last executing test programs: 31.503623892s ago: executing program 0 (id=18038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 31.383276217s ago: executing program 0 (id=18041): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='personality\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/230, 0xe6}], 0x1, 0x401, 0x9) 31.261405393s ago: executing program 0 (id=18044): r0 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000002300)=[{r0, 0x8020}], 0x1, 0xff) 30.926878046s ago: executing program 0 (id=18052): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1000002, &(0x7f00000002c0)={[{@errors_remount}, {}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@gid}, {@discard_size={'discard', 0x3d, 0x426}}, {@grpquota}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x401}}]}, 0x1, 0x60b9, &(0x7f000000c400)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw9eDHVY/1OH64Q7Xj3S4frTD9as6XD/W4fpFO2CR1fXfx+R3tin/69r6Ls1uzEby6zYV3OqpgVWDg/F3ObmB/DbzI0ey2exYNpNNNS1fX3YgX/6FDbV1fSSL6xpsWNf62hHy8ycOx20YCPt4U9O6Fu4z+un7svFf/PyJw3915pWbi2bH3dB0f/Xt3LKxtp2fD5fUt3UgW5X2SdzOwYbtXF/wnAw1bedAfrva31u389VlbufQwmZeUa3P+Vg2mP/9pXw/DTf+Wi/tp/Xhsv++Ncuy8wub3brMonVlg9mapksGF56fsfoRWbuP2qH05mx4RcfphmUcp7U5van5OG19TcTnf0O43fAS29D4NP30ydGG5/21+Us5TqPao17qtdJ6DHb7tdIrx2A8Ll7KH/TThcfgpvD4n9i89DFYeOwUHIPpcTccgxs7HYODo0P5NqcnYSC/zcIxuK1p+aF8TQP5fHlz+2Nw8szxU5Nzjz1+++zxQ0dnjs6c2LFt29SOXbv27NkzeWT22MxU/c9L3Nu9b002mF4DG8O+i6+Bd7Us23iozn9jdNH591Jfh2NtXodrW5bt9utwuPXBDVyZF+TiY7r+2rivttPHLgxmS7zG8udn6+W/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNq6/J+Zhlu+K9oG5b+XnB5x+DahmOw9eeR1mOw2z+P9MoxOBaOix9uXfp7wfqwvU9PrPTnkaFFx2B6uOHcU7sk/bw/ticfRcflLbUrrhnNzs7NnL7j0UNnzpzeloVxRbyl4VhpPV7XNDymbNHxOrji43X/7NufvqXg8rVhX43dXvtjbMnnqrbMzjvaP1f5d7fi/dl06fYsjC670vuz6Lt5bX+OZtnXvvfkPd954mvvX3J/1vLm5ycv/2fxlEsbzr8jS5x/Y+5/vb6+dFdPDY0M11+/Q2nvjDSdj5ufquH83DWQr/vVyeWdj0fCf1f6fHxjm/PxupZlu30+Hml9cPF8PNDptx2Xp/X5HAvHybGp9ufj2jLrtq/0mBxuez6+NcyBsP/fHZJCykUNx85Sx21a1/DwSHhcw3ENzcfpjqblR0I2q63rue2XdpxuubV+X0Pp0S24UsfpeMuy3T5O0+++ljpOBzr99u3StD6fY+G4uHFH++O0tsyLOy//3Lk6/rXh3Dna6RgcGRqtbfNIOgjz8302vzoeg3dkh7OT2bFsOr92ND+eBvJ1Tdy5vGNwNPx3pc+V69ocg1talu32MZi+jy117A0ML37wXdD6fI6F4+KZO9sfg7VlPrC7uz+7bgmXpGUafnZt/f3aUr/zuqVlN71Rx8pw2M7v7W7/u9naMsf2rDRntt9Pt4VLrinYT62v36VeU9PZldlP68J2vrJn6f1U257aMl/du8zjaX+WZeceuSv/fW/495W/PfuD55v+3aXo33TOPXLXz6478g8r2X4A+t/r9bGm/r2u4V+mlvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/3CYSUXy/7oPvDL7+rksNfPng3h92g1315eLHdep8PX4/ILa5Xc9O/Nff39ueesezLLstbv/oHD5dXfH7aobD9t58YPNly/y/O3LWvfB+8+l9Tb2178e7j8+nuUeBkUV3Kksy1644cv5esYfvJDPF+8+mM97zj/9VG2ZV/fWv463f/kt9eX/PJR/9x851HT7l8N++EmYUx8t3h/xdt+68O71ux9YWF+83cDG6/OH/cxD9fuN75Pzlafqy8f9vNT2f+dLz32rtvyj7yze/nODxdv/XLjfZ8P8n7fVl298Dmpfx9t9IWx/XF+83R3f/G7h9l/8Yn35Ux+qL3cwzLj+LeHrTR96ZbZxfz06cKjpcWUfri8X1z/1gz/Kr4/3F++/dfvHDlxo2h+tx8eL/1q/n8mW5ePlcT3R37Wsv3Y/jcdnXP9zf3iwaT93Wv/Fe15+W+1+W9d/W8typx7Zmq9/4f6a37HpL77w5cL1xe3Z/zenmh7P/k+F13FY/zMPheMxXP+/F+v31/ruCgc/1Xz+ict/fe25pscTfeQX9fVffO/RfK4aW73mmmuvu/78O2r7LsteWlW/v07rP/qXJ5u2/xs31fdHvD529FvXv5S4/tOfmzhxcu7s7HTaq0/ckL93zsfq2xO394Zwbm39+sDJMw/PnB6fGp/KsvHyvoXeJftmmD+rj/Ptl55fdAbden94Pm/5sxfWbP6XL8XL/+2++uUXPlr/vvWusNxXwuVrw/O3svUv9syGm/LX98CLYQvnF79f8OVYv+k/9yxrwfD4W38uiMf7qbc+nO+H2nX59434ur7M7f/RdP1+vh3263x4Z+aNNy2sr3H5+N4IF+6tv94ve/+F01x8Xv86PN8f/0n9/uN2xcf7o/BzzHfXNZ/v4vHx7XODrfefv4vH+XA+yc7Xr49Lxf194dWbCjcvvg9Jdv7m/Os/Tvdz84oe5lLmHpubPDZ74uyjk2dm5s5Mzj32+IHjJ8+eOHMgfy/PA5/pdPuF89Oa/Pw0PbNrZ5afrU7Wxxvsam//qfsPT++e2jw9c+TQ2SNn7j81c/ro4bm5wzPTc5sPHTky87lOt5+d3rdt+94du7dPHJ2d3rdn794deydmT5ysbUZ9ozrYNfXZiROnD+Q3mdu3c++2O+/cOTVx/OT0zL7dU1MTZzvdPv/eNFG79e9PnJ45dujM7PGZibnZx2f2bdu7a9f2ju8GePzUkbnxydNnT0yenZs5PVl/LONn8otr3/s63Z5ymvv3+s+zrQbqb8SXffK2Xen9WWuefXLJu6ov0vIGoq+E96L5pzed2rOcr2PuHwkzqUj+BwAAgCqIuX80zET+BwAAgNKIuX9VmIn8DwAAAKURc/9YmElF8n/p+v/rzi1r/fr/+v+N+0v/v2L9/3t7rf9fP1/o/3fH5fbv9f8D/X/9f/1//X/9f7qg1/r/MfevzrJK5n8AAACogpj714SZyP8AAABQGjH3XxNmIv8DAABAacTcf22YSUXyv/6//r/+v/6//n/x+vX/+5P+f3v6/x3o/09m1er/n+/m9uv/6/+zWK/1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu5fG2ZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP1vCjOpSP4HAACAKoi5/81hJvI/AAAA9J7hS7tZzP1vCTNZlP8vcQUAAADAVRdz/41ZSxG8Iv/+r/+v/6//r/+v/1+8/uX3/4cy/f/eof/fnv5/B/r/+v/6//r/dFWv9f/z3J+NZW8NM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+/xdmIv8DAABAacTcvy7MpCL5X/9f/1//X/9f/794/T7/vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7bw4zqUj+BwAAgCqIuf+WMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNy/PsykIvlf/7/H+/+xOar/r/+v/6//r/+/LPr/7en/d6D/r/+v/6//T1f1Wv8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox94+HmVQk/+v/93j/3+f/6//r/+v/6/+viP5/e/r/Hej/6//r/+v/01W91v+PuX9DmElF8j8AAABUQcz9G8NM5H8AAAAojZj7bw0zkf8BAACgNGLu3xRmUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/Z5hJRfI/AAAAVEHM/ZvDTOR/AAAAKI2Y+98VZiL/AwAAQGnE3L8lzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P/1//X/9f/pql7r/8fc/+4wk4rkfwAAAKiCmPu3hpnI/wAAAFAaMfffFmYi/wMAAEBpxNw/EWZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7r89zKQi+R8AAACqIOb+O8JM5H8AAAAojZj7J8NM5H8AAAAojZj7p8JMKpL/9f/1//X/9f9X1P9/x8L96v/X6f/3Fv3/9vT/O9D/1/+/6v3/Ef1/SqXX+v8x928LM6lI/gcAAIAqiLl/e5iJ/A8AAAClEXP/jjAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v8+/794/fr//Un/v73u9//jQ9T/1//X//f5//r/LNZr/f+Y++8MM6lI/gcAAIAqiLl/V5iJ/A8AAAClEXP/7jAT+R8AAABKI+b+PWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7fn8/w70//X/9f/1/+mqXuv/x9y/N8ykIvkfAAAAqiDm/veEmcj/AAAAUBox9/9KmIn8DwAAAKURc/+vhplUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+/eFmVQk/wMAAEAVxNz/a2Em8j8AAACURsz97w0zkf8BAACgNGLu3x9mUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/X5hJRfI/AAAAVEHM/XeFmcj/AAAAUBox978/zET+BwAAgNKIuf8DYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/g+GmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3fyTMpCL5X/9f/1//X/9f/794/fr//Un/vz39/w70/0vW/x+/Tv9f/583SlECWuzS+v/XvrbkCi+z/x9z/6+HmVQk/wMAAEAVxNx/d5iJ/A8AAAClEXP/R8NM5H8AAAAojZj7PxZmUpH8r/+v/6//r/+v/1+8fv3//qT/316f9f9/eX24XP+/Tv+/t7e/J/v/P16q/z+/qvX2+v+8ES6t/1+oK/3/mPs/HmZSkfwPAAAAVRBz/yfCTOR/AAAAKI2Y+z8ZZiL/AwAAQGnE3P8bYSYVyf/6/7XtWGgv6//r/+cX6P/r/+v/9y39//b6rP/v8/9b6P/39vb3ZP/f5/9zlfVa/z/m/k+FmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6//7/H/9f/1//f/i9ev/9yf9//b0/zvQ/9f/77X+/3/o/9Pfeq3/H3P//WEmFcn/AAAAUAUx9z8QZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP2fDjOpSP7X/++X/v+4/r/+v/5/y+PR/9f/L6L/357+fwf6//r/vdb/9/n/9Lle6//H3P9gmMny8//YspcEAAAAroqY+38rzKQi//4PAAAAVRBz/2+Hmcj/AAAAUBox9/9OmElF8r/+f7/0/33+f6b/r//f8nj0//X/i1y5/n888+j/6//r/0f6//r/+v+06rX+f8z9vxtmUpH8DwAAAFUQc/9DYSbyPwAAAPSFov8nu1XM/QfCTOR/AAAAKI2Y+w+GmVQk/+v/6//r//do//9PN/7zD7//iYPb9P/1//X/V+SKfv5/7cXv8//1//X/E/1//X/9f1r1Wv8/5v5DYSYVyf8AAABQBTH3/16YifwPAAAApRFz/+EwE/kfAAAASiPm/ukwk4rkf/1//X/9/x7t//fx5//H/aH/36xr/f940tX/L3RF+/8PLPTE9f9X2v8fLbxU/1//v5+3X/9f/5/Feq3/H3P/TJhJRfI/AAAAVEHI/YNH6nPhCvkfAAAASiPm/qNhJvI/AAAAlEbM/Q+HmVQk/+v/6//r/+v/+/z/4vX3bP/f5/+3pf/fXu/0/4vp/+v/9/P26//r/7NYr/X/Y+6fDTOpSP4HAACAKoi5/zNhJvI/AAAAlEbM/Z8NM5H/AQAAoDRi7j8WZlKR/K//r/+v/6//r/9fvH79//6k/9+e/n8H+v/6//r/+v90Va/1/2PuPx5mUpH8DwAAAFUQc/+JMBP5HwAAAEoj5v6TYSbyPwAAAJRGzP2nwkz+j737aN6rLv84fuf/D2MyPAAXbtj7EFjoWh+ACzcudMZxoaPYG8FesfeCvWMBRWzYG9hQ7GLvigU76sRxcl1X8kvO79xJvJOc871er82lwXiiw4Af4T3fJvtf/6//H7b/v5v+f7/v6//1/yPT/8/T/2+h/9f/6//1/+zU0vr/3P0Pjlua7H8AAADoIHf/Q+IW+x8AAACGkbv/srjF/gcAAIBh5O5/aNzSZP+f1P8f2PTs/zPj1f+P1P97/3/f7+v/9f8jO7/9/xX//SOf/l//r/8P+n/9v/6fky2t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+x8Rt9j/AAAAMIzc/Y+MW5rsf+//e/9f/6//1/9Pf1//v07e/5/Xqf+/7JaLH3j7dXe5/ky+r//X/+v/9f/s1tL6/9z9j4pbmux/AAAA6CB3/6PjFvsfAAAAhpG7/zFxi/0PAAAAw8jd/9i4pcn+1//r//X/+n/9//T39f/rpP+f16n/P5vv6//1//p//T+7tbT+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuvzxusf8BAABgGLn7j8QtTfa//v/c9///1v/r/+Pq//X/+v9zT/8/T/+/hf5f/6//1/+zU0vr/3P3XxG3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//3/r/+X/+v/5/+vv5/nfT/885//z/1Z8j96f9X3/9fpP/X/+v/OdEZ9v93zPxheyf9f+7+J8ctTfY/AAAAdJC7/ylxi/0PAAAAw8jd/9S4xf4HAACAYeTuf1rc0mT/6//1//p//b/+f/r7+v910v/PW8z7/wcOTv6w/n/1/b/3//X/+n/2WNr7/7n7nx63NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/+nvz/X/15/w69P/L4v+f95i+v996P/1/2v+9ev/9f+camn9f+7+Z8ctTfY/AAAAdJC7/8q4xf4HAACAYeTuf07cYv8DAADAMHL3PzduabL/p/v/479d/3969P97f/36/+nfP3bV/+e/o/5/tv+/u/f/e9L/z9P/b6H/1//r//fr/w9v+/n6f6Ysrf/P3f+8uKXJ/gcAAIAOcvc/P26x/wEAAGAYuftfELfY/wAAADCM3P0vjFua7H/v/+v/9f/r6/+9/3/MhXz/f3Pe+/+D+v/TpP+fp//fQv+v/9f/e/+fnVpa/5+7/0VxS5P9DwAAAB3k7n9x3GL/AwAAwDqc+PcOnPw3lIbc/S+JW+x/AAAAGEbu/pfGLU32v/5f/6//1//37v8PraT/9/7/6dL/z9P/b3Fh+/8Dg/b/Bwfr/6/a7+cvof+/XP/Pwuzp/284/uMXqv/P3f+yuKXJ/gcAAIAOcve/PG6x/wEAAGAYuftfEbfY/wAAADCM3P2vjFua7P9z3v8f3v/b+n/9v/5f/3/h+/+1vP+v/z9d+v95+v8tvP/v/X/v/+v/2ak9/f8JLlT/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3XxW32P8AAAAwjNz9r4lbmux/7//r//X/+n/9//T39f/rpP+fp//fQv+v/9f/6//ZqaX1/7n7Xxu3NNn/AAAA0EHu/tfFLfY/AAAADCN3/+vjFvsfAAAAhpG7/w1xS5P9r/8/t/1//rj+X/+/0f/r//X/50Xb/v/A1J+JTrVP/3/T/Y/cc++P6P/1//p//b/+nx1YRP9/9Pj/uszd/8a4pcn+BwAAgA5y978pbrH/AQAAYBi5+98ct9j/AAAAMIzc/W+JWwbZ/4e2/Hb9v/f/9f/6f/3/9Pf1/+vUtv8/Td7/30L/r//X/+v/2alF9P8n/PPc/W+NWwbZ/wAAAMCmdv/b4hb7HwAAAIaRu//tcYv9DwAAAMPI3f+OuKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+6+OW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/6//1//p//f/09/X/66T/n6f/32w218z8Aqb6/6N30v/r//X/+n/O0tL6/9z974lbmux/AAAA6CB3/zVxi/0PAAAAw8jdf23cYv8DAADAMHL3vzduabL/9f/6f/2//l//P/19/f866f/n6f+38P6//l//r/9np5bW/+fuf1/c0mT/AwAAQAe5+6+LW+x/AAAAGEbu/vfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nv6//X6dz1/xv9v/5f/7+F/l//r//nZEvr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/4fjlib7X/+v/9f/6//1/9Pf1/+vk/f/5+n/t9D/6//1//p/dmpp/X/u/o/ELU32PwAAAHSQu/+GuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v+9/f9mo//X/+v/jzkP/f+hjf5/5/T/8/T/W+j/x+z//28zUP9/eN+fr/9niZbW/+fu/3jc0mT/AwAAQAe5+z8Rt9j/AAAAMIzc/Z+MW+x/AAAAGEbu/k/FLU32v/5f/+/9f/2//n/6+97/Xyf9/zz9/xb6/zH7f+//6/+5YJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Fvp//b/+X//PTi2t/8/d//m4pcn+BwAAgA5y998Yt9j/AAAAMIzc/TfFLfY/AAAADCN3/xfilib7X/+v/9f/r7P/P6T/1//r/yctpf+/9NJ73Kz/1//r//X/+n/9f3dL6/9z938xbmmy/wEAAKCD3P1filvsfwAAABhG7v4vxy32PwAAAAwjd/9X4pYm+//U/v+izbFC9Zip/j8aNf3/CfT/e3/9+v/p3z+8/6//1/+fe0vp/73/f3a/fv2//n/Nv/4z6v8vOfXn6/8Z0dL6/9z9N8ctTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTuvyVuabL/vf+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//t/7/w+67//r/9mdpfX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/9f/6//1//r/6e/r/9dJ/z9P/7+F/l//r//3/j87tbT+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/d9//X6L/D/r/pfT/99H/n/R9/b/+f2T6//wz+jT9/xb6f/2//l//z04trf/P3X9r3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9r/3/3v1/wc2Hft/7//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/h/FLU32PwAAAKzVve76gFtP91+bu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3NJk/+v/e/X/Pd//1//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/p/FLScMv4Nn/J8SAAAAWJLc/T+PW5r89X8AAADoIHf/L+KWU/b/0dP8u9oBAACApcnd/8u4pclf/9f/L7z/34zf/9+20f/r/4/R/+v/d0H/P+9/7P+PHtD/6/9n6P/1//p/Tra0/j93/6/ilib7HwAAAAa15/9RyN3/67jF/gcAAIBh5O7/Tdxi/wMAAMAwcvf/Nm5psv/1/wvv/8/q/f/D9Y/W0P97//8c9v9XHpr8vv5f/z8y/f887/9vof/X/+v/9f/s1NL6/9z9t8UtTfY/AAAAdJC7/3dxi/0PAAAAw8jd//u4xf4HAACAYeTu/0Pc0mT/6/9H7P/X9f6//t/7/2ff/9/54iM33vt+116t/+e489n/5+8L+n/9v/7/GP2//l//z8mW1v/n7v9j3NJk/wMAAEAHuftvj1vsfwAAABhG7v4/xS32PwAAAAwjd/+f45Ym+1//r/9fSv+f/11fgP7/yPr6/2yKu/f/3v/X/5/K+//z9P9b6P/1//p//T87tbT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/6X0/8n7/8d/nvf/j9H/6//PhP5/nv5/C/2//l//r/9np5bW/+fu/0fc0mT/AwAAQAe5+++IW+x/AAAAGEbu/n/GLfY/AAAADCN3/7/ilib7X/+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//l//r/9np5bW/+fu/08AAAD//6cRdCE=") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 30.106372463s ago: executing program 0 (id=18071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x288, 0x180, 0x5802, 0x294, 0x180, 0x294, 0x270, 0x378, 0x378, 0x270, 0x378, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00], 'batadv0\x00', 'pimreg1\x00', {}, {}, 0x0, 0x3, 0x9}, 0x0, 0xa8, 0xc8, 0x52020000}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 28.585103479s ago: executing program 0 (id=18108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12005, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x22008096) 28.365256516s ago: executing program 32 (id=18108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12005, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x22008096) 2.223660313s ago: executing program 5 (id=18702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000000040)) 2.077782144s ago: executing program 5 (id=18706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 1.949042749s ago: executing program 1 (id=18712): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 1.872621543s ago: executing program 5 (id=18714): prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 1.835336896s ago: executing program 1 (id=18715): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x13, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd19ae7c2f4393c16a007d12b"]}]}, 0x114}], 0x1}, 0x0) 1.781446765s ago: executing program 5 (id=18719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) 1.669401763s ago: executing program 5 (id=18723): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x16, 0x3, 0x13, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x0, 0x2000070, 0x84, 0xfffffff7, 0xfff, 0x10], 0x0, 0x4}) 1.650729989s ago: executing program 1 (id=18724): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000051401002dbd7000fbdbdf25080001"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) 1.596414038s ago: executing program 5 (id=18728): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="017e2ab9"]) 1.474436724s ago: executing program 1 (id=18731): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) 1.40410215s ago: executing program 4 (id=18732): r0 = socket(0x23, 0x5, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1.364162522s ago: executing program 1 (id=18734): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x2, 0x0, 0x0) 1.291796397s ago: executing program 4 (id=18735): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 1.276912874s ago: executing program 1 (id=18736): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x87, 0x46, 0xc8, 0x20, 0x8dd, 0x90ff, 0x7b76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x2f, 0x0, 0x2, 0xda, 0xf5, 0xe4, 0x4, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.161517902s ago: executing program 2 (id=18739): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) readv(r0, 0x0, 0x0) 1.101252809s ago: executing program 4 (id=18740): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x1d, 0x4, 0x11, 0xffff, 0x9, 0x1ef, 0x7f, 0x3, 0xbb, 0x4, 0x70, 0x2, 0xfffffff7, 0x1ab, 0xfffffff8], 0x0, 0x4}) 1.086696426s ago: executing program 2 (id=18741): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f00000000c0), 0x4) 1.025355534s ago: executing program 4 (id=18743): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004740)=ANY=[@ANYBLOB="e0000000110001002cbd7000fbdbdf256b40482751d8e19b9208accddbf64705aca08ea72902461130257c525e4d742045a727d663f2dc24e291da5caa85b11064b777e073b8348325867d3aec05000000218351d107a9531f56418cc36d3f765cdd5a56e2dfb761e10b9d019f46c2054a0ee2f464b6a0d2133dc86e3e7bc55186f6c6ffd812c95a3f9b290aa7fe03cb303374a36abbbfe70bae3c18d5bdd49c0e8acecf92ae158e4e6f4634ce1eb8827186131bd3b2cebdc9b2c9ce53a2573996fce45efbfab976e651bf49874cb05417911c726d51"], 0xe0}], 0x1, 0x0, 0x0, 0x2000081}, 0x20048040) 988.313007ms ago: executing program 2 (id=18744): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) 913.345502ms ago: executing program 4 (id=18746): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo") mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file1\x00', 0x0, 0x901001, 0x0) 912.866032ms ago: executing program 2 (id=18747): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, 0x0, 0xfefc) 818.881603ms ago: executing program 2 (id=18749): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, &(0x7f0000000440)={0x77359400}) 718.451533ms ago: executing program 2 (id=18750): r0 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x84, 0x2, 0x10, 0x7, 0x8, 0x8}, {0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0xfc, 0x1}, {0x9, 0x5, 0x1, 0x3, 0x20, 0x6, 0x5, 0x3}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x1, 0x2, {0x2, 0xd}}, 0x0}, 0x0) 597.458219ms ago: executing program 3 (id=18751): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="140003000000000000000000010000000000003414000200fe88"], 0x64}}, 0x4008000) 494.042268ms ago: executing program 3 (id=18752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 368.432603ms ago: executing program 3 (id=18753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@setlink={0x3c, 0x13, 0x1, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x278d4, 0x1c536}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) 132.566676ms ago: executing program 3 (id=18754): r0 = syz_open_dev$sg(&(0x7f0000001080), 0x0, 0x80000) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, 0xfffffffffffffffd) 112.047642ms ago: executing program 3 (id=18755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2974, 0x48056}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}, @IFLA_MASTER={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) 123.7µs ago: executing program 3 (id=18756): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000280)={0x2, 0x1, 0x1b, 0x1b, 0x3, 0xfffffffffffffffe}) 0s ago: executing program 4 (id=18757): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): d_key: encrypted_key: master key parameter 'trusted:' is invalid [ 1030.130435][ T8313] netlink: 'syz.4.16538': attribute type 2 has an invalid length. [ 1030.240378][ T8321] nftables ruleset with unbound chain [ 1030.272921][ T8325] netlink: 244 bytes leftover after parsing attributes in process `syz.2.16544'. [ 1030.334967][ T8329] loop4: detected capacity change from 0 to 256 [ 1030.357544][ T8334] netlink: 'syz.0.16547': attribute type 10 has an invalid length. [ 1030.470507][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.517655][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.559533][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.601483][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.633867][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.668119][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.710774][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.744281][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.778485][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.818305][ T8329] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1030.863674][ T26] audit: type=1800 audit(1240.888:78): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.16546" name="file1" dev="loop4" ino=1048711 res=0 errno=0 [ 1030.913507][ T8329] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1031.087964][ T8386] loop0: detected capacity change from 0 to 64 [ 1031.223479][ T8398] loop4: detected capacity change from 0 to 256 [ 1031.360669][ T8398] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea62c, utbl_chksum : 0x7319d30d) [ 1031.427303][ T8408] loop2: detected capacity change from 0 to 4096 [ 1031.534712][ T8408] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1031.648835][ T8408] ntfs3: loop2: Failed to load $Extend. [ 1032.014129][ T8437] loop4: detected capacity change from 0 to 4096 [ 1032.241359][ T8453] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1032.278140][ T8437] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=140737488388089, rec_len=32768, name_len=0 [ 1032.406648][ T8437] Remounting filesystem read-only [ 1032.600227][ T8476] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16616'. [ 1032.649583][ T8476] netlink: 84 bytes leftover after parsing attributes in process `syz.3.16616'. [ 1032.662000][ T8480] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16619'. [ 1032.703397][ T8480] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1032.838827][ T8491] netlink: 9 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1032.886412][ T8497] loop4: detected capacity change from 0 to 64 [ 1033.048624][ T8509] loop0: detected capacity change from 0 to 256 [ 1033.208215][ T8521] loop1: detected capacity change from 0 to 128 [ 1033.268795][ T8517] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1033.798701][ T8539] ieee802154 phy1 wpan1: encryption failed: -22 [ 1033.865715][ T8543] netlink: 'syz.0.16650': attribute type 3 has an invalid length. [ 1033.873866][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16650'. [ 1034.235594][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16662'. [ 1034.408467][ T8579] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16667'. [ 1034.466568][ T8583] netlink: 'syz.0.16669': attribute type 13 has an invalid length. [ 1034.544663][ T8587] loop2: detected capacity change from 0 to 256 [ 1034.598584][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16673'. [ 1034.667883][ T8587] FAT-fs (loop2): Directory bread(block 64) failed [ 1034.696217][ T8587] FAT-fs (loop2): Directory bread(block 65) failed [ 1034.721983][ T8600] device bridge3 entered promiscuous mode [ 1034.732283][ T8601] device netdevsim0 entered promiscuous mode [ 1034.738435][ T8601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1034.742734][ T8587] FAT-fs (loop2): Directory bread(block 66) failed [ 1034.783678][ T8587] FAT-fs (loop2): Directory bread(block 67) failed [ 1034.800884][ T8587] FAT-fs (loop2): Directory bread(block 68) failed [ 1034.816307][ T8587] FAT-fs (loop2): Directory bread(block 69) failed [ 1034.828575][ T8587] FAT-fs (loop2): Directory bread(block 70) failed [ 1034.835257][ T8587] FAT-fs (loop2): Directory bread(block 71) failed [ 1034.848462][ T8587] FAT-fs (loop2): Directory bread(block 72) failed [ 1034.863535][ T8587] FAT-fs (loop2): Directory bread(block 73) failed [ 1035.024591][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16685'. [ 1035.049564][ T8615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16685'. [ 1035.116059][ T5961] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1035.166273][ T8625] netlink: 'syz.0.16689': attribute type 7 has an invalid length. [ 1035.236569][ T8628] loop1: detected capacity change from 0 to 256 [ 1035.300703][ T8635] xt_ecn: cannot match TCP bits for non-tcp packets [ 1035.336936][ T8638] overlayfs: './file0' not a directory [ 1035.368039][ T8628] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1035.372797][T18584] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1035.404660][ T5961] usb 5-1: Using ep0 maxpacket: 8 [ 1035.460822][ T8628] exFAT-fs (loop1): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5) [ 1035.494384][ T8628] exFAT-fs (loop1): Filesystem has been set read-only [ 1035.543872][ T5961] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1035.565831][ T5961] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1035.583395][ T5961] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1035.594418][ T5961] usb 5-1: config 1 has no interface number 1 [ 1035.601451][ T5961] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1035.607029][ T8646] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1035.635367][ T8646] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1035.648889][ T8646] EXT4-fs (loop3): 1 truncate cleaned up [ 1035.682723][ T8646] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,grpjquota="data_err=ignore,noload,nombcache,usrjquota="errors=continue,errors=remount-ro,barrier,. Quota mode: writeback. [ 1035.702171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.726715][ T8646] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #2: block 4: comm syz.3.16701: lblock 0 mapped to illegal pblock 4 (length 1) [ 1035.754891][ T8646] EXT4-fs (loop3): Remounting filesystem read-only [ 1035.806109][ T5961] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1035.821801][T18584] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 1035.822959][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.845417][T18584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.852738][ T5961] usb 5-1: Product: syz [ 1035.883429][T18584] usb 3-1: config 0 descriptor?? [ 1035.887783][ T5961] usb 5-1: Manufacturer: syz [ 1035.893085][ T5961] usb 5-1: SerialNumber: syz [ 1035.933523][ T8658] tmpfs: Bad value for 'uid' [ 1035.961806][T18584] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1035.973613][T18584] usb 3-1: Detected FT-X [ 1036.141646][ T8671] set_capacity_and_notify: 2 callbacks suppressed [ 1036.141662][ T8671] loop1: detected capacity change from 0 to 1024 [ 1036.148384][ T8670] loop3: detected capacity change from 0 to 1764 [ 1036.194213][ T8667] loop0: detected capacity change from 0 to 4096 [ 1036.199998][ T8670] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1036.206679][T18584] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1036.239917][T18584] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1036.285447][T18584] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1036.295910][T18584] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1036.372028][ T8667] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 1036.377604][ T5961] usb 5-1: 2:1 : sample bitwidth 255 in over sample bytes 4 [ 1036.388638][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1036.391382][T18584] usb 3-1: USB disconnect, device number 69 [ 1036.428888][ T5961] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1036.457297][T18584] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1036.469561][ T4361] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 1036.484645][ T4335] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 1036.491033][ T4335] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1036.491366][ T8677] tmpfs: Bad value for 'mpol' [ 1036.516683][T18584] ftdi_sio 3-1:0.0: device disconnected [ 1036.527176][ T5961] usb 5-1: USB disconnect, device number 61 [ 1036.590483][ T4335] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 1036.618655][ T144] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 1036.647146][ T4335] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 1036.849286][ T4475] udevd[4475]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1036.993819][ T8706] tc_dump_action: action bad kind [ 1036.999272][T18583] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1037.168467][T18467] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1037.397907][T18583] usb 2-1: config 0 has an invalid interface number: 152 but max is 0 [ 1037.422376][T18583] usb 2-1: config 0 has no interface number 0 [ 1037.440143][T18583] usb 2-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1037.461991][T18467] usb 3-1: Using ep0 maxpacket: 8 [ 1037.474824][ T8743] netlink: 'syz.4.16747': attribute type 1 has an invalid length. [ 1037.495656][T18583] usb 2-1: config 0 interface 152 has no altsetting 0 [ 1037.596088][T18467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1037.614710][T18467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1037.657162][T18467] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1037.681971][T18583] usb 2-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 1037.705457][T18583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.728975][T18583] usb 2-1: Product: syz [ 1037.733562][T18583] usb 2-1: Manufacturer: syz [ 1037.741271][ T8759] loop4: detected capacity change from 0 to 256 [ 1037.750216][T18583] usb 2-1: SerialNumber: syz [ 1037.772138][T18583] usb 2-1: config 0 descriptor?? [ 1037.820764][ T8689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1037.845202][ T8759] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1037.874084][T18467] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 1037.878932][ T8759] FAT-fs (loop4): bogus number of directory entries (1) [ 1037.883516][T18467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.883541][T18467] usb 3-1: Product: syz [ 1037.883554][T18467] usb 3-1: Manufacturer: syz [ 1037.883568][T18467] usb 3-1: SerialNumber: syz [ 1037.899737][ T8759] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1037.944329][ T8771] loop3: detected capacity change from 0 to 512 [ 1037.952225][T18467] usb 3-1: config 0 descriptor?? [ 1038.060518][ T8689] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1038.095689][T18583] cdc_subset 2-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Yopy, a6:89:98:38:99:37 [ 1038.183408][ T8771] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,grpquota,,errors=continue. Quota mode: writeback. [ 1038.215391][T18583] usb 3-1: USB disconnect, device number 70 [ 1038.225222][ T8771] EXT4-fs error (device loop3): ext4_remount:6060: comm syz.3.16761: Abort forced by user [ 1038.313153][ T5961] usb 2-1: USB disconnect, device number 72 [ 1038.321348][ T5961] cdc_subset 2-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Yopy [ 1038.358306][ T8771] EXT4-fs (loop3): re-mounted. Opts: (null). Quota mode: writeback. [ 1038.485120][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1038.655559][ T8810] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1038.663213][ T8802] loop4: detected capacity change from 0 to 4096 [ 1038.669627][ T8814] __nla_validate_parse: 4 callbacks suppressed [ 1038.669646][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16776'. [ 1038.877329][ T8821] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1039.138543][ T8840] device bridge4 entered promiscuous mode [ 1039.804650][ T8886] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1040.049219][ T8898] smc: removing ib device syz2 [ 1040.200487][ T8856] loop3: detected capacity change from 0 to 32768 [ 1040.385582][ T8856] XFS (loop3): Mounting V5 Filesystem [ 1040.553839][ T8856] XFS (loop3): Ending clean mount [ 1040.594612][ T4348] XFS (loop3): Unmounting Filesystem [ 1040.759995][ T8932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1041.025486][ T151] block nbd4: Attempted send on invalid socket [ 1041.031939][ T151] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1041.467659][ T8966] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1041.561725][ T5961] Bluetooth: hci4: command 0x0405 tx timeout [ 1041.569736][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16844'. [ 1041.728532][ T8988] loop0: detected capacity change from 0 to 2048 [ 1041.781163][ T8988] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1041.800319][ T8997] loop1: detected capacity change from 0 to 512 [ 1041.825737][ T8999] loop4: detected capacity change from 0 to 256 [ 1041.855794][ T9001] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1041.856776][ T8999] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 1041.946692][ T8997] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,grpquota,,errors=continue. Quota mode: writeback. [ 1042.160254][ T8997] EXT4-fs error (device loop1): ext4_remount:6060: comm syz.1.16854: Abort forced by user [ 1042.239433][ T8997] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 1042.356266][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16862'. [ 1042.387490][ T9015] loop3: detected capacity change from 0 to 4096 [ 1042.422586][ T9023] kAFS: unable to lookup cell '(,c¾Ì' [ 1042.499770][ T9015] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 1042.545333][ T9015] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1042.615721][ T9015] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1042.649640][ T9015] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1042.685031][ T9015] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1042.766320][ T9015] ntfs: volume version 3.1. [ 1042.778351][ T9015] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1042.863412][ T9015] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1042.926547][ T9015] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1042.976484][ T9015] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1043.022882][ T9015] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1043.098026][ T9062] loop2: detected capacity change from 0 to 64 [ 1043.167160][ T9068] netlink: 'syz.0.16887': attribute type 9 has an invalid length. [ 1043.205032][ T9068] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.16887'. [ 1043.268762][ T9076] ..: renamed from ipvlan0 [ 1043.553532][ T9105] netlink: 'syz.4.16905': attribute type 2 has an invalid length. [ 1043.574388][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16905'. [ 1043.627801][ T9111] netlink: 76 bytes leftover after parsing attributes in process `syz.0.16908'. [ 1043.780032][ T9119] loop0: detected capacity change from 0 to 64 [ 1044.105844][ T5966] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1044.122670][ T9145] loop0: detected capacity change from 0 to 1024 [ 1044.175595][ T9147] loop4: detected capacity change from 0 to 1764 [ 1044.213117][T18583] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1044.277739][ T4361] hfsplus: b-tree write err: -5, ino 4 [ 1044.403096][ T9156] loop1: detected capacity change from 0 to 256 [ 1044.403123][ T5966] usb 4-1: Using ep0 maxpacket: 16 [ 1044.469279][T18583] usb 3-1: Using ep0 maxpacket: 32 [ 1044.560624][ T9156] FAT-fs (loop1): Directory bread(block 64) failed [ 1044.568934][ T9156] FAT-fs (loop1): Directory bread(block 65) failed [ 1044.587412][ T9156] FAT-fs (loop1): Directory bread(block 66) failed [ 1044.603302][T18583] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 1044.627464][T18583] usb 3-1: config 0 has no interface number 0 [ 1044.634090][ T9156] FAT-fs (loop1): Directory bread(block 67) failed [ 1044.649045][T18583] usb 3-1: config 0 interface 166 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 1044.666937][ T9156] FAT-fs (loop1): Directory bread(block 68) failed [ 1044.698312][ T9156] FAT-fs (loop1): Directory