last executing test programs:

3m36.572770435s ago: executing program 0 (id=1138):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

3m36.266974155s ago: executing program 0 (id=1142):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0)

3m35.80491113s ago: executing program 0 (id=1147):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x9312}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeffffff}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x1000, &(0x7f0000000cc0)=""/4096, 0x78db73d0a77af0fb, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

3m35.548893256s ago: executing program 0 (id=1150):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

3m35.297458871s ago: executing program 0 (id=1154):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m34.755439054s ago: executing program 0 (id=1156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000)

3m34.180371721s ago: executing program 32 (id=1156):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000)

3m10.09452555s ago: executing program 1 (id=1302):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)=ANY=[], 0x21, 0x61f7, &(0x7f000000d780)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)

3m8.397351018s ago: executing program 1 (id=1318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020000100feffffff2000000181"], 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00!'], 0x28}}, 0x0)

3m7.390087458s ago: executing program 1 (id=1326):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94)

3m6.994785817s ago: executing program 1 (id=1327):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f00000013c0)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,nointegrity,iocharset=cp1251,integrity,nodiscard,noquota,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00c38b4986bd7086e58f5d7fd70ab0f8e8bb0e5f5b35be555a19034ea00aa5cc6053411b1c187a24d1f68a37ecec3d26f9ba8207f6ce22b0a47e28485c69c14dc952b0c5e5f1ffe29eb2ce10e7e2a59e32a5a7ea7d8a6fa0b5e90476f3fa2cb4fcba14a881906678b3f96174c0ea0e4edc3068e37fec09729df129bb3e5b9490df2879472cb2e2"], 0x24, 0x621a, &(0x7f0000001500)="$eJzs3cuPHFfZB+C3+jaXfHGsLKJ8FhKTxFxCiK/BGAIkWcCCDQvkHUK2JpPIwgFkG+REFp5otuzZgpBYIsSSFX9AFmzZsUXCko0EygJSqGbOGddUuqdnbE9Xt+t5pHHV26dq+pR/XX2ZquoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB89zvfP1tExOWfpxuOR/xf9CN6EStVvRYRK2vH6+s8H9vN8VxEDJciqvW3/3km4rWI+OhYxL37t9erm88dsB/f/sNff/vDp773l98PT//7jzf7r09a7tatX/7rT3cefnsBAACgi8qyLIv0Mf9ERAzSZ3sA4MmXX//LJN+unrt6c876o1ar1eoFrOvK8e7Ui4jYrK9TvWdwOB4AFsxmfNx2F2iR/DttEBFPtd0JYK4VbXeAI3Hv/u31IuVb1F8P1nba87kge/LfLHav75g0naZ5jsmsHl9b0Y9nJ/RnZUZ9mCc5/14z/8s77aO03FHnPyuT8h/tXPrUOTn/fjP/hicn/97Y/Lsq5z84VP59+QMAAAAAwBzLf/8/3vLx36VH35QD2e/479qM+gAAAAAAAAAAj9thx/8bNMb/22X8PwAAAJhb1Wf1yq+PPbht0nexVbdfKiKebiwPdEy6WGa17X4AAAAAAAAAAAAAQJcMds7hvVREDCPi6dXVsiyrn7pmfViPuv6i6/r2Q5e1/SQPAAA7PjrWuJa/iFiOiEvpu/6Gq6urZbm8slqulitL+f3saGm5XKl9rs3T6ral0QHeEA9GZfXLlmvr1U37vDytvfn7qvsalf0DdGw2WgwcACJi59Xo3qRXpP94vVpMZflMtPwmhwWxz/7PgrL/cxBtP04BAACAo1eWZVmkr/M+kY7599ruFAAwE/n1v3lcQK1Wq9Xqg9e/+uzffzBP/VFPquvK8e7Ui4jYrK9TvWcwHD8ALJjN+LjtLtAi+XfaICKeb7sTwFwr2u4AR+Le/dvrRcq3qL8epPHd87kge/LfLLbXy+uPm07TPMdkVo+vrejHsxP689yM+jBPcv69Zv6Xd9pHablHz7/c82fCts4xmpR/tZ3HW+hP23L+/Wb+DUe9/8/KVvTG5t9VOf/BofLvyx8AAAAAAOZY/vv/8bk6/jt62M2Zar/jv2tj1zi6vgAAAAAAAADA43Lv/u31fN1rPv7/mTHLuf7zyZTzL+TfSTn/XiP/LzaW69fm7771IP9/3r+9/rub//j/PD1o/kt5pkiPrCI9Iop0T8UgTR9l6z5ta9gfVfc0LHr9QTrnpxy+E1fjWmzEmT3L9tL/x4P2s3vaq54Ot9vL/k77uT3tg932vP75Pe3DdHZRuZLbT8V6/CSuxdvb7VXb0pTtX57SXk5pz/n37f+dlPMf1H6q/FdTe9GYVu5+2PvUfl+fjrufN6/+d59vHp6drejvbltdtX0vttCf7Wecp0bxsxsb10/dunLz5vWzkSZ7bj0XafKY5fyH6Wf3+f+lnfb8vF/fX+9+ODp0/vNiKwYT83+pNl9t78sz7lsbcv6j9JPzfzu1j9//Fzn/yfv/Ky30BwAAAAAAAAAAAAAAAPZTluX2JaJvRsSFdP1PW9dmAgCzlV//y8ZV+rOq+zO+P7V6wetizvoz0/qTcr76o1YvYl1XjvdGvYiIP9fXqd4z/GLcLwMA5tknEfG3tjtBa+TfYfn7/qrpybY7A8zUjfc/+NGVa9c2rt9ouycAAAAAAAAAwMPK43+u1cZ/PlmW5Z3GcnvGf30r1h51/M9BntkdYHTCQNX9w2/TfrZ6o36vNtz4CzFp/O/h7tx+438PptzfcEr7aEr70pT25Snt04Zbzvm/UBvv/GREnGgMv96F8V+bY953Qc7/xdrjucr/C43l6vmXv1nk/Ht78j99872fnr7x/gevXn3vyrsb7278+PzZs2fOX7hw8eLF0+9cvbZxZuffFnt8tHL+eexr54F2S84/Zy7/bsn5fy7V8u+WnP/nUy3/bsn55/d78u+WnH/+7CP/bsn5v5xq+XdLzv9LqZZ/t+T8X0m1/Lsl5//lVMu/W3L+r6Za/t2S8z+Vavl3S87/dKoPmP/KUfeL2cj55yNc9v9uyfnnMxvk3y05/3Opln+35PzPp1r+3ZLzfy3V8u+WnP9XUi3/bsn5X0i1/Lsl5//VVMu/W3L+F1Mt/27J+X8t1fLvlpz/11Mt/27J+b+eavl3S87/G6mWf7fk/L+Zavl3S87/W6mWf7fk/N9Itfy75cH3/5sxY8ZMnmn7mQkAAAAAAAAAAAAAaJrF6cRtbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2MHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7uxi5zvp+4Gf2zWsHEgMhfyd/A2vHGONssuuX+IXWxSThpeGtBEKhL9iud20W/IbXLoFGsmmgRMKoqKJtuGgLKGpzU+GLXNAqoFygVkiVSHtBbxAVKhdRFVBAqkQryFZz5nmenZmdndn1rtdnzvl8JPvnnTkz5zlnnnN2frv+zgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmm25f/rztSzL6n/yvzZm2cvq/14/tjG/7U03eoQAAADASv0q//vFW9INh5fwoKZl/vm133t6bm5uLvvQ4J8Pf3luLt0xlmXD67Isvy+6+qMP15qXCR7LRmsDTV8P9Fj9YI/7h3rcP9zj/pEe96/rcf9oj/sX7IAF1jd+HpM/2bb8nxsbuzS7NRvO79vW4VGP1dYNDMSf5eRq+WPmhk9kM9mpbDqbbFm+sWwtX/6ZLfV1vSOL6xpoWtfm+gz52aPH4xhqYR9va1nX/HNGP3lLNvbznz16/G8vvHB7p9pzN7Q8X2OcO7bWx/nZcEtjrLVsXdoncZwDTePc3OE1GWwZZy1/XP3f7eN8cYnjHJwf5ppqf81Hs4H838/l+2mo+cd6aT9tDrf94s4syy7PD7t9mQXrygayDS23DMy/PqONGVl/jvpUemU2tKx5umUJ87Rep7a1ztP2YyK+/lvC44YWGUPzy/STz4w0ve6/nLuWeRrVt3qxY6V9Dq72sVKUORjnxXP5Rj/ecQ5uC9v/6PbF52DHudNhDqbtbpqDW3vNwYGRwXzM6UWo5Y+Zn4O7WpYfzNdUy+vz27vPwYkLp89NzH7q03fPnD52cvrk9Jk9u3ZN7tm378CBAxMnZk5NTzb+vsa9XXwbsoF0DGwN+y4eA29oW7Z5qs59bWTB+fdaj8PRLsfhxrZlV/s4HGrfuNraHJAL53Tj2PhAfaePXhnIFjnG8tdn58qPw7TdTcfhUNNx2PF7SofjcGgJx2F9mXM7l/aeZajpT6cxLP69YGVzcGPTHGx/P9I+B1f7/UhR5uBomBc/2Ln494LNYbyPjy/3/cjggjmYNjece+q3pPf7owfy0mle3lG/46aR7OLs9Pl7Hjl24cL5XVkoa+JVTXOlfb5uaNqmbMF8HVj2fD0889rH7+hw+8awr0bvrv81uuhrVV9m7z3dX6v8u1vn/dly6+4slFW21vuz03fz+v4cybKvfOczD33r0a/cv+j+rPebn51Y+Xvx1Jc2nX+HFzn/xr7/pcb60lM9Njg81Dh+B9PeGW45H7e+VEP5uauWr/vFiaWdj4fDn7U+H9/a5Xy8qW3Z1T4fD7dvXDwf13r9tGNl2l/P0TBPTk12Px/Xl9m0e7lzcqjr+fjOUGth/78xdAqpL2qaO4vN27SuoaHhsF1DcQ2t83RPy/LDoTerr+up3eFNYRrl0ubpjjsbyw82PS5aq3k61rbsas/T9LOvxeZprddP365N++s5GubFrXu6z9P6Ms/uXfm5c338Z9O5c6TXHBweHKmPeThNwvx8n82tj3Pwnux4djY7lU3l947k86mWr2v83qWdK0fCn7U+V27qMgd3tC272nMwfR9bbO7VhhZu/Cpofz1Hw7x44t7uc7C+zAP7V/e9645wS1qm6b1r+8/XFvuZ1x1tu+l6zZWhMM7v7O/+s9n6MqcOLLfP7L6f7gq33NRhP7Ufv4sdU1PZ2uynTWGcLxxYfD/Vx1Nf5ssHlzifDmdZdukT9+U/7w2/X7l08ftPt/zepdPvdC594r6fvvzEPy1n/AD0v5caZUPje13Tb6aW8vt/AAAAoC/Evn8g1ET/DwAAAKUR+/74v8IT/T8AAACURuz7h0JNytD//3HvRTY98MLMS5eylMyfC+L9aTc82FguZlwnw9djc/Pqt9/35PR//+OlpQ1vIMuyXz74Rx2X3/RgHFfDWBjn1be23r7A03cvad1HH76U1tucX/9qeP64PUudBp0iuJNZlj1zyxfz9Yx9+Epen33waF4fuvz4Y/VlXjzY+Do+/vlXNZb/qxD+PXziWMvjnw/74cehTr6z8/6Ij/vGlTdu3v/B+fXFx9W23pxv9hMfaTxv/JycLz3WWD7u58XG/60vPPWN+vKPvL7z+C8NdB7/U+F5nwz1f17TWL75Nah/HR/3uTD+uL74uHu+/u2O47/6+cby597WWO5oqHH9O8LX2972wkzz/nqkdqxlu7K3N5aL65/8/p/m98fni8/fPv7RI1da9kf7/Hj23xrPM9G2fLw9rif6h7b115+neX7G9T/1J0db9nOv9V996PnX1J+3ff13tS137hM78/XPP1/rJzb99ee+2HF9cTyH//5cy/Ycfl84jsP6n/hImI/h/v+92ni+9k9XOPq+1vNPXP6rGy+1bE/0jp831n/1zSfzum50/YabXvbymy+/rr7vsuy5dY3n67X+k39ztmX8X7utsT/i/TGj377+xcT1n//k+JmzsxdnptJeffSW/LNz3tUYTxzvLeHc2v71kbMXPjp9fmxybDLLxsr7EXrX7Ouh/rRRLndfem7BGXTnw+H1vOMvn9mw/V+/EG//9w80br/yzsb3rTeE5b4Ubt8YXr/lrX+hJ7bclh/ftWfDCOcWfl7wSmze9l8HlrRg2P729wVxvp979Ufz/VC/L/++EY/rFY7/h1ON5/lm2K9z4ZOZt942v77m5eNnI1x5f+N4X/H+C6e5+Lr+XXi93/3jxvPHccXt/WF4H/PtTa3nuzg/vnlpoP3580/xuBzOJ9nlxv1xqbi/r7x4W8fhxc8hyS7fnn/9Z+l5bl/WZi5m9lOzE6dmzlx8ZOLC9OyFidlPffrI6bMXz1w4kn+W55GP9Xr8/PlpQ35+mpretzfLz1ZnG+U6u9HjP/fw8an9k9unpk8cu3jiwsPnps+fPD47e3x6anb7sRMnpj/Z6/EzU4d27T64Z//u8ZMzU4cOHDy45+D4zJmz9WE0BtXDvsmPj585fyR/yOyhvQd33Xvv3snx02enpg/tn5wcv9jr8fn3pvH6o/9w/Pz0qWMXZk5Pj8/OfHr60K6D+/bt7vlpgKfPnZgdmzh/8czExdnp8xONbRm7kN9c/97X6/GU0+x/NN7Ptqs1Pogve+9d+9Lns9Y9+ZlFn6qxSNsHiL4QPovmu684d2ApX8e+fzjUpAz9PwAAAJCLff9IqIn+HwAAAEoj9v3rQk30/wAAAFAase8fDTX9l4CK9P+ly/9vurSk9cv/y/837y/5/4rl/99ftPx/43wh/786Vpq/l/8Pipn/H87k/+X/Czx++X/5fxYqWv4/9v3rs8zv/wEAAKCkYt+/IdRE/