last executing test programs: 2m34.421403261s ago: executing program 4 (id=253): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002280)={0x90000004}) 2m33.510174916s ago: executing program 4 (id=265): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000012c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x81, @loopback, 0xd28}, 0x1c, 0x0}}], 0x1, 0x0) 2m33.342852059s ago: executing program 4 (id=268): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r0, 0x0, 0x0, 0x80004, &(0x7f0000000440)={0x11, 0x1a, 0x0, 0x1, 0x5, 0x6, @multicast}, 0x14) 2m33.165755162s ago: executing program 4 (id=271): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xdb8, @bcast, @bpq0, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2m32.914082007s ago: executing program 4 (id=276): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0) 2m32.72844662s ago: executing program 4 (id=279): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00003a1000/0x400000)=nil, 0x400000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m17.647688986s ago: executing program 32 (id=279): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f00003a1000/0x400000)=nil, 0x400000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 26.915523433s ago: executing program 5 (id=1545): r0 = gettid() sigaltstack(&(0x7f0000000040)={0x0, 0x80000002}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) 26.696833107s ago: executing program 5 (id=1547): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffffff4, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x6, 0x0, 0xa, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2}, 0x94) 25.623381075s ago: executing program 5 (id=1557): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$eJzs3c9vVNUeAPBzb/seLQ94LY8FL3nJm+SRPKOmaVmpJbGUQmmhYlCIcTNM2wGq0w5pp8YFi7ojcWXiwrggmrjrinThFv8ENy5xTaILNyYmxJqZuVPm3plJR9JphXw+Cb2953fne++ZcxeXEycqt5fWcktrucJKrrxwc+107qNyaX25GOJ9ctD9051exEnsD86VcxfeuX46hO8Wf3i8vb29Har6Q1tjTb//+svdheZjQ5ypU223fWt75f0QwomWcVX1hRDe+zaEKIRwNkmbTI6DIYRjoZ53/e6nN3J7NJoHj4pn8k/m7m2Nn5rdvL/V+W+PQviy9O9Xby3/9L++8R9f3qPuAQAAAAAAAAAAAAAAAAB4zk1fvXLt7dGx8DAK/ZtR6/u608mx0/ux23vmv73/YwEAAAAAAAAAAAAAAAAAAOAv6un7/7noeJv3/6eS40SH+ttv9n6M9M7MW1emzo+OJfu/Ry35ryVJP5/tC8Nt9n3P7v9+NlO//f7vrf08q8b4Gv0OhSgeSZ3H8chICF8nG7+fjA7HpfJa5ZWb5fWVxT0bxnMrHf/67v2p6CQb+ncb/8lM+73f//9fLVdT9fzG3l1iL7R0/Ps6lvvmk6ir+J/L1NuP+PPs0vHvr6UNNheYqE8A1fh/1r97/Kcy7fcq/sdCCLmoOtZcagaormGq6Z3WK6Sl4/+3Wlpq6kw+yE73/2+Z+J/PtH9Q8/9G9ouIttLx/3stbSBV4un9Pxzvfv9fyLR/EPGvjn/D939X0vE/VE/sTxWpfZLdzv/TmfZ7Ff9rcTLOY1HqCtiM6umd/r860tLxH2jJf/r8F3e1/ruYqb9fz3+NfhvPf43p/6Wo/vxHe+n4D3Ys1+39P5Op1+v5fyLkQutVS7fS8T9cS0uvnYdqP7uN/2ym/V7Fv7YqGajHv3n+//1QPf0r67+upOP/j3pi3Fxio/aztv6Ldl//X8q0fxDrv+r4N+Le9vqiSMf/SMdy1fh/38X3/+VMvd7HP4RRa/1nlo7/0Y7lavf/wO7xn8vU63X8/9/LxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeA5PJcShE8UjqPI5HRkI4l5yfDIej+cJifr5UXvhwLYSpJD0Xjke3SuX5Qim/tFJeLOYLpVJ5IYTzSf6JMBCtlcqV/HLhzoWdtgaj28XCamW+WKiEEKaT9P+Eo4225pcqy4U7IYSLO3n/jMurd24XVvKLS6tvjI6OjoaZnTEMR8WPK8WVSr33em4Iszt1h6KmwdWyL+2M5Uj0QXl9daVQqqVfbqpTKi8USk115pK8z8NwVFldX1koVIr5UvlWo7+DNJEcp2auvnv18lhL/o2ofpzc32EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cc9HH/9ixBCf/0sDiHkouSXKPmX8uBR8Uz+ydy9rfFTs5v3tx63KwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWGX/lEaCKI4AL8ZCy09htWy29muKKKFK4In0GN4GD2Kl/AOFinSpgiBZBbC/oFtkur7mgfzY+Y9mAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw3ONb9/5aNxEprraXEb+ff//H+XOp33fT9y/OMCOn8/TS3T/UTfn3NMpvy9Gqzft0s/76iIna+xnsyXCfDsZ9hub2bW6+vu91pFxFRFvym5RzVS17CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDHDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL8CAAD//+jHH0c=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000b5c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x3c880000, 0x3a) 24.312641927s ago: executing program 5 (id=1569): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000200)={[{@sysvgroups}, {@data_err_ignore}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x6}}]}, 0x5, 0x504, &(0x7f0000002580)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 23.677041119s ago: executing program 5 (id=1574): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000300)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0xad9, &(0x7f0000000340)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) 23.039972849s ago: executing program 5 (id=1579): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xffff, 0xffffffff}) 22.484393018s ago: executing program 33 (id=1579): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xffff, 0xffffffff}) 5.837296961s ago: executing program 3 (id=1687): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) close(r0) 5.470710347s ago: executing program 3 (id=1689): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) 4.71788527s ago: executing program 0 (id=1698): syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000009640)='./file0\x00', 0x94, &(0x7f0000000080), 0x1, 0x971c, &(0x7f0000009680)="$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") r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000004c9002000100000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000fcffffffffffffff0300"/94]) 3.608330079s ago: executing program 3 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f000000c740), &(0x7f000000c780)='./file0\x00', 0x10001, &(0x7f0000000080)={[{@norecovery}]}, 0x1, 0xc87f, &(0x7f0000025800)="$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") 2.559106677s ago: executing program 0 (id=1713): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) 2.179401743s ago: executing program 0 (id=1717): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x556a, &(0x7f000000b9c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x7, 0x5}}, 0xf4ff) 2.152600943s ago: executing program 3 (id=1718): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 2.064571345s ago: executing program 1 (id=1719): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) move_pages(0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0) 1.919240847s ago: executing program 3 (id=1721): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xf5, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000000)={0x60, 0xf, 0x16, {0x16, 0xc, "3bfb17de2c143d297d345a8f982f39d0ae251129"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.851260678s ago: executing program 1 (id=1722): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f00000001c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESOCT], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x80086e8a, 0x0) 1.690782941s ago: executing program 6 (id=1723): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000e00), 0x12) write(r0, 0x0, 0x0) 1.505694674s ago: executing program 6 (id=1724): syz_io_uring_setup(0x7173, &(0x7f0000000080)={0x0, 0x3ee7, 0x2, 0x800002, 0x16e}, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000040)=ANY=[], 0x2, 0x7f4, &(0x7f0000000d80)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840) 1.312765217s ago: executing program 1 (id=1726): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x800}) ppoll(&(0x7f0000000180)=[{r0, 0x4201}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) 1.18286774s ago: executing program 2 (id=1727): r0 = syz_io_uring_setup(0x2591, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000080), &(0x7f00000000c0)) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000100)=r1, 0x1) 1.135096101s ago: executing program 6 (id=1728): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") setxattr(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)=@random={'security.', 'ext4\x00'}, 0x0, 0x0, 0x1) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/4, 0x4) 1.028887632s ago: executing program 1 (id=1729): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x10) 913.157874ms ago: executing program 2 (id=1730): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="e4", 0x1}], 0x1}, 0x45b6703c254b99d8) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) 666.121638ms ago: executing program 1 (id=1731): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r0, 0x540b, 0x0) 639.439939ms ago: executing program 2 (id=1732): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030000000000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 520.003621ms ago: executing program 6 (id=1733): r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 470.472382ms ago: executing program 1 (id=1734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) 443.879292ms ago: executing program 0 (id=1735): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) 395.003763ms ago: executing program 2 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 287.373785ms ago: executing program 6 (id=1737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80868c2594f913", 0x11}], 0x1}, 0x8001) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0xa1ff}, 0x0) 211.243006ms ago: executing program 0 (id=1738): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040000000a0000000000010004000000000000040000000000000061"], &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) 199.872456ms ago: executing program 2 (id=1739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) 128.169978ms ago: executing program 6 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040011}, 0x220080c0) 66.328659ms ago: executing program 2 (id=1741): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) poll(&(0x7f0000000380)=[{r0, 0x2201}], 0x1, 0x1) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000080)=@userptr={0x5, 0x1, 0x4, 0x100000, 0x412, {0x0, 0x2710}, {0x1, 0x1, 0x7f, 0x5c, 0x3, 0x8, "80725d97"}, 0x6, 0x2, {0x0}, 0x10000}) 15.10844ms ago: executing program 0 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) 0s ago: executing program 3 (id=1743): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200cc84, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x214, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) kernel console output (not intermixed with test programs): 208][ T4376] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 152.277022][ T4376] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 152.293339][ T4376] usb 1-1: Manufacturer: syz [ 152.316099][ T4376] usb 1-1: config 0 descriptor?? [ 152.394623][ T4310] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 152.419332][ T4310] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 152.442982][ T4310] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 152.473925][ T4310] usb 3-1: config 220 has no interface number 2 [ 152.484354][ T4310] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 152.526758][ T4310] usb 3-1: config 220 interface 0 has no altsetting 0 [ 152.549161][ T4310] usb 3-1: config 220 interface 76 has no altsetting 0 [ 152.571567][ T4310] usb 3-1: config 220 interface 1 has no altsetting 0 [ 152.593911][ T4310] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 152.618408][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.660051][ T4310] usb 3-1: Product: syz [ 152.674808][ T4310] usb 3-1: Manufacturer: syz [ 152.679450][ T4310] usb 3-1: SerialNumber: syz [ 152.743426][ T4376] rc_core: IR keymap rc-hauppauge not found [ 152.748993][ T6831] loop5: detected capacity change from 0 to 512 [ 152.749427][ T4376] Registered IR keymap rc-empty [ 152.794741][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.816897][ T6831] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.831493][ T6834] netlink: 'syz.1.884': attribute type 5 has an invalid length. [ 152.842015][ T6831] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.843003][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.883801][ T4376] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 152.908482][ T4376] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 152.938595][ T4310] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 152.953024][ T4310] usb 3-1: No valid video chain found. [ 152.958724][ T4310] usb 3-1: selecting invalid altsetting 0 [ 152.988531][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 152.998832][ T4310] usb 3-1: selecting invalid altsetting 0 [ 153.004981][ T4310] usbtest: probe of 3-1:220.1 failed with error -22 [ 153.033176][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.053580][ T4310] usb 3-1: USB disconnect, device number 8 [ 153.073261][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.087402][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 153.107114][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.154267][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.210521][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.255148][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.286291][ T6825] loop3: detected capacity change from 0 to 32768 [ 153.293016][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.323050][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.369209][ T6825] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.384447][ T4376] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.418262][ T4376] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 153.501316][ T4376] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 153.566325][ T4376] usb 1-1: USB disconnect, device number 9 [ 153.650192][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 153.796797][ T6853] xt_hashlimit: max too large, truncated to 1048576 [ 153.821368][ T6853] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.871185][ T6843] loop5: detected capacity change from 0 to 32768 [ 153.960425][ T6843] ERROR: (device loop5): dbAllocAG: allocation request is larger than the allocation group size [ 153.960425][ T6843] [ 154.061197][ T6843] ERROR: (device loop5): remounting filesystem as read-only [ 154.061262][ T6843] ERROR: (device loop5): dbDiscardAG: -EIO [ 154.061262][ T6843] [ 154.200714][ T6865] loop3: detected capacity change from 0 to 47 [ 154.359727][ T6869] loop0: detected capacity change from 0 to 256 [ 154.377566][ T6869] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 154.631923][ T6868] loop5: detected capacity change from 0 to 256 [ 154.652121][ T6868] exfat: Deprecated parameter 'utf8' [ 154.700289][ T6868] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 154.895696][ T6880] program syz.0.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.099888][ T6888] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 155.481089][ T6896] loop2: detected capacity change from 0 to 4096 [ 155.512900][ T5027] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 155.693693][ T5027] usb 6-1: Using ep0 maxpacket: 8 [ 155.704154][ T5027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.705344][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 155.724280][ T5027] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 155.743692][ T5027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.753303][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 155.773252][ T6907] netlink: 'syz.0.917': attribute type 3 has an invalid length. [ 155.791735][ T5027] usb 6-1: config 0 descriptor?? [ 156.026467][ T6915] loop0: detected capacity change from 0 to 128 [ 156.121697][ T6917] program syz.2.922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.212776][ T5027] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 156.218922][ T6909] loop1: detected capacity change from 0 to 32768 [ 156.224191][ T5027] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 156.239750][ T5027] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 156.247883][ T5027] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 156.260903][ T5027] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 156.268555][ T5027] koneplus 0003:1E7D:2E22.0013: unknown main item tag 0x0 [ 156.269461][ T6924] loop0: detected capacity change from 0 to 64 [ 156.284919][ T5027] koneplus 0003:1E7D:2E22.