bread(block 69) failed [ 1044.729925][ T9156] FAT-fs (loop1): Directory bread(block 70) failed [ 1044.758076][ T9156] FAT-fs (loop1): Directory bread(block 71) failed [ 1044.764722][ T9156] FAT-fs (loop1): Directory bread(block 72) failed [ 1044.779345][ T5966] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1044.789243][ T5961] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1044.789561][ T9156] FAT-fs (loop1): Directory bread(block 73) failed [ 1044.802194][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.812611][ T5966] usb 4-1: Product: syz [ 1044.816843][ T5966] usb 4-1: Manufacturer: syz [ 1044.821464][ T5966] usb 4-1: SerialNumber: syz [ 1044.834660][ T5966] r8152-cfgselector 4-1: config 0 descriptor?? [ 1044.864762][T18583] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=19.a8 [ 1044.884676][T18583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.917033][T18583] usb 3-1: Product: syz [ 1044.949381][T18583] usb 3-1: Manufacturer: syz [ 1044.954377][T18583] usb 3-1: SerialNumber: syz [ 1044.977489][T18583] usb 3-1: config 0 descriptor?? [ 1045.003737][ T9132] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1045.032550][T18583] ti_usb_3410_5052 3-1:0.166: TI USB 3410 1 port adapter converter detected [ 1045.044995][T18583] ti_usb_3410_5052 3-1:0.166: missing endpoints [ 1045.067770][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 1045.131956][T18467] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 1045.185042][ T9172] ceph: No source [ 1045.261718][ T4825] usb 3-1: USB disconnect, device number 71 [ 1045.367178][ T5966] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1045.373684][ T5966] r8152-cfgselector 4-1: bad CDC descriptors [ 1045.399368][ T5966] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1045.407477][ T5966] r8152-cfgselector 4-1: USB disconnect, device number 39 [ 1045.431381][ T5961] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1045.446959][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.457330][ T5961] usb 1-1: Product: syz [ 1045.461621][ T5961] usb 1-1: Manufacturer: syz [ 1045.471761][ T5961] usb 1-1: SerialNumber: syz [ 1045.478572][ T5961] usb 1-1: config 0 descriptor?? [ 1045.527532][T18467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.546457][T18467] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1045.560726][T18467] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1045.569789][T18467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.579530][T18467] usb 5-1: config 0 descriptor?? [ 1045.741500][ T5966] usb 1-1: USB disconnect, device number 58 [ 1045.844825][ T9188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16953'. [ 1045.856451][ T9188] tc_dump_action: action bad kind [ 1045.880185][T18467] usb 5-1: string descriptor 0 read error: -71 [ 1045.901647][T18467] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 1045.945879][T18467] usb 5-1: USB disconnect, device number 62 [ 1046.094172][ T9199] trusted_key: encrypted_key: keylen parameter is missing [ 1046.198028][ T9206] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1046.441740][ T9221] loop4: detected capacity change from 0 to 8 [ 1046.564258][ T5966] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1046.860191][ T9251] FAT-fs (loop0): Directory bread(block 64) failed [ 1046.870701][ T9251] FAT-fs (loop0): Directory bread(block 65) failed [ 1046.902134][ T9251] FAT-fs (loop0): Directory bread(block 66) failed [ 1046.917114][ T9251] FAT-fs (loop0): Directory bread(block 67) failed [ 1046.937687][ T9251] FAT-fs (loop0): Directory bread(block 68) failed [ 1046.957617][ T9251] FAT-fs (loop0): Directory bread(block 69) failed [ 1046.981301][ T9251] FAT-fs (loop0): Directory bread(block 70) failed [ 1047.000020][ T9251] FAT-fs (loop0): Directory bread(block 71) failed [ 1047.013425][ T5966] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 1047.023952][ T9251] FAT-fs (loop0): Directory bread(block 72) failed [ 1047.049756][ T9251] FAT-fs (loop0): Directory bread(block 73) failed [ 1047.051209][ T5966] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1047.095147][ T5966] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.127471][ T5966] usb 2-1: config 8 has no interface number 0 [ 1047.161805][ T5966] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1047.194791][ T5966] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1047.419582][ T5966] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1047.461360][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.484970][ T5966] usb 2-1: Product: syz [ 1047.489176][ T5966] usb 2-1: Manufacturer: syz [ 1047.512190][ T9286] netlink: 'syz.4.16991': attribute type 30 has an invalid length. [ 1047.526308][ T5966] usb 2-1: SerialNumber: syz [ 1047.537342][ T9286] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16991'. [ 1047.565818][ T9286] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 1047.607227][ T9286] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 1047.726644][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16995'. [ 1047.835120][ T5966] usb 2-1: USB disconnect, device number 73 [ 1047.842716][ T9305] device geneve2 entered promiscuous mode [ 1047.866980][ T9309] netlink: 'syz.0.17002': attribute type 1 has an invalid length. [ 1047.889758][ T9309] netlink: 'syz.0.17002': attribute type 1 has an invalid length. [ 1047.921413][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17004'. [ 1048.151729][ T9331] set_capacity_and_notify: 1 callbacks suppressed [ 1048.151746][ T9331] loop2: detected capacity change from 0 to 512 [ 1048.214356][ T9331] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1048.275143][ T9331] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.17012: bad orphan inode 131083 [ 1048.298896][ T9331] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1048.517657][ T9347] netlink: 'syz.1.17019': attribute type 13 has an invalid length. [ 1048.770126][ T9364] loop3: detected capacity change from 0 to 512 [ 1048.839603][ T9364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022] [ 1048.847968][ T9366] netlink: 'syz.1.17029': attribute type 1 has an invalid length. [ 1048.868503][ T9364] System zones: 1-12 [ 1048.873900][ T9364] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.17028: Directory hole found for htree index block 0 [ 1048.903721][ T9364] EXT4-fs (loop3): Remounting filesystem read-only [ 1048.910631][T18583] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1048.933224][ T9364] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 1048.957508][ T9369] loop4: detected capacity change from 0 to 1024 [ 1048.976862][ T9364] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.17028: Directory hole found for htree index block 0 [ 1049.018539][ T9371] netlink: 'syz.1.17031': attribute type 3 has an invalid length. [ 1049.062060][ T9369] hfsplus: Filesystem is marked locked, mounting read-only. [ 1049.070481][ T9364] EXT4-fs (loop3): Remounting filesystem read-only [ 1049.083659][ T9369] hfsplus: invalid catalog entry type in lookup [ 1049.094355][ T9364] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1049.129563][ T9364] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,dax=never,bsdgroups,usrjquota="nodioread_nolock,errors=remount-ro,,. Quota mode: writeback. [ 1049.151360][ T9356] loop2: detected capacity change from 0 to 40427 [ 1049.178072][T18583] usb 1-1: Using ep0 maxpacket: 16 [ 1049.208921][ T9356] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 1049.232148][ T9356] F2FS-fs (loop2): invalid crc value [ 1049.311529][T18583] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1049.324878][T18583] usb 1-1: config 254 has no interface number 0 [ 1049.334683][ T9356] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1049.338515][T18583] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1049.357703][T18583] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1049.371146][T18583] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1049.392832][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17036'. [ 1049.423665][T18583] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1049.531066][ T9356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1049.625678][T18583] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1049.652024][T18583] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.693883][T18583] usb 1-1: Product: syz [ 1049.711812][T18583] usb 1-1: Manufacturer: syz [ 1049.738434][T18583] usb 1-1: SerialNumber: syz [ 1049.771312][ T9353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1050.008953][ T9353] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1050.018420][ T9413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1050.039100][T18583] usbtest 1-1:254.235: Linux gadget zero [ 1050.048482][T18583] usbtest 1-1:254.235: high-speed {control in/out bulk-out int-in} tests (+alt) [ 1050.106379][ T9395] loop4: detected capacity change from 0 to 32768 [ 1050.228457][ T9395] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1050.242098][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1050.242112][ T26] audit: type=1326 audit(1258.999:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.1.17055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f802bf2b799 code=0x0 [ 1050.257131][T18583] usb 1-1: USB disconnect, device number 59 [ 1050.279257][ T9395] (syz.4.17042,9395,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 1050.334141][ T9395] (syz.4.17042,9395,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1050.343662][ T9395] (syz.4.17042,9395,0):ocfs2_mknod:298 ERROR: status = -2 [ 1050.372665][ T9395] (syz.4.17042,9395,0):ocfs2_mknod:502 ERROR: status = -2 [ 1050.381394][ T9395] (syz.4.17042,9395,0):ocfs2_create:676 ERROR: status = -2 [ 1050.441197][ T4344] ocfs2: Unmounting device (7,4) on (node local) [ 1050.549550][ T9437] kAFS: unable to lookup cell '/,' [ 1051.005592][ T9464] loop0: detected capacity change from 0 to 1024 [ 1051.069524][ T9464] EXT4-fs (loop0): Invalid log cluster size: 1073741828 [ 1051.128145][ T9464] overlayfs: missing 'lowerdir' [ 1051.520930][ T9492] loop0: detected capacity change from 0 to 512 [ 1051.594418][ T9449] loop2: detected capacity change from 0 to 32768 [ 1051.619020][ T9492] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 1051.652402][ T9492] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 1051.652402][ T9492] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1051.652402][ T9492] [ 1051.714494][ T9492] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1051.757603][ T9492] [EXT4 FS bs=4096, gc=1, bpg=256, ipg=32, mo=88428018, mo2=0000] [ 1051.798936][ T9449] XFS (loop2): Mounting V5 Filesystem [ 1051.816220][ T9492] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #12: comm syz.0.17087: iget: bad i_size value: -562949953417216 [ 1051.876917][ T9492] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.17087: couldn't read orphan inode 12 (err -117) [ 1051.951978][ T9492] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,debug,barrier=0x0000000000000003,grpjquota=./file0,acl,journal_ioprio=0x0000000000000001,nouser_xattr,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1052.013587][ T9492] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.17087: deleted inode referenced: 12 [ 1052.065375][ T9530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17102'. [ 1052.110381][ T9449] XFS (loop2): Ending clean mount [ 1052.237696][ T9543] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17105'. [ 1052.340679][ T4339] XFS (loop2): Unmounting Filesystem [ 1052.373490][ T9550] loop4: detected capacity change from 0 to 64 [ 1052.472008][ T9556] fuse: Invalid rootmode [ 1052.589882][ T9547] loop3: detected capacity change from 0 to 8192 [ 1052.775711][ T9547] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1052.800205][ T9547] FAT-fs (loop3): Filesystem has been set read-only [ 1053.125682][ T9583] cgroup: Invalid name [ 1053.538284][ T9609] loop2: detected capacity change from 0 to 65 [ 1053.614208][ T9609] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1053.668631][ T9572] loop4: detected capacity change from 0 to 32768 [ 1053.843861][ T9572] XFS (loop4): Mounting V5 Filesystem [ 1053.892896][ T9629] netlink: 'syz.1.17148': attribute type 1 has an invalid length. [ 1054.103933][ T9572] XFS (loop4): Ending clean mount [ 1054.155659][ T9641] loop3: detected capacity change from 0 to 1024 [ 1054.170904][ T4344] XFS (loop4): Unmounting Filesystem [ 1054.342685][ T9648] Unknown options in mask b7f2 [ 1054.366355][T13916] hfsplus: b-tree write err: -5, ino 4 [ 1054.808024][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17171'. [ 1055.067570][ T9692] loop1: detected capacity change from 0 to 2048 [ 1055.162913][ T9692] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1055.251103][ T9715] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1055.251388][ T9692] attempt to access beyond end of device [ 1055.251388][ T9692] loop1: rw=524288, want=33554432, limit=2048 [ 1055.505587][ T9692] attempt to access beyond end of device [ 1055.505587][ T9692] loop1: rw=0, want=9437256, limit=2048 [ 1055.553840][ T9692] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 1055.667146][ T9734] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1055.985923][ T9698] loop3: detected capacity change from 0 to 40427 [ 1056.036527][ T9698] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 1056.052533][ T9698] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1056.063634][ T9698] F2FS-fs (loop3): invalid crc value [ 1056.089127][ T9698] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1056.120855][ T9698] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1056.196178][ T9698] F2FS-fs (loop3): recover fsync data on readonly fs [ 1056.220909][ T9698] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 1056.229032][ T9698] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1056.238146][T18467] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1056.254604][ T4330] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1056.262678][T18583] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1056.327276][ T9771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1056.682985][T18583] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1056.692067][ T4330] usb 3-1: config 0 has an invalid interface number: 17 but max is 1 [ 1056.700488][T18467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1056.707107][ T9797] netlink: 'syz.1.17229': attribute type 3 has an invalid length. [ 1056.710471][ T4330] usb 3-1: config 0 has an invalid interface number: 135 but max is 1 [ 1056.739626][T18583] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.750113][T18467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1056.772394][T18583] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1056.781464][T18583] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.792532][T18467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1056.802937][ T4330] usb 3-1: config 0 has no interface number 0 [ 1056.810526][T18467] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1056.820490][T18583] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.830422][ T4330] usb 3-1: config 0 has no interface number 1 [ 1056.836943][ T4330] usb 3-1: config 0 interface 17 has no altsetting 0 [ 1056.844347][T18467] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1056.853688][ T4330] usb 3-1: config 0 interface 135 has no altsetting 0 [ 1056.860611][T18467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.878896][T18467] usb 5-1: config 0 descriptor?? [ 1056.885401][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17232'. [ 1056.976615][T18583] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1056.985993][T18583] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1057.008626][T18583] usb 1-1: Product: syz [ 1057.012846][T18583] usb 1-1: Manufacturer: syz [ 1057.032398][ T9812] loop3: detected capacity change from 0 to 1024 [ 1057.039750][ T4330] usb 3-1: New USB device found, idVendor=413c, idProduct=81cf, bcdDevice=1b.39 [ 1057.061652][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.070333][ T4330] usb 3-1: Product: syz [ 1057.076052][T18583] cdc_wdm 1-1:1.0: skipping garbage [ 1057.082117][T18583] cdc_wdm 1-1:1.0: skipping garbage [ 1057.087967][ T4330] usb 3-1: Manufacturer: syz [ 1057.106499][ T4330] usb 3-1: SerialNumber: syz [ 1057.112087][T18583] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1057.125812][T18583] cdc_wdm 1-1:1.0: Unknown control protocol [ 1057.143511][ T145] hfsplus: b-tree write err: -5, ino 4 [ 1057.143913][ T4330] usb 3-1: config 0 descriptor?? [ 1057.157551][T18467] hdpvr 5-1:0.0: firmware version 0x0 dated [ 1057.163738][T18467] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1057.307225][ T9755] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 