w8AAAClEfv+m0JN9P8AAABQGrHvf1moSUX6f/l/+X/5/5Lm/4cWX7/8v/x/mcn/d9fn+X/X/1+D/H9Wrfz/5dUc/w3I/69v/kL+nyIqWv4/9v0vDzWpSP8PAAAAVRD7/ptDTfT/AAAAUBqx778l1ET/DwAAAKUR+/6NoSYV6f/l/1eU/0+ZK/n/1vHL/7dy/f8wH+T/5f/XgPx/d/L/Pcj/u/5/f+X/W8j/U0RFy//Hvv8VoSYV6f8BAACgCmLf/8pQE/0/AAAAFM/QtT0s9v2vCjVZ0P9f4woAAACAGy72/bdmbUHwivz+X/7f9f/l/+X/5f87r3/p+f/BTP6/OOT/u5P/70H+X/5f/l/+n1VVtPx/3vdno9mrQ00q0v8DAABAFcS+/7ZQE/0/AAAAlEbs+/9fqIn+HwAAAEoj9v2bQk0q0v/L/5cm//+L5pdO/l/+v9v65f9d/7/M5P+7k//vQf5f/l/+X/6fVVW0/H/s+28PNalI/w8AAABVEPv+O0JN9P8AAABQGrHv//+hJvp/AAAAKI3Y928ONalI/y//X/D8f0yOuv6//L/8fyHz/6Py/4Uj/9+d/H8P8v/y//L/8v+sqqLl/2Pf/5pQk4r0/wAAAFAFse9/baiJ/h8AAABKI/b9rws10f8DAABAacS+fyzUpCL9/3Ly/7XL8v+Luc7X/x9ZwvX/W8j/y/93W7/8v+v/l5n8f3fy/z3I/8v/y//L/7Oqipb/j33/llCTivT/AAAAUAWx798aaqL/BwAAgNKIff+doSb6fwAAACiN2PdvCzWpSP/v+v99kf/P5P/l/+X/5f/l/5dG/r87+f8e5P/l/+X/5f9ZVUXL/8e+//WhJhXp/wEAAKAKYt+/PdRE/w8AAAClEfv+N4Sa6P8BAACgNGLfvyPUpCL9v/y//L/8f1/k/+9fn8n/y//L/y+F/H938v89yP/L/8v/y/+zqoqW/499/xtDTSrS/wMAAEAVxL5/Z6iJ/h8AAABKI/b9d4Wa6P8BAACgNGLfPx5qUpH+X/5f/l/+vy/y/67/L/8v/79E8v/dyf/3IP8v/y//L//Pqipa/j/2/XeHmlSk/wcAAIAqiH3/PaEm+n8AAAAojdj3T4Sa6P8BAACgNGLfPxlqUpH+X/5f/l/+X/5/Wfn/180/r/x/w3XN/z8g/79c8v/dyf/3IP8v/3/D8//D8v+UStHy/7Hv3xVqUpH+HwAAAKog9v27Q030/wAAAFAase/fE2qi/wcAAIDSiH3/3lCTivT/8v/y//L/8v+u/995/YXI/7v+/7LJ/3e3+vn/uIlFyf+vk/9fgRudn+/38bv+v/w/CxUt/x/7/ntDTSrS/wMAAEAVxL5/X6iJ/h8AAABKI/b9+0NN9P8AAABQGrHvPxBqUpH+X/5f/l/+X/5f/r/z+uX/+5P8f3eu/9+D/L/8fx/n/+tzS/6foila/j/2/QdDTSrS/wMAAEAVxL7/TaEm+n8AAAAojdj3/1qoif4fAAAASiP2/b8ealKR/l/+X/5f/l/+v+j5/xH5f/n/ZZD/707+vwf5f/n/Ps7/u/4/RVS0/H/s+w+FmlSk/wcAAIAqiH3/b4Sa6P8BAACgNGLf/+ZQE/0/AAAAlEbs+w+HmlSk/5f/X6P8f7xR/l/+X/7f9f/l/68r+f/u5P97kP+X/5f/l/9nVRUt/x/7/reEmlSk/wcAAIAqiH3/faEm+n8AAAAojdj33x9qov8HAACA0oh9/wOhJhXp/+X/++z6/6NlzP8Pt4xd/n/+cfL/DfL/8v/LIf/fnfx/D/L/8v/y//L/rKqi5f9j3//WUJOK9P8AAABQBbHvf1uoif4fAAAASiP2/W8PNdH/AwAAQGnEvv8doSYV6f/l//ss/+/6//L/8v/y//L/Xcn/dyf/34P8v/y//L/8P6uqaPn/2Pf/ZqhJRfp/AAAAqILY9z8YaqL/BwAAgNKIff87Q030/wAAAFAase9/V6hJRfp/+X/5f/l/+X/5/87rl//vT/L/3fVZ/v9XN4fb5f8b5P+LPf7l5v+H2r6+Lvn/Hy2W/59b1/54+X+uh6Ll/2Pf/+5Qk4r0/wAAAFAFse9/T6iJ/h8AAABKI/b97w010f8DAABAacS+/7dCTSrS/8v/18cxn16W/5f/z2+Q/19O/n9I/l/+v0jk/7vrs/y/6/+3kf8v9vhd/1/+n4WKlv+Pff/7Qk0q0v8DAABAFcS+/6FQE/0/AAAAlEbs+98faqL/BwAAgNKIff8HQk0q0v/L/7v+v/y//L/r/3dev/x/f5L/707+vwf5f/n/ouX//1P+n/5WtPx/7PsfDjWpSP8PAAAAVRD7/g+Gmuj/AQAAoDRi3//boSb6fwAAACiN2Pd/KNSkIv2//H+/5P/H5P+Xmf8fCbfJ/8v/y/9Xi/x/d/L/Pcj/y/8XLf/v+v/0uaLl/2Pf/+FQk6X3/6NLXhIAAAC4IWLf/zuhJs39f/svowAAAIC+Evv+3w01qcj//wcAAIAqiH3/74WaVKT/l//vl/y/6/9nrv8v/9+2PfL/8v+drF3+P5555P/l/+X/I/l/+X/5f9oVLf8f+/7fDzWpSP8PAAAAVRD7/o+EGvhMPwAAAOgTnf5PdrvY9x8JNfH7fwAAACiN2PcfDTWpSP8v/y//L/9f0Pz/X2z9lx987z1Hd8n/t+T/L8v/y//3sKbX/68f/K7/L/8v/5/I/8v/y//Trmj5/9j3Hws1mW/83iUMAAAAAP0t9v1/EGpSkd//AwAAQBXEvv94qIn+HwAAAEoj9v1ToSYV6f/l/+X/5f8Lmv/v4+v/x/3RT9f/H1/XR/n/eNKV/+9oTfP/H5zPicv/Lzf/P9Lx1vb8f03+v4X8/7LH/90sy+T/5f+5gYqW/499/3SoSUX6fwAAAKiC0PcPnGjU+Tv0/wAAAFAase8/GWqi/wcAAIDSiH3/R0NNKtL/y//L/8v/y//30/X/M9f/d/3/HuT/uytO/r8z1/+X/+/n8cv/y/+zUNHy/7Hvnwk1qUj/DwAAAFUQ+/6PhZro/wEAAKA0Yt//8VAT/T8AAACURuz7T4WaVKT/l/+X/5f/l/+X/++8fvn//iT/3538fw/y//L/8v/y/6yqouX/Y99/OtTk/9i7kydLyyqP4zfpJKgKNr3rRS+69/0nsGjW3X+ACyIMFxphuAAV54nCecR5HnAWBxxAESecJ3BCcRYV53nAGTXKgDrnVGXmm+/NrLqZ+dzn+XwWHkhI7y2tgPpV1rfeQfY/AAAAjCB3/6Vxi/0PAAAA3cjdf1ncYv8DAABAN3L3PzBuGWT/6//1/932//+r/9/t9fX/+v+e6f/n6f+X0P/r//X/+n9WqrX+P3f/g+KWQfY/AAAAjCB3/4PjFvsfAAAAupG7//K4xf4HAACAbuTuf0jcMsj+39b/byzG7P8z49X/99T/e/7/rq+v/9f/9+xw+/8r7/4nn/5f/6//D/p//b/+n+1a6/9z9z80bhlk/wMAAMAIcvc/LG6x/wEAAKAbufsfHrfY/wAAANCN3P2PiFsG2f+e/+/5//p//b/+f/r19f/ryfP/543U/19+24WX3nnDf964n9fX/+v/9f/6f1artf4/d/8j45ZB9j8AAACMIHf/o+IW+x8AAAC6kbv/0XGL/Q8AAABr6PjkR3P3PyZuGWT/6//1//r/6P+P6f/1//r/Huj/543U/5/N6+v/9f/6f/0/q9Va/5+7/7FxyyD7HwAAAEaQu/9xcYv9DwAAAO2a+oXYM3L3XxG32P8AAADQjdz9J+KWQfa//v/g+/9/6v/Xo//3/H/9v/6/C/r/efr/JfT/+n/9v/6flWqt/8/df2XcMsj+BwAAgBHk7n983GL/AwAAQDdy9z8hbrH/AQAAoBu5+58Ytwyy//X/nv+v/9f/6/+nX1//v570//P0/0vo/8+1nz9f/6//1/9zpn32/3fN/GN7Jf1/7v4nxS2D7H8AAAAYQe7+J8ct9j8AAAB0I3f/U+IW+x8AAAC6kbv/qXHLIPtf/6//1/+33P9vLpru/3d+17uH/n+a/v9w6P/nNdP/b2xOflj/v/b9v+f/6//1/2zR2vP/c/c/LW4ZZP8DAADACHL3Pz1umdn/+/7JfAAAAOBI5e5/Rtzi6/8AAACw9rI6y93/zLhlkP2v/9f/6/9b7v89/3/RaP9/4xnvT//fFv3/vGb6/13o//X/6/z+9f/6f3Zqrf/P3f+suGWQ/Q8AAAAjyN1/Vdxi/wMAAEA3cvc/O26x/wEAAKAbufufE7cMsv+n+//Tf13/vzf6/63vX/8//f1jVf1//jfq/2f7/4s9/39M+v95+v8l9P/6f/3/bv3/8WWfr/9nSmv9f+7+58Ytg+x/AAAAGEHu/ufFLfY/AAAAdCN3//PjFvsfAAAAupG7/wVxyyD73/P/9f/6//Xr/z3//5SjfP7/4tD7/039/x7p/+fp/5fQ/+v/9f/zz/+f+V0A9P9Maa3/z93/wrhlkP0PAAAAI8jd/6K4xf4HAACA9XDmrx3Y/gtKQ+7+F8ct9j8AAAB0I3f/S+KWfvb/7LM69f/6f/2//l//P/36bfX/nv+/V/r/efr/JfT/B9HPb3bW/1+92+e30P9fcdD9/wz9P1O29P83nf74UfX/uftfGrf0s/8BAABgeLn7Xxa32P8AAADQjdz9L49b7H8AAADoRu7+V8Qtg+z/A+//Z373Af2//l//r//X/+v/V03/P0//v4T+3/P/Pf9f/89Kben/z3BU/X/u/lfGLYPsfwAAABhB7v5XxS32PwAAAHQjd//VcYv9DwAAAN3I3f/quGWQ/e/5//p//b/+X/8//fr6//V0Tv39efr/ov/X/+v/9f/6f1agtf4/d/9r4pZB9j8AAACMIHf/a+MW+x8AAAC6kbv/dXGL/Q8AAADdyN3/+rhlkP2v/z/Y/j8/rv/X/y/0//p//f+hGPb5/xtT/ybaaZf+/5b7n/j/rR/R/+v/9f/6f/0/e/TvM3+tif7/5OkfXebuf0PcMsj+BwAAgBHk7n9j3GL/AwAAQDdy978pbrH/AQAAoBu5+6+JW/a5/+eah5bp/z3/X/+v/9f/T7++/n89Ddv/75Hn/y+h/9f/6//1/6xUE/3/GX+eu//NcYuv/wMAAEA3cve/JW6x/wEAAKAbufvfGrfY/wAAANCN3P1vi1sG2f/6f/2//l//r/+ffn39/3rS/8/T/y+xTv3/NefQ/29Of/io+/lzddTvX/+v/2en1vr/3P3Xxi2D7H8AAAAYQe7+t8ct9j8AAAB0I3f/O+IW+x8AAAC6kbv/nXHLIPtf/6//1//r//X/06+v/19P+v95+v/FYnHdzBuY6v9PXtBm/+/5/829f/2//p+dWuv/c/e/K24ZZP8DAADACHL3Xxe32P8AAADQjdz918ct9j8AAAB0I3f/u+OWQfa//l//r//X/+v/p19f/7+e9P/z9P9LrNPz//X/zb1//b/+n51a6/9z978nbhlk/wMAAMAIcvffELfY/wAAANCN3P3vjVvsfwAAAOhG7v4b45ZB9r/+X/+v/9f/6/+nX1//v54Orv9f6P/1//r/JfT/+n/9P9u11v/n7n9f3DLI/gcAAIAR5O5/f9xi/wMAAEA3cvd/IG6x/wEAAKAbufs/GLcMsv/1//p//b/+v8/+/wL9/6A8/3+e/n8J/b/+X/+v/2elpvv/K46s/8/d/6G4ZZD9DwAAACPI3X9T3GL/AwAAQDdy9384brH/AQAAoBu5+z8Stwyy//X/+v+t/f9iof/X//fR/6/F8/+PLfT/K6f/n6f/X0L/32f/f96io/7/+K6fr/+nRa09/z93/0fjlkH2PwAAAIwgd//H4hb7HwAAALqRu//jcYv9DwAAAN3I3f+JuGWQ/a//1/97/r/+X/8//fqe/7+e9P/z9P9L6P/77P89/1//z5Fprf/P3f/JuGWQ/Q8AAAAjyN3/qbjF/gcAAIBu5O7/dNxi/wMAAEA3cvd/Jm4ZZP/r//X/+n/9v/5/+vX1/+tJ/z9P/7+E/l//r//X/7NSrfX/ufs/G7fsOvy2/8gUAAAAaF3u/pvjlkG+/g8AAAAjyN1/S9xi/wMAAEA3cvd/Lm4ZZP/r//X/+v/17P+P6f/1//r/Sa30/xdd9H+36v/1//p//b/+X/8/utb6/9z9n49bBtn/AAAAMILc/V+IW+x/AAAA6Ebu/i/GLfY/AAAAdCN3/5filkH2/87+//zFqUL1lKn+Pxo1/f8Z9P9b37/+f/r7h+f/6//1/wevlf7f8//P7v3r//X/6/z+99X///fOz9f/06PW+v/c/bfGLYPsfwAAABhB7v4vxy32PwAAAHQjd/9X4hb7HwAAALqRu/+2uGWQ/e/5//p//b/+X/8//fr6//Wk/5+n/19C/6//9/z/y+77b/p/Vqe1/j93/1fjlkH2PwAAAIwgd//X4hb7HwAAALqRu//rcYv9DwAAAN3I3f+NuGWQ/a//1//r//X/+v/p19f/ryf9/zz9f9n+TTtlnP7/2NQHj7qfP1dH/f676f89/58Vaq3/z93/zbhlkP0PAAAAI8jd/624xf4HAACAbuTu/3bcYv8DAABAN3L3fyduGWT/6//1//33//fR/297ff2//r9n+v/8N/o0/f8S4/T/k466n1/396//1/+zU2v9f+7+2+OWQfY/AAAAjCB3/3fjFvsfAAAAupG7/3txi/0PAAAA3cjd//24ZZD9r/8fq//fWIzY/3v+v/5f/z8S/f88/f8S+n/9v/5f/89Ktdb/5+6/Y2NzyP0PAAAA6+pe//OA2/f6995xz38eW/wgbrl4cXKPX8YGAAAAGnf37t/YXCx+eM+f+fo/AAAA9Ch3/4/ilkH2v/5/rP5/fZ//f5P+X/+v/9f/74n+f57+fwn9v/5f/6//Z6Va6/9z9/84bjlj+G3u+1sJAAAAtCR3/0/ilkG+/g8AAAAjyN3/07hlx/732wECAADAusrd/7O4ZZCv/+v/G+//FwfU/8fftz79v+f/6//1//r/vdH/zzvH/v/khv5f/z9D/6//1/+zXWv9f+7+n8ctg+x/AAAA6NSWn1HI3f+LuMX+BwAAgG7k7v9l3GL/AwAAQDdy9/8qbhlk/+v/D73/z1T9AJ//f7z+qJ/n/+v/z6r/v+rY5Ovr//X/PdP/z/P8/yX0/730/xfo//X/tKG1/j93/6/jlvnhd+/5byUAAADQktz9v4lbBvn6PwAAAIwgd/9v4xb7HwAAALqRu/93ccsg+1//3/jz/8+q/9/D8//1/2P0/7u8fj/9/39ceOLmS+53/bX6f047zP4/vy/o//X/+v9TGur/j+T93/3/j/5f/89Wq+//N7d8cL/9f+7+38ctg+x/AAAAGEHu/jvjFvsfAAAAupG7/w9xi/0PAAAA3cjd/8e4ZZD9r//X/7fS/+f/1kfQ/5846/7/+GKxOJL+P5vi0ft/z//X/+/k+f/z9P9L6P/1/57/r/9npVbf/2/94H77/9z9f4pbBtn/AAAAMILc/X+OW3L/b+z7p+4BAACAxuTu/0vc4uv/AAAA0I3c/X+NWwbZ//p//X8r/X/y/P/Tn9fX8/8vqTh1zP7/v+qP9P8H6zD6//zRgv5f/6//30r/r//X/7PdAfX/+cOwfff/ufv/FrcMsv8BAABgBLn774pb7H8AAADoRu7+v8ct9j8AAAB0I3f/P+KWQfa//r/X/j+LeP2//r+V/t/z/z3//3B4/v88/f8S+n/9v/5f/89Ktfb8/9z9/woAAP//j2p0PQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0)

