lost [ 272.741738][T10952] [ 272.760447][T10952] EXT4-fs (loop8): Total free blocks count 0 [ 272.769660][T10952] EXT4-fs (loop8): Free/Dirty block details [ 272.781305][T10952] EXT4-fs (loop8): free_blocks=2415919504 [ 272.789543][T10952] EXT4-fs (loop8): dirty_blocks=16 [ 272.801503][T10952] EXT4-fs (loop8): Block reservation details [ 272.830120][T10952] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 272.867156][T10960] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 273.711748][ T5776] Bluetooth: hci2: command tx timeout [ 274.065023][ T11] team0 (unregistering): Port device team_slave_1 removed [ 274.158029][ T11] team0 (unregistering): Port device team_slave_0 removed [ 274.230784][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.316585][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.978454][ T11] bond0 (unregistering): Released all slaves [ 275.239131][T10874] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.261881][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.269146][T10874] bridge_slave_0: entered allmulticast mode [ 275.307719][T10874] bridge_slave_0: entered promiscuous mode [ 275.323332][T10874] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.340835][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.369709][T10874] bridge_slave_1: entered allmulticast mode [ 275.385119][T10874] bridge_slave_1: entered promiscuous mode [ 275.432302][T10967] program syz.8.1307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.519289][T10874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.537614][T10874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.667053][T10874] team0: Port device team_slave_0 added [ 275.734219][T10874] team0: Port device team_slave_1 added [ 275.796311][ T5776] Bluetooth: hci2: command tx timeout [ 275.927368][T10874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.935472][ T11] IPVS: stop unused estimator thread 0... [ 275.947393][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.010058][T10874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.038234][T10874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.067398][T10874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.123206][T10874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.255171][T10980] loop3: detected capacity change from 0 to 4096 [ 276.329614][T10874] hsr_slave_0: entered promiscuous mode [ 276.347132][T10980] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 276.372917][T10874] hsr_slave_1: entered promiscuous mode [ 276.399137][T10980] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 276.401905][T10874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.439101][T10874] Cannot create hsr debugfs directory [ 276.468636][T10983] loop7: detected capacity change from 0 to 8192 [ 276.527184][T10987] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 276.584685][T10980] ntfs: volume version 3.1. [ 276.611048][T10983] NILFS error (device loop7): nilfs_readdir: zero-length directory entry [ 276.708511][T10983] Remounting filesystem read-only [ 276.805881][T10971] loop8: detected capacity change from 0 to 40427 [ 276.927384][T10971] F2FS-fs (loop8): Found nat_bits in checkpoint [ 277.174996][T10971] F2FS-fs (loop8): Start checkpoint disabled! [ 277.259468][T10971] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 277.309912][ T27] audit: type=1326 audit(1780405526.243:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10999 comm="syz.7.1315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2561f9ce59 code=0x0 [ 277.394212][T10971] F2FS-fs (loop8): user quota file already specified [ 277.873009][ T5776] Bluetooth: hci2: command tx timeout [ 277.984296][T10874] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 278.006408][T10874] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 278.020988][T11014] loop8: detected capacity change from 0 to 256 [ 278.030632][T10874] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 278.074391][T10874] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 278.133967][T11014] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 278.437691][T10874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.510857][T10874] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.544067][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.551259][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.618443][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.625663][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.846727][T11039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.867660][T11039] bond0: (slave bond1): Enslaving as an active interface with an up link [ 279.430180][T10874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.738180][T11081] loop7: detected capacity change from 0 to 512 [ 279.841043][T11081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.027905][T11094] loop8: detected capacity change from 0 to 736 [ 280.253323][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.419714][T10874] veth0_vlan: entered promiscuous mode [ 280.515655][T10874] veth1_vlan: entered promiscuous mode [ 280.629105][T10874] veth0_macvtap: entered promiscuous mode [ 280.648947][T10874] veth1_macvtap: entered promiscuous mode [ 280.671137][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.697403][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.707867][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.735801][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.779413][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.801364][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.820348][T10874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.852112][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.870157][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.882204][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.897294][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.917304][T10874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.948368][T10874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.971183][T10874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.016303][T10874] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.027576][T10874] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.036853][T10874] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.045906][T10874] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.235398][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.270583][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.324004][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.342794][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.522371][T11130] loop8: detected capacity change from 0 to 1024 [ 281.532518][T11130] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 281.581231][T11130] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 281.657894][T11130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.706783][T11112] loop3: detected capacity change from 0 to 40427 [ 281.731179][T11112] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 281.766092][T11112] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 281.857818][T11112] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 281.923894][T11112] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 281.959987][T11112] F2FS-fs (loop3): Image doesn't support compression [ 282.015444][T11112] F2FS-fs (loop3): invalid crc value [ 282.045087][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.048680][T11112] F2FS-fs (loop3): Found nat_bits in checkpoint [ 282.285210][T11153] loop6: detected capacity change from 0 to 4096 [ 282.315621][T11112] F2FS-fs (loop3): Start checkpoint disabled! [ 282.389439][T11112] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 282.396215][T11159] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.405917][T11112] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 282.619175][T11153] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean [ 282.853667][T11173] loop7: detected capacity change from 0 to 8 [ 283.059443][ T2946] kworker/u4:7: attempt to access beyond end of device [ 283.059443][ T2946] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 283.101830][ T2946] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 283.116255][ T2946] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 283.122427][T11180] netlink: 'syz.7.1365': attribute type 4 has an invalid length. [ 283.284352][T11187] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1367'. [ 283.297975][T11187] sch_fq: defrate 0 ignored. [ 283.489656][T11191] erspan0: entered promiscuous mode [ 284.086674][T11212] loop8: detected capacity change from 0 to 1024 [ 284.339013][ T2946] hfsplus: b-tree write err: -5, ino 25 [ 284.372603][ T2946] hfsplus: b-tree write err: -5, ino 4 [ 284.378278][ T2946] hfsplus: b-tree write err: -5, ino 2 [ 284.402634][ T2946] hfsplus: b-tree write err: -5, ino 26 [ 284.713668][T11193] loop7: detected capacity change from 0 to 32768 [ 284.791753][ T9040] I/O error, dev