1057.313205][ T9810] loop1: detected capacity change from 0 to 32768 [ 1057.329415][T18583] usb 1-1: USB disconnect, device number 60 [ 1057.382367][T18467] hdpvr 5-1:0.0: device init failed [ 1057.388232][T18467] hdpvr: probe of 5-1:0.0 failed with error -12 [ 1057.401906][T18467] usb 5-1: USB disconnect, device number 63 [ 1057.447687][ T9810] ERROR: (device loop1): dbAlloc: unable to allocate blocks [ 1057.447687][ T9810] [ 1057.468772][ T9810] jfs_rename: dtInsert returned -EIO [ 1057.472201][ T4330] usb 3-1: USB disconnect, device number 72 [ 1057.534615][ T9816] No such timeout policy "syz1" [ 1057.716600][ T9826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17243'. [ 1057.978501][ T9838] misc userio: Invalid payload size [ 1058.255621][ T9824] loop1: detected capacity change from 0 to 32768 [ 1058.459348][ T9824] XFS (loop1): Mounting V5 Filesystem [ 1058.684650][ T9894] netlink: 'syz.2.17272': attribute type 12 has an invalid length. [ 1058.720043][ T9824] XFS (loop1): Ending clean mount [ 1058.873987][ T9909] loop3: detected capacity change from 0 to 512 [ 1058.884050][ T4340] XFS (loop1): Unmounting Filesystem [ 1058.977742][ T4825] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1059.004046][ T9917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17285'. [ 1059.156703][ T9909] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.17280: bad orphan inode 11862016 [ 1059.219842][ T9909] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1059.274089][ T4330] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1059.284372][ T4825] usb 5-1: Using ep0 maxpacket: 8 [ 1059.291519][ T9928] tmpfs: Bad value for 'mpol' [ 1059.425445][ T4825] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1059.436456][ T4825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.447267][ T4825] usb 5-1: config 0 has no interface number 0 [ 1059.513088][ T9940] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1059.531534][ T4330] usb 3-1: Using ep0 maxpacket: 8 [ 1059.637297][ T4825] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1059.646666][ T4825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.663535][ T9950] Timeout policy `syz1' can only be used by L3 protocol number 24578 [ 1059.701183][ T4825] usb 5-1: Product: syz [ 1059.704510][ T9954] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.17301'. [ 1059.705458][ T4825] usb 5-1: Manufacturer: syz [ 1059.716798][ T4330] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1059.776840][ T4825] usb 5-1: SerialNumber: syz [ 1059.793899][ T4825] usb 5-1: config 0 descriptor?? [ 1059.820330][ T4330] usb 3-1: config 1 interface 0 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 64 [ 1059.849777][ T4330] usb 3-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1059.880416][ T4330] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1060.019999][ T9974] netlink: 'syz.1.17311': attribute type 3 has an invalid length. [ 1060.031390][ T9972] loop0: detected capacity change from 0 to 1024 [ 1060.054153][ T4330] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1060.074603][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.107549][ T4825] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 1060.117942][ T4330] usb 3-1: Product: syz [ 1060.129326][ T4825] usb 5-1: No valid video chain found. [ 1060.142112][ T4330] usb 3-1: Manufacturer: syz [ 1060.152835][ T9972] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1060.193424][ T4330] usb 3-1: SerialNumber: syz [ 1060.214708][ T9972] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.17310: casefold flag without casefold feature [ 1060.257326][ T9912] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1060.279696][ T9988] loop3: detected capacity change from 0 to 64 [ 1060.364158][ T4825] usb 5-1: USB disconnect, device number 64 [ 1060.535940][ T4330] usb 3-1: bad CDC descriptors [ 1060.549248][T10003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17324'. [ 1060.567504][ T4330] usb 3-1: USB disconnect, device number 73 [ 1060.855759][ T4377] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1060.941255][T10031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17338'. [ 1060.970675][T10035] netlink: 288 bytes leftover after parsing attributes in process `syz.4.17339'. [ 1061.122902][ T4377] usb 4-1: Using ep0 maxpacket: 32 [ 1061.257379][ T4377] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1061.279178][ T4377] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1061.326638][ T4377] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1061.332726][T10062] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1061.354175][ T4377] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1061.383329][ T4377] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1061.503500][T10070] loop2: detected capacity change from 0 to 256 [ 1061.568460][ T4377] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1061.578282][ T4377] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1061.591935][ T4377] usb 4-1: Product: syz [ 1061.614647][ T4377] usb 4-1: Manufacturer: syz [ 1061.619319][ T4377] usb 4-1: SerialNumber: syz [ 1061.629398][ T4377] usb 4-1: config 0 descriptor?? [ 1061.678727][T18467] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1061.690388][ T4377] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1061.722860][ T4377] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1061.813982][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17360'. [ 1061.935317][T18467] usb 2-1: Using ep0 maxpacket: 16 [ 1061.943832][T10082] netlink: 'syz.4.17362': attribute type 7 has an invalid length. [ 1061.966196][ T4377] usb 4-1: USB disconnect, device number 40 [ 1061.968010][T10083] loop2: detected capacity change from 0 to 256 [ 1061.986351][ T4377] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1062.035565][T10072] loop0: detected capacity change from 0 to 32768 [ 1062.052003][T10089] loop4: detected capacity change from 0 to 512 [ 1062.063809][T18467] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1062.072466][T18467] usb 2-1: config 0 has no interface number 0 [ 1062.078755][T18467] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1062.103793][T10072] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1062.104390][T10083] FAT-fs (loop2): Directory bread(block 64) failed [ 1062.130965][T10089] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1062.132135][T10083] FAT-fs (loop2): Directory bread(block 65) failed [ 1062.147995][T10083] FAT-fs (loop2): Directory bread(block 66) failed [ 1062.154863][T10083] FAT-fs (loop2): Directory bread(block 67) failed [ 1062.161703][T10083] FAT-fs (loop2): Directory bread(block 68) failed [ 1062.168350][T10083] FAT-fs (loop2): Directory bread(block 69) failed [ 1062.175441][T10083] FAT-fs (loop2): Directory bread(block 70) failed [ 1062.182171][T10083] FAT-fs (loop2): Directory bread(block 71) failed [ 1062.189045][T10083] FAT-fs (loop2): Directory bread(block 72) failed [ 1062.196488][T10083] FAT-fs (loop2): Directory bread(block 73) failed [ 1062.203451][T10072] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1062.213377][T18467] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1062.222516][T18467] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1062.234872][T18467] usb 2-1: Product: syz [ 1062.238121][T10072] (syz.0.17358,10072,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 1062.239096][T18467] usb 2-1: SerialNumber: syz [ 1062.262479][T18467] usb 2-1: config 0 descriptor?? [ 1062.268295][T10072] (syz.0.17358,10072,0):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 1062.310928][T10089] EXT4-fs (loop4): 1 truncate cleaned up [ 1062.311512][T18467] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 1062.340613][T10089] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x00000000000007ff,jqfmt=vfsold,debug_want_extra_isize=0x0000000000000066,user_xattr,nolazytime,quota,,errors=continue. Quota mode: writeback. [ 1062.388007][T10089] cifs: Unknown parameter 'Ü[—Íñ¦bšÿÿÿITäŒ&¬æ:ÅèÙ"‚Õëï1:ºÃÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 1062.388007][T10089] SÃȘØÈžZ§6ŸÂ' [ 1062.408879][ T4335] ocfs2: Unmounting device (7,0) on (node local) [ 1062.619645][T18467] usb 2-1: USB disconnect, device number 74 [ 1062.707086][T10110] sock: sock_timestamping_bind_phc: sock not bind to device [ 1062.923020][ T4330] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1063.032185][T10133] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17385'. [ 1063.042610][T10134] loop2: detected capacity change from 0 to 8 [ 1063.057288][T10133] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17385'. [ 1063.110294][T10134] cramfs: bad data blocksize 3222268820 [ 1063.127280][T10134] cramfs: Error -3 while decompressing! [ 1063.133466][T10134] cramfs: ffffffff964060dc(16)->ffff88804b980000(4096) [ 1063.173313][T10134] cramfs: bad data blocksize 4165569313 [ 1063.196770][ T4330] usb 5-1: Using ep0 maxpacket: 32 [ 1063.219243][T10134] cramfs: bad data blocksize 3825676623 [ 1063.233223][T10134] cramfs: bad data blocksize 4294480561 [ 1063.238920][T10134] cramfs: bad data blocksize 1076736 [ 1063.260814][T10134] cramfs: bad data blocksize 485460736 [ 1063.266642][T10134] cramfs: bad data blocksize 3808479469 [ 1063.284450][T10134] cramfs: bad data blocksize 3222268820 [ 1063.304599][ T26] audit: type=1800 audit(1271.245:80): pid=10134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.17387" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1063.506822][ T4330] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1063.529171][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.558401][ T4330] usb 5-1: Product: syz [ 1063.575626][ T4330] usb 5-1: Manufacturer: syz [ 1063.602894][ T4330] usb 5-1: SerialNumber: syz [ 1063.657756][T10175] PM: Enabling pm_trace changes system date and time during resume. [ 1063.657756][T10175] PM: Correct system time has to be restored manually after resume. [ 1063.688130][T10177] IPv6: Can't replace route, no match found [ 1063.712832][T10181] loop0: detected capacity change from 0 to 256 [ 1063.772897][T10185] netlink: 'syz.3.17412': attribute type 3 has an invalid length. [ 1063.773228][T10187] loop1: detected capacity change from 0 to 256 [ 1063.866873][T10181] FAT-fs (loop0): Directory bread(block 64) failed [ 1063.886944][T10187] FAT-fs (loop1): Directory bread(block 64) failed [ 1063.902289][ T4330] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1063.923673][ T4330] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1063.930874][T10187] FAT-fs (loop1): Directory bread(block 65) failed [ 1063.932284][T10181] FAT-fs (loop0): Directory bread(block 65) failed [ 1063.959716][T10181] FAT-fs (loop0): Directory bread(block 66) failed [ 1063.959760][T10181] FAT-fs (loop0): Directory bread(block 67) failed [ 1063.959842][T10181] FAT-fs (loop0): Directory bread(block 68) failed [ 1063.959869][T10181] FAT-fs (loop0): Directory bread(block 69) failed [ 1063.959932][T10181] FAT-fs (loop0): Directory bread(block 70) failed [ 1063.959960][T10181] FAT-fs (loop0): Directory bread(block 71) failed [ 1063.960025][T10181] FAT-fs (loop0): Directory bread(block 72) failed [ 1063.960054][T10181] FAT-fs (loop0): Directory bread(block 73) failed [ 1063.963965][T10187] FAT-fs (loop1): Directory bread(block 66) failed [ 1063.964008][T10187] FAT-fs (loop1): Directory bread(block 67) failed [ 1063.964074][T10187] FAT-fs (loop1): Directory bread(block 68) failed [ 1063.964103][T10187] FAT-fs (loop1): Directory bread(block 69) failed [ 1063.964171][T10187] FAT-fs (loop1): Directory bread(block 70) failed [ 1063.964199][T10187] FAT-fs (loop1): Directory bread(block 71) failed [ 1063.964262][T10187] FAT-fs (loop1): Directory bread(block 72) failed [ 1063.964291][T10187] FAT-fs (loop1): Directory bread(block 73) failed [ 1064.006920][ T4330] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1064.134550][ T4330] usb 5-1: USB disconnect, device number 65 [ 1064.137006][ T4330] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1064.273097][ T4330] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1064.291336][ T4330] visor 5-1:1.0: device disconnected [ 1064.357241][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17422'. [ 1064.360077][T10206] ipt_CLUSTERIP: Please specify an interface name [ 1064.393860][T10202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17422'. [ 1064.615934][T10220] netlink: 'syz.0.17429': attribute type 2 has an invalid length. [ 1064.660681][T10220] netlink: 1 bytes leftover after parsing attributes in process `syz.0.17429'. [ 1064.701859][T10229] tmpfs: Bad value for 'mpol' [ 1064.993242][T10252] loop2: detected capacity change from 0 to 128 [ 1065.002499][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17447'. [ 1065.072815][T10252] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1065.118153][T10252] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 1065.139123][T10252] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1065.212128][T10252] EXT4-fs (loop2): re-mounted. Opts: test_dummy_encryption=v1. Quota mode: none. [ 1065.227716][ T1324] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1065.657914][ T1324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.690539][ T1324] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1065.701780][ T26] audit: type=1326 audit(1273.491:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.4.17468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9da1d5799 code=0x7ffc0000 [ 1065.722430][ T1324] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1065.729656][T10304] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17469'. [ 1065.783816][ T26] audit: type=1326 audit(1273.491:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.4.17468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9da1d5799 code=0x7ffc0000 [ 1065.808361][ T26] audit: type=1326 audit(1273.491:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.4.17468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9da1d5799 code=0x7ffc0000 [ 1065.898086][T10311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17474'. [ 1065.915335][T10311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17474'. [ 1065.960762][ T1324] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1065.977504][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.007753][ T1324] usb 2-1: Product: syz [ 1066.012875][ T1324] usb 2-1: Manufacturer: syz [ 1066.039894][ T1324] usb 2-1: SerialNumber: syz [ 1066.060094][T10314] loop3: detected capacity change from 0 to 4096 [ 1066.134398][T10314] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1066.152455][T10292] loop2: detected capacity change from 0 to 32768 [ 1066.164645][T10314] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1066.225036][T10314] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1066.248722][T10314] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1066.339436][T10314] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1066.347372][T10334] loop0: detected capacity change from 0 to 4096 [ 1066.362403][T10314] ntfs: volume version 3.1. [ 1066.414137][T10292] XFS (loop2): Mounting V5 Filesystem [ 1066.421557][T10314] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1066.437962][ T1324] usb 2-1: 0:2 : does not exist [ 1066.498459][T10334] ntfs: volume version 3.1. [ 1066.509617][ T1324] usb 2-1: USB disconnect, device number 75 [ 1066.574171][T10344] netlink: 268 bytes leftover after parsing attributes in process `syz.4.17486'. [ 1066.593173][T10344] unsupported nla_type 65024 [ 1066.603663][T10292] XFS (loop2): Ending clean mount [ 1066.718300][T10348] loop3: detected capacity change from 0 to 256 [ 1066.790441][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.819990][ T4339] XFS (loop2): Unmounting Filesystem [ 1066.833241][T10348] FAT-fs (loop3): Directory bread(block 64) failed [ 1066.839822][T10348] FAT-fs (loop3): Directory bread(block 65) failed [ 1066.915854][T10348] FAT-fs (loop3): Directory bread(block 66) failed [ 1066.922758][T10348] FAT-fs (loop3): Directory bread(block 67) failed [ 1066.949145][T10348] FAT-fs (loop3): Directory bread(block 68) failed [ 1066.967557][T10348] FAT-fs (loop3): Directory bread(block 69) failed [ 1066.994930][T10356] netlink: 'syz.0.17493': attribute type 5 has an invalid length. [ 1067.006249][T10348] FAT-fs (loop3): Directory bread(block 70) failed [ 1067.029624][T10348] FAT-fs (loop3): Directory bread(block 71) failed [ 1067.042210][T10358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17494'. [ 1067.042209][T10348] FAT-fs (loop3): Directory bread(block 72) failed [ 1067.042247][T10348] FAT-fs (loop3): Directory bread(block 73) failed [ 1067.446564][T10376] netlink: 766 bytes leftover after parsing attributes in process `syz.1.17503'. [ 1068.048889][T10429] netlink: 'syz.0.17528': attribute