3m5.361367438s ago: executing program 1 (id=1338):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
setreuid(0xee01, 0xee01)
ioctl$KDADDIO(r0, 0x4b34, 0x7)

3m4.23501969s ago: executing program 1 (id=1343):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1)

3m3.688182343s ago: executing program 33 (id=1343):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1)

3.899528705s ago: executing program 4 (id=2712):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef174760000000000001090224000100000000090400000103f101000921000000012205000905810300000c0000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000280)={0x40, 0x7, 0x7, {0x7, 0x11, '\f\rb=\n'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.100920533s ago: executing program 5 (id=2740):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800020001"], 0x50)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400005b6dbe53850000000300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000001c0)="b6f373fee74ae2747582810e493a", 0x0, 0x9, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)

2.100439023s ago: executing program 2 (id=2733):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d64656661756c742c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d3078303030303030303030303030303030312c75737271756f74612c71756f74612c6572726f72733d72656d6f756e742d726f2c6e6f646973636172642c00067a0064539e6f510489287626e337fbc53d63efcce722111572bce97820b3d1bd4c9306aed07b7f73ad187c95e1a7e63a98085343c8248de95d481c41ea26d739d459a36eb2ffd520ce9ebb9a2c734ff85456c0acffe64e"], 0x1, 0x60b9, &(0x7f0000013cc0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw9eDHVY/1OH64Q7Xj3S4frTD9as6XD/W4fpFO2CR1fXfx+R3tin/69r6Ls1uzEby6zYV3OqpgVWDg/F3ObmB/DbzI0ey2exYNpNNNS1fX3YgX/6FDbV1fSSL6xpsWNf62hHy8ycOx20YCPt4U9O6Fu4z+un7svFf/PyJw3915pWbi2bH3dB0f/Xt3LKxtp2fD5fUt3UgW5X2SdzOwYbtXF/wnAw1bedAfrva31u389VlbufQwmZeUa3P+Vg2mP/9pXw/DTf+Wi/tp/Xhsv++Ncuy8wub3brMonVlg9mapksGF56fsfoRWbuP2qH05mx4RcfphmUcp7U5van5OG19TcTnf0O43fAS29D4NP30ydGG5/21+Us5TqPao17qtdJ6DHb7tdIrx2A8Ll7KH/TThcfgpvD4n9i89DFYeOwUHIPpcTccgxs7HYODo0P5NqcnYSC/zcIxuK1p+aF8TQP5fHlz+2Nw8szxU5Nzjz1+++zxQ0dnjs6c2LFt29SOXbv27NkzeWT22MxU/c9L3Nu9b002mF4DG8O+i6+Bd7Us23iozn9jdNH591Jfh2NtXodrW5bt9utwuPXBDVyZF+TiY7r+2rivttPHLgxmS7zG8udn6+W/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNq6/J+Zhlu+K9oG5b+XnB5x+DahmOw9eeR1mOw2z+P9MoxOBaOix9uXfp7wfqwvU9PrPTnkaFFx2B6uOHcU7sk/bw/ticfRcflLbUrrhnNzs7NnL7j0UNnzpzeloVxRbyl4VhpPV7XNDymbNHxOrji43X/7NufvqXg8rVhX43dXvtjbMnnqrbMzjvaP1f5d7fi/dl06fYsjC670vuz6Lt5bX+OZtnXvvfkPd954mvvX3J/1vLm5ycv/2fxlEsbzr8jS5x/Y+5/vb6+dFdPDY0M11+/Q2nvjDSdj5ufquH83DWQr/vVyeWdj0fCf1f6fHxjm/PxupZlu30+Hml9cPF8PNDptx2Xp/X5HAvHybGp9ufj2jLrtq/0mBxuez6+NcyBsP/fHZJCykUNx85Sx21a1/DwSHhcw3ENzcfpjqblR0I2q63rue2XdpxuubV+X0Pp0S24UsfpeMuy3T5O0+++ljpOBzr99u3StD6fY+G4uHFH++O0tsyLOy//3Lk6/rXh3Dna6RgcGRqtbfNIOgjz8302vzoeg3dkh7OT2bFsOr92ND+eBvJ1Tdy5vGNwNPx3pc+V69ocg1talu32MZi+jy117A0ML37wXdD6fI6F4+KZO9sfg7VlPrC7uz+7bgmXpGUafnZt/f3aUr/zuqVlN71Rx8pw2M7v7W7/u9naMsf2rDRntt9Pt4VLrinYT62v36VeU9PZldlP68J2vrJn6f1U257aMl/du8zjaX+WZeceuSv/fW/495W/PfuD55v+3aXo33TOPXLXz6478g8r2X4A+t/r9bGm/r2u4V+mlvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/3CYSUXy/7oPvDL7+rksNfPng3h92g1315eLHdep8PX4/ILa5Xc9O/Nff39ueesezLLstbv/oHD5dXfH7aobD9t58YPNly/y/O3LWvfB+8+l9Tb2178e7j8+nuUeBkUV3Kksy1644cv5esYfvJDPF+8+mM97zj/9VG2ZV/fWv463f/kt9eX/PJR/9x851HT7l8N++EmYUx8t3h/xdt+68O71ux9YWF+83cDG6/OH/cxD9fuN75Pzlafqy8f9vNT2f+dLz32rtvyj7yze/nODxdv/XLjfZ8P8n7fVl298Dmpfx9t9IWx/XF+83R3f/G7h9l/8Yn35Ux+qL3cwzLj+LeHrTR96ZbZxfz06cKjpcWUfri8X1z/1gz/Kr4/3F++/dfvHDlxo2h+tx8eL/1q/n8mW5ePlcT3R37Wsv3Y/jcdnXP9zf3iwaT93Wv/Fe15+W+1+W9d/W8typx7Zmq9/4f6a37HpL77w5cL1xe3Z/zenmh7P/k+F13FY/zMPheMxXP+/F+v31/ruCgc/1Xz+ict/fe25pscTfeQX9fVffO/RfK4aW73mmmuvu/78O2r7LsteWlW/v07rP/qXJ5u2/xs31fdHvD529FvXv5S4/tOfmzhxcu7s7HTaq0/ckL93zsfq2xO394Zwbm39+sDJMw/PnB6fGp/KsvHyvoXeJftmmD+rj/Ptl55fdAbden94Pm/5sxfWbP6XL8XL/+2++uUXPlr/vvWusNxXwuVrw/O3svUv9syGm/LX98CLYQvnF79f8OVYv+k/9yxrwfD4W38uiMf7qbc+nO+H2nX59434ur7M7f/RdP1+vh3263x4Z+aNNy2sr3H5+N4IF+6tv94ve/+F01x8Xv86PN8f/0n9/uN2xcf7o/BzzHfXNZ/v4vHx7XODrfefv4vH+XA+yc7Xr49Lxf194dWbCjcvvg9Jdv7m/Os/Tvdz84oe5lLmHpubPDZ74uyjk2dm5s5Mzj32+IHjJ8+eOHMgfy/PA5/pdPuF89Oa/Pw0PbNrZ5afrU7Wxxvsam//qfsPT++e2jw9c+TQ2SNn7j81c/ro4bm5wzPTc5sPHTky87lOt5+d3rdt+94du7dPHJ2d3rdn794deydmT5ysbUZ9ozrYNfXZiROnD+Q3mdu3c++2O+/cOTVx/OT0zL7dU1MTZzvdPv/eNFG79e9PnJ45dujM7PGZibnZx2f2bdu7a9f2ju8GePzUkbnxydNnT0yenZs5PVl/LONn8otr3/s63Z5ymvv3+s+zrQbqb8SXffK2Xen9WWuefXLJu6ov0vIGoq+E96L5pzed2rOcr2PuHwkzqUj+BwAAgCqIuX80zET+BwAAgNKIuX9VmIn8DwAAAKURc/9YmElF8n/p+v/rzi1r/fr/+v+N+0v/v2L9/3t7rf9fP1/o/3fH5fbv9f8D/X/9f/1//X/9f7qg1/r/MfevzrJK5n8AAACogpj714SZyP8AAABQGjH3XxNmIv8DAABAacTcf22YSUXyv/6//r/+v/6//n/x+vX/+5P+f3v6/x3o/09m1er/n+/m9uv/6/+zWK/1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu5fG2ZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP1vCjOpSP4HAACAKoi5/81hJvI/AAAA9J7hS7tZzP1vCTNZlP8vcQUAAADAVRdz/41ZSxG8Iv/+r/+v/6//r/+v/1+8/uX3/4cy/f/eof/fnv5/B/r/+v/6//r/dFWv9f/z3J+NZW8NM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+/xdmIv8DAABAacTcvy7MpCL5X/9f/1//X/9f/794/T7/vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7bw4zqUj+BwAAgCqIuf+WMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNy/PsykIvlf/7/H+/+xOar/r/+v/6//r/+/LPr/7en/d6D/r/+v/6//T1f1Wv8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox94+HmVQk/+v/93j/3+f/6//r/+v/6/+viP5/e/r/Hej/6//r/+v/01W91v+PuX9DmElF8j8AAABUQcz9G8NM5H8AAAAojZj7bw0zkf8BAACgNGLu3xRmUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/Z5hJRfI/AAAAVEHM/ZvDTOR/AAAAKI2Y+98VZiL/AwAAQGnE3L8lzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P/1//X/9f/pql7r/8fc/+4wk4rkfwAAAKiCmPu3hpnI/wAAAFAaMfffFmYi/wMAAEBpxNw/EWZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7r89zKQi+R8AAACqIOb+O8JM5H8AAAAojZj7J8NM5H8AAAAojZj7p8JMKpL/9f/1//X/9f9X1P9/x8L96v/X6f/3Fv3/9vT/O9D/1/+/6v3/Ef1/SqXX+v8x928LM6lI/gcAAIAqiLl/e5iJ/A8AAAClEXP/jjAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v8+/794/fr//Un/v73u9//jQ9T/1//X//f5//r/LNZr/f+Y++8MM6lI/gcAAIAqiLl/V5iJ/A8AAAClEXP/7jAT+R8AAABKI+b+PWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7fn8/w70//X/9f/1/+mqXuv/x9y/N8ykIvkfAAAAqiDm/veEmcj/AAAAUBox9/9KmIn8DwAAAKURc/+vhplUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+/eFmVQk/wMAAEAVxNz/a2Em8j8AAACURsz97w0zkf8BAACgNGLu3x9mUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/X5hJRfI/AAAAVEHM/XeFmcj/AAAAUBox978/zET+BwAAgNKIuf8DYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/g+GmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3fyTMpCL5X/9f/1//X/9f/794/fr//Un/vz39/w70/0vW/x+/Tv9f/583SlECWuzS+v/XvrbkCi+z/x9z/6+HmVQk/wMAAEAVxNx/d5iJ/A8AAAClEXP/R8NM5H8AAAAojZj7PxZmUpH8r/+v/6//r/+v/1+8fv3//qT/316f9f9/eX24XP+/Tv+/t7e/J/v/P16q/z+/qvX2+v+8ES6t/1+oK/3/mPs/HmZSkfwPAAAAVRBz/yfCTOR/AAAAKI2Y+z8ZZiL/AwAAQGnE3P8bYSYVyf/6/7XtWGgv6//r/+cX6P/r/+v/9y39//b6rP/v8/9b6P/39vb3ZP/f5/9zlfVa/z/m/k+FmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6//7/H/9f/1//f/i9ev/9yf9//b0/zvQ/9f/77X+/3/o/9Pfeq3/H3P//WEmFcn/AAAAUAUx9z8QZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP2fDjOpSP7X/++X/v+4/r/+v/5/y+PR/9f/L6L/357+fwf6//r/vdb/9/n/9Lle6//H3P9gmMny8//YspcEAAAAroqY+38rzKQi//4PAAAAVRBz/2+Hmcj/AAAAUBox9/9OmElF8r/+f7/0/33+f6b/r//f8nj0//X/i1y5/n888+j/6//r/0f6//r/+v+06rX+f8z9vxtmUpH8DwAAAFUQc/9DYSbyPwAAAPSFov8nu1XM/QfCTOR/AAAAKI2Y+w+GmVQk/+v/6//r//do//9PN/7zD7//iYPb9P/1//X/V+SKfv5/7cXv8//1//X/E/1//X/9f1r1Wv8/5v5DYSYVyf8AAABQBTH3/16YifwPAAAApRFz/+EwE/kfAAAASiPm/ukwk4rkf/1//X/9/x7t//fx5//H/aH/36xr/f940tX/L3RF+/8PLPTE9f9X2v8fLbxU/1//v5+3X/9f/5/Feq3/H3P/TJhJRfI/AAAAVEHI/YNH6nPhCvkfAAAASiPm/qNhJvI/AAAAlEbM/Q+HmVQk/+v/6//r/+v/+/z/4vX3bP/f5/+3pf/fXu/0/4vp/+v/9/P26//r/7NYr/X/Y+6fDTOpSP4HAACAKoi5/zNhJvI/AAAAlEbM/Z8NM5H/AQAAoDRi7j8WZlKR/K//r/+v/6//r/9fvH79//6k/9+e/n8H+v/6//r/+v90Va/1/2PuPx5mUpH8DwAAAFUQc/+JMBP5HwAAAEoj5v6TYSbyPwAAAJRGzP2nwkz+j737aN6rLv84fuf/D2MyPAAXbtj7EFjoWh+ACzcudMZxoaPYG8FesfeCvWMBRWzYG9hQ7GLvigU76sRxcl1X8kvO79xJvJOc871er82lwXiiw4Af4T3fJvtf/6//H7b/v5v+f7/v6//1/yPT/8/T/2+h/9f/6//1/+zU0vr/3P0Pjlua7H8AAADoIHf/Q+IW+x8AAACGkbv/srjF/gcAAIBh5O5/aNzSZP+f1P8f2PTs/zPj1f+P1P97/3/f7+v/9f8jO7/9/xX//SOf/l//r/8P+n/9v/6fky2t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+x8Rt9j/AAAAMIzc/Y+MW5rsf+//e/9f/6//1/9Pf1//v07e/5/Xqf+/7JaLH3j7dXe5/ky+r//X/+v/9f/s1tL6/9z9j4pbmux/AAAA6CB3/6PjFvsfAAAAhpG7/zFxi/0PAAAAw8jd/9i4pcn+1//r//X/+n/9//T39f/rpP+f16n/P5vv6//1//p//T+7tbT+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuvzxusf8BAABgGLn7j8QtTfa//v/c9///1v/r/+Pq//X/+v9zT/8/T/+/hf5f/6//1/+zU0vr/3P3XxG3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//3/r/+X/+v/5/+vv5/nfT/885//z/1Z8j96f9X3/9fpP/X/+v/OdEZ9v93zPxheyf9f+7+J8ctTfY/AAAAdJC7/ylxi/0PAAAAw8jd/9S4xf4HAACAYeTuf1rc0mT/6//1//p//b/+f/r7+v910v/PW8z7/wcOTv6w/n/1/b/3//X/+n/2WNr7/7n7nx63NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/+nvz/X/15/w69P/L4v+f95i+v996P/1/2v+9ev/9f+camn9f+7+Z8ctTfY/AAAAdJC7/8q4xf4HAACAYeTuf07cYv8DAADAMHL3PzduabL/p/v/479d/3969P97f/36/+nfP3bV/+e/o/5/tv+/u/f/e9L/z9P/b6H/1//r//fr/w9v+/n6f6Ysrf/P3f+8uKXJ/gcAAIAOcvc/P26x/wEAAGAYuftfELfY/wAAADCM3P0vjFua7H/v/+v/9f/r6/+9/3/MhXz/f3Pe+/+D+v/TpP+fp//fQv+v/9f/e/+fnVpa/5+7/0VxS5P9DwAAAB3k7n9x3GL/AwAAwDqc+PcOnPw3lIbc/S+JW+x/AAAAGEbu/pfGLU32v/5f/6//1//37v8PraT/9/7/6dL/z9P/b3Fh+/8Dg/b/Bwfr/6/a7+cvof+/XP/Pwuzp/284/uMXqv/P3f+yuKXJ/gcAAIAOcve/PG6x/wEAAGAYuftfEbfY/wAAADCM3P2vjFua7P9z3v8f3v/b+n/9v/5f/3/h+/+1vP+v/z9d+v95+v8tvP/v/X/v/+v/2ak9/f8JLlT/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3XxW32P8AAAAwjNz9r4lbmux/7//r//X/+n/9//T39f/rpP+fp//fQv+v/9f/6//ZqaX1/7n7Xxu3NNn/AAAA0EHu/tfFLfY/AAAADCN3/+vjFvsfAAAAhpG7/w1xS5P9r/8/t/1//rj+X/+/0f/r//X/50Xb/v/A1J+JTrVP/3/T/Y/cc++P6P/1//p//b/+nx1YRP9/9Pj/uszd/8a4pcn+BwAAgA5y978pbrH/AQAAYBi5+98ct9j/AAAAMIzc/W+JWwbZ/4e2/Hb9v/f/9f/6f/3/9Pf1/+vUtv8/Td7/30L/r//X/+v/2alF9P8n/PPc/W+NWwbZ/wAAAMCmdv/b4hb7HwAAAIaRu//tcYv9DwAAAMPI3f+OuKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+6+OW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/6//1//p//f/09/X/66T/n6f/32w218z8Aqb6/6N30v/r//X/+n/O0tL6/9z974lbmux/AAAA6CB3/zVxi/0PAAAAw8jdf23cYv8DAADAMHL3vzduabL/9f/6f/2//l//P/19/f866f/n6f+38P6//l//r/9np5bW/+fuf1/c0mT/AwAAQAe5+6+LW+x/AAAAGEbu/vfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nv6//X6dz1/xv9v/5f/7+F/l//r//nZEvr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/4fjlib7X/+v/9f/6//1/9Pf1/+vk/f/5+n/t9D/6//1//p/dmpp/X/u/o/ELU32PwAAAHSQu/+GuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v+9/f9mo//X/+v/jzkP/f+hjf5/5/T/8/T/W+j/x+z//28zUP9/eN+fr/9niZbW/+fu/3jc0mT/AwAAQAe5+z8Rt9j/AAAAMIzc/Z+MW+x/AAAAGEbu/k/FLU32v/5f/+/9f/2//n/6+97/Xyf9/zz9/xb6/zH7f+//6/+5YJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Fvp//b/+X//PTi2t/8/d//m4pcn+BwAAgA5y998Yt9j/AAAAMIzc/TfFLfY/AAAADCN3/xfilib7X/+v/9f/r7P/P6T/1//r/yctpf+/9NJ73Kz/1//r//X/+n/9f3dL6/9z938xbmmy/wEAAKCD3P1filvsfwAAABhG7v4vxy32PwAAAAwjd/9X4pYm+//U/v+izbFC9Zip/j8aNf3/CfT/e3/9+v/p3z+8/6//1/+fe0vp/73/f3a/fv2//n/Nv/4z6v8vOfXn6/8Z0dL6/9z9N8ctTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTuvyVuabL/vf+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//t/7/w+67//r/9mdpfX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/9f/6//1//r/6e/r/9dJ/z9P/7+F/l//r//3/j87tbT+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/d9//X6L/D/r/pfT/99H/n/R9/b/+f2T6//wz+jT9/xb6f/2//l//z04trf/P3X9r3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9r/3/3v1/wc2Hft/7//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/h/FLU32PwAAAKzVve76gFtP91+bu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3NJk/+v/e/X/Pd//1//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/p/FLScMv4Nn/J8SAAAAWJLc/T+PW5r89X8AAADoIHf/L+KWU/b/0dP8u9oBAACApcnd/8u4pclf/9f/L7z/34zf/9+20f/r/4/R/+v/d0H/P+9/7P+PHtD/6/9n6P/1//p/Tra0/j93/6/ilib7HwAAAAa15/9RyN3/67jF/gcAAIBh5O7/Tdxi/wMAAMAwcvf/Nm5psv/1/wvv/8/q/f/D9Y/W0P97//8c9v9XHpr8vv5f/z8y/f887/9vof/X/+v/9f/s1NL6/9z9t8UtTfY/AAAAdJC7/3dxi/0PAAAAw8jd//u4xf4HAACAYeTu/0Pc0mT/6/9H7P/X9f6//t/7/2ff/9/54iM33vt+116t/+e489n/5+8L+n/9v/7/GP2//l//z8mW1v/n7v9j3NJk/wMAAEAHuftvj1vsfwAAABhG7v4/xS32PwAAAAwjd/+f45Ym+1//r/9fSv+f/11fgP7/yPr6/2yKu/f/3v/X/5/K+//z9P9b6P/1//p//T87tbT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/6X0/8n7/8d/nvf/j9H/6//PhP5/nv5/C/2//l//r/9np5bW/+fu/0fc0mT/AwAAQAe5+++IW+x/AAAAGEbu/n/GLfY/AAAADCN3/7/ilib7X/+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//l//r/9np5bW/+fu/08AAAD//6cRdCE=")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f00000002c0)='./file1\x00', 0x7fffffffffffffff)