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 156.331154][ T26] audit: type=1800 audit(1753345064.732:36): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.923" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 156.359292][ T6909] XFS (loop1): Mounting V5 Filesystem [ 156.426518][ T5027] usb 6-1: USB disconnect, device number 5 [ 156.601535][ T6909] XFS (loop1): Ending clean mount [ 156.618374][ T6909] XFS (loop1): Quotacheck needed: Please wait. [ 156.718515][ T6909] XFS (loop1): Quotacheck: Done. [ 156.770821][ T6926] fido_id[6926]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 156.948797][ T4266] XFS (loop1): Unmounting Filesystem [ 157.207672][ T6942] loop0: detected capacity change from 0 to 1024 [ 157.292420][ T6930] loop2: detected capacity change from 0 to 32768 [ 157.331529][ T6942] hfsplus: bad catalog entry type [ 157.374827][ T6930] JBD2: Ignoring recovery information on journal [ 157.432610][ T6947] loop5: detected capacity change from 0 to 256 [ 157.439834][ T6947] exfat: Deprecated parameter 'utf8' [ 157.446253][ T6947] exfat: Deprecated parameter 'namecase' [ 157.452143][ T6947] exfat: Deprecated parameter 'namecase' [ 157.458170][ T6947] exfat: Deprecated parameter 'utf8' [ 157.484958][ T6947] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 157.561105][ T6930] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 157.596796][ T2965] hfsplus: b-tree write err: -5, ino 4 [ 157.685922][ T6930] (syz.2.924,6930,1):ocfs2_reflink_ioctl:4426 ERROR: status = -14 [ 157.846023][ T26] audit: type=1326 audit(1753345066.252:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 157.897095][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 157.960102][ T26] audit: type=1326 audit(1753345066.302:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 158.053852][ T26] audit: type=1326 audit(1753345066.302:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 158.198039][ T26] audit: type=1326 audit(1753345066.302:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 158.313309][ T26] audit: type=1326 audit(1753345066.302:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 158.321796][ T6969] loop5: detected capacity change from 0 to 4096 [ 158.373392][ T26] audit: type=1326 audit(1753345066.302:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 158.458591][ T6969] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 158.671733][ T5434] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 159.117998][ T7004] loop0: detected capacity change from 0 to 16 [ 159.160750][ T7004] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.253129][ T4310] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.443012][ T4310] usb 4-1: Using ep0 maxpacket: 8 [ 159.451188][ T4310] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 159.492859][ T4310] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.522917][ T4310] usb 4-1: config 0 has no interface number 0 [ 159.541497][ T4310] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 159.585274][ T4310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.609738][ T4310] usb 4-1: Product: syz [ 159.622901][ T4310] usb 4-1: Manufacturer: syz [ 159.627556][ T4310] usb 4-1: SerialNumber: syz [ 159.645894][ T4310] usb 4-1: config 0 descriptor?? [ 159.705486][ T7024] device dummy0 entered promiscuous mode [ 159.783742][ T7024] device dummy0 left promiscuous mode [ 159.796504][ T7020] loop1: detected capacity change from 0 to 4096 [ 159.828121][ T7020] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 159.858613][ T4310] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 159.868135][ T4310] usb 4-1: No valid video chain found. [ 159.881052][ T7027] loop0: detected capacity change from 0 to 1764 [ 159.901655][ T7020] ntfs3: loop1: Failed to load $Extend. [ 159.979234][ T26] audit: type=1804 audit(1753345068.382:43): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.966" name="/newroot/228/file0/file0" dev="loop1" ino=0 res=1 errno=0 [ 160.078214][ T22] usb 4-1: USB disconnect, device number 6 [ 160.229740][ T7031] netlink: 116 bytes leftover after parsing attributes in process `syz.1.970'. [ 160.263303][ T7031] net_ratelimit: 83 callbacks suppressed [ 160.263319][ T7031] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.299238][ T7016] loop2: detected capacity change from 0 to 32768 [ 160.338791][ T7016] XFS: noikeep mount option is deprecated. [ 160.499121][ T7016] XFS (loop2): Mounting V5 Filesystem [ 160.657198][ T7016] XFS (loop2): Ending clean mount [ 160.690859][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.975'. [ 160.695253][ T7016] XFS (loop2): Quotacheck needed: Please wait. [ 160.833210][ T7016] XFS (loop2): Quotacheck: Done. [ 161.057447][ T4270] XFS (loop2): Unmounting Filesystem [ 161.190384][ T7063] loop0: detected capacity change from 0 to 256 [ 161.279014][ T7037] loop1: detected capacity change from 0 to 32768 [ 161.315067][ T7063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 161.409927][ T7037] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 161.570861][ T7069] loop2: detected capacity change from 0 to 64 [ 161.681366][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 161.926387][ T7077] loop0: detected capacity change from 0 to 16 [ 161.948606][ T7077] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.265565][ T26] audit: type=1326 audit(1753345070.672:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 162.386269][ T26] audit: type=1326 audit(1753345070.672:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 162.436430][ T7091] loop1: detected capacity change from 0 to 2048 [ 162.461879][ T26] audit: type=1326 audit(1753345070.672:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 162.500802][ T7091] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 162.521728][ T26] audit: type=1326 audit(1753345070.672:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 162.598347][ T26] audit: type=1326 audit(1753345070.672:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 162.603957][ T7096] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 162.695877][ T26] audit: type=1326 audit(1753345070.672:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 162.789168][ T26] audit: type=1326 audit(1753345070.672:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.3.992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920fd8e9a9 code=0x7ffc0000 [ 163.152567][ T7087] loop0: detected capacity change from 0 to 32768 [ 163.176173][ T7087] XFS: ikeep mount option is deprecated. [ 163.253306][ T7111] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 163.272192][ T7065] loop5: detected capacity change from 0 to 32768 [ 163.289455][ T7087] XFS (loop0): Mounting V5 Filesystem [ 163.390349][ T7095] loop3: detected capacity change from 0 to 32768 [ 163.464580][ T7118] loop1: detected capacity change from 0 to 1024 [ 163.509790][ T7118] hfsplus: bad catalog entry type [ 163.552002][ T7087] XFS (loop0): Ending clean mount [ 163.604785][ T7087] XFS (loop0): Quotacheck needed: Please wait. [ 163.656374][ T33] hfsplus: b-tree write err: -5, ino 4 [ 163.751027][ T7087] XFS (loop0): Quotacheck: Done. [ 163.890372][ T4265] XFS (loop0): Unmounting Filesystem [ 164.080829][ T4376] kernel write not supported for file /snd/midiC2D0 (pid: 4376 comm: kworker/1:5) [ 164.282969][ T4310] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.345069][ T7130] loop3: detected capacity change from 0 to 512 [ 164.463020][ T4310] usb 3-1: Using ep0 maxpacket: 8 [ 164.469043][ T4310] usb 3-1: too many configurations: 120, using maximum allowed: 8 [ 164.497147][ T7132] loop5: detected capacity change from 0 to 512 [ 164.533263][ T4310] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 164.552693][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 164.570756][ T4310] usb 3-1: Product: syz [ 164.577707][ T4310] usb 3-1: Manufacturer: syz [ 164.583691][ T4310] usb 3-1: SerialNumber: syz [ 164.589769][ T7132] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1003: inode #1: comm syz.5.1003: iget: illegal inode # [ 164.604974][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'. [ 164.616090][ T4310] usb 3-1: config 0 descriptor?? [ 164.633290][ T4310] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 164.641636][ T4310] usb 3-1: setting power ON [ 164.647348][ T4310] dvb-usb: bulk message failed: -22 (2/0) [ 164.670615][ T4310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.680606][ T4310] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 164.689920][ T4310] usb 3-1: media controller created [ 164.710494][ T4310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.729815][ T7132] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1003: error while reading EA inode 1 err=-117 [ 164.757616][ T4310] usb 3-1: selecting invalid altsetting 6 [ 164.775028][ T4310] usb 3-1: digital interface selection failed (-22) [ 164.792934][ T4310] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 164.807491][ T7132] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1003: inode #1: comm syz.5.1003: iget: illegal inode # [ 164.831454][ T7123] dvb-usb: bulk message failed: -22 (3/0) [ 164.839972][ T4310] usb 3-1: setting power OFF [ 164.854461][ T7123] cxusb: i2c wr: len=80 is too big! [ 164.854461][ T7123] [ 164.862448][ T4310] dvb-usb: bulk message failed: -22 (2/0) [ 164.893836][ T7132] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1003: error while reading EA inode 1 err=-117 [ 164.913003][ T4310] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 164.922339][ T4310] (NULL device *): no alternate interface [ 164.953209][ T7132] EXT4-fs (loop5): 1 orphan inode deleted [ 164.999756][ T7132] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.014658][ T4310] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 165.048783][ T4310] usb 3-1: USB disconnect, device number 9 [ 165.207012][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 165.223790][ T7151] loop1: detected capacity change from 0 to 1024 [ 165.236565][ T7153] loop3: detected capacity change from 0 to 512 [ 165.292269][ T7153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.363597][ T7153] EXT4-fs (loop3): 1 truncate cleaned up [ 165.393058][ T7153] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.426007][ T4353] hfsplus: b-tree write err: -5, ino 4 [ 165.465443][ T7153] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.1015: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 165.642082][ T7153] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 165.690214][ T7153] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.1015: Deleting old file: nlink 5, error=-117 [ 165.838571][ T7147] loop0: detected capacity change from 0 to 32768 [ 165.901335][ T7147] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.1012 (7147) [ 165.910647][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 165.949707][ T7147] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 166.004718][ T7147] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 166.032562][ T7147] BTRFS info (device loop0): using free space tree [ 166.119904][ T7179] loop2: detected capacity change from 0 to 512 [ 166.158041][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1022'. [ 166.175934][ T7182] loop1: detected capacity change from 0 to 1024 [ 166.213176][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1022'. [ 166.244114][ T7175] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1022'. [ 166.260847][ T7179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.283253][ T7179] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.342172][ T7182] hfsplus: small dir entry [ 166.415311][ T7147] BTRFS info (device loop0): enabling ssd optimizations [ 166.602216][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 166.653508][ T4265] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 166.741419][ T7204] loop1: detected capacity change from 0 to 64 [ 166.848986][ T7203] loop2: detected capacity change from 0 to 2048 [ 166.867970][ T7190] loop5: detected capacity change from 0 to 4096 [ 166.964820][ T7190] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 166.976412][ T7203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 167.290385][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 168.505721][ T7266] loop1: detected capacity change from 0 to 256 [ 168.569604][ T7266] FAT-fs (loop1): Directory bread(block 1285) failed [ 168.602408][ T7264] loop3: detected capacity change from 0 to 4096 [ 168.678102][ T7264] NILFS (loop3): invalid segment: Checksum error in segment payload [ 168.678203][ T7264] NILFS (loop3): trying rollback from an earlier position [ 168.722086][ T7264] NILFS (loop3): recovery complete [ 168.729059][ T7271] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.451709][ T7294] loop5: detected capacity change from 0 to 1024 [ 169.512641][ T7260] loop2: detected capacity change from 0 to 40427 [ 169.624659][ T7260] F2FS-fs (loop2): invalid crc value [ 169.652159][ T7260] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 169.741117][ T7260] F2FS-fs (loop2): Found nat_bits in checkpoint [ 169.931420][ T7260] F2FS-fs (loop2): recover fsync data on readonly fs [ 169.980025][ T7260] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 170.007274][ T7260] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 170.025058][ T7260] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 170.250513][ T7288] loop3: detected capacity change from 0 to 40427 [ 170.260668][ T7311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1075'. [ 170.303886][ T7311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1075'. [ 170.324105][ T7288] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.380986][ T7314] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1075'. [ 170.434698][ T7288] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 170.461924][ T7298] loop1: detected capacity change from 0 to 32768 [ 170.468635][ T5027] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 170.476458][ T7288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 170.532052][ T26] audit: type=1800 audit(1753345078.932:51): pid=7298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1070" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 170.664584][ T5027] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.686210][ T5027] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.761750][ T5027] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 170.807579][ T7324] loop2: detected capacity change from 0 to 64 [ 170.809739][ T5027] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.842384][ T4271] syz-executor: attempt to access beyond end of device [ 170.842384][ T4271] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.857763][ T5027] usb 1-1: config 0 descriptor?? [ 170.961632][ T7327] ALSA: mixer_oss: invalid index 100000 [ 171.207530][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1083'. [ 