loop7, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.240100][T11241] loop8: detected capacity change from 0 to 256 [ 285.318681][T11241] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 285.524336][T11246] loop7: detected capacity change from 0 to 128 [ 285.536786][T11224] loop6: detected capacity change from 0 to 40427 [ 285.571833][T11224] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 285.578517][T11224] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 285.684562][T11224] F2FS-fs (loop6): Found nat_bits in checkpoint [ 285.867483][T11224] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 285.883731][T11224] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 285.963531][ T27] audit: type=1800 audit(1780405534.893:58): pid=11224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1377" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 286.143457][T10874] syz-executor: attempt to access beyond end of device [ 286.143457][T10874] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 286.191507][T10874] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 286.321485][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1389'. [ 286.942529][ T5812] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 287.076135][T11295] loop3: detected capacity change from 0 to 64 [ 287.152616][ T5812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 287.173802][ T5812] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.192493][ T5812] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 287.226950][ T5812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.249554][ T5812] usb 9-1: config 0 descriptor?? [ 287.648284][T11293] loop7: detected capacity change from 0 to 32768 [ 287.692542][T11293] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 287.719504][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.772339][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.792696][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.809798][T11293] XFS (loop7): Ending clean mount [ 287.823507][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.851032][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.866192][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.877716][T11292] loop6: detected capacity change from 0 to 40427 [ 287.897497][ T5812] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 287.935874][T11292] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 287.970756][T11292] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 287.988115][ T5812] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 288.031421][T11292] F2FS-fs (loop6): invalid crc value [ 288.103259][T11292] F2FS-fs (loop6): Found nat_bits in checkpoint [ 288.388738][T11292] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 288.438328][T11292] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 288.466618][ T5812] usb 9-1: USB disconnect, device number 3 [ 288.873052][T11309] loop3: detected capacity change from 0 to 131072 [ 288.903633][ T7323] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 288.918006][T11309] F2FS-fs (loop3): Found nat_bits in checkpoint [ 288.996152][T11309] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 289.082748][T11309] F2FS-fs (loop3): list inode (7) has corrupted xattr [ 289.826616][T11335] loop8: detected capacity change from 0 to 512 [ 289.851777][T11335] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 289.914446][T11335] EXT4-fs (loop8): 1 truncate cleaned up [ 289.921422][T11335] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.969490][T11335] EXT4-fs error (device loop8): ext4_empty_dir:3177: inode #2: block 13: comm syz.8.1409: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 290.029991][T11339] loop6: detected capacity change from 0 to 128 [ 290.086348][T11335] EXT4-fs (loop8): Remounting filesystem read-only [ 290.193627][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.012581][T11361] loop8: detected capacity change from 0 to 256 [ 291.047392][T11361] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 291.170816][T11349] loop3: detected capacity change from 0 to 40427 [ 291.231255][T11349] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 291.291384][T11349] F2FS-fs (loop3): invalid crc value [ 291.369983][T11349] F2FS-fs (loop3): Found nat_bits in checkpoint [ 291.704087][T11349] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 291.758368][T11359] loop6: detected capacity change from 0 to 131072 [ 291.816355][T11359] F2FS-fs (loop6): Found nat_bits in checkpoint [ 291.868247][T11359] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 291.956170][T11359] F2FS-fs (loop6): access invalid blkaddr:0 [ 291.962710][T11359] CPU: 0 PID: 11359 Comm: syz.6.1419 Not tainted syzkaller #0 [ 291.970209][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.980310][T11359] Call Trace: [ 291.983623][T11359] [ 291.986576][T11359] dump_stack_lvl+0x18c/0x250 [ 291.991289][T11359] ? show_regs_print_info+0x20/0x20 [ 291.996536][T11359] ? __up_read+0x2b6/0x6b0 [ 292.000983][T11359] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 292.006394][T11359] sanity_check_extent_cache+0xfc/0x1f0 [ 292.011969][T11359] f2fs_iget+0x33c5/0x47e0 [ 292.016449][T11359] f2fs_lookup+0x37f/0x780 [ 292.020895][T11359] ? do_raw_spin_lock+0x11f/0x2c0 [ 292.025958][T11359] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 292.032066][T11359] ? __rwlock_init+0x150/0x150 [ 292.036875][T11359] ? _raw_spin_unlock+0x28/0x40 [ 292.041758][T11359] ? d_alloc+0x1eb/0x250 [ 292.046036][T11359] lookup_one_qstr_excl+0x112/0x250 [ 292.051269][T11359] filename_create+0x23e/0x480 [ 292.056071][T11359] ? kern_path_create+0x50/0x50 [ 292.060938][T11359] ? __virt_addr_valid+0x18c/0x540 [ 292.066077][T11359] ? __virt_addr_valid+0x469/0x540 [ 292.071227][T11359] do_mkdirat+0xa9/0x450 [ 292.075502][T11359] ? vfs_mkdir+0x440/0x440 [ 292.079959][T11359] __x64_sys_mkdirat+0x89/0xa0 [ 292.084768][T11359] do_syscall_64+0x55/0xb0 [ 292.089212][T11359] ? clear_bhb_loop+0x40/0x90 [ 292.093910][T11359] ? clear_bhb_loop+0x40/0x90 [ 292.098617][T11359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.104547][T11359] RIP: 0033:0x7f4287d9ce59 [ 292.109007][T11359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.128648][T11359] RSP: 002b:00007f4288d15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 292.137102][T11359] RAX: ffffffffffffffda RBX: 00007f4288015fa0 RCX: 00007f4287d9ce59 [ 292.145104][T11359] RDX: 00000000000000c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 292.153103][T11359] RBP: 00007f4287e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.161101][T11359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.169102][T11359] R13: 00007f4288016038 R14: 00007f4288015fa0 R15: 00007ffc56ca68d8 [ 292.177122][T11359] [ 292.180974][T11359] F2FS-fs (loop6): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 292.376101][T11370] loop8: detected capacity change from 0 to 40427 [ 292.403598][T11370] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 292.411413][T11370] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 292.446685][T11370] F2FS-fs (loop8): invalid crc value [ 292.490772][T11370] F2FS-fs (loop8): Found nat_bits in checkpoint [ 292.767924][T11370] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 292.794544][T11370] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 292.843749][T11388] loop7: detected capacity change from 0 to 1764 [ 292.939708][T11388] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 293.366995][T11395] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'. [ 293.406009][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.748293][T11403] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 293.787964][T11403] team0: Port device batadv1 added [ 293.881988][ T5812] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 294.122704][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 294.145194][ T5812] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 294.160738][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.190202][ T5812] usb 4-1: Product: syz [ 294.209785][ T5812] usb 4-1: Manufacturer: syz [ 294.219553][ T5812] usb 4-1: SerialNumber: syz [ 294.233789][ T5812] usb 4-1: config 0 descriptor?? [ 294.249085][ T5812] gspca_main: se401-2.14.0 probing 047d:5003 [ 294.642636][T11431] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1447'. [ 294.664844][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 294.672052][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1447'. [ 294.691264][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 294.705533][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 294.721714][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 294.731739][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 294.737767][ T5812] gspca_se401: Frame size: 0x0 1/16th janggu [ 294.869830][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1451'. [ 294.875022][ T5812] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 294.925959][ T5812] usb 4-1: USB disconnect, device number 19 [ 294.927244][T11436] loop7: detected