1.968304196s ago: executing program 5 (id=2735):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
read$usbmon(r0, 0x0, 0x0)

1.875479125s ago: executing program 4 (id=2736):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

1.642842138s ago: executing program 5 (id=2737):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

1.602307642s ago: executing program 4 (id=2738):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xc, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x8, 0x0, 0x0}}, 0xd)

1.378562674s ago: executing program 4 (id=2739):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xa, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x3c}}, 0x0)

1.378450954s ago: executing program 5 (id=2741):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
fallocate(r0, 0x1, 0x2, 0x7)

1.378390704s ago: executing program 3 (id=2742):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000100000004000000003"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000300), 0x0}, 0x20)

1.150932367s ago: executing program 5 (id=2743):
r0 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==")
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYBLOB="eea73c3ca047349ab66dff07b1e2bdc61875c6ccebea30ba1b8977c632dd4bd75d3cfd10cce0c88ccff0ff447cd9caded4abf65767e9dbbd7b5841a8ce3eae5cb5abfd7d4fb44c7151dec2b7b8f9cf870af04f1cc951b195c7fd36ffdbd0622cdc14395f095fb0d31f384214d59a0105d577557215473973f3b70178f49f07562f4d21cad59fafb7fbaf76061c56fdd2093329e2ece7cf96435bca11a90ba7f31e69c4b73ba3d172906ffc90f5de134a696a731d20a9cf70009a31f83d4b774b0d99de69f14de9e655b84b646166d979b9cdbde38324510998bba500000000007cf791c3e2fc9c72f920a64e0000000000000000000000b5ff5bb6b1fa869800651587af", @ANYRES8, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480))
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1aca438, &(0x7f00000008c0)=ANY=[], 0x9, 0x0, &(0x7f0000000000))

1.150681367s ago: executing program 3 (id=2744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

1.057140986s ago: executing program 4 (id=2745):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000b40)={0x1, [{0x1, 0x18, 0x5, &(0x7f0000000200)="125218"}, {0x2, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x5b2d, 0x0}, {0x2, 0x0, 0x4005, 0x0}, {0x1, 0x0, 0xfffffb56, 0x0}, {0x0, 0x20, 0xec2, &(0x7f0000001e80)="8b815232"}, {0x2, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x1, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x3, 0x0, 0x2e, 0x0}, {0x0, 0x0, 0x81, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffff8000, 0x0}]})

939.563998ms ago: executing program 3 (id=2746):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd7000ffdbdf25260000000c00018008000100", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4000080)

885.859103ms ago: executing program 2 (id=2747):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

754.085556ms ago: executing program 3 (id=2748):
r0 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040)

671.376684ms ago: executing program 2 (id=2749):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2})
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x1, 0x1})

450.946356ms ago: executing program 4 (id=2750):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x450, &(0x7f00000069c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x2, 0x5567, &(0x7f000000c4c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x400, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0)

450.701996ms ago: executing program 2 (id=2751):
r0 = socket(0x15, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
connect$netrom(r0, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)

389.656842ms ago: executing program 3 (id=2752):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r0}, 0x18)
faccessat(0xffffffffffffffff, 0x0, 0x2)

212.68983ms ago: executing program 2 (id=2753):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000005}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)

110.988409ms ago: executing program 3 (id=2754):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x601})

23.671359ms ago: executing program 2 (id=2755):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096230d7b76f61b6790b35c12c616870600000027e51b97f593f0713acb"], 0x0}, 0x0)

0s ago: executing program 5 (id=2756):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r1], 0x1})

kernel console output (not intermixed with test programs):