171.277368][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 171.299226][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.313228][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.336149][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.344112][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.351480][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.373504][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.380585][ T5027] hkems 0003:2006:0118.0014: unknown main item tag 0x0 [ 171.410943][ T5027] hkems 0003:2006:0118.0014: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 171.435965][ T5027] hkems 0003:2006:0118.0014: no inputs found [ 171.443684][ T5027] hkems 0003:2006:0118.0014: force feedback init failed [ 171.558261][ T5027] usb 1-1: USB disconnect, device number 10 [ 171.656283][ T7340] loop2: detected capacity change from 0 to 128 [ 171.716142][ T7338] fido_id[7338]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 171.722537][ T7340] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 171.778714][ T7340] FAT-fs (loop2): Filesystem has been set read-only [ 171.964388][ T126] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 172.133670][ T7351] loop2: detected capacity change from 0 to 4096 [ 172.191180][ T126] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 172.211824][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.214784][ T7352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.240708][ T126] usb 6-1: config 0 descriptor?? [ 172.535186][ T7346] loop3: detected capacity change from 0 to 32768 [ 172.691954][ T126] ath6kl: Unsupported hardware version: 0x0 [ 172.739732][ T7346] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 172.749109][ T126] ath6kl: Failed to init ath6kl core: -22 [ 172.780210][ T7346] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 172.862131][ T7346] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 172.887867][ T126] ath6kl_usb: probe of 6-1:0.0 failed with error -22 [ 172.908334][ T7346] OCFS2: File system is now read-only. [ 172.926358][ T7346] (syz.3.1089,7346,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 172.928328][ T126] usb 6-1: USB disconnect, device number 6 [ 172.957170][ T7374] loop2: detected capacity change from 0 to 256 [ 172.964856][ T7346] (syz.3.1089,7346,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 172.993602][ T7374] exfat: Deprecated parameter 'namecase' [ 173.011232][ T7346] (syz.3.1089,7346,1):ocfs2_fiemap:776 ERROR: status = -30 [ 173.043964][ T7374] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 173.120937][ T7376] loop0: detected capacity change from 0 to 4096 [ 173.144902][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 173.185101][ T7376] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 173.475015][ T4265] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 173.545928][ T4265] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 173.598215][ T4265] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 173.715708][ T7388] loop2: detected capacity change from 0 to 128 [ 173.770440][ T7388] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.825914][ T7392] loop5: detected capacity change from 0 to 128 [ 173.839903][ T7388] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.920652][ T7392] EXT4-fs: Ignoring removed oldalloc option [ 174.019770][ T7392] EXT4-fs: inline encryption not supported [ 174.083081][ T7392] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 174.109292][ T7375] loop1: detected capacity change from 0 to 32768 [ 174.129525][ T7392] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.202123][ T7375] ERROR: (device loop1): diRead: i_ino != di_number [ 174.202123][ T7375] [ 174.221135][ T7375] ERROR: (device loop1): remounting filesystem as read-only [ 174.229287][ T4523] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.473204][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 174.510528][ T26] audit: type=1326 audit(1753345082.912:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 174.638787][ T26] audit: type=1326 audit(1753345082.962:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 174.641487][ T7413] loop5: detected capacity change from 0 to 256 [ 174.661464][ T4310] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.729586][ T26] audit: type=1326 audit(1753345082.962:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52ed78e9e3 code=0x7ffc0000 [ 174.803416][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 174.833037][ T26] audit: type=1326 audit(1753345082.962:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 174.885772][ T4310] usb 3-1: Using ep0 maxpacket: 32 [ 174.897002][ T4310] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 174.926246][ T4310] usb 3-1: config 0 has an invalid interface number: 164 but max is 0 [ 174.965734][ T4310] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 174.978127][ T26] audit: type=1326 audit(1753345082.972:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 175.001329][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1122'. [ 175.040650][ T7424] loop0: detected capacity change from 0 to 256 [ 175.067445][ T4310] usb 3-1: config 0 has no interface number 0 [ 175.099236][ T7424] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.131468][ T4310] usb 3-1: config 0 has no interface number 1 [ 175.153525][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 175.170948][ T4310] usb 3-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 175.190641][ T7424] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 175.192951][ T26] audit: type=1326 audit(1753345083.012:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 175.211578][ T4310] usb 3-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 175.238793][ T7424] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 175.287283][ T4310] usb 3-1: config 0 interface 50 has no altsetting 0 [ 175.311362][ T7424] exFAT-fs (loop0): hint_cluster is invalid (17) [ 175.318118][ T4310] usb 3-1: config 0 interface 164 has no altsetting 0 [ 175.327642][ T26] audit: type=1326 audit(1753345083.012:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 175.366502][ T7424] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 175.377308][ T4310] usb 3-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 175.398830][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.409494][ T7424] exFAT-fs (loop0): Filesystem has been set read-only [ 175.417923][ T26] audit: type=1326 audit(1753345083.012:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7409 comm="syz.1.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f52ed78e9a9 code=0x7ffc0000 [ 175.429296][ T7424] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 175.453718][ T4310] usb 3-1: Product: syz [ 175.457931][ T4310] usb 3-1: Manufacturer: syz [ 175.465116][ T4310] usb 3-1: SerialNumber: syz [ 175.479852][ T4310] usb 3-1: config 0 descriptor?? [ 175.501426][ T4310] usb 3-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 175.672106][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 175.683133][ T4310] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 175.716823][ T7439] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1130'. [ 175.739793][ T7429] loop5: detected capacity change from 0 to 32768 [ 175.766921][ T7429] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1125 (7429) [ 175.825467][ T7429] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 175.841716][ T7429] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 175.856203][ T7429] BTRFS info (device loop5): setting nodatacow, compression disabled [ 175.867591][ T7429] BTRFS info (device loop5): enabling ssd optimizations [ 175.877540][ T7429] BTRFS info (device loop5): setting datacow [ 175.890151][ T7429] BTRFS info (device loop5): doing ref verification [ 175.896954][ T7429] BTRFS info (device loop5): force clearing of disk cache [ 175.912728][ T7429] BTRFS info (device loop5): turning off barriers [ 175.940242][ T7429] BTRFS info (device loop5): using spread ssd allocation scheme [ 175.961812][ T7429] BTRFS info (device loop5): using free space tree [ 176.172234][ T7464] loop0: detected capacity change from 0 to 512 [ 176.290684][ T7429] BTRFS info (device loop5): rebuilding free space tree [ 176.299124][ T7464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.397391][ T4310] usb 3-1: device descriptor read/64, error -71 [ 176.419298][ T7476] loop3: detected capacity change from 0 to 1764 [ 176.524565][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 176.554030][ T7429] BTRFS warning (device loop5): failed to trim 1 device(s), last error -512 [ 176.673966][ T5434] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.712945][ T4310] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 177.021624][ T7458] loop1: detected capacity change from 0 to 32768 [ 177.219046][ T4310] usb 3-1: failed to restore interface 50 altsetting 4 (error=-71) [ 177.241047][ T4310] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 177.256817][ T7458] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 177.295028][ T4310] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 177.308217][ T75] (kworker/u4:4,75,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 177.364451][ T4310] usb 3-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 177.406634][ T7498] usb usb9: usbfs: process 7498 (syz.5.1143) did not claim interface 0 before use [ 177.423250][ T4310] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware [ 177.430504][ T7500] loop3: detected capacity change from 0 to 16 [ 177.457649][ T4310] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 177.471602][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 177.490695][ T4376] usb 3-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 177.515307][ T7500] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.542781][ T4376] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 177.553596][ T4310] usb 3-1: USB disconnect, device number 10 [ 177.929155][ T7480] loop0: detected capacity change from 0 to 32768 [ 178.037661][ T7480] ialloc: diAlloc returned -17! [ 178.078013][ T7512] ea_get: invalid extended attribute [ 178.109820][ T7512] ffff8880729f8330: 04 00 00 00 .... [ 178.154079][ T7518] loop2: detected capacity change from 0 to 512 [ 178.261336][ T7518] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 178.281694][ T7518] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #13: comm syz.2.1154: iget: bad i_size value: 12154757448730 [ 178.353916][ T7518] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1154: couldn't read orphan inode 13 (err -117) [ 178.452962][ T7518] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 178.513739][ T7518] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 178.628474][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 178.642605][ T7535] loop1: detected capacity change from 0 to 2048 [ 178.777042][ T7535] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 178.857915][ T7535] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.152915][ T4310] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 179.363010][ T4310] usb 3-1: Using ep0 maxpacket: 16 [ 179.370187][ T4310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.395554][ T4310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.451468][ T4310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.456960][ T7533] loop5: detected capacity change from 0 to 32768 [ 179.467298][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.482933][ T4310] usb 3-1: Product: syz [ 179.492219][ T7533] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.1160 (7533) [ 179.506845][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 179.532930][ T4310] usb 3-1: Manufacturer: syz [ 179.541143][ T4310] usb 3-1: SerialNumber: syz [ 179.636082][ T7533] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 179.691471][ T7533] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 179.748746][ T7533] BTRFS info (device loop5): using free space tree [ 179.982023][ T4310] usb 3-1: cannot find UAC_HEADER [ 180.085043][ T4310] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 180.138346][ T4542] udevd[4542]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.196979][ T4310] usb 3-1: USB disconnect, device number 11 [ 180.281018][ T7533] BTRFS info (device loop5): enabling ssd optimizations [ 180.434009][ T5434] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 180.698948][ T4527] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 9 /dev/loop5 scanned by udevd (4527) [ 180.750270][ T7585] loop3: detected capacity change from 0 to 32768 [ 180.841087][ T26] audit: type=1800 audit(1753345089.242:60): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1177" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 180.923231][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 180.929349][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 180.935532][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 180.935551][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 181.187064][ T7612] loop0: detected capacity change from 0 to 512 [ 181.230622][ T7612] EXT4-fs: Ignoring removed i_version option [ 181.279529][ T7612] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 181.297293][ T7612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 181.297381][ T7612] System zones: 1-12 [ 181.298350][ T7612] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.301774][ T7612] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1188: invalid indirect mapped block 12 (level 1) [ 181.302301][ T7612] EXT4-fs (loop0): Remounting filesystem read-only [ 181.302319][ T7612] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1188: invalid indirect mapped block 2 (level 2) [ 181.302710][ T7612] EXT4-fs (loop0): Remounting filesystem read-only [ 181.304475][ T7612] EXT4-fs (loop0): 1 truncate cleaned up [ 181.304504][ T7612] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 181.384522][ T7619] loop5: detected capacity change from 0 to 8 [ 181.530965][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 181.762121][ T4281] Bluetooth: hci1: unexpected event for opcode 0x203c [ 182.099728][ T7616] loop3: detected capacity change from 0 to 32768 [ 182.463008][ T7616] XFS (loop3): Mounting V5 Filesystem [ 182.632063][ T7661] loop2: detected capacity change from 0 to 512 [ 182.677753][ T7616] XFS (loop3): Ending clean mount [ 182.716066][ T7661] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1204: casefold flag without casefold feature [ 182.719487][ T7616] XFS (loop3): Quotacheck needed: Please wait. [ 182.739584][ T26] audit: type=1326 audit(1753345091.142:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8018e9a9 code=0x7ffc0000 [ 182.762230][ T26] audit: type=1326 audit(1753345091.162:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fce8018e9a9 code=0x7ffc0000 [ 182.769431][ T7661] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1204: couldn't read orphan inode 15 (err -117) [ 182.831452][ T26] audit: type=1326 audit(1753345091.162:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8018e9a9 code=0x7ffc0000 [ 182.884506][ T7661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.956901][ T7616] XFS (loop3): Quotacheck: Done. [ 182.985449][ T26] audit: type=1326 