type 4 has an invalid length. [ 1068.213716][T10444] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1068.257903][T10430] loop4: detected capacity change from 0 to 4096 [ 1068.331081][T10454] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.353943][T10430] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1068.505846][T10464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1068.596370][T10466] loop3: detected capacity change from 0 to 4096 [ 1068.793815][T10484] netlink: 'syz.4.17558': attribute type 29 has an invalid length. [ 1068.826488][T10484] netlink: 'syz.4.17558': attribute type 3 has an invalid length. [ 1068.935666][T10496] loop4: detected capacity change from 0 to 512 [ 1069.068346][T10496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1069.086460][ T1324] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1069.160561][T10496] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.17562: invalid indirect mapped block 4294967295 (level 0) [ 1069.283127][T10496] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.17562: invalid indirect mapped block 4294967295 (level 1) [ 1069.332250][ T4825] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1069.353063][T10496] EXT4-fs (loop4): 1 orphan inode deleted [ 1069.381336][T10509] loop2: detected capacity change from 0 to 1024 [ 1069.387917][T10496] EXT4-fs (loop4): 1 truncate cleaned up [ 1069.393695][T10496] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1069.458579][T10505] loop0: detected capacity change from 0 to 32768 [ 1069.525803][ T1324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.546962][ T1324] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1069.573987][T10509] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 2: comm syz.2.17568: lblock 2 mapped to illegal pblock 2 (length 1) [ 1069.607613][T10505] XFS (loop0): Mounting V5 Filesystem [ 1069.622248][T10509] __quota_error: 12 callbacks suppressed [ 1069.622271][T10509] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1069.642152][ T4825] usb 4-1: Using ep0 maxpacket: 16 [ 1069.689671][T10509] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 48: comm syz.2.17568: lblock 0 mapped to illegal pblock 48 (length 1) [ 1069.704545][T10509] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1069.713866][T10509] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.17568: Failed to acquire dquot type 0 [ 1069.734874][T10509] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 1069.749477][ T1324] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1069.758568][ T1324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.770452][T10509] EXT4-fs error (device loop2): ext4_evict_inode:282: inode #11: comm syz.2.17568: mark_inode_dirty error [ 1069.781359][ T4825] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 1069.785076][T10509] EXT4-fs warning (device loop2): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 1069.795074][ T4825] usb 4-1: config 0 has no interface number 0 [ 1069.800526][T10509] EXT4-fs (loop2): 1 orphan inode deleted [ 1069.813684][T10509] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000001,discard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 1069.817986][ T1324] usb 2-1: Product: syz [ 1069.847404][ T1324] usb 2-1: Manufacturer: syz [ 1069.864663][ T1324] usb 2-1: SerialNumber: syz [ 1069.875101][T10505] XFS (loop0): Ending clean mount [ 1069.875414][T13253] EXT4-fs error (device loop2): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 1069.927452][ T1324] usb 2-1: bad CDC descriptors [ 1069.943781][T13253] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1069.965375][T13253] EXT4-fs error (device loop2): ext4_release_dquot:6270: comm kworker/u4:8: Failed to release dquot type 0 [ 1069.983798][T10509] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.17568: Invalid inode table block 1 in block_group 0 [ 1070.003952][ T4335] XFS (loop0): Unmounting Filesystem [ 1070.014105][T10509] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 1070.037673][T10509] EXT4-fs error (device loop2): ext4_quota_off:6540: inode #3: comm syz.2.17568: mark_inode_dirty error [ 1070.069956][ T4825] usb 4-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=d1.d8 [ 1070.079170][ T4825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.088327][ T4825] usb 4-1: Product: syz [ 1070.092802][ T4825] usb 4-1: Manufacturer: syz [ 1070.097974][ T4825] usb 4-1: SerialNumber: syz [ 1070.105785][ T4825] usb 4-1: config 0 descriptor?? [ 1070.167923][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.178869][ T4825] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1070.251086][T18583] usb 2-1: USB disconnect, device number 76 [ 1070.387924][ T4377] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1070.412055][ T2421] pvrusb2: Invalid write control endpoint [ 1070.419408][ T2421] usb 4-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1070.441659][ T2421] usb 4-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1070.662163][ T1324] usb 4-1: USB disconnect, device number 41 [ 1070.675096][T10555] autofs4:pid:10555:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 1070.773575][T10562] netlink: 'syz.2.17590': attribute type 21 has an invalid length. [ 1070.785092][ T4377] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1070.800888][T10562] netlink: 'syz.2.17590': attribute type 4 has an invalid length. [ 1070.810635][ T4377] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.829200][T10562] __nla_validate_parse: 3 callbacks suppressed [ 1070.829216][T10562] netlink: 144 bytes leftover after parsing attributes in process `syz.2.17590'. [ 1070.847358][ T4377] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1070.858278][T10566] ieee802154 phy1 wpan1: encryption failed: -90 [ 1070.858519][ T4377] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.884083][ T4377] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.034854][ T4377] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1071.074785][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1071.083745][ T4377] usb 5-1: Product: syz [ 1071.088691][ T4377] usb 5-1: Manufacturer: syz [ 1071.140337][ T4377] cdc_wdm 5-1:1.0: skipping garbage [ 1071.145645][ T4377] cdc_wdm 5-1:1.0: skipping garbage [ 1071.163390][ T4377] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1071.169494][T10586] netlink: 'syz.1.17600': attribute type 12 has an invalid length. [ 1071.192130][ T4377] cdc_wdm 5-1:1.0: Unknown control protocol [ 1071.275358][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17606'. [ 1071.288571][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1071.380737][T10600] netlink: 'syz.0.17609': attribute type 21 has an invalid length. [ 1071.433790][T10530] cdc_wdm 5-1:1.0: Error submitting int urb - -90 [ 1071.472326][ T4377] usb 5-1: USB disconnect, device number 66 [ 1071.596177][T10613] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1071.651149][T10613] overlayfs: missing 'lowerdir' [ 1071.724142][T10629] netlink: 'syz.1.17623': attribute type 5 has an invalid length. [ 1071.794733][T10635] Cannot find map_set index 3 as target [ 1072.591188][T10690] netlink: 'syz.4.17652': attribute type 1 has an invalid length. [ 1072.623003][T10690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17652'. [ 1072.632633][T10691] UBIFS error (pid: 10691): cannot open "(null)", error -22 [ 1072.727627][T10695] xt_CT: No such helper "pptp" [ 1072.879331][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17661'. [ 1072.924255][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17661'. [ 1073.091970][T10725] netlink: 'syz.1.17671': attribute type 1 has an invalid length. [ 1073.108595][T10726] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17669'. [ 1073.114541][T10722] loop2: detected capacity change from 0 to 2048 [ 1073.177625][T10718] loop3: detected capacity change from 0 to 4096 [ 1073.222525][T10722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.284183][T10718] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1073.351804][T10718] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1073.376451][T10718] ntfs: volume version 3.1. [ 1073.442828][T10736] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1073.641546][T10745] loop0: detected capacity change from 0 to 1764 [ 1073.864666][T10755] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1073.954453][T10765] CIFS mount error: No usable UNC path provided in device string! [ 1073.954453][T10765] [ 1073.966738][T10763] loop2: detected capacity change from 0 to 4096 [ 1073.971071][T10765] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1074.010726][T10767] SET target dimension over the limit! [ 1074.182737][T10780] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1074.286673][T10784] delete_channel: no stack [ 1074.518279][T10799] loop1: detected capacity change from 0 to 64 [ 1074.641284][T10803] loop0: detected capacity change from 0 to 128 [ 1074.653813][T10799] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 1074.727576][T10803] FAT-fs (loop0): FAT read failed (blocknr 50720) [ 1074.839829][T10775] loop4: detected capacity change from 0 to 32768 [ 1075.060340][T10775] XFS (loop4): Mounting V5 Filesystem [ 1075.147436][ T4330] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1075.188732][T10829] loop0: detected capacity change from 0 to 256 [ 1075.228773][T10775] XFS (loop4): Ending clean mount [ 1075.344398][T10829] FAT-fs (loop0): Directory bread(block 64) failed [ 1075.356841][ T4344] XFS (loop4): Unmounting Filesystem [ 1075.363730][T10829] FAT-fs (loop0): Directory bread(block 65) failed [ 1075.404103][ T4330] usb 3-1: Using ep0 maxpacket: 16 [ 1075.422718][T10829] FAT-fs (loop0): Directory bread(block 66) failed [ 1075.432993][T10829] FAT-fs (loop0): Directory bread(block 67) failed [ 1075.443755][T10829] FAT-fs (loop0): Directory bread(block 68) failed [ 1075.459960][T10833] loop3: detected capacity change from 0 to 1024 [ 1075.470962][T10829] FAT-fs (loop0): Directory bread(block 69) failed [ 1075.477596][T10829] FAT-fs (loop0): Directory bread(block 70) failed [ 1075.495858][T10829] FAT-fs (loop0): Directory bread(block 71) failed [ 1075.506638][T10829] FAT-fs (loop0): Directory bread(block 72) failed [ 1075.513778][T10829] FAT-fs (loop0): Directory bread(block 73) failed [ 1075.689470][T10837] dlm: no locking on control device [ 1075.715489][ T4330] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1075.748771][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.764709][T10843] loop3: detected capacity change from 0 to 16 [ 1075.794884][ T4330] usb 3-1: Product: syz [ 1075.813037][ T4330] usb 3-1: Manufacturer: syz [ 1075.825330][ T4330] usb 3-1: SerialNumber: syz [ 1075.856661][ T4330] r8152-cfgselector 3-1: config 0 descriptor?? [ 1075.885549][T10845] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1075.912110][T10843] erofs: (device loop3): mounted with root inode @ nid 36. [ 1075.923436][ T4475] udevd[4475]: incorrect cramfs checksum on /dev/loop0 [ 1075.964265][T10845] cramfs: Error -5 while decompressing! [ 1075.997557][T10845] cramfs: ffffffff96402088(18)->ffff8880697f9000(4096) [ 1076.005422][T10845] cramfs: Error -5 while decompressing! [ 1076.011415][T10845] cramfs: ffffffff96402088(18)->ffff8880697f9000(4096) [ 1076.018951][ T26] audit: type=1800 audit(1283.136:84): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17724" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 1076.055091][ T4424] udevd[4424]: incorrect cramfs checksum on /dev/loop0 [ 1076.286214][T10869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17737'. [ 1076.376617][ T4330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1076.402660][ T4330] r8152-cfgselector 3-1: bad CDC descriptors [ 1076.434750][T10879] i2c i2c-0: Invalid block write size 253 [ 1076.443135][ T4330] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1076.457540][ T4330] r8152-cfgselector 3-1: USB disconnect, device number 74 [ 1076.557181][ T26] audit: type=1400 audit(1283.641:85): apparmor="DENIED" operation="change_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=10889 comm="syz.0.17747" [ 1076.689675][T10897] netlink: 7 bytes leftover after parsing attributes in process `syz.4.17749'. [ 1076.699692][T10897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17749'. [ 1076.728682][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17752'. [ 1076.743185][T10895] erofs: (device loop0): mounted with root inode @ nid 36. [ 1076.784625][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17752'. [ 1076.872189][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17756'. [ 1076.916747][T10909] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.17757'. [ 1076.960183][T10913] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.17759'. [ 1076.981714][T10909] openvswitch: netlink: IP tunnel dst address not specified [ 1077.146087][ T4377] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1077.406976][ T4377] usb 5-1: Using ep0 maxpacket: 16 [ 1077.482298][T10951] device batadv_slave_0 left promiscuous mode [ 1077.518242][T10951] device macvlan0 left promiscuous mode [ 1077.527911][T10951] device wlan0 left promiscuous mode [ 1077.544169][T10951] device bridge5 left promiscuous mode [ 1077.702181][ T4377] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1077.711311][ T4377] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.742729][ T4377] usb 5-1: Product: syz [ 1077.747430][ T4377] usb 5-1: Manufacturer: syz [ 1077.752039][ T4377] usb 5-1: SerialNumber: syz [ 1077.760149][ T4377] usb 5-1: config 0 descriptor?? [ 1077.773795][T10969] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1077.800428][ T4377] hub 5-1:0.0: bad descriptor, ignoring hub [ 1077.806376][ T4377] hub: probe of 5-1:0.0 failed with error -5 [ 1077.886204][T10977] device vlan1 entered promiscuous mode [ 1077.953862][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17793'. [ 1078.157253][ T4825] usb 5-1: USB disconnect, device number 67 [ 1078.275031][T11000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1078.489402][ T4825] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1078.551753][T11023] set_capacity_and_notify: 4 callbacks suppressed [ 1078.551765][T11023] loop0: detected capacity change from 0 to 64 [ 1078.660668][T11027] netlink: 'syz.4.17815': attribute type 1 has an invalid length. [ 1078.669098][T11027] netlink: 'syz.4.17815': attribute type 3 has an invalid length. [ 1078.682034][T11027] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17815'. [ 1078.693137][T11027] NCSI netlink: No device for ifindex 2986344450 [ 1078.711360][T11029] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 1078.942358][ T4825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1078.962946][ T4825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1079.169172][ T4825] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1079.193518][ T4825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.207498][ T4825] usb 3-1: Product: syz [ 1079.220283][ T4825] usb 3-1: Manufacturer: syz [ 1079.222598][T11033] loop1: detected capacity change from 0 to 32768 [ 1079.230851][ T4825] usb 3-1: SerialNumber: syz [ 1079.248030][ T4825] usb 3-1: config 0 descriptor?? [ 1079.286212][T11033] jfs_strtoUCS: char2uni returned -22. [ 1079.313140][T11033] charset = cp949, char = 0xd4 [ 1079.599924][ T4825] usb 3-1: USB disconnect, device number 75 [ 1079.916977][T11100] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1079.959539][ T4650] udevd[4650]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.213208][T11114] loop3: detected capacity change from 0 to 4096 [ 1080.348457][T11114] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1080.376128][T11114] ntfs3: loop3: Failed to load $Extend. [ 1080.427627][T11114] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 1080.484291][ T4348] ntfs3: loop3: ntfs_sync_fs r=9 failed, -22. [ 1080.490978][ T4348] ntfs3: loop3: ntfs_evict_inode r=9 failed, -22. [ 1080.686622][T11161] loop2: detected capacity change from 0 to 164 [ 1080.812124][T11161] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1081.215328][T11183] netlink: 'syz.4.17893': attribute type 5 has an invalid length. [ 1081.690371][T11229] device sit0 left promiscuous mode [ 1081.720191][T11229] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1081.730728][T11229] device batadv0 left promiscuous mode [ 1081.749809][T11229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1081.796643][T11229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.822245][T11239] __nla_validate_parse: 4 callbacks suppressed [ 1081.822265][T11239] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17919'. [ 1081.860172][T11229] device vlan1 left promiscuous mode [ 1081.877616][T11229] device netdevsim0 left promiscuous mode [ 1081.890164][T11229] device wlan0 left