0 to 32768
[  334.344369][   T28] audit: type=1326 audit(1760274554.006:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3558eec9 code=0x7ffc0000
[  334.351247][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.388512][T11164] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1823 (11164)
[  334.432201][   T28] audit: type=1326 audit(1760274554.046:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f1f3558eec9 code=0x7ffc0000
[  334.462386][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  334.481220][T11164] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  334.491742][T11164] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  334.504665][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  334.536305][   T28] audit: type=1326 audit(1760274554.046:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11169 comm="syz.4.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3558eec9 code=0x7ffc0000
[  334.560034][T11164] BTRFS info (device loop2): using free space tree
[  334.598497][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.630814][   T28] audit: type=1800 audit(1760274554.196:108): pid=11172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1826" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  334.653067][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.722907][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.765095][T11164] BTRFS info (device loop2): enabling ssd optimizations
[  334.780330][ T5789] usb 6-1: USB disconnect, device number 6
[  334.786461][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.798434][T11164] BTRFS info (device loop2): auto enabling async discard
[  334.828594][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.876972][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.939647][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  334.988452][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  335.026413][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  335.030872][T11164] BTRFS warning (device loop2): failed to trim 1 device(s), last error -512
[  335.049556][T11193] loop4: detected capacity change from 0 to 164
[  335.081960][    T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  335.134273][    T8] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  335.156228][ T5786] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  335.188790][    T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  335.248963][    T8] usb 4-1: USB disconnect, device number 16
[  335.956757][T11205] loop2: detected capacity change from 0 to 1024
[  336.004605][T11207] loop3: detected capacity change from 0 to 256
[  336.064957][T11207] FAT-fs (loop3): Directory bread(block 64) failed
[  336.103432][T11207] FAT-fs (loop3): Directory bread(block 65) failed
[  336.111431][T11205] hfsplus: bad catalog entry type
[  336.133539][T11207] FAT-fs (loop3): Directory bread(block 66) failed
[  336.167064][T11207] FAT-fs (loop3): Directory bread(block 67) failed
[  336.228473][T11207] FAT-fs (loop3): Directory bread(block 68) failed
[  336.236113][T11207] FAT-fs (loop3): Directory bread(block 69) failed
[  336.277217][ T1325] hfsplus: b-tree write err: -5, ino 4
[  336.288484][T11207] FAT-fs (loop3): Directory bread(block 70) failed
[  336.320152][T11207] FAT-fs (loop3): Directory bread(block 71) failed
[  336.326966][T11207] FAT-fs (loop3): Directory bread(block 72) failed
[  336.403732][T11207] FAT-fs (loop3): Directory bread(block 73) failed
[  336.787515][T11196] loop4: detected capacity change from 0 to 40427
[  336.820243][T11196] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  336.836808][T11196] F2FS-fs (loop4): Image doesn't support compression
[  336.869600][T11196] F2FS-fs (loop4): Image doesn't support compression
[  336.902102][T11196] F2FS-fs (loop4): invalid crc value
[  336.946349][T11196] F2FS-fs (loop4): Found nat_bits in checkpoint
[  337.145703][T11196] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  337.148378][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  337.174185][T11232] __nla_validate_parse: 14 callbacks suppressed
[  337.174207][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1845'.
[  337.358383][    T9] usb 4-1: Using ep0 maxpacket: 8
[  337.378424][    T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  337.391068][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  337.414413][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.468794][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.493057][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  337.517633][    T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  337.537375][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.560103][    T9] usb 4-1: config 0 descriptor??
[  337.588430][    T8] usb 6-1: Using ep0 maxpacket: 16
[  337.621034][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.638563][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.658835][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  337.688331][    T8] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  337.710910][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.760787][    T8] usb 6-1: config 0 descriptor??
[  337.920236][T11242] loop4: detected capacity change from 0 to 128
[  337.942905][T11242] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  337.977486][T11242] hpfs: filesystem error: improperly stopped
[  337.997800][T11242] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  338.009922][T11242] hpfs: You really don't want any checks? You are crazy...
[  338.018001][T11242] hpfs: hpfs_map_sector(): read error
[  338.024764][    T9] redragon 0003:0C45:760B.0019: unknown main item tag 0x6
[  338.032512][T11242] hpfs: code page support is disabled
[  338.041343][T11242] hpfs: hpfs_map_4sectors(): unaligned read
[  338.047631][T11242] hpfs: hpfs_map_4sectors(): unaligned read
[  338.053406][    T9] redragon 0003:0C45:760B.0019: item fetching failed at offset 7/133
[  338.054420][T11242] hpfs: filesystem error: unable to find root dir
[  338.070977][    T9] redragon: probe of 0003:0C45:760B.0019 failed with error -22
[  338.205321][    T8] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  338.247676][    T8] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0
[  338.270762][    T8] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max
[  338.313600][    T8] microsoft 0003:045E:07DA.001A: No inputs registered, leaving
[  338.326516][    T9] usb 4-1: USB disconnect, device number 17
[  338.347374][    T8] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  338.369402][    T8] microsoft 0003:045E:07DA.001A: no inputs found
[  338.375914][    T8] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway
[  338.419749][    T8] usb 6-1: USB disconnect, device number 7
[  338.506199][T11236] loop2: detected capacity change from 0 to 40427
[  338.541166][T11247] fido_id[11247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  338.545858][T11236] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  338.597996][T11236] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  338.617454][T11236] F2FS-fs (loop2): invalid crc value
[  338.643279][T11236] F2FS-fs (loop2): Found nat_bits in checkpoint
[  338.751863][T11236] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  338.759317][T11236] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  339.034581][T11258] loop4: detected capacity change from 0 to 8
[  339.070426][T11258] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  339.139321][ T5787] udevd[5787]: incorrect cramfs checksum on /dev/loop4
[  339.196753][ T7696] udevd[7696]: incorrect cramfs checksum on /dev/loop4
[  339.836350][T11256] loop3: detected capacity change from 0 to 40427
[  339.858531][T11256] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  339.867594][T11256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  339.904283][T11256] F2FS-fs (loop3): Found nat_bits in checkpoint
[  340.050107][T11256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  340.057264][T11256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  340.844992][T11273] loop4: detected capacity change from 0 to 40427
[  340.872017][T11273] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  340.951274][T11273] F2FS-fs (loop4): invalid crc value
[  340.979646][T11273] F2FS-fs (loop4): Found nat_bits in checkpoint
[  341.015484][   T28] audit: type=1326 audit(1760274560.666:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.060512][T11298] loop3: detected capacity change from 0 to 1024
[  341.079245][T11298] EXT4-fs: Ignoring removed orlov option
[  341.102804][   T28] audit: type=1326 audit(1760274560.666:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.175440][T11298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.176934][   T28] audit: type=1326 audit(1760274560.716:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.223280][T11273] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  341.299458][   T28] audit: type=1326 audit(1760274560.716:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.343940][T11305] C: renamed from team_slave_0 (while UP)
[  341.363538][T11305] netlink: 'syz.5.1873': attribute type 3 has an invalid length.
[  341.367812][T11298] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2797: inode #12: comm syz.3.1867: corrupted in-inode xattr: bad magic number in in-inode xattr
[  341.372171][   T28] audit: type=1326 audit(1760274560.716:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.412930][T11305] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1873'.
[  341.433263][T11305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  341.455991][T11298] EXT4-fs (loop3): Remounting filesystem read-only
[  341.467477][ T8939] syz-executor: attempt to access beyond end of device
[  341.467477][ T8939] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  341.476269][   T28] audit: type=1326 audit(1760274560.716:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.506111][   T28] audit: type=1326 audit(1760274560.716:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11291 comm="syz.5.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b21f8eec9 code=0x7ffc0000
[  341.549579][ T8939] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  341.605009][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.099313][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1879'.
[  342.351988][T11326] loop5: detected capacity change from 0 to 47
[  342.431319][T11329] loop3: detected capacity change from 0 to 16
[  342.447011][T11329] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  343.344065][T11358] loop2: detected capacity change from 0 to 256
[  343.366221][T11358] exfat: Deprecated parameter 'namecase'
[  343.389223][T11358] exfat: Deprecated parameter 'namecase'
[  343.399979][T11360] loop5: detected capacity change from 0 to 1024
[  343.417506][T11358] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  343.477289][T11358] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  343.482952][T11360] hfsplus: bad catalog entry type
[  343.579424][T11362] loop4: detected capacity change from 0 to 128
[  343.617167][T11362] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  343.635035][ T2904] hfsplus: b-tree write err: -5, ino 4
[  343.648330][T11362] hpfs: filesystem error: improperly stopped
[  343.659032][T11362] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  343.666853][T11362] hpfs: You really don't want any checks? You are crazy...
[  343.729368][T11362] hpfs: hpfs_map_sector(): read error
[  343.735047][T11362] hpfs: code page support is disabled
[  343.758466][T11362] hpfs: hpfs_map_4sectors(): unaligned read
[  343.764576][T11362] hpfs: hpfs_map_4sectors(): unaligned read
[  343.796826][T11362] hpfs: filesystem error: unable to find root dir
[  343.890763][T11362] hpfs: hpfs_map_4sectors(): unaligned read
[  344.058324][   T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  344.288686][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.328374][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.343201][   T23] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  344.353365][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.376462][   T23] usb 6-1: config 0 descriptor??
[  344.409354][    C1] sd 0:0:1:0: [sda] tag#6294 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  344.419967][    C1] sd 0:0:1:0: [sda] tag#6294 CDB: Read(6) 08 00 00 00 00 00
[  344.667092][T11368] loop3: detected capacity change from 0 to 40427
[  344.685438][T11368] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  344.708631][T11368] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  344.735874][T11368] F2FS-fs (loop3): invalid crc value
[  344.765757][T11368] F2FS-fs (loop3): Found nat_bits in checkpoint
[  344.833929][   T23] kone 0003:1E7D:2CED.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.5-1/input0
[  344.918518][T11368] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  344.933365][T11372] loop4: detected capacity change from 0 to 32768
[  344.936133][T11368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  345.054651][T11372] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  345.106421][T11372] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  345.137736][    T8] usb 6-1: USB disconnect, device number 8
[  345.423081][T11372] XFS (loop4): Ending clean mount
[  345.448057][T11393] netlink: 'syz.3.1910': attribute type 1 has an invalid length.
[  345.449090][T11372] XFS (loop4): Quotacheck needed: Please wait.
[  345.568323][T11372] XFS (loop4): Quotacheck: Done.
[  345.593816][   T28] audit: type=1326 audit(1760274565.256:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f27f8eec9 code=0x7ffc0000
[  345.616225][    C0] vkms_vblank_simulate: vblank timer overrun
[  345.647528][   T28] audit: type=1326 audit(1760274565.286:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f27f8eec9 code=0x7ffc0000
[  345.716628][   T28] audit: type=1326 audit(1760274565.286:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11394 comm="syz.3.1911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9f27f8eec9 code=0x7ffc0000
[  345.831252][ T8939] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  346.116791][T11378] loop2: detected capacity change from 0 to 40427
[  346.183312][T11378] F2FS-fs (loop2): heap/no_heap options were deprecated
[  346.216120][T11378] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff
[  346.241129][T11378] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x364
[  346.298295][T11378] F2FS-fs (loop2): invalid crc value
[  346.332037][T11378] F2FS-fs (loop2): Found nat_bits in checkpoint
[  346.487173][T11378] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580
[  346.558357][T11378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  346.876763][T11418] loop4: detected capacity change from 0 to 256
[  346.899522][T11418] exfat: Deprecated parameter 'namecase'
[  346.946762][T11418] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  347.075766][T11420] loop2: detected capacity change from 0 to 512
[  347.130753][T11420] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1921: casefold flag without casefold feature
[  347.175230][T11420] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1921: couldn't read orphan inode 15 (err -117)
[  347.196162][T11420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.221451][T11401] loop3: detected capacity change from 0 to 40427
[  347.271265][T11401] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff
[  347.351402][T11401] F2FS-fs (loop3): invalid crc value
[  347.401178][T11401] F2FS-fs (loop3): Found nat_bits in checkpoint
[  347.543233][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.671482][T11401] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  347.895702][T11441] loop4: detected capacity change from 0 to 256
[  348.000731][ T5785] syz-executor: attempt to access beyond end of device
[  348.000731][ T5785] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  348.030265][T11441] FAT-fs (loop4): Directory bread(block 64) failed
[  348.036885][ T5785] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  348.036922][T11441] FAT-fs (loop4): Directory bread(block 65) failed
[  348.098534][T11441] FAT-fs (loop4): Directory bread(block 66) failed
[  348.113523][T11441] FAT-fs (loop4): Directory bread(block 67) failed