audit(1753345091.262:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fce8018e9a9 code=0x7ffc0000 [ 183.063143][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 183.112401][ T26] audit: type=1326 audit(1753345091.322:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8018e9a9 code=0x7ffc0000 [ 183.212731][ T26] audit: type=1326 audit(1753345091.322:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8018e9a9 code=0x7ffc0000 [ 183.265361][ T4271] XFS (loop3): Unmounting Filesystem [ 183.312952][ T126] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 183.520197][ T7677] loop0: detected capacity change from 0 to 512 [ 183.543070][ T126] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 183.549690][ T7677] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.563404][ T126] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 183.592525][ T126] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 183.606438][ T7678] loop1: detected capacity change from 0 to 512 [ 183.633142][ T126] usb 6-1: config 8 has no interface number 0 [ 183.635078][ T7678] EXT4-fs: Ignoring removed i_version option [ 183.645434][ T7677] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 183.652969][ T126] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 183.668515][ T7677] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 183.688122][ T7677] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.706467][ T7677] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:477: comm syz.0.1212: Invalid block bitmap block 0 in block_group 0 [ 183.715339][ T7678] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.738014][ T7677] EXT4-fs (loop0): Remounting filesystem read-only [ 183.744830][ T126] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.763623][ T7677] Quota error (device loop0): write_blk: dquota write failed [ 183.806301][ T7677] Quota error (device loop0): write_blk: dquota write failed [ 183.826495][ T126] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 183.873173][ T7677] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 183.888135][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.899901][ T7677] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1212: Failed to acquire dquot type 1 [ 183.911581][ T126] usb 6-1: Product: syz [ 183.911600][ T126] usb 6-1: Manufacturer: syz [ 183.911614][ T126] usb 6-1: SerialNumber: syz [ 183.931202][ T7678] EXT4-fs (loop1): 1 truncate cleaned up [ 183.975903][ T7677] EXT4-fs (loop0): Remounting filesystem read-only [ 183.987161][ T7677] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1212: Failed to acquire dquot type 1 [ 184.008899][ T7677] EXT4-fs (loop0): Remounting filesystem read-only [ 184.016908][ T7677] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.1212: Failed to acquire dquot type 1 [ 184.017983][ T7678] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.034103][ T7677] EXT4-fs (loop0): Remounting filesystem read-only [ 184.087015][ T7677] EXT4-fs (loop0): 1 orphan inode deleted [ 184.135928][ T7677] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.144325][ T126] usb 6-1: USB disconnect, device number 7 [ 184.196055][ T7672] loop2: detected capacity change from 0 to 32768 [ 184.217317][ T7683] CUSE: unknown device info "€" [ 184.222379][ T7683] CUSE: zero length info key specified [ 184.320812][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 184.432109][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 184.704669][ T7695] loop2: detected capacity change from 0 to 8 [ 184.712590][ T7695] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 184.940408][ T4527] udevd[4527]: incorrect cramfs checksum on /dev/loop2 [ 185.112758][ T7707] loop2: detected capacity change from 0 to 128 [ 185.159960][ T7707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 185.168304][ T7710] loop0: detected capacity change from 0 to 16 [ 185.207446][ T7710] erofs: (device loop0): mounted with root inode @ nid 36. [ 185.327421][ T7707] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.878326][ T7699] loop3: detected capacity change from 0 to 32768 [ 185.890737][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 186.022027][ T7699] XFS (loop3): Mounting V5 Filesystem [ 186.075690][ T7701] loop5: detected capacity change from 0 to 40427 [ 186.173169][ T7701] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 186.185402][ T7701] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 186.205059][ T7732] process 'syz.2.1230' launched './file1' with NULL argv: empty string added [ 186.246032][ T7701] F2FS-fs (loop5): invalid crc value [ 186.265917][ T7735] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1231'. [ 186.280298][ T7699] XFS (loop3): Ending clean mount [ 186.294925][ T7699] XFS (loop3): Quotacheck needed: Please wait. [ 186.312750][ T7701] F2FS-fs (loop5): Found nat_bits in checkpoint [ 186.404448][ T7699] XFS (loop3): Quotacheck: Done. [ 186.511753][ T7701] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 186.543053][ T7701] F2FS-fs (loop5): Start checkpoint disabled! [ 186.560421][ T7715] loop0: detected capacity change from 0 to 32768 [ 186.583287][ T7739] loop1: detected capacity change from 0 to 64 [ 186.597764][ T7701] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 186.619208][ T7701] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 186.637512][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 186.637527][ T26] audit: type=1800 audit(1753345095.042:68): pid=7715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1227" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 186.670146][ T4271] XFS (loop3): Unmounting Filesystem [ 187.171014][ T46] kworker/u4:3: attempt to access beyond end of device [ 187.171014][ T46] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 187.450633][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1238'. [ 187.469384][ T7751] loop3: detected capacity change from 0 to 256 [ 187.524009][ T7751] exfat: Deprecated parameter 'utf8' [ 187.557968][ T7751] exfat: Deprecated parameter 'utf8' [ 187.580327][ T7751] exfat: Deprecated parameter 'namecase' [ 187.634850][ T7751] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 187.744618][ T7757] netlink: 'syz.0.1240': attribute type 29 has an invalid length. [ 187.773382][ T7757] netlink: 'syz.0.1240': attribute type 29 has an invalid length. [ 187.812460][ T7757] netlink: 'syz.0.1240': attribute type 29 has an invalid length. [ 187.948988][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1243'. [ 187.968065][ T7767] vivid-000: disconnect [ 187.975033][ T7766] vivid-000: reconnect [ 188.083024][ T22] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 188.284553][ T22] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 188.305185][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.329569][ T22] usb 6-1: config 0 descriptor?? [ 188.485547][ T7769] loop0: detected capacity change from 0 to 32768 [ 188.507332][ T7769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1245 (7769) [ 188.552421][ T7769] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.568561][ T7769] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 188.577660][ T7769] BTRFS info (device loop0): using free space tree [ 188.606877][ T7769] BTRFS info (device loop0): enabling ssd optimizations [ 188.713052][ T5011] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 188.717912][ T7805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1255'. [ 188.759297][ T22] waltop 0003:172F:0501.0015: item fetching failed at offset 2/5 [ 188.800629][ T22] waltop: probe of 0003:172F:0501.0015 failed with error -22 [ 188.852322][ T4265] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.921317][ T5011] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.942646][ T5011] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.991564][ T7809] [U] ¦ [ 188.993381][ T5011] usb 2-1: config 0 interface 0 has no altsetting 0 [ 189.001558][ T5011] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 189.026816][ T5011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.050215][ T5011] usb 2-1: config 0 descriptor?? [ 189.300736][ T7602] usb 6-1: USB disconnect, device number 8 [ 189.479908][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.479938][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.479959][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.479979][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.480000][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.480020][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.480041][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.480061][ T5011] holtek_mouse 0003:04D9:A067.0016: unknown main item tag 0x0 [ 189.482325][ T5011] holtek_mouse 0003:04D9:A067.0016: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 189.690049][ T5011] usb 2-1: USB disconnect, device number 6 [ 189.745591][ T7826] fido_id[7826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 190.466446][ T7833] loop2: detected capacity change from 0 to 32768 [ 190.525500][ T7833] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1267 (7833) [ 190.590549][ T7833] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.620687][ T7833] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 190.670360][ T7833] BTRFS info (device loop2): using free space tree [ 190.982928][ T7874] mkiss: ax0: crc mode is auto. [ 190.985411][ T7847] loop0: detected capacity change from 0 to 40427 [ 191.010012][ T7847] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 191.035468][ T7833] BTRFS info (device loop2): enabling ssd optimizations [ 191.043440][ T7847] F2FS-fs (loop0): invalid crc value [ 191.073219][ T7847] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.193235][ T7847] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 191.345274][ T4270] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.419328][ T4265] syz-executor: attempt to access beyond end of device [ 191.419328][ T4265] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.836825][ T7896] sp0: Synchronizing with TNC [ 191.989197][ T7901] loop3: detected capacity change from 0 to 128 [ 192.099390][ T7903] loop1: detected capacity change from 0 to 128 [ 192.217122][ T7894] loop5: detected capacity change from 0 to 32768 [ 192.247222][ T26] audit: type=1800 audit(1753345100.652:69): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1288" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 192.324862][ T7903] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 192.366655][ T7903] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.499236][ T7915] loop0: detected capacity change from 0 to 512 [ 192.585932][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 192.600234][ T7915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 192.609492][ T7915] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.664029][ T7602] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.682107][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 192.830846][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1298'. [ 192.884704][ T7602] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 192.928173][ T7602] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.958992][ T7602] usb 4-1: config 0 has no interface number 0 [ 192.985608][ T7602] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 193.010262][ T7602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.039047][ T7602] usb 4-1: Product: syz [ 193.049184][ T7602] usb 4-1: Manufacturer: syz [ 193.063853][ T7602] usb 4-1: SerialNumber: syz [ 193.075199][ T7929] syz.0.1302 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 193.104078][ T7602] usb 4-1: config 0 descriptor?? [ 193.138248][ T7602] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 193.162920][ T7602] usb 4-1: No valid video chain found. [ 193.342365][ T5011] usb 4-1: USB disconnect, device number 7 [ 193.348877][ T7937] loop2: detected capacity change from 0 to 256 [ 193.371728][ T7937] exfat: Deprecated parameter 'utf8' [ 193.377752][ T7937] exfat: Deprecated parameter 'utf8' [ 193.384005][ T7937] exfat: Deprecated parameter 'namecase' [ 193.395091][ T7937] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 193.467293][ T7941] loop0: detected capacity change from 0 to 512 [ 193.490852][ T7941] EXT4-fs: Ignoring removed bh option [ 193.507481][ T7917] loop5: detected capacity change from 0 to 40427 [ 193.541899][ T7941] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 193.553672][ T7917] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 193.573473][ T7602] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 193.591673][ T7917] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 193.615178][ T7941] EXT4-fs (loop0): 1 truncate cleaned up [ 193.625571][ T7943] loop2: detected capacity change from 0 to 1764 [ 193.644871][ T7941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 193.653455][ T7917] F2FS-fs (loop5): invalid crc value [ 193.675749][ T26] audit: type=1800 audit(1753345102.082:70): pid=7941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1307" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 193.684013][ T7943] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 193.703428][ T7941] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1307: invalid indirect mapped block 4294901760 (level 0) [ 193.751808][ T7917] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.764895][ T7602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.795492][ T7602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.828024][ T7602] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 193.839070][ T7602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.842006][ T7941] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1307: invalid indirect mapped block 4294967295 (level 1) [ 193.878716][ T7941] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1307: invalid indirect mapped block 65535 (level 2) [ 193.884912][ T7602] usb 2-1: config 0 descriptor?? [ 193.909913][ T7917] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 193.918175][ T7917] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 194.109423][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 194.222774][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.229142][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.296789][ T7957] loop0: detected capacity change from 0 to 16 [ 194.327275][ T7959] netlink: 'syz.3.1314': attribute type 61 has an invalid length. [ 194.337545][ T7957] erofs: (device loop0): mounted with root inode @ nid 36. [ 194.358836][ T7602] uclogic 0003:5543:0522.0017: No inputs registered, leaving [ 194.377155][ T7957] VFS: Lookup of '$' in erofs loop0 would have caused loop [ 194.378145][ T7602] uclogic 0003:5543:0522.0017: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.1-1/input0 [ 194.677597][ T14] usb 2-1: USB disconnect, device number 7 [ 195.048468][ T7979] UBIFS error (pid: 7979): cannot open "upperdir=./file1,", error -22 [ 195.352693][ T7977] loop0: detected capacity change from 0 to 32768 [ 195.428161][ T7977] jfs_lookup: dtSearch returned -5 [ 195.443056][ T7209] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 195.634615][ T7209] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 195.652887][ T7209] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 195.682305][ T7209] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 195.742905][ T7209] usb 6-1: config 220 has no interface number 2 [ 195.765027][ T7209] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 195.819053][ T7209] usb 6-1: config 220 interface 0 has no altsetting 0 [ 195.822981][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1329'. [ 195.846734][ T7209] usb 6-1: config 220 interface 76 has no altsetting 0 [ 195.866031][ T7209] usb 6-1: config 220 interface 1 has no altsetting 0 [ 195.892587][ T7209] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 195.910383][ T7209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.914749][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1329'. [ 195.938518][ T7209] usb 6-1: Product: syz [ 195.946216][ T7209] usb 6-1: Manufacturer: syz [ 195.957894][ T7209] usb 6-1: SerialNumber: syz [ 195.985431][ T7995] netlink: 'syz.2.1329': attribute type 12 has an invalid length. [ 196.022726][ T7997] netlink: 'syz.0.1330': attribute type 10 has an invalid length. [ 196.200543][ T7209] usb 6-1: selecting invalid altsetting 0 [ 196.208110][ T8004] loop1: detected capacity change from 0 to 512 [ 196.213727][ T7209] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 196.239362][ T7209] usb 6-1: No valid video chain found. [ 196.259018][ T8008] loop0: detected capacity change from 0 to 256 [ 196.282337][ T7209] usb 6-1: selecting invalid altsetting 0 [ 196.291886][ T7209] usbtest: probe of 6-1:220.1 failed with error -22 [ 196.305540][ T8008] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 196.322485][ T7209] usb 6-1: USB disconnect, device number 9 [ 196.340834][ T8004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 196.383045][ T8008] FAT-fs (loop0): Filesystem has been set read-only [ 196.389871][ T8004] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.494605][ T5011] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 196.519323][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 196.695220][ T5011] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.706139][ T5011] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 196.715176][ T5011] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 196.724512][ T5011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.735094][ T5011] usb 4-1: config 0 descriptor?? [ 196.742536][ T5011] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 196.750602][ T5011] dvb-usb: bulk message failed: -22 (3/0) [ 196.760157][ T5011] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 196.786967][ T5011] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 196.804749][ T5011] usb 4-1: media controller created [ 196.811062][ T5011] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 196.843103][ T5011] dvb-usb: bulk message failed: -22 (6/0) [ 196.849532][ T5011] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 196.859612][ T5011] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 196.860421][ T8021] loop0: detected capacity change from 0 to 1024 [ 196.873443][ T5011] dvb-usb: schedule remote query interval to 150 msecs. [ 196.919417][ T5011] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 196.948189][ T8003] dvb-usb: bulk message failed: -22 (2/0) [ 197.068461][ T5011] usb 4-1: USB disconnect, device number 8 [ 197.144248][ T5011] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 197.211596][ T75] hfsplus: b-tree write err: -5, ino 4 [ 197.587605][ T8051] netlink: 412 bytes leftover after parsing attributes in process `syz.5.1353'. [ 198.113674][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1365'. [ 198.338797][ T8084] loop1: detected capacity change from 0 to 2048 [ 198.367307][ T8084] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.460535][ T8086] loop0: detected capacity change from 0 to 512 [ 198.486193][ T8086] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.578767][ T8086] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1370: invalid block [ 198.646223][ T8086] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1370: invalid indirect mapped block 10 (level 1) [ 198.686150][ T8086] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1370: invalid indirect mapped block 8 (level 1) [ 198.728797][ T8080] loop5: detected capacity change from 0 to 32768 [ 198.757717][ T8086] EXT4-fs (loop0): 1 truncate cleaned up [ 198.758429][ T8080] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 198.794084][ T8086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 198.807897][ T8080] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 198.989792][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 199.028685][ T5434] ocfs2: Unmounting device (7,5) on (node local) [ 199.908236][ T8096] loop3: detected capacity change from 0 to 32768 [ 200.036099][ T8096] XFS (loop3): Mounting V5 Filesystem [ 200.329966][ T8135] loop1: detected capacity change from 0 to 1024 [ 200.366743][ T8135] EXT4-fs: Ignoring removed nobh option [ 200.380193][ T8135] EXT4-fs: Ignoring removed bh option [ 200.403320][ T8096] XFS (loop3): Ending clean mount [ 200.431156][ T8135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.638484][ T4271] XFS (loop3): Unmounting Filesystem [ 200.639701][ T8121] loop5: detected capacity change from 0 to 32768 [ 200.896681][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 201.857534][ T8175] loop3: detected capacity change from 0 to 256 [ 201.884270][ T8175] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 201.904569][ T8175] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 201.951029][ T8175] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 202.014277][ T26] audit: type=1800 audit(1753345110.422:71): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1406" name="file1" dev="loop3" ino=1048742 res=0 errno=0 [ 202.028165][ T8175] exFAT-fs (loop3): hint_cluster is invalid (17) [ 202.091118][ T8175] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 202.111675][ T8175] exFAT-fs (loop3): Filesystem has been set read-only [ 202.138397][ T8155] loop5: detected capacity change from 0 to 32768 [ 202.198315][ T8183] loop2: detected capacity change from 0 to 64 [ 202.279332][ T8155] XFS (loop5): Mounting V5 Filesystem [ 202.485688][ T8155] XFS (loop5): Ending clean mount [ 202.593099][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.682437][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1416'. [ 202.697767][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 202.711991][ T5434] XFS (loop5): Unmounting Filesystem [ 202.783124][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 202.807668][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.859518][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.892932][ T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.922945][ T14] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 202.952701][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.991651][ T14] usb 2-1: config 0 descriptor?? [ 203.321148][ T8227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 203.345129][ T8227] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 203.375872][ T8224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 203.395286][ T8224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 203.412782][ T8230] loop3: detected capacity change from 0 to 65 [ 203.434154][ T14] microsoft 0003:045E:07DA.0018: unbalanced delimiter at end of report description [ 203.445755][ T8224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1427'. [ 203.466373][ T14] microsoft 0003:045E:07DA.0018: parse failed [ 203.479352][ T14] microsoft: probe of 0003:045E:07DA.0018 failed with error -22 [ 203.499345][ T8230] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 203.635678][ T14] usb 2-1: USB disconnect, device number 8 [ 204.592638][ T8246] loop2: detected capacity change from 0 to 32768 [ 204.632744][ T8246] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1431 (8246) [ 204.695179][ T8246] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.707116][ T8246] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 204.721996][ T8246] BTRFS info (device loop2): setting nodatacow, compression disabled [ 204.733379][ T8246] BTRFS info (device loop2): enabling ssd optimizations [ 204.752612][ T8246] BTRFS info (device loop2): setting datacow [ 204.768787][ T8246] BTRFS info (device loop2): doing ref verification [ 204.784685][ T8246] BTRFS info (device loop2): force clearing of disk cache [ 204.810215][ T8246] BTRFS info (device loop2): turning off barriers [ 204.827768][ T8246] BTRFS info (device loop2): using spread ssd allocation scheme [ 204.844620][ T8246] BTRFS info (device loop2): using free space tree [ 204.853214][ T7602] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.986129][ T8246] BTRFS info (device loop2): rebuilding free space tree [ 205.042936][ T7602] usb 1-1: Using ep0 maxpacket: 8 [ 205.052195][ T7602] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.075579][ T7602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.090083][ T7602] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 205.109353][ T7602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.141683][ T7602] usb 1-1: config 0 descriptor?? [ 205.350905][ T4270] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 205.398768][ T8309] loop5: detected capacity change from 0 to 512 [ 205.551606][ T8307] loop3: detected capacity change from 0 to 8192 [ 205.554597][ T4527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4527) [ 205.575436][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.583046][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.589782][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.602696][ T8309] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 205.613024][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.620238][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.622761][ T8307] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.627083][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.648936][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.661961][ T7602] kye 0003:0458:5010.0019: unknown main item tag 0x0 [ 205.676721][ T8309] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.694979][ T7602] kye 0003:0458:5010.0019: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 205.706398][ T7602] kye 0003:0458:5010.0019: tablet-enabling feature report not found [ 205.715313][ T7602] kye 0003:0458:5010.0019: tablet enabling failed [ 205.719243][ T8307] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 205.783489][ T8307] REISERFS (device loop3): using ordered data mode [ 205.790038][ T8307] reiserfs: using flush barriers [ 205.854473][ T8307] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.903126][ T7603] usb 1-1: USB disconnect, device number 11 [ 205.930931][ T8307] REISERFS (device loop3): checking transaction log (loop3) [ 205.964440][ T8307] REISERFS (device loop3): Using r5 hash to sort names [ 205.973866][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 205.992275][ T8307] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 206.025885][ T8307] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 206.094350][ T8318] fido_id[8318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 206.220708][ T3638] udevd[3638]: worker [4542] terminated by signal 33 (Unknown signal 33) [ 206.246354][ T3638] udevd[3638]: worker [4542] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5010.0019' [ 206.474196][ T8333] loop5: detected capacity change from 0 to 132 [ 206.839972][ T8345] loop3: detected capacity change from 0 to 2048 [ 206.870555][ T8345] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.940613][ T8349] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.942199][ T8345] syz.3.1466: attempt to access beyond end of device [ 206.942199][ T8345] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 207.053950][ T8319] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 207.108322][ T8345] syz.3.1466: attempt to access beyond end of device [ 207.108322][ T8345] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 207.170870][ T8331] loop1: detected capacity change from 0 to 32768 [ 207.172722][ T8345] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 207.224454][ T8345] NILFS (loop3): error -5 reading inode: ino=15 [ 207.241495][ T8331] XFS (loop1): Mounting V5 Filesystem [ 207.246833][ T8361] syz.3.1466: attempt to access beyond end of device [ 207.246833][ T8361] loop3: rw=0, sector=33554430, nr_sectors = 2 limit=2048 [ 207.247007][ T8361] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 207.247027][ T8361] NILFS (loop3): error -5 reading inode: ino=15 [ 207.274931][ T8363] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1471'. [ 207.288469][ T8319] usb 6-1: Using ep0 maxpacket: 32 [ 207.325118][ T8319] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 207.365213][ T8319] usb 6-1: config 0 has an invalid interface number: 164 but max is 0 [ 207.375208][ T8319] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 207.385643][ T8319] usb 6-1: config 0 has no interface number 0 [ 207.393111][ T8319] usb 6-1: config 0 has no interface number 1 [ 207.394806][ T8368] loop2: detected capacity change from 0 to 128 [ 207.399315][ T8319] usb 6-1: too many endpoints for config 0 interface 164 altsetting 124: 110, using maximum allowed: 30 [ 207.422699][ T8319] usb 6-1: config 0 interface 164 altsetting 124 has 0 endpoint descriptors, different from the interface descriptor's value: 110 [ 207.436595][ T8319] usb 6-1: config 0 interface 50 has no altsetting 0 [ 207.444111][ T8319] usb 6-1: config 0 interface 164 has no altsetting 0 [ 207.454152][ T8319] usb 6-1: New USB device found, idVendor=0baf, idProduct=00f6, bcdDevice=a8.4a [ 207.463466][ T8319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.473757][ T8319] usb 6-1: Product: syz [ 207.478085][ T8319] usb 6-1: Manufacturer: syz [ 207.483214][ T8319] usb 6-1: SerialNumber: syz [ 207.489612][ T8319] usb 6-1: config 0 descriptor?? [ 207.520255][ T8319] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 207.542065][ T8331] XFS (loop1): Ending clean mount [ 207.556696][ T8331] XFS (loop1): Quotacheck needed: Please wait. [ 207.556942][ T8368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.666333][ T8331] XFS (loop1): Quotacheck: Done. [ 207.693028][ T8319] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 207.710710][ T8368] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.799206][ T4266] XFS (loop1): Unmounting Filesystem [ 207.872672][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 208.403084][ T8319] usb 6-1: device descriptor read/64, error -71 [ 208.673035][ T8319] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 208.717407][ T8410] loop2: detected capacity change from 0 to 1024 [ 208.774613][ T5025] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.976979][ T5025] usb 4-1: Using ep0 maxpacket: 16 [ 208.985191][ T5025] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.026069][ T5025] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.038493][ T5025] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.052756][ T5025] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.060619][ T5025] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 209.087747][ T8319] usb 6-1: failed to restore interface 50 altsetting 4 (error=-71) [ 209.114025][ T8319] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 209.134020][ T5025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.142573][ T8319] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 209.165823][ T8319] usb 6-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF6) Rev (0XA84A): Eagle I [ 209.176973][ T5025] usb 4-1: config 0 descriptor?? [ 209.205484][ T8319] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 209.236074][ T8319] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 209.258459][ T8319] usb 6-1: USB disconnect, device number 10 [ 209.285399][ T8408] loop0: detected capacity change from 0 to 32768 [ 209.379425][ T8408] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 209.537186][ T8408] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 209.590253][ T5025] hid-generic 0003:045E:05DA.001A: unbalanced collection at end of report description [ 209.635481][ T5025] hid-generic: probe of 0003:045E:05DA.001A failed with error -22 [ 209.689715][ T4265] ocfs2: Unmounting device (7,0) on (node local) [ 209.791198][ T5025] usb 4-1: USB disconnect, device number 9 [ 210.232479][ T8449] loop5: detected capacity change from 0 to 4096 [ 210.372211][ T8449] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 210.402410][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 210.480561][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 210.609217][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 210.629694][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1508'. [ 210.667297][ T8471] delete_channel: no stack [ 210.722933][ T5025] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.877713][ T8482] binfmt_misc: register: failed to install interpreter file ./file0 [ 210.932942][ T5025] usb 4-1: Using ep0 maxpacket: 16 [ 210.940112][ T5025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.986467][ T5025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.025310][ T5025] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.070308][ T5025] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.104128][ T5025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.157937][ T5025] usb 4-1: config 0 descriptor?? [ 211.594488][ T5025] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 211.608494][ T5025] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 211.672905][ T5025] microsoft 0003:045E:07DA.001B: no inputs found [ 211.679304][ T5025] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 211.820114][ T7209] usb 4-1: USB disconnect, device number 10 [ 211.983836][ T8511] fido_id[8511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 212.030296][ T8514] loop2: detected capacity change from 0 to 4096 [ 212.121976][ T8514] ntfs: volume version 3.1. [ 212.152197][ T8494] loop0: detected capacity change from 0 to 32768 [ 212.181466][ T8494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1517 (8494) [ 212.181531][ T8514] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 212.273711][ T8494] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.305671][ T8514] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 212.313751][ T8494] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 212.353021][ T8494] BTRFS info (device loop0): force clearing of disk cache [ 212.419552][ T8494] BTRFS info (device loop0): metadata ratio 0 [ 212.431269][ T8494] BTRFS info (device loop0): enabling ssd optimizations [ 212.469313][ T8494] BTRFS info (device loop0): using spread ssd allocation scheme [ 212.509370][ T8494] BTRFS info (device loop0): using free space tree [ 212.599817][ T8540] loop5: detected capacity change from 0 to 512 [ 212.670781][ T8540] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 212.749243][ T8494] BTRFS info (device loop0): rebuilding free space tree [ 212.789985][ T8540] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.930736][ T8540] EXT4-fs error (device loop5): ext4_empty_dir:3136: inode #12: comm syz.5.1534: invalid size [ 213.005255][ T4265] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.058180][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 213.083356][ T7491] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 213.187712][ T8569] Invalid ELF header magic: != ELF [ 213.230000][ T8571] loop5: detected capacity change from 0 to 256 [ 213.284731][ T7491] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 213.318997][ T7491] usb 2-1: config 0 has no interface number 0 [ 213.343089][ T7491] usb 2-1: config 0 interface 128 has no altsetting 0 [ 213.372553][ T7491] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 213.393162][ T7491] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.401201][ T7491] usb 2-1: Product: syz [ 213.412911][ T7491] usb 2-1: Manufacturer: syz [ 213.422624][ T7491] usb 2-1: SerialNumber: syz [ 213.469015][ T7491] usb 2-1: config 0 descriptor?? [ 213.489016][ T7491] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 213.522999][ T7491] radio-si470x: probe of 2-1:0.128 failed with error -5 [ 213.547563][ T7491] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 213.603063][ T4310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.640296][ T8577] loop0: detected capacity change from 0 to 4096 [ 213.709650][ T8577] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 213.714856][ T7209] usb 2-1: USB disconnect, device number 9 [ 213.817820][ T4310] usb 3-1: Using ep0 maxpacket: 8 [ 213.824762][ T4310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.854079][ T4310] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 213.891817][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 213.927032][ T4310] usb 3-1: SerialNumber: syz [ 213.952789][ T4310] usb 3-1: config 0 descriptor?? [ 213.968320][ T4310] usb 3-1: Found UVC 0.00 device (05ac:8501) [ 213.995842][ T4310] usb 3-1: No valid video chain found. [ 214.193360][ T4310] usb 3-1: USB disconnect, device number 12 [ 214.508952][ T8585] loop3: detected capacity change from 0 to 32768 [ 214.560972][ T8585] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 214.651393][ T8600] loop0: detected capacity change from 0 to 128 [ 214.668540][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 215.026176][ T8606] loop2: detected capacity change from 0 to 4096 [ 215.057721][ T8606] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 215.252103][ T4270] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 215.263327][ T4270] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 215.283183][ T7491] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.290287][ T4270] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 215.399183][ T8615] loop1: detected capacity change from 0 to 512 [ 215.444465][ T8618] bond0: Unable to set down delay as MII monitoring is disabled [ 215.486358][ T8615] EXT4-fs (loop1): 1 truncate cleaned up [ 215.492400][ T8615] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 215.496765][ T7491] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 215.520275][ T7491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.524177][ T8602] loop5: detected capacity change from 0 to 32768 [ 215.540597][ T7491] usb 4-1: Product: syz [ 215.545230][ T7491] usb 4-1: Manufacturer: syz [ 215.550042][ T7491] usb 4-1: SerialNumber: syz [ 215.573027][ T7491] usb 4-1: config 0 descriptor?? [ 215.596006][ T7491] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 215.646914][ T8602] JBD2: Ignoring recovery information on journal [ 215.677708][ T8625] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 215.684459][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 215.769138][ T8602] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 215.928588][ T8628] loop2: detected capacity change from 0 to 256 [ 215.958801][ T8628] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 215.978370][ T5434] ocfs2: Unmounting device (7,5) on (node local) [ 216.132791][ T8633] loop5: detected capacity change from 0 to 512 [ 216.186632][ T7491] gspca_sunplus: reg_r err -71 [ 216.191663][ T7491] sunplus: probe of 4-1:0.0 failed with error -71 [ 216.216585][ T8633] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 216.235041][ T7491] usb 4-1: USB disconnect, device number 11 [ 216.241268][ T8633] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.656528][ T5434] VFS: Lookup of 'ÿÿ' in ext4 loop5 would have caused loop [ 216.675276][ T5434] VFS: Lookup of 'ÿÿ' in ext4 loop5 would have caused loop [ 216.895947][ T5024] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.047949][ T8640] loop2: detected capacity change from 0 to 32768 [ 217.061884][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1576'. [ 217.074118][ T8649] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 217.096466][ T5024] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.118189][ T5434] EXT4-fs (loop5): unmounting filesystem. [ 217.145789][ T5024] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.156057][ T8651] loop3: detected capacity change from 0 to 512 [ 217.157179][ T5024] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.175522][ T5024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.198376][ T8644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.202330][ T8640] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.294695][ T8640] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 217.296474][ T8651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.373253][ T8651] ext4 filesystem being mounted at /329/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.392106][ T8640] BTRFS info (device loop2): enabling auto defrag [ 217.442925][ T8640] BTRFS info (device loop2): doing ref verification [ 217.449582][ T8640] BTRFS info (device loop2): use no compression [ 217.523612][ T8640] BTRFS info (device loop2): force clearing of disk cache [ 217.530834][ T8640] BTRFS info (device loop2): max_inline at 4096 [ 217.548812][ T8572] usb 2-1: USB disconnect, device number 10 [ 217.571390][ T8238] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.616711][ T8640] BTRFS info (device loop2): disabling free space tree [ 217.738174][ T8640] BTRFS info (device loop2): enabling ssd optimizations [ 217.763430][ T8640] BTRFS info (device loop2): rebuilding free space tree [ 217.779547][ T8640] BTRFS info (device loop2): disabling free space tree [ 217.786869][ T8640] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 217.789963][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 217.802484][ T8640] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 217.816807][ T8238] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.957600][ T8238] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.015233][ T4270] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 218.216945][ T4527] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop2 scanned by udevd (4527) [ 218.472642][ T8238] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.515012][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 218.750997][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.763490][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.778114][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.792970][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.803503][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.811753][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.097754][ T8238] tipc: Disabling bearer [ 219.105217][ T8238] tipc: Left network mode [ 219.577932][ T8690] loop2: detected capacity change from 0 to 32768 [ 219.822196][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 220.092162][ T8709] loop1: detected capacity change from 0 to 32768 [ 220.322083][ T8716] loop3: detected capacity change from 0 to 32768 [ 220.370638][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.384329][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.410438][ T8693] device bridge_slave_0 entered promiscuous mode [ 220.479144][ T8716] XFS (loop3): Mounting V5 Filesystem [ 220.615102][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.622237][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.687311][ T8693] device bridge_slave_1 entered promiscuous mode [ 220.712996][ T8572] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.854926][ T8716] XFS (loop3): Ending clean mount [ 220.890676][ T8716] XFS (loop3): Quotacheck needed: Please wait. [ 220.915050][ T8572] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.924131][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 220.954238][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.984659][ T8572] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 221.002216][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.018102][ T8736] loop2: detected capacity change from 0 to 40427 [ 221.045814][ T8572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.071650][ T8736] F2FS-fs (loop2): invalid crc value [ 221.085386][ T8572] usb 2-1: config 0 descriptor?? [ 221.104948][ T8716] XFS (loop3): Quotacheck: Done. [ 221.112454][ T8736] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.260549][ T8736] F2FS-fs (loop2): recover fsync data on readonly fs [ 221.279126][ T8736] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 221.290097][ T8736] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.318197][ T8693] team0: Port device team_slave_0 added [ 221.340231][ T4271] XFS (loop3): Unmounting Filesystem [ 221.361669][ T8693] team0: Port device team_slave_1 added [ 221.485844][ T8238] IPVS: stopping master sync thread 5878 ... [ 221.520551][ T8572] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.001C/input/input21 [ 221.654368][ T8572] uclogic 0003:28BD:0933.001C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 221.769246][ T7209] usb 2-1: USB disconnect, device number 11 [ 221.889851][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.918846][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.958426][ T8763] loop2: detected capacity change from 0 to 1024 [ 221.967597][ T8761] fido_id[8761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 222.009373][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.009806][ T8763] EXT4-fs: Ignoring removed orlov option [ 222.064653][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.071639][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.072507][ T8763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.160997][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.201566][ T8763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.245883][ T8771] loop3: detected capacity change from 0 to 8 [ 222.274412][ T8771] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 222.297067][ T4387] udevd[4387]: incorrect cramfs checksum on /dev/loop3 [ 222.316399][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 222.362542][ T4387] udevd[4387]: incorrect cramfs checksum on /dev/loop3 [ 222.619157][ T8778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 222.626424][ T8778] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 222.687143][ T8778] vhci_hcd vhci_hcd.0: Device attached [ 222.702559][ T8693] device hsr_slave_0 entered promiscuous mode [ 222.721813][ T8693] device hsr_slave_1 entered promiscuous mode [ 222.729231][ T8780] vhci_hcd: connection closed [ 222.745185][ T8252] vhci_hcd: stop threads [ 222.762639][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.771256][ T8252] vhci_hcd: release socket [ 222.781661][ T8693] Cannot