capacity change from 0 to 2048 [ 294.969015][T11436] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 295.100722][T11441] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.118463][ T5763] udevd[5763]: incorrect nilfs2 checksum on /dev/loop7 [ 295.158934][T11436] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 262144 [ 295.177685][T11436] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 295.199373][T11442] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1452'. [ 295.220162][T11436] Remounting filesystem read-only [ 295.227392][T11436] NILFS (loop7): error -5 truncating bmap (ino=15) [ 295.265192][T11423] loop8: detected capacity change from 0 to 32768 [ 295.320790][ T7323] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 295.336403][T11423] JBD2: Ignoring recovery information on journal [ 295.343477][ T7323] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 295.350170][ T7323] NILFS (loop7): discard dirty block: blocknr=18, size=1024 [ 295.381765][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 295.390707][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 295.402269][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 295.411497][ T7323] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 295.435935][T11423] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 295.439837][ T7323] NILFS (loop7): discard dirty block: blocknr=3, size=1024 [ 295.465384][ T7323] NILFS (loop7): discard dirty block: blocknr=36, size=1024 [ 295.500701][ T7323] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 295.522105][ T7323] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 295.714373][T11451] loop3: detected capacity change from 0 to 128 [ 295.751969][ T9607] ocfs2: Unmounting device (7,8) on (node local) [ 296.210820][T11460] loop7: detected capacity change from 0 to 1024 [ 296.429408][ T1144] hfsplus: b-tree write err: -5, ino 25 [ 296.456061][ T1144] hfsplus: b-tree write err: -5, ino 4 [ 296.472871][ T1144] hfsplus: b-tree write err: -5, ino 2 [ 296.531749][ T787] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 296.697340][T11474] loop3: detected capacity change from 0 to 512 [ 296.731881][T11474] EXT4-fs (loop3): 1 truncate cleaned up [ 296.745403][T11474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.761889][ T787] usb 9-1: Using ep0 maxpacket: 32 [ 296.793308][ T787] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 296.802905][ T787] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 296.811547][ T787] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 296.820900][ T787] usb 9-1: config 1 has no interface number 0 [ 296.827110][ T787] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.843844][ T787] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 296.856898][ T787] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 296.866012][ T787] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.881340][ T787] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 296.892822][T11480] loop6: detected capacity change from 0 to 128 [ 296.939631][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.942896][T11480] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 297.091280][ T787] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 297.095605][T11482] bridge0: port 3(ip6gretap0) entered blocking state [ 297.107225][T11482] bridge0: port 3(ip6gretap0) entered disabled state [ 297.126093][T11482] ip6gretap0: entered allmulticast mode [ 297.145602][T11482] ip6gretap0: entered promiscuous mode [ 297.159005][T11482] bridge0: port 3(ip6gretap0) entered blocking state [ 297.165895][T11482] bridge0: port 3(ip6gretap0) entered forwarding state [ 297.178262][ T1144] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 297.312610][T11485] loop6: detected capacity change from 0 to 8 [ 297.428739][T11472] loop7: detected capacity change from 0 to 32768 [ 297.449660][T10874] SQUASHFS error: Unable to read directory block [631:72] [ 297.480964][T10874] SQUASHFS error: Unable to read inode 0x0 [ 297.502315][T10874] SQUASHFS error: Unable to read inode 0x0 [ 297.574772][ T787] usb 9-1: USB disconnect, device number 4 [ 297.611559][ T787] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 297.778558][T11492] loop3: detected capacity change from 0 to 512 [ 298.115266][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.342872][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.490232][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.714115][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.274321][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.290287][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.300026][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.328153][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.350092][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.358321][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.539992][T11532] loop7: detected capacity change from 0 to 40427 [ 300.559343][T11532] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 300.567971][T11532] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 300.588506][T11532] F2FS-fs (loop7): invalid crc value [ 300.614479][T11532] F2FS-fs (loop7): Found nat_bits in checkpoint [ 300.657787][T11533] loop3: detected capacity change from 0 to 32768 [ 300.719828][T11533] [ 300.719828][T11533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.719828][T11533] [ 300.738597][T11532] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 300.766923][T11532] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 300.791918][ T8] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 300.848069][ T59] ERROR: (device loop3): diWrite: ixpxd invalid [ 300.848069][ T59] [ 300.878587][ T59] ERROR: (device loop3): txCommit: [ 300.878587][ T59] [ 300.902265][ T59] jfs_write_inode: jfs_commit_inode failed! [ 300.908313][ T5775] [ 300.908313][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.908313][ T5775] [ 300.949787][ T5775] [ 300.949787][ T5775] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 300.949787][ T5775] [ 301.014491][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 301.035513][T11518] chnl_net:caif_netlink_parms(): no params data found [ 301.050432][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.076442][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.125750][ T8] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 301.155567][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.193155][ T8] usb 9-1: config 0 descriptor?? [ 301.239947][ T8] hub 9-1:0.0: USB hub found [ 301.422783][T11566] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 301.471807][ T5783] Bluetooth: hci2: command tx timeout [ 301.490604][ T8] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 301.639327][T11518] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.683436][T11518] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.712330][T11518] bridge_slave_0: entered allmulticast mode [ 301.720160][T11518] bridge_slave_0: entered promiscuous mode [ 301.822530][ T49] hsr_slave_0: left promiscuous mode [ 301.828958][ T49] hsr_slave_1: left promiscuous mode [ 301.836209][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.843863][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.852998][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.860454][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.868660][ T49] bridge_slave_1: left allmulticast mode [ 301.882042][ T49] bridge_slave_1: left promiscuous mode [ 301.887948][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.927349][ T49] bridge_slave_0: left allmulticast mode [ 301.942144][ T49] bridge_slave_0: left promiscuous mode [ 301.953893][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.982509][ T8] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 302.162007][ T49] veth1_macvtap: left promiscuous mode [ 302.167587][ T49] veth0_macvtap: left promiscuous mode [ 302.212256][ T49] veth1_vlan: left promiscuous mode [ 302.217654][ T49] veth0_vlan: left promiscuous mode [ 302.322540][ T5811] usb 9-1: USB disconnect, device number 5 [ 302.482559][T11588] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.679402][T11594] loop3: detected capacity change from 0 to 128 [ 302.702593][T11594] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 302.759568][T11594] ext4 filesystem being mounted at /405/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 302.906731][T11594] fscrypt (loop3, inode 12): Mutually exclusive encryption flags (0x0c) [ 302.955521][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.572169][ T5783] Bluetooth: hci2: command tx timeout [ 303.874349][ T49] team0 (unregistering): Port device team_slave_1 removed [ 303.888726][T11611] loop3: detected capacity change from 0 to 128 [ 303.956512][T11611] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 303.973593][ T49] team0 (unregistering): Port device team_slave_0 removed [ 304.011294][T11611] ext4 filesystem being mounted at /409/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 