[  348.139559][T11441] FAT-fs (loop4): Directory bread(block 68) failed
[  348.158404][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  348.162443][T11441] FAT-fs (loop4): Directory bread(block 69) failed
[  348.191335][T11441] FAT-fs (loop4): Directory bread(block 70) failed
[  348.197992][T11441] FAT-fs (loop4): Directory bread(block 71) failed
[  348.205077][T11441] FAT-fs (loop4): Directory bread(block 72) failed
[  348.213392][T11441] FAT-fs (loop4): Directory bread(block 73) failed
[  348.349052][    T8] usb 6-1: Using ep0 maxpacket: 8
[  348.372476][    T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  348.407534][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.441084][    T8] usb 6-1: Product: syz
[  348.445344][    T8] usb 6-1: Manufacturer: syz
[  348.454977][    T8] usb 6-1: SerialNumber: syz
[  348.463512][    T8] usb 6-1: config 0 descriptor??
[  348.713374][    T8] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  348.757903][T11451] loop2: detected capacity change from 0 to 512
[  348.834248][ T5787] blk_print_req_error: 9 callbacks suppressed
[  348.834291][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  349.120971][    T8] usb write operation failed. (-71)
[  349.132662][    T8] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  349.158708][    T8] dvbdev: DVB: registering new adapter (Terratec H7)
[  349.175885][    T8] usb 6-1: media controller created
[  349.209405][    T8] usb read operation failed. (-71)
[  349.221310][    T8] usb write operation failed. (-71)
[  349.241756][    T8] dvb_usb_az6007: probe of 6-1:0.0 failed with error -5
[  349.263301][    T8] usb 6-1: USB disconnect, device number 9
[  349.358349][   T23] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  349.493892][T11471] loop3: detected capacity change from 0 to 512
[  349.517388][T11471] EXT4-fs: Invalid uid value -1
[  349.572121][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.597595][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.608669][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  349.621916][   T23] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  349.631788][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.659842][   T23] usb 3-1: config 0 descriptor??
[  349.877729][T11478] loop4: detected capacity change from 0 to 256
[  349.920723][T11478] exfat: Deprecated parameter 'namecase'
[  349.942830][T11478] exfat: Deprecated parameter 'utf8'
[  350.041050][T11478] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  350.127168][T11485] loop3: detected capacity change from 0 to 64
[  350.137379][   T23] input: HID 0458:5014 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5014.001C/input/input18
[  350.297030][   T23] kye 0003:0458:5014.001C: input,hiddev0,hidraw0: USB HID v1.01 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0
[  350.374698][   T23] usb 3-1: USB disconnect, device number 17
[  350.547529][T11489] fido_id[11489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  350.643570][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1953'.
[  350.755446][T11495] loop4: detected capacity change from 0 to 4096
[  350.926227][T11495] ntfs3: loop4: failed to convert "0080" to macinuit
[  352.143355][T11542] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1977'.
[  352.202872][T11542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1977'.
[  352.429552][T11546] loop3: detected capacity change from 0 to 4096
[  352.479899][T11546] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  352.625153][T11546] overlayfs: upper fs does not support tmpfile.
[  352.655301][T11546] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  353.144899][T11544] loop5: detected capacity change from 0 to 32768
[  353.237446][T11544] MetaData crosses page boundary!!
[  353.259422][T11544] lblock = 621d00, size  = 28672
[  353.264469][T11544] CPU: 0 PID: 11544 Comm: syz.5.1978 Not tainted syzkaller #0
[  353.271979][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  353.282098][T11544] Call Trace:
[  353.285432][T11544]  <TASK>
[  353.288413][T11544]  dump_stack_lvl+0x16c/0x230
[  353.293240][T11544]  ? show_regs_print_info+0x20/0x20
[  353.298591][T11544]  ? load_image+0x3b0/0x3b0
[  353.303167][T11544]  __get_metapage+0xaac/0xfa0
[  353.307908][T11544]  dtSearch+0x591/0x21b0
[  353.312253][T11544]  jfs_lookup+0x156/0x380
[  353.316640][T11544]  ? jfs_get_parent+0xb0/0xb0
[  353.319162][   T23] usb 3-1: new low-speed USB device number 18 using dummy_hcd
[  353.321372][T11544]  ? apparmor_path_rmdir+0x2f0/0x2f0
[  353.334195][T11544]  ? make_vfsuid+0x51/0xb0
[  353.338683][T11544]  ? inode_permission+0xf3/0x480
[  353.343679][T11544]  ? bpf_lsm_inode_create+0x9/0x10
[  353.348841][T11544]  ? security_inode_create+0xb7/0x100
[  353.354316][T11544]  ? jfs_get_parent+0xb0/0xb0
[  353.359048][T11544]  path_openat+0x10b8/0x3190
[  353.363750][T11544]  ? do_filp_open+0x3d0/0x3d0
[  353.368611][T11544]  do_filp_open+0x1c5/0x3d0
[  353.373183][T11544]  ? vfs_tmpfile+0x490/0x490
[  353.377855][T11544]  ? _raw_spin_unlock+0x28/0x40
[  353.382749][T11544]  ? alloc_fd+0x58f/0x630
[  353.385321][T11548] loop4: detected capacity change from 0 to 40427
[  353.387131][T11544]  do_sys_openat2+0x12c/0x1c0
[  353.398414][T11544]  ? do_sys_open+0xe0/0xe0
[  353.403038][T11544]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  353.409259][T11544]  ? lock_chain_count+0x20/0x20
[  353.414183][T11544]  __x64_sys_creat+0x90/0xb0
[  353.418838][T11544]  do_syscall_64+0x55/0xb0
[  353.423321][T11544]  ? clear_bhb_loop+0x40/0x90
[  353.428068][T11544]  ? clear_bhb_loop+0x40/0x90
[  353.433171][T11544]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  353.439135][T11544] RIP: 0033:0x7f8b21f8eec9
[  353.443550][T11548] F2FS-fs (loop4): invalid crc value
[  353.443595][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.468695][T11544] RSP: 002b:00007f8b22ebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  353.477255][T11544] RAX: ffffffffffffffda RBX: 00007f8b221e5fa0 RCX: 00007f8b21f8eec9
[  353.485284][T11544] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0
[  353.493320][T11544] RBP: 00007f8b22011f91 R08: 0000000000000000 R09: 0000000000000000
[  353.501352][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  353.509469][T11544] R13: 00007f8b221e6038 R14: 00007f8b221e5fa0 R15: 00007ffc5f18f9e8
[  353.517513][T11544]  </TASK>
[  353.549624][T11544] bread failed!
[  353.553224][T11548] F2FS-fs (loop4): Found nat_bits in checkpoint
[  353.559737][T11544] jfs_lookup: dtSearch returned -5
[  353.610616][   T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  353.649742][   T23] usb 3-1: config 0 has no interface number 0
[  353.656521][   T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  353.715559][   T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  353.745803][T11548] F2FS-fs (loop4): Start checkpoint disabled!
[  353.750943][   T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  353.771716][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.803088][   T23] usb 3-1: config 0 descriptor??
[  353.805532][T11548] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  353.809742][T11551] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  353.832056][T11557] loop3: detected capacity change from 0 to 1024
[  353.901429][   T23] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  353.915330][T11557] hfsplus: bad catalog entry type
[  354.024355][   T42] hfsplus: b-tree write err: -5, ino 4
[  354.203391][T11560] loop5: detected capacity change from 0 to 2048
[  354.254852][    C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[  354.281698][   T23] usb 3-1: USB disconnect, device number 18
[  354.335610][T11561] loop3: detected capacity change from 0 to 4096
[  354.345006][T11560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  354.480045][T11566] loop4: detected capacity change from 0 to 64
[  354.490405][T11560] MPI: mpi too large (113288 bits)
[  354.500727][T11566] Trying to free block not in datazone
[  354.506350][T11566] Trying to free block not in datazone
[  354.512190][T11566] Trying to free block not in datazone
[  354.517695][T11566] Trying to free block not in datazone
[  354.556057][T11566] Trying to free block not in datazone
[  354.574085][T11566] Trying to free block not in datazone
[  354.617996][T11566] Trying to free block not in datazone
[  354.626920][ T9585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.641060][T11566] Trying to free block not in datazone
[  354.672837][T11566] Trying to free block not in datazone
[  354.682083][T11566] Trying to free block not in datazone
[  354.841526][T11569] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1988'.
[  354.872205][T11569] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1988'.
[  355.206979][T11581] loop2: detected capacity change from 0 to 64
[  355.348517][   T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  355.369107][T11583] program syz.5.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  355.530703][   T23] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  355.539925][   T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129
[  355.561598][   T23] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  355.578333][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.598941][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  355.601022][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  355.618698][   T23] usb 5-1: Product: syz
[  355.627479][   T23] usb 5-1: Manufacturer: syz
[  355.632787][   T23] usb 5-1: SerialNumber: syz
[  355.648973][   T23] usb 5-1: config 0 descriptor??
[  355.761581][T11577] loop3: detected capacity change from 0 to 32768
[  355.832780][T11577] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  355.860434][   T23] mos7840 5-1:0.0: required endpoints missing
[  355.896774][T11596] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[  356.082912][   T23] usb 5-1: USB disconnect, device number 5
[  356.130831][ T5785] ocfs2: Unmounting device (7,3) on (node local)
[  356.540069][T11610] loop5: detected capacity change from 0 to 256
[  356.548998][T11610] exfat: Deprecated parameter 'utf8'
[  356.554761][T11610] exfat: Bad value for 'gid'
[  356.648412][   T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  356.874837][   T23] usb 3-1: Using ep0 maxpacket: 16
[  356.894352][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.914189][T11604] loop3: detected capacity change from 0 to 32768
[  356.921920][   T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00
[  356.931157][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.995950][   T23] usb 3-1: config 0 descriptor??
[  357.366350][T11622] loop4: detected capacity change from 0 to 4096
[  357.398257][T11622] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  357.454299][   T23] wacom 0003:056A:0028.001D: Unknown device_type for 'HID 056a:0028'. Assuming pen.
[  357.474654][   T23] wacom 0003:056A:0028.001D: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.2-1/input0
[  357.509945][   T23] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.001D/input/input19
[  357.584523][T11622] overlayfs: upper fs does not support tmpfile.
[  357.595603][T11622] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  357.712390][   T23] usb 3-1: USB disconnect, device number 19
[  358.438354][    T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  358.630536][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  358.658696][    T8] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  358.697043][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.720953][    T8] usb 6-1: config 0 descriptor??
[  358.867620][T11654] netlink: 'syz.2.2027': attribute type 3 has an invalid length.
[  358.882498][T11654] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2027'.
[  358.894135][T11633] loop4: detected capacity change from 0 to 32768
[  358.993385][T11659] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  358.999825][T11633] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  359.011793][T11658] IPVS: stopping backup sync thread 11659 ...
[  359.022603][T11633] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  359.140470][T11633] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  359.196506][    T8] hid (null): nested delimiters
[  359.222486][    T8] itetech 0003:06CB:73F4.001E: nested delimiters
[  359.230249][    T8] itetech 0003:06CB:73F4.001E: item 0 4 2 10 parsing failed
[  359.239276][    T8] itetech: probe of 0003:06CB:73F4.001E failed with error -22
[  359.384390][T11633] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  359.423993][T11663] loop2: detected capacity change from 0 to 2048
[  359.455175][    T8] usb 6-1: USB disconnect, device number 10
[  359.525239][T11663] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  359.853355][T11667] loop3: detected capacity change from 0 to 256
[  359.895167][T11667] exfat: Deprecated parameter 'namecase'
[  359.942165][T11667] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  360.001750][T11667] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  360.092855][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  360.092872][   T28] audit: type=1800 audit(1760274579.756:124): pid=11667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2033" name="file1" dev="loop3" ino=1048750 res=0 errno=0
[  360.129948][T11671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'.
[  360.174852][T11671] IPVS: Error joining to the multicast group
[  360.551541][T11685] loop3: detected capacity change from 0 to 1024
[  361.056573][T11696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2046'.
[  361.230666][T11678] loop5: detected capacity change from 0 to 32768
[  361.383519][T11678] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.466050][T11689] loop4: detected capacity change from 0 to 32768
[  361.559644][T11689] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  361.651190][   T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  361.703793][T11678] XFS (loop5): Ending clean mount
[  361.742366][T11678] XFS (loop5): Quotacheck needed: Please wait.
[  361.863872][T11678] XFS (loop5): Quotacheck: Done.
[  361.882027][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.900169][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.910819][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  361.924440][   T23] usb 4-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00
[  361.928686][ T8939] ocfs2: Unmounting device (7,4) on (node local)
[  361.934116][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.974796][   T28] audit: type=1800 audit(1760274581.636:125): pid=11678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2038" name="bus" dev="loop5" ino=9291 res=0 errno=0
[  361.979594][   T23] usb 4-1: config 0 descriptor??
[  362.111371][ T9585] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  362.537684][T11727] loop2: detected capacity change from 0 to 1024
[  362.542535][   T23] input: HID 0458:5014 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5014.001F/input/input22
[  362.550120][T11727] EXT4-fs: Invalid gid value -1
[  362.700008][   T23] kye 0003:0458:5014.001F: input,hiddev0,hidraw0: USB HID v1.01 Device [HID 0458:5014] on usb-dummy_hcd.3-1/input0
[  362.725336][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  362.768314][   T23] usb 4-1: USB disconnect, device number 18
[  362.887544][T11728] fido_id[11728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  362.906412][T11730] loop2: detected capacity change from 0 to 8192
[  362.952042][T11730] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  363.053866][T11723] loop4: detected capacity change from 0 to 32768
[  363.650924][T11739] loop5: detected capacity change from 0 to 64
[  364.284405][T11751] loop5: detected capacity change from 0 to 256
[  364.338384][T11751] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  364.365160][T11748] loop3: detected capacity change from 0 to 4096
[  364.533832][T11738] loop2: detected capacity change from 0 to 32768
[  365.460848][T11772] zonefs (nullb0) ERROR: Not a zoned block device
[  365.466586][T11756] loop5: detected capacity change from 0 to 32768