promiscuous mode [ 1081.911232][T11229] device bond1 left promiscuous mode [ 1081.937105][T11229] device gtp0 left promiscuous mode [ 1081.951743][T11244] loop0: detected capacity change from 0 to 64 [ 1081.959015][T11229] device geneve2 left promiscuous mode [ 1081.965278][T11237] netlink: 'syz.4.17918': attribute type 13 has an invalid length. [ 1082.143691][T11257] loop4: detected capacity change from 0 to 512 [ 1082.244374][T11257] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 1082.244374][T11257] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1082.244374][T11257] [ 1082.267921][T11257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1082.291639][T11265] loop0: detected capacity change from 0 to 1024 [ 1082.315306][T11257] EXT4-fs (loop4): 1 truncate cleaned up [ 1082.324646][T11257] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,resuid=0x000000000000ee01,nouser_xattr,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 1082.416122][ T4377] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1082.523435][T11281] loop1: detected capacity change from 0 to 164 [ 1082.556359][T11283] loop4: detected capacity change from 0 to 64 [ 1082.854289][ T4377] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1082.897144][ T4377] usb 3-1: not running at top speed; connect to a high speed hub [ 1082.927198][T11304] xt_recent: hitcount (4294901760) is larger than allowed maximum (255) [ 1083.008467][ T4377] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 1083.023221][ T4377] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.056358][ T4377] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1083.072620][ T4377] usb 3-1: config 2 has no interface number 0 [ 1083.110637][ T4377] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1083.126378][ T4377] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1083.148729][ T4377] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1083.163091][T11319] netlink: 'syz.1.17959': attribute type 5 has an invalid length. [ 1083.335367][ T4377] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1083.344696][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.360086][ T4377] usb 3-1: Product: syz [ 1083.364346][ T4377] usb 3-1: Manufacturer: syz [ 1083.372135][ T4377] usb 3-1: SerialNumber: syz [ 1083.399238][ T5961] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1083.472046][T11327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17963'. [ 1083.724368][ T4377] usb 3-1: USB disconnect, device number 76 [ 1083.848395][ T5961] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1083.867579][ T5961] usb 5-1: config 0 has no interface number 0 [ 1083.874005][ T5961] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1083.992675][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17965'. [ 1084.111129][ T5961] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1084.140859][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.158891][ T5961] usb 5-1: Product: syz [ 1084.169120][ T5961] usb 5-1: Manufacturer: syz [ 1084.173755][ T5961] usb 5-1: SerialNumber: syz [ 1084.216968][ T5961] usb 5-1: config 0 descriptor?? [ 1084.266215][ T5961] CoreChips: probe of 5-1:0.41 failed with error -22 [ 1084.370856][T11360] overlayfs: unrecognized mount option "\" or missing value [ 1084.396156][ T4825] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1084.568966][T11372] loop3: detected capacity change from 0 to 256 [ 1084.692779][ T4825] usb 1-1: Using ep0 maxpacket: 32 [ 1084.712012][T11372] FAT-fs (loop3): Directory bread(block 64) failed [ 1084.746292][T11372] FAT-fs (loop3): Directory bread(block 65) failed [ 1084.753235][T11372] FAT-fs (loop3): Directory bread(block 66) failed [ 1084.766343][T11372] FAT-fs (loop3): Directory bread(block 67) failed [ 1084.784657][T11372] FAT-fs (loop3): Directory bread(block 68) failed [ 1084.796026][T11372] FAT-fs (loop3): Directory bread(block 69) failed [ 1084.814151][T11372] FAT-fs (loop3): Directory bread(block 70) failed [ 1084.828941][T11372] FAT-fs (loop3): Directory bread(block 71) failed [ 1084.858940][T11372] FAT-fs (loop3): Directory bread(block 72) failed [ 1084.873041][T11372] FAT-fs (loop3): Directory bread(block 73) failed [ 1084.874629][ T4825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.095014][ T4825] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1085.105394][ T4825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.131955][ T4825] usb 1-1: Product: syz [ 1085.141759][ T4825] usb 1-1: Manufacturer: syz [ 1085.146571][ T4825] usb 1-1: SerialNumber: syz [ 1085.175582][ T4825] usb 1-1: config 0 descriptor?? [ 1085.228129][ T4825] usb 1-1: bad CDC descriptors [ 1085.233596][ T4825] usb 1-1: unsupported MDLM descriptors [ 1085.492945][T11434] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18015'. [ 1085.508457][ T4825] usb 1-1: USB disconnect, device number 61 [ 1085.570666][T11438] netlink: 'syz.2.18017': attribute type 1 has an invalid length. [ 1085.650097][T11444] xt_NFQUEUE: number of total queues is 0 [ 1085.720468][T11450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18023'. [ 1085.772877][T18467] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1085.958849][T11458] loop2: detected capacity change from 0 to 4096 [ 1085.974638][T11466] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18031'. [ 1086.012113][T11458] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1086.039713][T18467] usb 2-1: Using ep0 maxpacket: 8 [ 1086.168131][T18467] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1086.178925][T18467] usb 2-1: config 179 has no interface number 0 [ 1086.195965][T18467] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1086.221384][T18467] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1086.245975][T18467] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1086.261133][T18467] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1086.272472][T18467] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1086.286440][T18467] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1086.293500][T18467] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1086.303088][T18467] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.346756][ T4330] usb 5-1: USB disconnect, device number 68 [ 1086.385044][T18467] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input85 [ 1086.624224][ T4330] usb 2-1: USB disconnect, device number 77 [ 1086.637141][ T4330] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1086.683435][T11501] netlink: 'syz.3.18048': attribute type 1 has an invalid length. [ 1086.702901][T11501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18048'. [ 1086.708929][T11505] netlink: 'syz.4.18050': attribute type 16 has an invalid length. [ 1086.712155][T11501] netlink: 'syz.3.18048': attribute type 1 has an invalid length. [ 1086.721202][T11505] netlink: 'syz.4.18050': attribute type 17 has an invalid length. [ 1086.739997][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1086.754610][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1086.765243][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1086.797213][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18051'. [ 1086.856102][ T26] audit: type=1400 audit(1293.277:86): apparmor="DENIED" operation="stack" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11510 comm="syz.3.18053" [ 1086.931545][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1086.954188][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1086.979870][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1087.014282][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1087.034930][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1087.042618][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1087.061852][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1087.074281][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1087.084427][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1087.096608][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1087.136880][T11515] netlink: 'syz.3.18055': attribute type 2 has an invalid length. [ 1087.151281][T11515] netlink: 'syz.3.18055': attribute type 8 has an invalid length. [ 1087.215491][T11515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18055'. [ 1087.310092][T11523] autofs4:pid:11523:autofs_fill_super: called with bogus options [ 1087.441725][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18064'. [ 1087.454693][T11508] loop0: detected capacity change from 0 to 32768 [ 1087.494372][T11537] loop2: detected capacity change from 0 to 256 [ 1087.579077][T11537] FAT-fs (loop2): Directory bread(block 64) failed [ 1087.623046][T11537] FAT-fs (loop2): Directory bread(block 65) failed [ 1087.629813][T11537] FAT-fs (loop2): Directory bread(block 66) failed [ 1087.656616][ T4335] read_mapping_page failed! [ 1087.661929][ T4335] ERROR: (device loop0): txCommit: [ 1087.661929][ T4335] [ 1087.674253][T11547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1087.695864][T11549] nfs4: Bad value for 'source' [ 1087.696521][T11537] FAT-fs (loop2): Directory bread(block 67) failed [ 1087.734835][ T4335] ERROR: (device loop0): remounting filesystem as read-only [ 1087.737592][T11537] FAT-fs (loop2): Directory bread(block 68) failed [ 1087.786069][T11537] FAT-fs (loop2): Directory bread(block 69) failed [ 1087.810138][T11537] FAT-fs (loop2): Directory bread(block 70) failed [ 1087.840464][T11537] FAT-fs (loop2): Directory bread(block 71) failed [ 1087.873608][T11537] FAT-fs (loop2): Directory bread(block 72) failed [ 1087.896278][T11537] FAT-fs (loop2): Directory bread(block 73) failed [ 1087.932888][T11561] netlink: 'syz.3.18079': attribute type 10 has an invalid length. [ 1088.295384][ T277] ERROR: (device loop0): diFree: numfree > numinos [ 1088.295384][ T277] [ 1088.383876][T11579] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 1088.401986][T11579] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 1088.553887][T13916] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.659533][T11601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18099'. [ 1088.751079][T13916] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.872668][T13916] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.043468][T13916] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.111486][T11613] loop2: detected capacity change from 0 to 4096 [ 1089.169646][T11617] netlink: 'syz.4.18107': attribute type 1 has an invalid length. [ 1089.181889][T11613] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1089.288814][T11591] loop3: detected capacity change from 0 to 32768 [ 1089.620538][T11597] loop1: detected capacity change from 0 to 32768 [ 1089.778978][T11597] ERROR: (device loop1): dtSearch: stack overrun! [ 1089.778978][T11597] [ 1089.861373][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18118'. [ 1089.882183][T11597] ERROR: (device loop1): remounting filesystem as read-only [ 1089.932483][T11597] btstack dump: [ 1089.941176][T11597] bn = 0, index = 4 [ 1089.949017][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18118'. [ 1089.986040][T11597] bn = 0, index = 4 [ 1090.015082][T11597] bn = 0, index = 4 [ 1090.024821][T11597] bn = 0, index = 4 [ 1090.029011][T11597] bn = 0, index = 4 [ 1090.032957][T11597] bn = 0, index = 4 [ 1090.036876][T11597] bn = 0, index = 4 [ 1090.040961][T11597] bn = 0, index = 0 [ 1090.044803][T11597] jfs_lookup: dtSearch returned -5 [ 1090.479170][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18125'. [ 1090.503542][T11662] device vlan0 entered promiscuous mode [ 1090.515816][T11676] loop3: detected capacity change from 0 to 512 [ 1090.523859][T11644] lo speed is unknown, defaulting to 1000 [ 1090.588435][T11676] EXT4-fs (loop3): Ignoring removed nobh option [ 1090.768751][T11676] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1090.769571][T11691] loop4: detected capacity change from 0 to 256 [ 1090.835077][T11676] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.18129: invalid indirect mapped block 256 (level 1) [ 1090.941453][T11691] FAT-fs (loop4): Directory bread(block 64) failed [ 1090.989761][T11676] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.18129: invalid indirect mapped block 2683928664 (level 1) [ 1091.011939][T11691] FAT-fs (loop4): Directory bread(block 65) failed [ 1091.018950][T11691] FAT-fs (loop4): Directory bread(block 66) failed [ 1091.042213][T11691] FAT-fs (loop4): Directory bread(block 67) failed [ 1091.045596][T11644] chnl_net:caif_netlink_parms(): no params data found [ 1091.049055][T11691] FAT-fs (loop4): Directory bread(block 68) failed [ 1091.065180][T11691] FAT-fs (loop4): Directory bread(block 69) failed [ 1091.071906][T11691] FAT-fs (loop4): Directory bread(block 70) failed [ 1091.079075][T11676] EXT4-fs (loop3): 1 truncate cleaned up [ 1091.138834][T11676] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv1,nobh,nodioread_nolock,journal_ioprio=0x0000000000000004,usrjquota=.noacl,norecovery,jqfmt=vfsv0,auto_da_alloc,,,errors=continue. Quota mode: writeback. [ 1091.143040][T11691] FAT-fs (loop4): Directory bread(block 71) failed [ 1091.190264][T11691] FAT-fs (loop4): Directory bread(block 72) failed [ 1091.221597][T11691] FAT-fs (loop4): Directory bread(block 73) failed [ 1091.446597][T11644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.577255][T11644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.606160][T11644] device bridge_slave_0 entered promiscuous mode [ 1091.668561][T11644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.712784][T11644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.733535][T11644] device bridge_slave_1 entered promiscuous mode [ 1091.840609][T11743] loop3: detected capacity change from 0 to 256 [ 1091.873167][T11644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.890103][T11745] loop4: detected capacity change from 0 to 256 [ 1091.902356][T11725] loop1: detected capacity change from 0 to 32768 [ 1091.949509][T11745] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1091.981291][T11725] (syz.1.18147,11725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.997432][T11644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.039041][T11725] (syz.1.18147,11725,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1092.096920][T11743] FAT-fs (loop3): Directory bread(block 64) failed [ 1092.103553][T11745] exFAT-fs (loop4): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 1092.151169][T11745] exFAT-fs (loop4): Filesystem has been set read-only [ 1092.158636][T11725] JBD2: Ignoring recovery information on journal [ 1092.167866][T11644] team0: Port device team_slave_0 added [ 1092.186488][ T5961] Bluetooth: hci0: command 0x0409 tx timeout [ 1092.216622][T11743] FAT-fs (loop3): Directory bread(block 65) failed [ 1092.223833][T11743] FAT-fs (loop3): Directory bread(block 66) failed [ 1092.230787][T11743] FAT-fs (loop3): Directory bread(block 67) failed [ 1092.237481][T11743] FAT-fs (loop3): Directory bread(block 68) failed [ 1092.244533][T11743] FAT-fs (loop3): Directory bread(block 69) failed [ 1092.251478][T11743] FAT-fs (loop3): Directory bread(block 70) failed [ 1092.258092][T11743] FAT-fs (loop3): Directory bread(block 71) failed [ 1092.265947][T11743] FAT-fs (loop3): Directory bread(block 72) failed [ 1092.273148][T11743] FAT-fs (loop3): Directory bread(block 73) failed [ 1092.283529][T11644] team0: Port device team_slave_1 added [ 1092.287035][T11743] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1092.361488][T11725] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1092.462835][ T4340] ocfs2: Unmounting device (7,1) on (node local) [ 1092.493747][T11644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.542035][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.615655][T11644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1092.644378][T13916] bond0: (slave wlan1): Releasing backup interface [ 1092.729653][T11771] loop4: detected capacity change from 0 to 512 [ 1092.754574][T11773] netlink: 'syz.1.18165': attribute type 9 has an invalid length. [ 1092.762449][T11773] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.18165'. [ 1092.794701][T11644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1092.804648][T11644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1092.829271][T11777] loop2: detected capacity change from 0 to 128 [ 1092.845291][T11644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1092.969094][T11644] device hsr_slave_0 entered promiscuous mode [ 1092.981081][T11771] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1092.993683][T11644] device hsr_slave_1 entered promiscuous mode [ 1093.000809][T11644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1093.023322][T11644] Cannot create hsr debugfs directory [ 1093.206642][T11798] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.18176'. [ 1093.452093][T13916] device