create hsr debugfs directory [ 222.821068][ T8252] vhci_hcd: disconnect device [ 222.861216][ T8238] device hsr_slave_0 left promiscuous mode [ 222.886571][ T8238] device hsr_slave_1 left promiscuous mode [ 222.920412][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.940899][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.990445][ T8238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.003464][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 223.017267][ T8790] loop1: detected capacity change from 0 to 4096 [ 223.030773][ T8238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.048762][ T8796] loop3: detected capacity change from 0 to 1024 [ 223.056218][ T8238] device bridge_slave_1 left promiscuous mode [ 223.063483][ T8238] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.083862][ T8790] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 223.114356][ T8238] device bridge_slave_0 left promiscuous mode [ 223.129932][ T8238] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.299580][ T8238] device veth1_macvtap left promiscuous mode [ 223.320861][ T8238] device veth0_macvtap left promiscuous mode [ 223.347574][ T8238] device veth1_vlan left promiscuous mode [ 223.362095][ T8238] device veth0_vlan left promiscuous mode [ 223.363805][ T4266] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 223.425167][ T8801] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 223.454039][ T4266] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 223.480216][ T4266] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 223.502365][ T3638] udevd[3638]: worker [4527] terminated by signal 33 (Unknown signal 33) [ 223.523453][ T3638] udevd[3638]: worker [4527] failed while handling '/devices/virtual/block/loop1' [ 224.378803][ T8820] loop3: detected capacity change from 0 to 32768 [ 224.430729][ T8820] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1624 (8820) [ 224.457526][ T8820] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 224.480772][ T8820] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 224.506086][ T8820] BTRFS info (device loop3): force zlib compression, level 3 [ 224.526696][ T8820] BTRFS info (device loop3): force clearing of disk cache [ 224.534443][ T8820] BTRFS info (device loop3): setting nodatasum [ 224.540649][ T8820] BTRFS info (device loop3): allowing degraded mounts [ 224.567648][ T8820] BTRFS info (device loop3): using free space tree [ 224.653144][ T8238] team0 (unregistering): Port device team_slave_1 removed [ 224.718229][ T8238] team0 (unregistering): Port device team_slave_0 removed [ 224.780468][ T8820] BTRFS info (device loop3): rebuilding free space tree [ 224.866692][ T8238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.879637][ T8820] BTRFS info (device loop3): balance: start -susage=30064771076,drange=7..526332,limit=0..6 [ 224.892182][ T8820] BTRFS info (device loop3): left=0, need=98304, flags=2 [ 224.908109][ T8820] BTRFS info (device loop3): space_info SYSTEM has 0 free, is not full [ 224.917112][ T8820] BTRFS info (device loop3): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 224.923085][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.930960][ T8820] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792 [ 224.947736][ T8820] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0 [ 224.955471][ T8820] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0 [ 224.963231][ T8820] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0 [ 224.971071][ T8820] BTRFS info (device loop3): delayed_refs_rsv: size 0 reserved 0 [ 225.035642][ T8238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.093575][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 225.111854][ T8820] BTRFS info (device loop3): relocating block group 1048576 flags system [ 225.275312][ T8820] BTRFS info (device loop3): balance: ended with status: 0 [ 225.418486][ T4271] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 226.123872][ T8842] loop3: detected capacity change from 0 to 40427 [ 226.154539][ T8842] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 226.162329][ T8842] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 226.219264][ T8842] F2FS-fs (loop3): invalid crc value [ 226.275423][ T8238] bond0 (unregistering): Released all slaves [ 226.299513][ T8842] F2FS-fs (loop3): Found nat_bits in checkpoint [ 226.373859][ T8842] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 226.387971][ T8842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.542612][ T4271] syz-executor: attempt to access beyond end of device [ 226.542612][ T4271] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 227.012329][ T8693] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.054884][ T8693] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.130508][ T8693] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.168490][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 227.184525][ T8693] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.409666][ T8878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1627'. [ 227.613249][ T5019] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 227.628648][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.657710][ T8858] loop2: detected capacity change from 0 to 32768 [ 227.675273][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.689274][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.740747][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.783559][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.803108][ T5019] usb 2-1: Using ep0 maxpacket: 8 [ 227.803691][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.814091][ T8858] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 227.827419][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.834693][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.838541][ T5019] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 227.851833][ T5019] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.860052][ T5019] usb 2-1: Product: syz [ 227.861101][ T8858] XFS (loop2): Mounting V5 Filesystem [ 227.864444][ T5019] usb 2-1: Manufacturer: syz [ 227.874540][ T5019] usb 2-1: SerialNumber: syz [ 227.881254][ T5019] usb 2-1: config 0 descriptor?? [ 227.889096][ T5019] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 227.898141][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.905704][ T5019] usb 2-1: setting power ON [ 227.914193][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.927273][ T5019] dvb-usb: bulk message failed: -22 (2/0) [ 227.941148][ T5019] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 227.960461][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.970932][ T5019] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 227.985742][ T5019] usb 2-1: media controller created [ 227.991436][ T8238] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.993059][ T8858] XFS (loop2): Ending clean mount [ 227.998653][ T8238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.030818][ T5019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.041481][ T8858] XFS (loop2): Quotacheck needed: Please wait. [ 228.051670][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 228.098418][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 228.102485][ T8874] dvb-usb: bulk message failed: -22 (3/0) [ 228.143420][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 228.166376][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 228.191693][ T5019] usb 2-1: selecting invalid altsetting 6 [ 228.218210][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 228.220382][ T5019] usb 2-1: digital interface selection failed (-22) [ 228.239378][ T5019] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 228.267172][ T8858] XFS (loop2): Quotacheck: Done. [ 228.268119][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 228.272376][ T5019] usb 2-1: setting power OFF [ 228.297020][ T5019] dvb-usb: bulk message failed: -22 (2/0) [ 228.302798][ T5019] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 228.313461][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 228.325816][ T5019] (NULL device *): no alternate interface [ 228.341872][ T8693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.347605][ T5019] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 228.370172][ T8693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.383231][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 228.391889][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 228.395163][ T5019] usb 2-1: USB disconnect, device number 12 [ 228.489244][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 228.530457][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.556890][ T4270] XFS (loop2): Unmounting Filesystem [ 228.570495][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.388302][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.408766][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.464257][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.753018][ T5019] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 229.895885][ T8957] loop3: detected capacity change from 0 to 512 [ 229.972612][ T5019] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.995865][ T8957] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.995917][ T5019] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 230.020291][ T8957] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.044677][ T5019] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.070695][ T5019] usb 1-1: config 0 descriptor?? [ 230.148168][ T126] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 230.207059][ T8933] loop1: detected capacity change from 0 to 32768 [ 230.247190][ T8933] JBD2: Ignoring recovery information on journal [ 230.316584][ T8933] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 230.343525][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 230.354803][ T126] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 230.372904][ T126] usb 3-1: config 0 has no interface number 0 [ 230.379157][ T126] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 230.399861][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.425790][ T126] usb 3-1: config 0 descriptor?? [ 230.447375][ T126] usb 3-1: selecting invalid altsetting 1 [ 230.497058][ T126] dvb_ttusb_budget: ttusb_init_controller: error [ 230.512583][ T5019] sigmamicro 0003:1C4F:0059.001D: hidraw0: USB HID v1.05 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0 [ 230.533076][ T126] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 230.591528][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.612298][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.683657][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.718151][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 230.733587][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.780821][ T8693] device veth0_vlan entered promiscuous mode [ 230.817895][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.826341][ T7] usb 1-1: USB disconnect, device number 12 [ 230.872709][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.887997][ T126] DVB: Unable to find symbol cx22700_attach() [ 230.941350][ T8693] device veth1_vlan entered promiscuous mode [ 231.009383][ T8976] fido_id[8976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 231.036657][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 231.064059][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 231.094065][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 231.108135][ T126] DVB: Unable to find symbol tda10046_attach() [ 231.115702][ T126] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 231.127428][ T2965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 231.141411][ T126] usb 3-1: USB disconnect, device number 13 [ 231.151816][ T8693] device veth0_macvtap entered promiscuous mode [ 231.179516][ T8693] device veth1_macvtap entered promiscuous mode [ 231.268976][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.285190][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.327382][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.340411][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.356266][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.397832][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.442357][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.488706][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.527744][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.561577][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 231.573976][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.582199][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.611502][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.644837][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.656354][ T9000] loop3: detected capacity change from 0 to 512 [ 231.670522][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.680791][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.692310][ T9000] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.699273][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.709982][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.740626][ T9000] EXT4-fs (loop3): orphan cleanup on readonly fs [ 231.753056][ T5016] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 231.760782][ T9000] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 231.792372][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.814349][ T9000] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1667: attempt to clear invalid blocks 2 len 1 [ 231.823392][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.840610][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.852389][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.861194][ T9000] EXT4-fs (loop3): Remounting filesystem read-only [ 231.864303][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.884790][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.891489][ T9000] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 231.930077][ T9000] EXT4-fs (loop3): Remounting filesystem read-only [ 231.931838][ T8693] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.946095][ T9000] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1667: invalid indirect mapped block 1819239214 (level 0) [ 231.962537][ T8693] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.972702][ T8693] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.994435][ T8693] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.997722][ T5016] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 232.023436][ T9000] EXT4-fs (loop3): Remounting filesystem read-only [ 232.043020][ T5016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.051121][ T5016] usb 2-1: Product: syz [ 232.055782][ T9000] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1667: invalid indirect mapped block 1819239214 (level 1) [ 232.073330][ T5016] usb 2-1: Manufacturer: syz [ 232.078006][ T5016] usb 2-1: SerialNumber: syz [ 232.101504][ T5016] usb 2-1: config 0 descriptor?? [ 232.115724][ T5016] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 232.121960][ T9000] EXT4-fs (loop3): Remounting filesystem read-only [ 232.141799][ T9000] EXT4-fs (loop3): 1 truncate cleaned up [ 232.171803][ T9000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 232.396448][ T8239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.409615][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 232.443358][ T8239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.505363][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.510639][ T8238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.535628][ T5016] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 232.568942][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.624190][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.805269][ T5016] usb 2-1: USB disconnect, device number 13 [ 232.903921][ T9029] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 233.277205][ T9018] loop2: detected capacity change from 0 to 32768 [ 233.301208][ T9018] [ 233.301208][ T9018] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.301208][ T9018] [ 233.332938][ T14] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 233.373025][ T126] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 233.425187][ T9018] ERROR: (device loop2): diWrite: ixpxd invalid [ 233.425187][ T9018] [ 233.473956][ T9018] ERROR: (device loop2): txCommit: [ 233.473956][ T9018] [ 233.502314][ T9050] jfs_create: dtSearch returned -17 [ 233.524550][ T14] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.566751][ T14] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.576902][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 233.584523][ T126] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 233.612934][ T126] usb 7-1: config 0 has no interface number 0 [ 233.619499][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 233.629234][ T126] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 233.651602][ T14] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 233.670366][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.688338][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.696552][ T126] usb 7-1: Product: syz [ 233.700750][ T126] usb 7-1: Manufacturer: syz [ 233.706043][ T4270] [ 233.706043][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.706043][ T4270] [ 233.706190][ T126] usb 7-1: SerialNumber: syz [ 233.722748][ T14] usb 1-1: config 0 descriptor?? [ 233.733558][ T126] usb 7-1: config 0 descriptor?? [ 233.754532][ T126] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 233.767024][ T4270] [ 233.767024][ T4270] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 233.767024][ T4270] [ 233.961454][ T126] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 234.012173][ T126] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 234.142378][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.163182][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.203542][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.211109][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.239760][ T9066] loop2: detected capacity change from 0 to 512 [ 234.263167][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.295324][ T9066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 234.314164][ T9066] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.319923][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.356897][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.397376][ T14] holtek_mouse 0003:04D9:A067.001E: unknown main item tag 0x0 [ 234.424897][ T9053] loop1: detected capacity change from 0 to 32768 [ 234.427449][ T14] holtek_mouse 0003:04D9:A067.001E: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.0-1/input0 [ 234.460885][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 234.524251][ T14] usb 1-1: USB disconnect, device number 13 [ 234.567100][ T7491] usb 7-1: USB disconnect, device number 2 [ 234.581181][ T7491] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 234.605146][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 234.612201][ T9053] XFS (loop1): Mounting V5 Filesystem [ 234.628037][ T7491] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 234.647821][ T7491] quatech2 7-1:0.51: device disconnected [ 234.859283][ T9053] XFS (loop1): Ending clean mount [ 234.920604][ T9077] fido_id[9077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 235.083556][ T4266] XFS (loop1): Unmounting Filesystem [ 235.149078][ T9094] loop2: detected capacity change from 0 to 1024 [ 235.200442][ T7491] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.376603][ T9102] loop6: detected capacity change from 0 to 8 [ 235.423206][ T7491] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.452590][ T7491] usb 4-1: config 1 has an invalid interface number: 82 but max is 1 [ 235.497740][ T7491] usb 4-1: config 1 has no interface number 1 [ 235.540371][ T7491] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.561581][ T9102] SQUASHFS error: Unable to read directory block [2c0:35] [ 235.588042][ T7491] usb 4-1: too many endpoints for config 1 interface 82 altsetting 79: 80, using maximum allowed: 30 [ 235.619760][ T7491] usb 4-1: config 1 interface 82 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 80 [ 235.671260][ T7491] usb 4-1: config 1 interface 0 has no altsetting 0 [ 235.691676][ T7491] usb 4-1: config 1 interface 82 has no altsetting 0 [ 235.724758][ T7491] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 235.754854][ T7491] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.775174][ T7491] usb 4-1: Product: syz [ 235.779386][ T7491] usb 4-1: Manufacturer: syz [ 235.819589][ T7491] usb 4-1: SerialNumber: syz [ 235.883755][ T9117] loop1: detected capacity change from 0 to 2048 [ 235.914861][ T9117] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 236.013079][ T4900] udevd[4900]: incorrect nilfs2 checksum on /dev/loop1 [ 236.020271][ T9120] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.054616][ T7491] smsusb:smsusb_probe: board id=8, interface number 0 [ 236.094666][ T7491] smsusb:smsusb_probe: board id=8, interface number 82 [ 236.132240][ T7491] usb 4-1: USB disconnect, device number 12 [ 236.323562][ T9127] binder: 9126:9127 ioctl 541b 0 returned -22 [ 236.582142][ T9108] loop2: detected capacity change from 0 to 32768 [ 237.274010][ T9137] loop3: detected capacity change from 0 to 65536 [ 237.400826][ T9137] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 237.488499][ T7491] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x18d/0x250, xfs_agi block 0x8002 [ 237.515290][ T7491] XFS (loop3): Unmount and run xfs_repair [ 237.521171][ T7491] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 237.530955][ T7491] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 237.540844][ T7491] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 237.551483][ T7491] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 237.560707][ T7491] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 237.570892][ T7491] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 237.580784][ T7491] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 237.590220][ T7491] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 237.600001][ T7491] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 237.609630][ T9137] XFS (loop3): metadata I/O error in "xfs_read_agi+0x295/0x650" at daddr 0x8002 len 1 error 74 [ 238.214435][ T9175] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 238.243088][ T14] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.418253][ T14] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 238.647125][ T9189] loop1: detected capacity change from 0 to 4096 [ 238.713008][ T14] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 238.739258][ T9194] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.903020][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 238.910555][ T14] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 238.931651][ T9197] loop6: detected capacity change from 0 to 764 [ 238.958023][ T9197] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.963035][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.021593][ T14] usb 4-1: config 0 descriptor?? [ 239.301704][ T9208] loop6: detected capacity change from 0 to 512 [ 239.462771][ T9208] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 239.474933][ T14] lua 0003:1E7D:2C2E.001F: item fetching failed at offset 3/7 [ 239.493457][ T14] lua 0003:1E7D:2C2E.001F: parse failed [ 239.500551][ T14] lua: probe of 0003:1E7D:2C2E.001F failed with error -22 [ 239.501252][ T9208] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.733667][ T8572] usb 4-1: USB disconnect, device number 13 [ 239.783675][ T8693] EXT4-fs (loop6): unmounting filesystem. [ 240.289330][ T7603] usb 6-1: [UEAGLE-ATM] firmware is not available [ 240.298279][ T5027] usb 3-1: [UEAGLE-ATM] firmware is not available [ 240.318885][ T7605] usb 6-1: [UEAGLE-ATM] firmware is not available [ 240.327647][ T4376] ------------[ cut here ]------------ [ 240.334051][ T4376] sysfs group 'power' not found for kobject 'ueagle-atm!eagleI.fw' [ 240.362498][ T4376] WARNING: CPU: 1 PID: 4376 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x290 [ 240.372193][ T4376] Modules linked in: [ 240.376188][ T4376] CPU: 1 PID: 4376 Comm: kworker/1:5 Not tainted 6.1.147-syzkaller #0 [ 240.384421][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.395090][ T4376] Workqueue: events request_firmware_work_func [ 240.401333][ T4376] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 240.407214][ T4376] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 8e 02 cc ff 49 8b 17 48 c7 c7 e0 6a 9c 8a 48 89 de e8 3c 08 48 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 e5 7b ff [ 240.426899][ T4376] RSP: 0018:ffffc90004aaf880 EFLAGS: 00010246 [ 240.433025][ T4376] RAX: 11e7411deba9a900 RBX: ffffffff8b02f900 RCX: ffff88802f018000 [ 240.441097][ T4376] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 240.449121][ T4376] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 240.457164][ T4376] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: 1ffffffff1605f24 [ 240.465197][ T4376] R13: dffffc0000000000 R14: ffff888058f9c910 R15: ffff88807fb45008 [ 240.473249][ T4376] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 240.482207][ T4376] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.488865][ T4376] CR2: 00007ff200fed4a0 CR3: 000000005db3f000 CR4: 00000000003506e0 [ 240.496895][ T4376] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.504942][ T4376] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.512978][ T4376] Call Trace: [ 240.516272][ T4376] [ 240.519251][ T4376] ? sysfs_unmerge_group+0x109/0x130 [ 240.520605][ T9249] loop3: detected capacity change from 0 to 256 [ 240.524592][ T4376] device_del+0x2ae/0xa70 [ 240.524669][ T4376] ? kill_device+0x160/0x160 [ 240.524685][ T4376] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 240.545811][ T4376] ? _raw_spin_unlock+0x40/0x40 [ 240.550695][ T4376] ? complete_all+0xc5/0x1d0 [ 240.555394][ T4376] firmware_fallback_sysfs+0x67e/0x930 [ 240.560896][ T4376] _request_firmware+0xcad/0x1290 [ 240.566015][ T4376] ? request_firmware+0x50/0x50 [ 240.570944][ T4376] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 240.577021][ T4376] ? read_lock_is_recursive+0x10/0x10 [ 240.582425][ T4376] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 240.588444][ T4376] request_firmware_work_func+0xac/0x1b0 [ 240.594160][ T4376] ? process_one_work+0x7a1/0x1160 [ 240.599300][ T4376] process_one_work+0x898/0x1160 [ 240.604519][ T4376] ? worker_detach_from_pool+0x240/0x240 [ 240.610188][ T4376] ? _raw_spin_lock_irq+0xab/0xe0 [ 240.615291][ T4376] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 240.620731][ T4376] ? kthread_data+0x4b/0xc0 [ 240.625329][ T4376] worker_thread+0xaa2/0x1250 [ 240.630065][ T4376] ? __kthread_parkme+0x162/0x1c0 [ 240.635399][ T4376] kthread+0x29d/0x330 [ 240.637506][ T26] audit: type=1800 audit(1753345149.042:72): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1743" name="file1" dev="loop3" ino=1048750 res=0 errno=0 [ 240.639481][ T4376] ? worker_clr_flags+0x1a0/0x1a0 [ 240.665398][ T4376] ? kthread_blkcg+0xd0/0xd0 [ 240.670048][ T4376] ret_from_fork+0x1f/0x30 [ 240.674552][ T4376] [ 240.677599][ T4376] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.684893][ T4376] CPU: 1 PID: 4376 Comm: kworker/1:5 Not tainted 6.1.147-syzkaller #0 [ 240.693063][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.703128][ T4376] Workqueue: events request_firmware_work_func [ 240.709307][ T4376] Call Trace: [ 240.712600][ T4376] [ 240.715557][ T4376] dump_stack_lvl+0x168/0x22e [ 240.720253][ T4376] ? memcpy+0x3c/0x60 [ 240.724255][ T4376] ? show_regs_print_info+0x12/0x12 [ 240.729462][ T4376] ? load_image+0x3b0/0x3b0 [ 240.733986][ T4376] panic+0x2c9/0x710 [ 240.737887][ T4376] ? bpf_jit_dump+0xd0/0xd0 [ 240.742383][ T4376] ? ret_from_fork+0x1f/0x30 [ 240.747022][ T4376] __warn+0x2f8/0x4f0 [ 240.751024][ T4376] ? sysfs_remove_group+0x174/0x290 [ 240.756254][ T4376] ? sysfs_remove_group+0x174/0x290 [ 240.761472][ T4376] report_bug+0x2ba/0x4f0 [ 240.765817][ T4376] ? sysfs_remove_group+0x174/0x290 [ 240.771051][ T4376] handle_bug+0x3a/0x70 [ 240.775223][ T4376] exc_invalid_op+0x16/0x40 [ 240.779744][ T4376] asm_exc_invalid_op+0x16/0x20 [ 240.784620][ T4376] RIP: 0010:sysfs_remove_group+0x174/0x290 [ 240.790448][ T4376] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 8e 02 cc ff 49 8b 17 48 c7 c7 e0 6a 9c 8a 48 89 de e8 3c 08 48 ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e6 e5 7b ff [ 240.810071][ T4376] RSP: 0018:ffffc90004aaf880 EFLAGS: 00010246 [ 240.816504][ T4376] RAX: 11e7411deba9a900 RBX: ffffffff8b02f900 RCX: ffff88802f018000 [ 240.824498][ T4376] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 240.832484][ T4376] RBP: dffffc0000000000 R08: dffffc0000000000 R09: ffffed10171e4f34 [ 240.840470][ T4376] R10: ffffed10171e4f34 R11: 1ffff110171e4f33 R12: 1ffffffff1605f24 [ 240.848460][ T4376] R13: dffffc0000000000 R14: ffff888058f9c910 R15: ffff88807fb45008 [ 240.856477][ T4376] ? sysfs_unmerge_group+0x109/0x130 [ 240.861788][ T4376] device_del+0x2ae/0xa70 [ 240.866150][ T4376] ? kill_device+0x160/0x160 [ 240.870760][ T4376] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 240.876678][ T4376] ? _raw_spin_unlock+0x40/0x40 [ 240.881556][ T4376] ? complete_all+0xc5/0x1d0 [ 240.886178][ T4376] firmware_fallback_sysfs+0x67e/0x930 [ 240.891668][ T4376] _request_firmware+0xcad/0x1290 [ 240.896741][ T4376] ? request_firmware+0x50/0x50 [ 240.901613][ T4376] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 240.907619][ T4376] ? read_lock_is_recursive+0x10/0x10 [ 240.913017][ T4376] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 240.918957][ T4376] request_firmware_work_func+0xac/0x1b0 [ 240.924619][ T4376] ? process_one_work+0x7a1/0x1160 [ 240.929749][ T4376] process_one_work+0x898/0x1160 [ 240.934718][ T4376] ? worker_detach_from_pool+0x240/0x240 [ 240.940374][ T4376] ? _raw_spin_lock_irq+0xab/0xe0 [ 240.945424][ T4376] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 240.950819][ T4376] ? kthread_data+0x4b/0xc0 [ 240.955354][ T4376] worker_thread+0xaa2/0x1250 [ 240.960066][ T4376] ? __kthread_parkme+0x162/0x1c0 [ 240.965122][ T4376] kthread+0x29d/0x330 [ 240.969213][ T4376] ? worker_clr_flags+0x1a0/0x1a0 [ 240.974258][ T4376] ? kthread_blkcg+0xd0/0xd0 [ 240.978885][ T4376] ret_from_fork+0x1f/0x30 [ 240.983345][ T4376] [ 240.986780][ T4376] Kernel Offset: disabled [ 240.991218][ T4376] Rebooting in 86400 seconds..