304.059874][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.145605][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.175732][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 304.843651][ T49] bond0 (unregistering): Released all slaves [ 304.932007][ T5812] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 304.961260][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.968497][T11518] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.976232][T11518] bridge_slave_1: entered allmulticast mode [ 304.983351][T11518] bridge_slave_1: entered promiscuous mode [ 305.101320][T11518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.132671][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 305.163055][T11518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.165232][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.205642][ T5812] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 305.230189][ T5812] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 305.244339][ T5812] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 305.265683][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.285842][ T5812] usb 4-1: Product: syz [ 305.290171][ T5812] usb 4-1: Manufacturer: syz [ 305.321732][ T5812] usb 4-1: SerialNumber: syz [ 305.420776][T11518] team0: Port device team_slave_0 added [ 305.489838][T11518] team0: Port device team_slave_1 added [ 305.584018][T11518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.591971][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.618793][T11518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.630980][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1513'. [ 305.643183][ T5783] Bluetooth: hci2: command tx timeout [ 305.665653][T11629] ipvlan2: entered allmulticast mode [ 305.671102][T11629] syz_tun: entered allmulticast mode [ 305.740635][T11518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.758807][T11518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.793459][T11518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.914225][T11518] hsr_slave_0: entered promiscuous mode [ 305.937756][T11518] hsr_slave_1: entered promiscuous mode [ 305.947508][T11518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.962046][T11518] Cannot create hsr debugfs directory [ 305.969513][ T5812] usb 4-1: clock source 0 is not valid, cannot use [ 306.071285][T11641] loop7: detected capacity change from 0 to 64 [ 306.178193][ T5812] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 306.202921][ T27] audit: type=1800 audit(1780405555.133:59): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1514" name="file2" dev="loop7" ino=21 res=0 errno=0 [ 306.210306][ T5812] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 306.291132][ T27] audit: type=1800 audit(1780405555.163:60): pid=11641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1514" name="file2" dev="loop7" ino=21 res=0 errno=0 [ 306.367334][ T7323] hfs: node 4:3 still has 1 user(s)! [ 306.385939][ T5812] usb 4-1: USB disconnect, device number 20 [ 306.483129][ T9614] udevd[9614]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.786682][T11518] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 306.807910][T11518] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 306.835091][T11518] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 306.855299][T11518] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 307.045735][T11518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.103344][T11518] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.117234][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.124465][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.158101][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.165297][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.337869][T11649] loop7: detected capacity change from 0 to 32768 [ 307.356907][T11649] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1517 (11649) [ 307.425935][T11649] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.471925][T11649] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 307.489965][T11649] BTRFS info (device loop7): using free space tree [ 307.648951][T11649] BTRFS info (device loop7): enabling ssd optimizations [ 307.681899][T11649] BTRFS info (device loop7): auto enabling async discard [ 307.712977][ T5783] Bluetooth: hci2: command tx timeout [ 307.733550][ T787] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 307.870231][ T7323] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 307.963931][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.003676][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.027178][T11518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.041768][ T787] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 308.078822][T11697] netlink: 'syz.8.1525': attribute type 10 has an invalid length. [ 308.090688][T11697] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1525'. [ 308.090884][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.182987][ T787] usb 4-1: config 0 descriptor?? [ 308.665071][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.722935][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.729992][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.777367][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.809486][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.832161][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.839190][ T787] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 308.890893][ T787] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 309.032530][ T787] cp2112 0003:10C4:EA90.000E: Part Number: 0x00 Device Version: 0x00 [ 309.168560][T11722] loop7: detected capacity change from 0 to 512 [ 309.187750][T11722] EXT4-fs: journaled quota format not specified [ 309.238794][ T787] cp2112 0003:10C4:EA90.000E: error requesting SMBus config [ 309.256435][ T787] cp2112: probe of 0003:10C4:EA90.000E failed with error -71 [ 309.302407][ T9040] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.315165][ T787] usb 4-1: USB disconnect, device number 21 [ 309.328009][T11518] veth0_vlan: entered promiscuous mode [ 309.344727][T11729] loop8: detected capacity change from 0 to 512 [ 309.399523][T11518] veth1_vlan: entered promiscuous mode [ 309.448885][T11729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.538121][T11518] veth0_macvtap: entered promiscuous mode [ 309.588234][T11518] veth1_macvtap: entered promiscuous mode [ 309.648184][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.666714][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.697859][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.718905][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.750135][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.782054][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.793935][T11518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.808805][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.829501][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.844340][T11742] loop7: detected capacity change from 0 to 256 [ 309.854345][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.858944][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.871319][T11742] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 309.891920][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.902802][T11518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.953245][T11518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.975233][T11518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.054153][T11518] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.082001][T11518] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.090761][T11518] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.148912][T11518] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.367287][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.387352][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.452837][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.460699][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.258619][ T787] kernel write not supported for file /vcsa (pid: 787 comm: kworker/1:2) [ 311.499133][T11793] batman_adv: batadv0: Adding interface: macsec1 [ 311.508877][T11793] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 311.555609][T11793] batman_adv: batadv0: Interface activated: macsec1 [ 311.645829][T11799] ALSA: mixer_oss: invalid OSS volume '' [ 311.828181][T11804] erspan0: entered promiscuous mode [ 312.877430][T11801] loop3: detected capacity change from 0 to 40427 [ 312.941521][T11801] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 313.022217][T11801] F2FS-fs (loop3): invalid crc value [ 313.053871][T11801] F2FS-fs (loop3): Found nat_bits in checkpoint [ 313.230964][T11801] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 313.295317][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1564'. [ 313.435599][T11801] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 313.476447][T11826] loop7: detected capacity change from 0 to 32768 [ 