hsr_slave_0 left promiscuous mode [ 1093.492971][T13916] device hsr_slave_1 left promiscuous mode [ 1093.506454][T11813] loop3: detected capacity change from 0 to 512 [ 1093.513995][T13916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.530470][T13916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.565194][T13916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.573940][T13916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.600651][T13916] device bridge_slave_0 left promiscuous mode [ 1093.613200][T13916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.624707][T11813] EXT4-fs (loop3): Ignoring removed nobh option [ 1093.660363][T11813] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1093.679593][T11813] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #11: block 1: comm syz.3.18182: lblock 0 mapped to illegal pblock 1 (length 1) [ 1093.729506][T11813] EXT4-fs (loop3): Remounting filesystem read-only [ 1093.740419][T11813] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1093.754936][T13916] device veth1_macvtap left promiscuous mode [ 1093.762519][T13916] device veth0_macvtap left promiscuous mode [ 1093.768870][T13916] device veth1_vlan left promiscuous mode [ 1093.777933][T11813] EXT4-fs error (device loop3): ext4_xattr_inode_update_ref:984: inode #11: comm syz.3.18182: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1093.812401][T11813] EXT4-fs (loop3): Remounting filesystem read-only [ 1093.839530][T11813] EXT4-fs warning (device loop3): ext4_xattr_inode_dec_ref_all:1178: inode #11: comm syz.3.18182: ea_inode dec ref err=-117 [ 1093.886395][T11813] EXT4-fs (loop3): 1 orphan inode deleted [ 1093.892389][T11813] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005c,nobh,resgid=0x0000000000000000,acl,init_itable=0x0000000000000e4d,. Quota mode: none. [ 1094.208924][T13916] bond4 (unregistering): Released all slaves [ 1094.228643][T13916] bond3 (unregistering): Released all slaves [ 1094.409182][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 1094.532775][T13916] bond2 (unregistering): Released all slaves [ 1094.543262][T13916] bond1 (unregistering): Released all slaves [ 1094.589097][T13916] team0 (unregistering): Port device macvlan0 removed [ 1094.643294][T13916] team0 (unregistering): Port device team_slave_1 removed [ 1094.660164][T13916] team0 (unregistering): Port device team_slave_0 removed [ 1094.673474][T13916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.687676][T13916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.753367][T13916] bond0 (unregistering): Released all slaves [ 1094.831581][T11833] netlink: 'syz.3.18186': attribute type 9 has an invalid length. [ 1094.851129][T11833] netlink: 'syz.3.18186': attribute type 7 has an invalid length. [ 1094.860209][T11833] netlink: 'syz.3.18186': attribute type 8 has an invalid length. [ 1095.024580][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18188'. [ 1095.159785][T11644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1095.294738][T11644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1095.343955][T11644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1095.405242][T11644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1095.723487][T11644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.808641][T11644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.815789][T11903] netlink: 'syz.1.18215': attribute type 3 has an invalid length. [ 1095.852626][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1095.855453][T11903] netlink: 'syz.1.18215': attribute type 1 has an invalid length. [ 1095.874721][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1095.998225][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1096.009518][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1096.031107][T13253] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.038246][T13253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.077105][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1096.115276][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1096.130463][T13253] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.137569][T13253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1096.170964][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1096.190345][T11925] loop2: detected capacity change from 0 to 8 [ 1096.221374][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1096.259709][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1096.276677][T11928] loop1: detected capacity change from 0 to 512 [ 1096.279626][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1096.309118][T11925] SQUASHFS error: Unable to read directory block [629:26] [ 1096.333618][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1096.356254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1096.385342][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1096.423911][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1096.442942][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1096.452081][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1096.511645][T11644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1096.542968][T11935] xt_TCPMSS: Only works on TCP SYN packets [ 1096.548307][T11644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1096.596901][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1096.632796][T18467] Bluetooth: hci0: command 0x040f tx timeout [ 1096.668121][T13253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1096.743937][T11940] netlink: 'syz.1.18232': attribute type 1 has an invalid length. [ 1097.085030][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1097.143657][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1097.173213][T11644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.235180][T11971] loop4: detected capacity change from 0 to 24 [ 1097.281858][T11971] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1097.325625][T11971] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1097.354115][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18243'. [ 1097.807183][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18249'. [ 1097.868944][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1097.894847][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1097.920691][T12001] netlink: 'syz.4.18251': attribute type 1 has an invalid length. [ 1097.925002][T11952] loop1: detected capacity change from 0 to 32768 [ 1097.954812][T11644] device veth0_vlan entered promiscuous mode [ 1097.983329][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1098.011145][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1098.128085][T11644] device veth1_vlan entered promiscuous mode [ 1098.180071][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1098.211043][T11952] XFS (loop1): Mounting V5 Filesystem [ 1098.213870][T12014] printk: syz.2.18255 (12014): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 1098.255681][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1098.276304][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1098.300991][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1098.348761][T11952] XFS (loop1): Ending clean mount [ 1098.389961][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1098.405090][T11952] XFS (loop1): Quotacheck needed: Please wait. [ 1098.449287][T12029] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18257'. [ 1098.478194][T11644] device veth0_macvtap entered promiscuous mode [ 1098.511367][T11644] device veth1_macvtap entered promiscuous mode [ 1098.615716][T11952] XFS (loop1): Quotacheck: Done. [ 1098.624375][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.670033][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.759621][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1098.770197][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.856146][ T4377] Bluetooth: hci0: command 0x0419 tx timeout [ 1098.856370][T11644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.899873][ T4340] XFS (loop1): Unmounting Filesystem [ 1098.916009][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1098.945097][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1099.004417][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1099.076106][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1099.108988][T12061] loop3: detected capacity change from 0 to 256 [ 1099.137827][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.207699][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.231214][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.251333][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.272728][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.293098][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.308369][T11644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1099.326173][T11644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1099.344569][T11644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.355679][T11644] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.365762][T11644] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.375713][T11644] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.385759][T11644] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.406073][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1099.420514][T12072] loop2: detected capacity change from 0 to 64 [ 1099.448094][T12061] FAT-fs (loop3): Directory bread(block 64) failed [ 1099.460276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1099.476462][T12061] FAT-fs (loop3): Directory bread(block 65) failed [ 1099.507661][T12061] FAT-fs (loop3): Directory bread(block 66) failed [ 1099.556018][T12061] FAT-fs (loop3): Directory bread(block 67) failed [ 1099.582791][T12061] FAT-fs (loop3): Directory bread(block 68) failed [ 1099.628531][T12061] FAT-fs (loop3): Directory bread(block 69) failed [ 1099.635187][T12061] FAT-fs (loop3): Directory bread(block 70) failed [ 1099.679237][T12061] FAT-fs (loop3): Directory bread(block 71) failed [ 1099.721413][T12061] FAT-fs (loop3): Directory bread(block 72) failed [ 1099.749205][T12061] FAT-fs (loop3): Directory bread(block 73) failed [ 1099.750634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1099.766707][ T4361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.774563][ T4361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.796722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1099.883147][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.903553][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.943247][T11750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1100.070179][T12086] loop2: detected capacity change from 0 to 16 [ 1100.176276][T12086] erofs: (device loop2): mounted with root inode @ nid 36. [ 1100.311683][T12100] netlink: 11 bytes leftover after parsing attributes in process `syz.3.18285'. [ 1100.478854][T12115] IPv6: sit2: Disabled Multicast RS [ 1101.188443][T12180] overlayfs: unrecognized mount option "\" or missing value [ 1101.267893][T12178] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1101.293833][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18323'. [ 1101.307065][T12185] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18322'. [ 1101.367284][T12190] xt_hashlimit: max too large, truncated to 1048576 [ 1101.378700][ T5961] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1101.785021][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18336'. [ 1101.795751][ T5961] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 1101.803942][ T5961] usb 5-1: config 0 has no interface number 0 [ 1102.041704][ T5961] usb 5-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=57.70 [ 1102.051498][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.076827][T12237] loop1: detected capacity change from 0 to 256 [ 1102.092552][T12238] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1102.112025][ T5961] usb 5-1: Product: syz [ 1102.132393][ T5961] usb 5-1: Manufacturer: syz [ 1102.137045][ T5961] usb 5-1: SerialNumber: syz [ 1102.183773][ T5961] usb 5-1: config 0 descriptor?? [ 1102.235697][ T5961] gspca_main: spca505-2.14.0 probing 041e:401d [ 1102.352198][T12237] FAT-fs (loop1): Directory bread(block 64) failed [ 1102.358869][T12237] FAT-fs (loop1): Directory bread(block 65) failed [ 1102.400428][T12237] FAT-fs (loop1): Directory bread(block 66) failed [ 1102.426357][T12237] FAT-fs (loop1): Directory bread(block 67) failed [ 1102.435842][T12237] FAT-fs (loop1): Directory bread(block 68) failed [ 1102.444259][T12237] FAT-fs (loop1): Directory bread(block 69) failed [ 1102.496656][T12237] FAT-fs (loop1): Directory bread(block 70) failed [ 1102.526045][T12237] FAT-fs (loop1): Directory bread(block 71) failed [ 1102.551004][T12237] FAT-fs (loop1): Directory bread(block 72) failed [ 1102.562414][T12237] FAT-fs (loop1): Directory bread(block 73) failed [ 1102.719648][T12261] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 1102.736109][ T5961] gspca_spca505: reg write: error -71 [ 1102.757315][ T5961] spca505: probe of 5-1:0.237 failed with error -5 [ 1102.792815][ T5961] usb 5-1: USB disconnect, device number 69 [ 1102.886513][T12274] loop5: detected capacity change from 0 to 128 [ 1102.916987][T12274] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1103.080280][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18361'. [ 1103.262032][T12295] xt_connbytes: Forcing CT accounting to be enabled [ 1103.713759][T12327] netlink: 1244 bytes leftover after parsing attributes in process `syz.4.18380'. [ 1103.836615][T12334] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.18383'. [ 1104.160049][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1104.197353][T12355] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1104.359848][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18397'. [ 1104.370889][T12364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18397'. [ 1104.412806][T12369] 9pnet: p9_fd_create_unix (12369): problem connecting socket: ./file0: -111 [ 1104.524247][T12378] netlink: 156 bytes leftover after parsing attributes in process `syz.5.18404'. [ 1104.720377][T12395] loop5: detected capacity change from 0 to 64 [ 1104.739680][T12398] loop2: detected capacity change from 0 to 16 [ 1104.821238][T12398] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1105.079929][T12424] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1105.109310][T12424] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1105.123773][T12415] loop4: detected capacity change from 0 to 8192 [ 1105.139004][T12424] overlayfs: missing 'lowerdir' [ 1105.412421][T12431] loop1: detected capacity change from 0 to 764 [ 1105.461010][T12431] rock: directory entry would overflow storage [ 1105.503157][T12431] rock: sig=0x4654, size=5, remaining=4 [ 1105.557875][T12431] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 1105.574145][T12431] overlayfs: missing 'lowerdir' [ 1105.658844][T12443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18434'. [ 1105.783715][T12416] loop5: detected capacity change from 0 to 32768 [ 1105.876640][T12416] (syz.5.18419,12416,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1105.921817][T12459] netlink: 260 bytes leftover after parsing attributes in process `syz.2.18443'. [ 1105.950577][T12416] (syz.5.18419,12416,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1106.021004][T12463] loop1: detected capacity change from 0 to 1024 [ 1106.031346][T12416] JBD2: Ignoring recovery information on journal [ 1106.105075][T12468] loop2: detected capacity change from 0 to 4096 [ 1106.179778][T12416] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1106.232738][T12468] ntfs: volume version 3.1. [ 1106.266006][ T155] hfsplus: b-tree write err: -5, ino 4 [ 1106.403079][T12468] ntfs: (device loop2): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1106.449163][T11644] ocfs2: Unmounting device (7,5) on (node local) [ 1106.627643][T12484] loop1: detected capacity change from 0 to 256 [ 1106.826526][T12497] netlink: 'syz.5.18452': attribute type 3 has an invalid length. [ 1106.901336][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18462'. [ 1107.023427][ T4330] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1107.212637][T12519] netlink: 'syz.5.18471': attribute type 11 has an invalid length. [ 1107.259843][T12521] device syz_tun entered promiscuous mode [ 1107.279072][ T4330] usb 5-1: Using ep0 maxpacket: 16 [ 1107.408748][T12499] (syz.2.18463,12499,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1107.423345][ T4330] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.444658][T12531] netlink: 'syz.1.18477': attribute type 10 has an invalid length. [ 1107.453189][ T4330] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1107.477609][T12499] (syz.2.18463,12499,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1107.536139][T12499] JBD2: Ignoring