313.518514][T11826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1561 (11826) [ 313.583876][T11826] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.609072][T11826] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 313.644778][T11826] BTRFS info (device loop7): setting nodatasum [ 313.663048][T11826] BTRFS info (device loop7): disabling tree log [ 313.695061][T11826] BTRFS info (device loop7): max_inline at 0 [ 313.701127][T11826] BTRFS info (device loop7): turning on sync discard [ 313.759138][T11826] BTRFS info (device loop7): using free space tree [ 314.001211][T11826] BTRFS info (device loop7): enabling ssd optimizations [ 314.059670][T11835] loop8: detected capacity change from 0 to 32768 [ 314.214703][T11835] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 314.463422][ T7323] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.696424][T11835] XFS (loop8): Ending clean mount [ 314.760522][T11835] XFS (loop8): Quotacheck needed: Please wait. [ 314.887499][T11835] XFS (loop8): Quotacheck: Done. [ 314.974998][T11905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1574'. [ 315.468531][ T9607] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.068523][T11936] program syz.9.1582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.519558][T11950] loop9: detected capacity change from 0 to 2048 [ 316.603296][T11957] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1590'. [ 316.622337][T11959] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 316.641396][T11957] IPVS: Error joining to the multicast group [ 317.159618][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.166296][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.224882][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1594'. [ 317.237946][T11971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1594'. [ 317.418476][T11976] loop3: detected capacity change from 0 to 512 [ 317.443517][T11976] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.1596: missing EA_INODE flag [ 317.540797][T11976] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1596: error while reading EA inode 12 err=-117 [ 317.600877][T11976] EXT4-fs (loop3): 1 orphan inode deleted [ 317.624709][T11976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.634668][T11973] loop9: detected capacity change from 0 to 32768 [ 317.650238][T11973] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 scanned by syz.9.1593 (11973) [ 317.705636][T11973] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 317.738169][T11973] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 317.761386][T11973] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 317.774253][T11973] BTRFS info (device loop9): use zstd compression, level 3 [ 317.781823][T11973] BTRFS info (device loop9): using free space tree [ 317.812464][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.014701][T11973] BTRFS info (device loop9): enabling ssd optimizations [ 318.058028][T11973] BTRFS info (device loop9): auto enabling async discard [ 318.061020][T12007] loop3: detected capacity change from 0 to 1024 [ 318.115722][T12007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.528583][T11518] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 318.696172][T12018] ALSA: mixer_oss: invalid OSS volume '' [ 318.727002][T12018] ALSA: mixer_oss: invalid OSS volume '' [ 318.753775][T12018] ALSA: mixer_oss: invalid OSS volume '' [ 318.777135][T12018] ALSA: mixer_oss: invalid OSS volume '' [ 319.138542][T12026] loop9: detected capacity change from 0 to 512 [ 319.189050][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1608'. [ 319.288701][T12026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.297641][T12033] loop8: detected capacity change from 0 to 256 [ 319.433269][T12033] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 319.493384][T12036] loop3: detected capacity change from 0 to 512 [ 319.522134][T12036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 319.559745][T12036] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1610: bad orphan inode 131083 [ 319.591570][T12036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.616476][T11518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.067903][T12048] loop9: detected capacity change from 0 to 1024 [ 320.076674][T12048] EXT4-fs: Ignoring removed nobh option [ 320.092399][T12050] loop7: detected capacity change from 0 to 764 [ 320.102871][T12048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.218550][T11518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.239177][T12050] Symlink component flag not implemented [ 320.250799][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.292803][T12050] Symlink component flag not implemented [ 320.299293][T12050] Symlink component flag not implemented (128) [ 320.332536][T12050] Symlink component flag not implemented (105) [ 320.877682][T12070] loop8: detected capacity change from 0 to 512 [ 321.133012][ T5783] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 321.364897][T12082] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 321.398031][T12082] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 321.422025][T12082] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 321.438987][T12082] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 321.463792][T12082] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 321.481494][T12082] ntfs: volume version 3.1. [ 321.496972][T12082] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 321.524401][T12082] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 321.547814][T12082] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 321.585995][T12082] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 321.669083][T12082] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 321.808812][T12101] set_capacity_and_notify: 1 callbacks suppressed [ 321.808828][T12101] loop9: detected capacity change from 0 to 1024 [ 321.854554][T12101] EXT4-fs: inline encryption not supported [ 321.920696][T12101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 321.935665][T12107] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 321.965139][T12101] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.084564][T11518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 322.357832][T12117] loop7: detected capacity change from 0 to 2048 [ 322.443636][T12117] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 322.517102][T12126] loop8: detected capacity change from 0 to 64 [ 322.524159][T12127] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.717683][T12126] MINIX-fs: bad superblock or unable to read bitmaps [ 322.891943][ T7323] syz-executor: attempt to access beyond end of device [ 322.891943][ T7323] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 322.962099][ T7323] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 323.094200][ T7323] syz-executor: attempt to access beyond end of device [ 323.094200][ T7323] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 323.136995][ T7323] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 323.177576][ T7323] syz-executor: attempt to access beyond end of device [ 323.177576][ T7323] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 323.209330][ T7323] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 323.235107][ T7323] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 147 [ 323.286136][ T7323] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15) [ 323.323919][ T7323] Remounting filesystem read-only [ 323.329014][ T7323] NILFS (loop7): error -5 truncating bmap (ino=15) [ 323.359644][ T7323] syz-executor: attempt to access beyond end of device [ 323.359644][ T7323] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 323.403133][ T7323] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 323.452408][ T7323] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 323.501766][ T7323] NILFS (loop7): discard dirty page: offset=0, ino=2 [ 323.528975][ T7323] NILFS (loop7): discard dirty block: blocknr=18, size=1024 [ 323.558206][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.596142][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.628838][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.657300][ T7323] NILFS (loop7): discard dirty page: offset=0, ino=6 [ 323.694165][ T7323] NILFS (loop7): discard dirty block: blocknr=35, size=1024 [ 323.701541][ T7323] NILFS (loop7): discard dirty block: blocknr=131108, size=1024 [ 323.751700][ T7323] NILFS (loop7): discard dirty block: blocknr=37, size=1024 [ 323.769606][ T7323] NILFS (loop7): discard dirty block: blocknr=38, size=1024 [ 323.795236][ T7323] NILFS (loop7): discard dirty page: offset=163840, ino=3 [ 323.841822][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.851476][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.914306][ T7323] NILFS (loop7): discard dirty block: blocknr=47, size=1024 [ 323.934057][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 323.945738][T12123] loop3: detected capacity change from 0 to 32768 [ 323.952805][ T7323] NILFS (loop7): discard dirty page: offset=196608, ino=3 [ 323.960589][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.005573][T12123] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 324.013996][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.014023][ T7323] NILFS (loop7): discard dirty block: blocknr=49, size=1024 [ 324.014038][ T7323] NILFS (loop7): discard dirty block: blocknr=18446744073709551615, size=1024 [ 324.053062][T12123] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 324.232278][T12123] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 324.316233][T12163] netlink: 'syz.7.1659': attribute type 21 has an invalid length. [ 324.512084][T12123] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 324.516458][T12166] loop8: detected capacity change from 0 to 256 [ 324.604291][T12166] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 324.658076][T12166] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 324.712629][T12166] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 325.260548][T12181] mkiss: ax0: crc mode is auto. [ 325.269757][T12154] loop9: detected capacity change from 0 to 40427 [ 325.303144][T12154] F2FS-fs (loop9): invalid crc value [ 325.336497][T12154] F2FS-fs (loop9): Found nat_bits in checkpoint [ 325.435522][T12188] syz.7.1669 uses obsolete (PF_INET,SOCK_PACKET) [ 325.499025][T12154] F2FS-fs (loop9): Start checkpoint disabled! [ 325.565411][T12154] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 325.903439][T12202] overlayfs: conflicting lowerdir path [ 326.021956][ T68] kworker/u4:5: attempt to access beyond end of device [ 326.021956][ T68] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 326.057619][ T68] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 326.070910][ T68] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 326.247559][T12215] loop7: detected capacity change from 0 to 164 [ 326.353736][ T5811] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 326.586266][ T5811] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 326.601303][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.644679][ T5811] usb 4-1: Product: syz [ 326.648919][ T5811] usb 4-1: Manufacturer: syz [ 326.680877][ T5811] usb 4-1: SerialNumber: syz [ 326.729262][ T5811] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 326.911054][ T5762] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.062205][T12243] loop7: detected capacity change from 0 to 512 [ 327.110162][T12243] EXT4-fs (loop7): 1 truncate cleaned up [ 327.118330][T12243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.248921][ T7323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.304008][T12247] block nbd0: server does not support multiple connections per device. [ 327.314431][T12250] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1691'. [ 327.417074][T12247] block nbd0: shutting down sockets [ 327.795872][ T1190] kernel read not supported for file /swradio8 (pid: 1190 comm: kworker/0:2) [ 327.909259][ T787] usb 4-1: USB disconnect, device number 22 [ 328.752174][ T5762] usb 4-1: Service connection timeout for: 258 [ 328.771136][ T5762] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 328.800630][ T5762] ath9k_htc: Failed to initialize the device [ 328.863849][ T787] usb 4-1: ath9k_htc: USB layer deinitialized [ 328.945778][T12255] loop7: detected capacity change from 0 to 32768 [ 328.997447][T12255] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 329.008913][T12255] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 329.093466][T12300] loop3: detected capacity change from 0 to 256 [ 329.121484][T12300] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.139028][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 329.139040][ T27] audit: type=1800 audit(1780405584.076:61): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1706" name="file1" dev="loop3" ino=1048684 res=0 errno=0 [ 329.242100][ T27] audit: type=1800 audit(1780405584.116:62): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1706" name="file1" dev="loop3" ino=1048684 res=0 errno=0 [ 329.265308][T12304] loop9: detected capacity change from 0 to 512 [ 329.285174][T12305] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 329.300843][T12255] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 329.317537][T12304] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 329.366255][ T1190] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 329.368747][T12305] FAT-fs (loop3): Filesystem has been set read-only [ 329.391772][ T1190] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 329.433421][T12305] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 329.531948][T12304] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.1705: corrupted xattr entries [ 329.579239][T12304] EXT4-fs (loop9): 1 truncate cleaned up [ 329.606393][T12304] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.633250][ T1190] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 241ms [ 329.654402][ T1190] gfs2: fsid=syz:syz.0: jid=0: Done [ 329.668605][T12255] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 329.746849][T12304] EXT4-fs (loop9): shut down requested (1) [ 329.890126][T11518] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.160186][T12328] loop3: detected capacity change from 0 to 512 [ 330.226658][T12328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1710: invalid indirect mapped block 10 (level 1) [ 330.323087][T12328] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1710: invalid indirect mapped block 8 (level 1) [ 330.426151][T12328] EXT4-fs (loop3): 1 truncate cleaned up [ 330.447076][T12328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.736702][T12342] autofs4:pid:12342:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc018937e) [ 330.769928][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.772736][T12342] autofs4:pid:12342:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 331.472086][T12355] mkiss: ax0: crc mode is auto. [ 331.824134][T12366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 333.186467][T12415] loop9: detected capacity change from 0 to 256 [ 333.218118][T12415] exfat: Deprecated parameter 'utf8' [ 333.243025][T12415] exfat: Deprecated parameter 'utf8' [ 333.296409][T12415] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 333.643843][T12403] loop3: detected capacity change from 0 to 40427 [ 333.672120][T12403] F2FS-fs (loop3): Invalid log blocks per segment (1) [ 333.679808][T12403] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 333.716804][T12403] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 333.738253][T12403] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 333.777531][T12403] F2FS-fs (loop3): Image doesn't support compression [ 333.803171][T12403] F2FS-fs (loop3): invalid crc value [ 333.837423][T12403] F2FS-fs (loop3): Found nat_bits in checkpoint [ 333.851913][T10155] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 334.014892][T12403] F2FS-fs (loop3): Start checkpoint disabled! [ 334.042839][T10155] usb 10-1: Using ep0 maxpacket: 32 [ 334.058111][T10155] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 334.078433][T10155] usb 10-1: config 0 has no interface number 0 [ 334.097525][T10155] usb 10-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.102097][T12403] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 334.131745][T10155] usb 10-1: config 0 interface 89 has no altsetting 0 [ 334.152130][T10155] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 334.158492][T12403] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 334.169959][T10155] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.208853][T10155] usb 10-1: Product: syz [ 334.223122][T10155] usb 10-1: Manufacturer: syz [ 334.227863][T10155] usb 10-1: SerialNumber: syz [ 334.294643][T10155] usb 10-1: config 0 descriptor?? [ 334.327648][T10155] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 334.356637][ T27] audit: type=1804 audit(1780405589.296:63): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1732" name="/newroot/462/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 334.383744][T12451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.392372][T10155] em28xx 10-1:0.89: Video interface 89 found: [ 334.471879][T12453] netlink: 67 bytes leftover after parsing attributes in process `syz.7.1746'. [ 334.552473][T12453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.663868][ T68] kworker/u4:5: attempt to access beyond end of device [ 334.663868][ T68] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 334.685479][ T68] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 334.694622][ T68] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 335.005843][T10155] em28xx 10-1:0.89: chip ID is em2710 [ 335.306208][T10155] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 335.329758][T10155] em28xx 10-1:0.89: board has no eeprom [ 335.417976][T10155] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 335.451898][T10155] em28xx 10-1:0.89: analog set to bulk mode. [ 335.459427][ T5762] em28xx 10-1:0.89: Registering V4L2 extension [ 335.489457][T10155] usb 