recovery information on journal [ 1107.618239][T12499] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1107.642711][ T4330] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1107.654047][ T4330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.662073][ T4330] usb 5-1: Product: syz [ 1107.674568][ T4330] usb 5-1: Manufacturer: syz [ 1107.685198][ T4330] usb 5-1: SerialNumber: syz [ 1107.737978][ T4339] ocfs2: Unmounting device (7,2) on (node local) [ 1107.927182][T12554] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1107.993988][T12551] set_capacity_and_notify: 1 callbacks suppressed [ 1107.994020][T12551] loop2: detected capacity change from 0 to 64 [ 1108.219828][ T4330] usb 5-1: cannot find UAC_HEADER [ 1108.264317][ T4330] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1108.310737][ T4330] usb 5-1: USB disconnect, device number 70 [ 1108.511169][T12585] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1108.543196][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18503'. [ 1108.563660][ T4475] udevd[4475]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.675678][T12600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18509'. [ 1109.080113][T12636] netlink: 280 bytes leftover after parsing attributes in process `syz.2.18524'. [ 1109.180577][T12644] tmpfs: Bad value for 'mpol' [ 1109.225754][T12637] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1109.241506][ T21] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1109.445772][T12653] loop1: detected capacity change from 0 to 4096 [ 1109.486396][T12653] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1109.673655][ T21] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1109.683618][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.704355][ T21] usb 5-1: config 0 descriptor?? [ 1109.771368][ T21] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1109.859224][T12688] loop5: detected capacity change from 0 to 1024 [ 1109.991743][ T4377] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1109.994512][T12694] loop1: detected capacity change from 0 to 256 [ 1110.114276][T12688] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 1110.147840][T12694] FAT-fs (loop1): Directory bread(block 64) failed [ 1110.208012][T12694] FAT-fs (loop1): Directory bread(block 65) failed [ 1110.228670][T12688] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 39: comm syz.5.18548: bad entry in directory: rec_len is smaller than minimal - offset=7296, inode=0, rec_len=0, size=1024 fake=0 [ 1110.229272][ T21] gp8psk: usb in 137 operation failed. [ 1110.267574][T12694] FAT-fs (loop1): Directory bread(block 66) failed [ 1110.297114][T12694] FAT-fs (loop1): Directory bread(block 67) failed [ 1110.303766][T12694] FAT-fs (loop1): Directory bread(block 68) failed [ 1110.328473][ T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1110.340113][T12688] EXT4-fs (loop5): Remounting filesystem read-only [ 1110.358044][T12694] FAT-fs (loop1): Directory bread(block 69) failed [ 1110.361315][ T21] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1110.364821][T12694] FAT-fs (loop1): Directory bread(block 70) failed [ 1110.400537][ T4377] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 1110.422982][ T4377] usb 3-1: config 0 has no interface number 0 [ 1110.454019][ T21] usb 5-1: USB disconnect, device number 71 [ 1110.461980][ T4377] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1110.473153][T12694] FAT-fs (loop1): Directory bread(block 71) failed [ 1110.486160][T12694] FAT-fs (loop1): Directory bread(block 72) failed [ 1110.528846][T12694] FAT-fs (loop1): Directory bread(block 73) failed [ 1110.689092][ T4377] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1110.698285][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.732014][ T4377] usb 3-1: Product: syz [ 1110.736266][ T4377] usb 3-1: Manufacturer: syz [ 1110.740872][ T4377] usb 3-1: SerialNumber: syz [ 1110.827920][ T4377] usb 3-1: config 0 descriptor?? [ 1110.849433][T12677] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1110.871555][ T4377] ums-karma 3-1:0.46: USB Mass Storage device detected [ 1110.937348][ T4377] ums-karma: probe of 3-1:0.46 failed with error -5 [ 1110.981701][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18565'. [ 1111.066220][T12727] loop1: detected capacity change from 0 to 256 [ 1111.075043][T12729] loop5: detected capacity change from 0 to 164 [ 1111.097266][ T4377] usb 3-1: USB disconnect, device number 77 [ 1111.220571][T12727] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 1111.301746][T12739] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18571'. [ 1111.449555][T12746] loop4: detected capacity change from 0 to 1024 [ 1111.565651][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1111.954940][T12785] netlink: 'syz.4.18594': attribute type 21 has an invalid length. [ 1111.991182][T12785] IPv6: NLM_F_CREATE should be specified when creating new route [ 1112.202707][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18607'. [ 1112.245970][T12814] netlink: 'syz.4.18609': attribute type 1 has an invalid length. [ 1112.274136][T12815] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1112.280873][T12814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18609'. [ 1112.621957][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18625'. [ 1112.638657][T12835] loop1: detected capacity change from 0 to 4096 [ 1112.653527][T12848] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18625'. [ 1112.805176][T12835] ntfs: volume version 3.1. [ 1112.813812][T12849] loop4: detected capacity change from 0 to 4096 [ 1112.858234][T12835] ntfs: (device loop1): ntfs_setattr(): Changes in user/group/mode are not supported yet, ignoring. [ 1112.930569][T12849] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1113.017911][T12865] loop3: detected capacity change from 0 to 2048 [ 1113.132965][T12865] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1113.256597][T12865] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1113.301440][T12867] FAT-fs (loop5): Directory bread(block 64) failed [ 1113.330331][T12867] FAT-fs (loop5): Directory bread(block 65) failed [ 1113.370991][T12867] FAT-fs (loop5): Directory bread(block 66) failed [ 1113.433347][T12867] FAT-fs (loop5): Directory bread(block 67) failed [ 1113.471574][T12867] FAT-fs (loop5): Directory bread(block 68) failed [ 1113.530153][T12867] FAT-fs (loop5): Directory bread(block 69) failed [ 1113.558018][T12867] FAT-fs (loop5): Directory bread(block 70) failed [ 1113.596740][T12867] FAT-fs (loop5): Directory bread(block 71) failed [ 1113.633702][T12867] FAT-fs (loop5): Directory bread(block 72) failed [ 1113.673159][T12867] FAT-fs (loop5): Directory bread(block 73) failed [ 1114.085111][T12917] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1114.384570][T12943] netlink: 'syz.3.18665': attribute type 10 has an invalid length. [ 1114.859706][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18682'. [ 1114.930237][T12985] nfs: Unknown parameter 'ntext' [ 1115.286694][T13009] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 1115.295946][T13009] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 1115.684523][T13040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:bb) already exists on: batadv_slave_0 [ 1115.711601][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18708'. [ 1115.736973][T13040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.800115][T13049] netlink: 'syz.3.18711': attribute type 1 has an invalid length. [ 1115.974088][T13064] netlink: 236 bytes leftover after parsing attributes in process `syz.1.18715'. [ 1116.142760][T13083] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18724'. [ 1116.273894][T13089] set_capacity_and_notify: 1 callbacks suppressed [ 1116.273910][T13089] loop3: detected capacity change from 0 to 4096 [ 1116.503998][T18584] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1116.560005][ T26] audit: type=1326 audit(1321.071:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13108 comm="syz.4.18735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9da1d5799 code=0x0 [ 1116.803498][ T4330] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1116.888879][T18584] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1116.897081][T18584] usb 6-1: config 0 has no interface number 0 [ 1116.920872][T18584] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1116.961950][T18584] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1117.074176][ T4330] usb 2-1: Using ep0 maxpacket: 32 [ 1117.188230][T18584] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1117.200897][ T4330] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 1117.214178][ T4330] usb 2-1: config 0 has no interface number 0 [ 1117.230750][T18584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.250597][ T4330] usb 2-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1117.260799][T18584] usb 6-1: Product: syz [ 1117.276219][T18584] usb 6-1: Manufacturer: syz [ 1117.280916][T18584] usb 6-1: SerialNumber: syz [ 1117.287055][ T4330] usb 2-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1117.302623][T13155] netlink: 'syz.3.18752': attribute type 6 has an invalid length. [ 1117.311968][T18584] usb 6-1: config 0 descriptor?? [ 1117.348733][T13090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1117.377654][T18584] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1117.414873][T18584] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1117.487205][ T4377] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1117.498327][ T4330] usb 2-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76 [ 1117.518344][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.539715][ T4330] usb 2-1: Product: syz [ 1117.544851][T13135] loop4: detected capacity change from 0 to 32768 [ 1117.559952][ T4330] usb 2-1: Manufacturer: syz [ 1117.568731][ T4330] usb 2-1: SerialNumber: syz [ 1117.596232][ T4330] usb 2-1: config 0 descriptor?? [ 1117.628365][T13111] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1117.657267][T13111] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1117.700251][T13166] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1117.735790][ T4344] read_mapping_page failed! [ 1117.740338][ T4344] ERROR: (device loop4): txCommit: [ 1117.740338][ T4344] [ 1117.768649][ T4344] read_mapping_page failed! [ 1117.774241][ T4344] ERROR: (device loop4): txCommit: [ 1117.774241][ T4344] [ 1117.833868][T18584] usb 6-1: USB disconnect, device number 2 [ 1117.852616][T18584] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1117.868745][T18584] cyberjack 6-1:0.69: device disconnected [ 1117.893759][ T4377] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1117.918792][ T4377] usb 3-1: config 1 has no interface number 0 [ 1117.925063][ T4377] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16 [ 1117.935988][ T4377] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 1117.968767][ T4330] asix: probe of 2-1:0.47 failed with error -71 [ 1118.002463][ T4330] usb 2-1: USB disconnect, device number 78 [ 1118.118108][ T4377] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1118.127432][ T4377] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.143568][ T4377] usb 3-1: Product: syz [ 1118.147779][ T4377] usb 3-1: Manufacturer: syz [ 1118.155030][ T4377] usb 3-1: SerialNumber: syz [ 1118.193364][ T4825] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1118.202048][ T4825] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1118.211663][T13148] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1118.219678][T13148] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1118.227493][ T5966] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1118.295255][ T144] general protection fault, probably for non-canonical address 0xdffffc00000000ba: 0000 [#1] PREEMPT SMP KASAN [ 1118.307088][ T144] KASAN: null-ptr-deref in range [0x00000000000005d0-0x00000000000005d7] [ 1118.315491][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 1118.323056][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1118.333323][ T144] Workqueue: writeback wb_workfn (flush-7:4) [ 1118.339336][ T144] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 1118.345951][ T144] Code: df 41 80 3c 04 00 74 08 48 89 df e8 92 2f ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6a 2f ec fd 41 bf 90 00 00 00 4d 03 [ 1118.365683][ T144] RSP: 0018:ffffc900016ef260 EFLAGS: 00010202 [ 1118.371759][ T144] RAX: 00000000000000ba RBX: ffff888052c758c8 RCX: dffffc0000000000 [ 1118.379922][ T144] RDX: 0000000000000000 RSI: ffffffff96481e00 RDI: ffff888052c758c0 [ 1118.388021][ T144] RBP: 1ffff1100a58eb21 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 1118.396170][ T144] R10: dffffc0000000000 R11: fffffbfff203a619 R12: 1ffff1100a58eb19 [ 1118.404335][ T144] R13: ffff888052c75908 R14: 00000000000005d0 R15: ffff88801bc0002c [ 1118.412326][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1118.421344][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.427936][ T144] CR2: 00007f6511760000 CR3: 000000000c08e000 CR4: 00000000003506e0 [ 1118.435998][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.443955][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1118.451916][ T144] Call Trace: [ 1118.455182][ T144] [ 1118.458105][ T144] bio_associate_blkg+0x23a/0x340 [ 1118.463330][ T144] lbmStartIO+0x204/0x4c0 [ 1118.467674][ T144] lbmWrite+0x361/0x480 [ 1118.471844][ T144] jfs_flush_journal+0x537/0xec0 [ 1118.476842][ T144] ? lmLogShutdown+0x850/0x850 [ 1118.481612][ T144] ? __lock_acquire+0x7d10/0x7d10 [ 1118.486638][ T144] ? do_raw_spin_lock+0x128/0x2f0 [ 1118.491770][ T144] ? __rwlock_init+0x140/0x140 [ 1118.496755][ T144] jfs_write_inode+0x12b/0x220 [ 1118.501598][ T144] __writeback_single_inode+0x6c3/0xda0 [ 1118.507142][ T144] writeback_sb_inodes+0xa4e/0x1680 [ 1118.512344][ T144] ? queue_io+0x550/0x550 [ 1118.516753][ T144] ? rcu_is_watching+0x11/0xa0 [ 1118.521514][ T144] wb_writeback+0x45d/0xbe0 [ 1118.526106][ T144] ? rcu_lock_release+0x20/0x20 [ 1118.531099][ T144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1118.537087][ T144] ? mark_lock+0x94/0x320 [ 1118.541419][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1118.546608][ T144] wb_workfn+0x43a/0xf20 [ 1118.550845][ T144] ? inode_wait_for_writeback+0x220/0x220 [ 1118.556550][ T144] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1118.562521][ T144] ? read_lock_is_recursive+0x10/0x10 [ 1118.567962][ T144] ? __schedule+0x11f7/0x43c0 [ 1118.572626][ T144] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1118.577898][ T144] process_one_work+0x85f/0x1010 [ 1118.582845][ T144] ? worker_detach_from_pool+0x240/0x240 [ 1118.588465][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 1118.593739][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1118.598772][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1118.604325][ T144] ? wq_worker_running+0x97/0x170 [ 1118.609356][ T144] worker_thread+0xaa6/0x1290 [ 1118.614125][ T144] kthread+0x436/0x520 [ 1118.618280][ T144] ? rcu_lock_release+0x20/0x20 [ 1118.623127][ T144] ? kthread_blkcg+0xd0/0xd0 [ 1118.627804][ T144] ret_from_fork+0x1f/0x30 [ 1118.632228][ T144] [ 1118.635244][ T144] Modules linked in: [ 1118.642311][ T4825] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1118.642817][T13148] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1118.650382][ T144] ---[ end trace fbfcbbac00e187ee ]--- [ 1118.662515][ T144] RIP: 0010:bio_associate_blkg_from_css+0x128/0x9c0 [ 1118.669164][ T144] Code: df 41 80 3c 04 00 74 08 48 89 df e8 92 2f ec fd 41 be d0 05 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6a 2f ec fd 41 bf 90 00 00 00 4d 03 [ 1118.688991][ T144] RSP: 0018:ffffc900016ef260 EFLAGS: 00010202 [ 1118.690430][T13148] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1118.695441][ T144] RAX: 00000000000000ba RBX: ffff888052c758c8 RCX: dffffc0000000000 [ 1118.708709][ T4377] usb 3-1: No status endpoint found [ 1118.710669][ T144] RDX: 0000000000000000 RSI: ffffffff96481e00 RDI: ffff888052c758c0 [ 1118.723741][ T144] RBP: 1ffff1100a58eb21 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 1118.733150][ T144] R10: dffffc0000000000 R11: fffffbfff203a619 R12: 1ffff1100a58eb19 [ 1118.741644][ T144] R13: ffff888052c75908 R14: 00000000000005d0 R15: ffff88801bc0002c [ 1118.751372][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1118.760998][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1118.767606][ T144] CR2: 00007f6511760000 CR3: 000000001e2cc000 CR4: 00000000003506e0 [ 1118.776915][ T144] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1118.785048][ T144] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1118.793187][ T144] Kernel panic - not syncing: Fatal exception [ 1118.799567][ T144] Kernel Offset: disabled [ 1118.803966][ T144] Rebooting in 86400 seconds..