10-1: USB disconnect, device number 2 [ 335.512206][T10155] em28xx 10-1:0.89: Disconnecting em28xx [ 335.626946][ T5762] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 335.661033][ T5762] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 335.681237][T12461] loop8: detected capacity change from 0 to 40427 [ 335.690219][ T5762] em28xx 10-1:0.89: No AC97 audio processor [ 335.737862][T12461] F2FS-fs (loop8): invalid crc value [ 335.752466][ T5762] usb 10-1: Decoder not found [ 335.757315][ T5762] em28xx 10-1:0.89: failed to create media graph [ 335.776421][T12461] F2FS-fs (loop8): Found nat_bits in checkpoint [ 335.785240][ T5762] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 335.856085][ T5762] em28xx 10-1:0.89: Registering snapshot button... [ 335.903715][ T5762] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input18 [ 335.981701][T12461] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 335.989295][ T5762] em28xx 10-1:0.89: Remote control support is not available for this card. [ 336.041590][T10155] em28xx 10-1:0.89: Closing input extension [ 336.075243][T10155] em28xx 10-1:0.89: Deregistering snapshot button [ 336.299105][ T9607] syz-executor: attempt to access beyond end of device [ 336.299105][ T9607] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 336.311710][T10155] em28xx 10-1:0.89: Freeing device [ 336.372135][T12497] loop3: detected capacity change from 0 to 256 [ 336.378065][ T9607] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 336.556514][T12497] FAT-fs (loop3): Directory bread(block 64) failed [ 336.599999][T12497] FAT-fs (loop3): Directory bread(block 65) failed [ 336.621847][T12497] FAT-fs (loop3): Directory bread(block 66) failed [ 336.628450][T12497] FAT-fs (loop3): Directory bread(block 67) failed [ 336.662060][T12497] FAT-fs (loop3): Directory bread(block 68) failed [ 336.674344][T12482] loop7: detected capacity change from 0 to 32768 [ 336.691701][T12497] FAT-fs (loop3): Directory bread(block 69) failed [ 336.698392][T12497] FAT-fs (loop3): Directory bread(block 70) failed [ 336.723649][T12497] FAT-fs (loop3): Directory bread(block 71) failed [ 336.745302][T12497] FAT-fs (loop3): Directory bread(block 72) failed [ 336.758818][T12497] FAT-fs (loop3): Directory bread(block 73) failed [ 336.793630][T12482] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.046477][T12482] XFS (loop7): Ending clean mount [ 337.105787][T12482] XFS (loop7): Quotacheck needed: Please wait. [ 337.134325][T12520] loop3: detected capacity change from 0 to 64 [ 337.318146][T12482] XFS (loop7): Quotacheck: Done. [ 337.391910][ T5783] Bluetooth: hci2: command tx timeout [ 337.597554][ T7323] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 337.642893][T12526] loop3: detected capacity change from 0 to 128 [ 337.676059][T12526] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 337.815380][T12526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.366371][T12554] loop8: detected capacity change from 0 to 512 [ 338.573699][ T5835] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 338.739195][T12562] loop8: detected capacity change from 0 to 2048 [ 338.766719][T12563] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 338.771930][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 338.805467][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.833086][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.860328][ T5835] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.870974][T12552] loop7: detected capacity change from 0 to 32768 [ 338.877849][T10155] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 338.878422][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.898225][T12563] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 338.940136][T12563] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 338.956393][T12552] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 338.969930][ T5835] usb 4-1: config 0 descriptor?? [ 338.975182][T12563] Remounting filesystem read-only [ 339.030176][ T5835] hub 4-1:0.0: USB hub found [ 339.040110][ T9607] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 339.056622][ T9607] NILFS (loop8): discard dirty page: offset=0, ino=18 [ 339.063909][ T9607] NILFS (loop8): discard dirty block: blocknr=0, size=1024 [ 339.071140][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.080293][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.090675][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.102247][T10155] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 339.111427][T10155] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.123087][ T9607] NILFS (loop8): discard dirty page: offset=0, ino=2 [ 339.129811][ T9607] NILFS (loop8): discard dirty block: blocknr=18, size=1024 [ 339.139091][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.152693][T10155] usb 10-1: config 0 descriptor?? [ 339.158004][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.170448][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.190916][ T9607] NILFS (loop8): discard dirty page: offset=0, ino=6 [ 339.220819][ T9607] NILFS (loop8): discard dirty block: blocknr=35, size=1024 [ 339.242009][ T9607] NILFS (loop8): discard dirty block: blocknr=36, size=1024 [ 339.249477][ T9607] NILFS (loop8): discard dirty block: blocknr=37, size=1024 [ 339.254681][ T5835] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 339.275235][ T9607] NILFS (loop8): discard dirty block: blocknr=38, size=1024 [ 339.296119][ T9607] NILFS (loop8): discard dirty page: offset=4096, ino=6 [ 339.321730][ T9607] NILFS (loop8): discard dirty block: blocknr=39, size=1024 [ 339.334657][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.343865][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.355291][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.374226][T10155] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 339.382934][ T9607] NILFS (loop8): discard dirty page: offset=0, ino=5 [ 339.389679][ T9607] NILFS (loop8): discard dirty block: blocknr=41, size=1024 [ 339.400825][T10155] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 339.403055][ T7323] ocfs2: Unmounting device (7,7) on (node local) [ 339.408954][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.425726][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.459436][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.479521][ T5835] usbhid 4-1:0.0: can't add hid device: -71 [ 339.482701][ T9607] NILFS (loop8): discard dirty page: offset=0, ino=4 [ 339.494252][ T5835] usbhid: probe of 4-1:0.0 failed with error -71 [ 339.522123][ T9607] NILFS (loop8): discard dirty block: blocknr=40, size=1024 [ 339.529545][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.540369][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.554739][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.566534][ T9607] NILFS (loop8): discard dirty page: offset=0, ino=3 [ 339.571287][ T5835] usb 4-1: USB disconnect, device number 23 [ 339.573511][ T9607] NILFS (loop8): discard dirty block: blocknr=42, size=1024 [ 339.591024][ T9607] NILFS (loop8): discard dirty block: blocknr=43, size=1024 [ 339.611381][ T9607] NILFS (loop8): discard dirty block: blocknr=44, size=1024 [ 339.641551][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.654014][T10155] [drm] Initialized udl 0.0.1 20120220 for 10-1:0.0 on minor 2 [ 339.666690][ T9607] NILFS (loop8): discard dirty page: offset=65536, ino=3 [ 339.679792][T10155] [drm] Initialized udl on minor 2 [ 339.686279][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.706488][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.716238][ T9607] NILFS (loop8): discard dirty block: blocknr=0, size=1024 [ 339.723933][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.733292][ T9607] NILFS (loop8): discard dirty page: offset=196608, ino=3 [ 339.743466][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.760619][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.780197][ T9607] NILFS (loop8): discard dirty block: blocknr=49, size=1024 [ 339.802141][T10155] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 339.813998][ T9607] NILFS (loop8): discard dirty block: blocknr=18446744073709551615, size=1024 [ 339.832733][T10155] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 340.022119][T10155] usb 10-1: USB disconnect, device number 3 [ 340.031908][ T5762] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 340.055273][ T5762] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 340.137014][T12576] loop8: detected capacity change from 0 to 2048 [ 340.160093][T12576] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.177909][T12576] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.204394][T12576] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.230675][T12576] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.1776: bg 0: block 234: padding at end of block bitmap is not set [ 340.254045][T12576] EXT4-fs (loop8): Remounting filesystem read-only [ 340.293532][ T9607] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.779609][T12586] loop8: detected capacity change from 0 to 32768 [ 340.787301][T12590] loop9: detected capacity change from 0 to 256 [ 341.926257][T12621] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.935735][T12621] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.945047][T12621] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.954711][T12621] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.212842][ T27] audit: type=1326 audit(1780405597.156:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.302209][ T27] audit: type=1326 audit(1780405597.156:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.371740][ T27] audit: type=1326 audit(1780405597.156:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.420752][ T27] audit: type=1326 audit(1780405597.156:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.473643][ T27] audit: type=1326 audit(1780405597.156:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.573074][ T27] audit: type=1326 audit(1780405597.156:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.621357][T12644] loop9: detected capacity change from 0 to 128 [ 342.641546][ T27] audit: type=1326 audit(1780405597.156:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12626 comm="syz.9.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77a239ce59 code=0x7ffc0000 [ 342.823675][T12648] loop3: detected capacity change from 0 to 512 [ 342.856788][T12648] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 342.882141][T12648] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 342.962041][T12648] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 343.040405][T12648] kernel profiling enabled (shift: 9) [ 343.461885][ T5835] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 343.527990][T12663] loop8: detected capacity change from 0 to 32768 [ 343.576005][T12663] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 343.661839][ T5835] usb 10-1: Using ep0 maxpacket: 8 [ 343.674732][ T5835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 343.686598][ T5835] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 343.700154][ T5835] usb 10-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 343.710122][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.731148][ T5835] usb 10-1: config 0 descriptor?? [ 343.762640][ T9607] ocfs2: Unmounting device (7,8) on (node local) [ 344.161045][ T5835] saitek 0003:06A3:0621.000F: unexpected long global item [ 344.192824][ T5835] saitek 0003:06A3:0621.000F: parse failed [ 344.198790][ T5835] saitek: probe of 0003:06A3:0621.000F failed with error -22 [ 344.302580][T12684] loop7: detected capacity change from 0 to 1024 [ 344.359841][ T5835] usb 10-1: USB disconnect, device number 4 [ 344.455504][ T27] audit: type=1800 audit(1780405599.396:71): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1825" name="file1" dev="loop7" ino=20 res=0 errno=0 [ 344.579291][T12694] loop3: detected capacity change from 0 to 8 [ 344.676447][T12697] tipc: Started in network mode [ 344.694144][T12697] tipc: Node identity ac14140f, cluster identity 4711 [ 344.711435][T12697] tipc: New replicast peer: 255.255.255.255 [ 344.720747][T12697] tipc: Enabled bearer , priority 10 [ 344.791475][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1830'. [ 344.833957][T12699] tipc: Disabling bearer [ 345.301726][ T5762] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 345.445290][T12703] loop8: detected capacity change from 0 to 32768 [ 345.494827][ T5762] usb 10-1: Using ep0 maxpacket: 32 [ 345.514672][ T27] audit: type=1800 audit(1780405600.456:72): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1834" name="file2" dev="loop8" ino=5 res=0 errno=0 [ 345.555521][ T5762] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 345.578690][ T5762] usb 10-1: config 0 has no interface number 0 [ 345.598679][ T5762] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.617235][T12703] ERROR: (device loop8): dbAlloc: the hint is outside the map [ 345.617235][T12703] [ 345.632368][ T5762] usb 10-1: config 0 interface 85 has no altsetting 0 [ 345.642968][ T5762] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 345.658836][ T5762] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.671126][T12703] ERROR: (device loop8): remounting filesystem as read-only [ 345.681708][ T5762] usb 10-1: Product: syz [ 345.686509][ T5762] usb 10-1: Manufacturer: syz [ 345.692041][ T5762] usb 10-1: SerialNumber: syz [ 345.698411][T12703] syz.8.1834: attempt to access beyond end of device [ 345.698411][T12703] loop8: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 345.716552][ T5762] usb 10-1: config 0 descriptor?? [ 345.762037][ T9607] ------------[ cut here ]------------ [ 345.768950][ T9607] kernel BUG at fs/jfs/inode.c:175! [ 345.775722][ T9607] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 345.781903][ T9607] CPU: 1 PID: 9607 Comm: syz-executor Not tainted syzkaller #0 [ 345.789455][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.799506][ T9607] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 345.805067][ T9607] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 79 84 df fe e9 16 fe ff ff e8 6f 44 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 345.824711][ T9607] RSP: 0018:ffffc900030c7ac0 EFLAGS: 00010293 [ 345.830793][ T9607] RAX: ffffffff82ffe721 RBX: ffff88805aa0f330 RCX: ffff88807bd11e00 [ 345.838776][ T9607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805aa0f330 [ 345.846759][ T9607] RBP: 0000000000000002 R08: ffffffff911cd65f R09: 1ffffffff2239acb [ 345.854743][ T9607] R10: dffffc0000000000 R11: fffffbfff2239acc R12: dffffc0000000000 [ 345.862722][ T9607] R13: dffffc0000000000 R14: ffff88805aa0efb8 R15: ffff88805aa0f368 [ 345.870685][ T9607] FS: 0000555581a4c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 345.879618][ T9607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.886197][ T9607] CR2: 0000555581a67a38 CR3: 0000000066490000 CR4: 00000000003506e0 [ 345.894169][ T9607] Call Trace: [ 345.897442][ T9607] [ 345.900363][ T9607] ? evict+0x4c4/0x8d0 [ 345.904427][ T9607] ? jfs_write_inode+0x220/0x220 [ 345.909366][ T9607] evict+0x4ca/0x8d0 [ 345.913260][ T9607] ? proc_nr_inodes+0x230/0x230 [ 345.918106][ T9607] ? do_raw_spin_unlock+0x121/0x230 [ 345.923298][ T9607] ? do_raw_spin_unlock+0x121/0x230 [ 345.928504][ T9607] evict_inodes+0x606/0x6a0 [ 345.933000][ T9607] ? clear_inode+0x150/0x150 [ 345.937585][ T9607] generic_shutdown_super+0x97/0x2b0 [ 345.942886][ T9607] kill_block_super+0x44/0x90 [ 345.947555][ T9607] deactivate_locked_super+0x97/0x100 [ 345.952940][ T9607] cleanup_mnt+0x43b/0x4d0 [ 345.957351][ T9607] task_work_run+0x1d4/0x260 [ 345.961945][ T9607] ? task_work_cancel+0x220/0x220 [ 345.966980][ T9607] ? exit_to_user_mode_loop+0x3b/0x110 [ 345.972433][ T9607] exit_to_user_mode_loop+0xe6/0x110 [ 345.977709][ T9607] exit_to_user_mode_prepare+0xee/0x180 [ 345.983253][ T9607] syscall_exit_to_user_mode+0x1a/0x50 [ 345.988716][ T9607] do_syscall_64+0x61/0xb0 [ 345.993125][ T9607] ? clear_bhb_loop+0x40/0x90 [ 345.997792][ T9607] ? clear_bhb_loop+0x40/0x90 [ 346.002465][ T9607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.008355][ T9607] RIP: 0033:0x7f135e59e097 [ 346.012763][ T9607] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 346.032363][ T9607] RSP: 002b:00007ffd9fe52138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 346.040771][ T9607] RAX: 0000000000000000 RBX: 00007f135e6321ca RCX: 00007f135e59e097 [ 346.048735][ T9607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9fe521f0 [ 346.056696][ T9607] RBP: 00007ffd9fe521f0 R08: 00007ffd9fe531f0 R09: 00000000ffffffff [ 346.064670][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9fe53280 [ 346.072633][ T9607] R13: 00007f135e6321ca R14: 000000000005467a R15: 00007ffd9fe532c0 [ 346.080603][ T9607] [ 346.083615][ T9607] Modules linked in: [ 346.112367][ T9607] ---[ end trace 0000000000000000 ]--- [ 346.117920][ T9607] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 346.124073][ T9607] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 79 84 df fe e9 16 fe ff ff e8 6f 44 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 346.144035][ T9607] RSP: 0018:ffffc900030c7ac0 EFLAGS: 00010293 [ 346.150156][ T9607] RAX: ffffffff82ffe721 RBX: ffff88805aa0f330 RCX: ffff88807bd11e00 [ 346.158352][ T9607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805aa0f330 [ 346.166487][ T9607] RBP: 0000000000000002 R08: ffffffff911cd65f R09: 1ffffffff2239acb [ 346.174529][ T9607] R10: dffffc0000000000 R11: fffffbfff2239acc R12: dffffc0000000000 [ 346.182542][ T9607] R13: dffffc0000000000 R14: ffff88805aa0efb8 R15: ffff88805aa0f368 [ 346.191239][ T9607] FS: 0000555581a4c500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 346.200299][ T9607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 346.207062][ T9607] CR2: 0000001b33b20ff8 CR3: 0000000066490000 CR4: 00000000003506e0 [ 346.215131][ T9607] Kernel panic - not syncing: Fatal exception [ 346.221485][ T9607] Kernel Offset: disabled [ 346.225803][ T9607] Rebooting in 86400 seconds..