[  365.505689][T11756] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  365.582109][T11756] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  365.653394][   T12] (kworker/u4:1,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  365.991411][T11787] ptrace attach of "./syz-executor exec"[8939] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  366.076928][ T9585] ocfs2: Unmounting device (7,5) on (node local)
[  366.168327][    C0] vkms_vblank_simulate: vblank timer overrun
[  366.784372][T11785] loop2: detected capacity change from 0 to 32768
[  366.901784][T11785] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  366.919862][T11810] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  367.233062][T11785] XFS (loop2): Ending clean mount
[  367.258878][T11785] XFS (loop2): Quotacheck needed: Please wait.
[  367.338579][T11785] XFS (loop2): Quotacheck: Done.
[  367.441131][   T28] audit: type=1800 audit(1760274587.106:126): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2080" name="bus" dev="loop2" ino=9291 res=0 errno=0
[  367.464150][T11825] loop5: detected capacity change from 0 to 16
[  367.489406][T11825] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  367.506536][ T7696] udevd[7696]: incorrect cramfs checksum on /dev/loop5
[  367.585438][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  368.017356][T11801] loop4: detected capacity change from 0 to 40427
[  368.073851][T11801] F2FS-fs (loop4): heap/no_heap options were deprecated
[  368.115755][T11801] F2FS-fs (loop4): invalid crc value
[  368.136261][T11801] F2FS-fs (loop4): Found nat_bits in checkpoint
[  368.278714][T11801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  368.438827][T11821] loop3: detected capacity change from 0 to 40427
[  368.492891][T11821] F2FS-fs (loop3): Image doesn't support compression
[  368.518603][T11821] F2FS-fs (loop3): heap/no_heap options were deprecated
[  368.546666][T11821] F2FS-fs (loop3): invalid crc value
[  368.564696][T11821] F2FS-fs (loop3): Found nat_bits in checkpoint
[  368.620300][ T8939] syz-executor: attempt to access beyond end of device
[  368.620300][ T8939] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  368.655117][ T8939] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  368.753696][T11821] F2FS-fs (loop3): Start checkpoint disabled!
[  368.785443][T11844] loop5: detected capacity change from 0 to 256
[  368.823050][T11821] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  369.340815][T11856] loop5: detected capacity change from 0 to 16
[  369.398911][T11856] erofs: (device loop5): mounted with root inode @ nid 36.
[  369.446032][T11856] erofs: (device loop5): z_erofs_readahead: readahead error at folio 12 @ nid 36
[  369.472014][T11856] erofs: (device loop5): z_erofs_readahead: readahead error at folio 9 @ nid 36
[  369.502115][T11856] erofs: (device loop5): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  369.538747][T11856] syz.5.2117: attempt to access beyond end of device
[  369.538747][T11856] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  369.558506][T11856] syz.5.2117: attempt to access beyond end of device
[  369.558506][T11856] loop5: rw=524288, sector=720, nr_sectors = 8 limit=16
[  370.396449][T11855] loop2: detected capacity change from 0 to 32768
[  370.453414][T11855] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  370.469060][T11881] loop4: detected capacity change from 0 to 512
[  370.487797][T11855] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  370.525051][   T42] (kworker/u4:2,42,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  370.533243][T11881] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  370.652973][T11881] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  370.673543][T11881] EXT4-fs (loop4): orphan cleanup on readonly fs
[  370.708590][T11881] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2120: bad orphan inode 267
[  370.799498][T11881] EXT4-fs (loop4): Remounting filesystem read-only
[  370.829701][T11881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  370.909347][ T5786] ocfs2: Unmounting device (7,2) on (node local)
[  370.973450][T11881] System zones: 1-12
[  371.028348][T11881] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000007.
[  371.143893][ T8939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  371.447825][T11899] tipc: Started in network mode
[  371.480622][T11899] tipc: Node identity 5f5f14aa, cluster identity 4711
[  371.503730][T11899] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  371.714699][T11893] loop3: detected capacity change from 0 to 32768
[  371.797363][T11893] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  371.917879][T11893] XFS (loop3): Ending clean mount
[  371.999936][T11893] XFS (loop3): Quotacheck needed: Please wait.
[  372.147365][T11893] XFS (loop3): Quotacheck: Done.
[  372.324383][   T28] audit: type=1800 audit(1760274591.986:127): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2124" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  372.334674][T11901] loop5: detected capacity change from 0 to 32768
[  372.444641][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  372.483027][T11901] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  372.627608][T11901] XFS (loop5): Ending clean mount
[  372.881931][ T9585] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  372.933291][T11915] loop4: detected capacity change from 0 to 32768
[  373.085753][T11939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'.
[  373.361722][T11942] loop4: detected capacity change from 0 to 2048
[  373.424612][T11942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.111795][T11966] loop2: detected capacity change from 0 to 256
[  374.136420][T11966] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  374.210119][   T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  374.410816][T11974] loop3: detected capacity change from 0 to 256
[  374.446651][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.458758][   T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.490547][   T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  374.505004][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.529099][   T23] usb 5-1: config 0 descriptor??
[  374.552418][T11974] FAT-fs (loop3): Directory bread(block 64) failed
[  374.565224][T11974] FAT-fs (loop3): Directory bread(block 65) failed
[  374.575703][T11974] FAT-fs (loop3): Directory bread(block 66) failed
[  374.586897][T11974] FAT-fs (loop3): Directory bread(block 67) failed
[  374.595374][T11974] FAT-fs (loop3): Directory bread(block 68) failed
[  374.606271][T11974] FAT-fs (loop3): Directory bread(block 69) failed
[  374.630553][T11974] FAT-fs (loop3): Directory bread(block 70) failed
[  374.639396][T11974] FAT-fs (loop3): Directory bread(block 71) failed
[  374.646152][T11974] FAT-fs (loop3): Directory bread(block 72) failed
[  374.654582][ T5796] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  374.663430][T11974] FAT-fs (loop3): Directory bread(block 73) failed
[  374.872803][ T5796] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  374.884791][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.896226][ T5796] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  374.923711][ T5796] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  374.943355][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.970685][ T5796] usb 6-1: config 0 descriptor??
[  375.019187][   T23] isku 0003:1E7D:319C.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  375.052046][  T967] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  375.195618][   T23] isku 0003:1E7D:319C.0020: couldn't init struct isku_device
[  375.226168][   T23] isku 0003:1E7D:319C.0020: couldn't install keyboard
[  375.257077][   T23] isku: probe of 0003:1E7D:319C.0020 failed with error -71
[  375.273428][  T967] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  375.302536][   T23] usb 5-1: USB disconnect, device number 6
[  375.318246][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.336343][  T967] usb 3-1: Product: syz
[  375.343825][  T967] usb 3-1: Manufacturer: syz
[  375.353324][  T967] usb 3-1: SerialNumber: syz
[  375.366863][  T967] usb 3-1: config 0 descriptor??
[  375.395415][  T967] ch341 3-1:0.0: ch341-uart converter detected
[  375.444354][ T5796] holtek_kbd 0003:04D9:A055.0021: unknown main item tag 0x0
[  375.455591][ T5796] holtek_kbd 0003:04D9:A055.0021: unknown main item tag 0x0
[  375.468046][ T5796] holtek_kbd 0003:04D9:A055.0021: unknown main item tag 0x0
[  375.477726][ T5796] holtek_kbd 0003:04D9:A055.0021: item fetching failed at offset 5/7
[  375.492386][ T5796] holtek_kbd: probe of 0003:04D9:A055.0021 failed with error -22
[  375.524832][T11986] loop3: detected capacity change from 0 to 32768
[  375.560974][T11986] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  375.655516][T11986] XFS (loop3): Ending clean mount
[  375.674215][T11986] XFS (loop3): Quotacheck needed: Please wait.
[  375.719757][ T5863] usb 6-1: USB disconnect, device number 11
[  375.781719][T11986] XFS (loop3): Quotacheck: Done.
[  375.805637][  T967] usb 3-1: failed to send control message: -71
[  375.836716][  T967] ch341-uart: probe of ttyUSB0 failed with error -71
[  375.879700][  T967] usb 3-1: USB disconnect, device number 20
[  375.886978][  T967] ch341 3-1:0.0: device disconnected
[  375.969874][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  376.246755][T12001] loop4: detected capacity change from 0 to 4096
[  376.332746][T12002] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.511740][T12004] loop5: detected capacity change from 0 to 256
[  376.654530][T12004] FAT-fs (loop5): Directory bread(block 64) failed
[  376.688337][T12004] FAT-fs (loop5): Directory bread(block 65) failed
[  376.695056][T12004] FAT-fs (loop5): Directory bread(block 66) failed
[  376.728911][T12004] FAT-fs (loop5): Directory bread(block 67) failed
[  376.736052][T12004] FAT-fs (loop5): Directory bread(block 68) failed
[  376.754867][T12004] FAT-fs (loop5): Directory bread(block 69) failed
[  376.790362][T12004] FAT-fs (loop5): Directory bread(block 70) failed
[  376.796984][T12004] FAT-fs (loop5): Directory bread(block 71) failed
[  376.827795][T12004] FAT-fs (loop5): Directory bread(block 72) failed
[  376.846123][T12013] loop3: detected capacity change from 0 to 256
[  376.852752][T12004] FAT-fs (loop5): Directory bread(block 73) failed
[  376.921201][T12013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  377.208992][T12023] Bluetooth: MGMT ver 1.22
[  377.499361][T12028] loop5: detected capacity change from 0 to 4096
[  377.611885][T12032] loop2: detected capacity change from 0 to 64
[  377.668568][T12034] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  377.985158][T12028] overlayfs: upper fs does not support tmpfile.
[  378.015468][T12028] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  378.042167][T12028] overlayfs: failed to set xattr on upper
[  378.058515][T12028] overlayfs: ...falling back to redirect_dir=nofollow.
[  378.081940][T12028] overlayfs: ...falling back to index=off.
[  378.124230][T12016] loop4: detected capacity change from 0 to 32768
[  378.157323][T12016] XFS: attr2 mount option is deprecated.
[  378.239253][T12016] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  378.506728][T12016] XFS (loop4): Ending clean mount
[  378.526490][T12016] XFS (loop4): Quotacheck needed: Please wait.
[  378.663295][T12016] XFS (loop4): Quotacheck: Done.
[  378.790824][T12063] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2185'.
[  378.962907][ T8939] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  379.037054][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  379.045785][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  379.460482][T12059] loop2: detected capacity change from 0 to 32768
[  379.575330][T12078] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2197'.
[  379.602447][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2193'.
[  380.123800][T12098] loop3: detected capacity change from 0 to 512
[  380.172236][T12098] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  380.190097][T12098] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  380.250027][T12098] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2206: Corrupt directory, running e2fsck is recommended
[  380.319138][T12098] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  380.398474][T12098] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.2206: corrupted in-inode xattr: invalid ea_ino
[  380.433000][T12098] EXT4-fs (loop3): Remounting filesystem read-only
[  380.449672][T12098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.528962][T12098] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  380.558246][T12098] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  380.578704][T12098] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.2206: Corrupt directory, running e2fsck is recommended
[  380.705063][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.708307][T12105] loop2: detected capacity change from 0 to 256
[  380.751890][T12105] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  380.847585][T12094] loop4: detected capacity change from 0 to 40427
[  380.892180][T12094] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  380.932504][T12094] F2FS-fs (loop4): Image doesn't support compression
[  380.951033][T12094] F2FS-fs (loop4): Image doesn't support compression
[  380.997170][T12094] F2FS-fs (loop4): invalid crc value
[  381.039601][T12094] F2FS-fs (loop4): Found nat_bits in checkpoint
[  381.198575][T12094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  381.341366][   T28] audit: type=1800 audit(1760274601.006:128): pid=12094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2205" name="bus" dev="loop4" ino=10 res=0 errno=0
[  381.488356][ T8939] syz-executor: attempt to access beyond end of device
[  381.488356][ T8939] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  381.522190][ T8939] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  381.712941][T12122] loop5: detected capacity change from 0 to 256
[  383.454495][T12134] loop2: detected capacity change from 0 to 32768
[  383.570912][T12134] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  383.830222][T12134] XFS (loop2): Ending clean mount
[  384.020168][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  384.257110][T12145] loop5: detected capacity change from 0 to 40427
[  384.320959][T12145] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  384.345428][T12145] F2FS-fs (loop5): Image doesn't support compression
[  384.412074][T12145] F2FS-fs (loop5): Image doesn't support compression
[  384.497012][T12145] F2FS-fs (loop5): invalid crc value
[  384.621621][T12145] F2FS-fs (loop5): Found nat_bits in checkpoint
[  384.674705][T12177] loop4: detected capacity change from 0 to 4096
[  384.718848][T12177] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  384.767964][T12177] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  384.829687][T12145] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  384.850571][T12184] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  384.874172][T12183] loop2: detected capacity change from 0 to 256
[  384.942108][T12183] exfat: Deprecated parameter 'utf8'
[  384.947650][T12183] exfat: Deprecated parameter 'utf8'
[  384.984663][   T28] audit: type=1800 audit(1760274604.646:129): pid=12145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2224" name="bus" dev="loop5" ino=10 res=0 errno=0
[  385.029825][T12145] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of __insert_extent_tree+0x1f3/0x4c0
[  385.080486][T12145] syz.5.2224: attempt to access beyond end of device
[  385.080486][T12145] loop5: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  385.162023][T12183] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  385.330515][ T9585] syz-executor: attempt to access beyond end of device
[  385.330515][ T9585] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  385.389860][ T9585] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  385.831344][T12107] syz.3.2209 (12107): drop_caches: 1
[  385.963381][T12204] loop2: detected capacity change from 0 to 256
[  385.999102][T12204] exfat: Deprecated parameter 'utf8'
[  386.005386][T12204] exfat: Deprecated parameter 'namecase'
[  386.087267][T12204] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  386.229174][ T5791] Bluetooth: hci3: command 0x0406 tx timeout
[  386.328364][ T5789] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  386.566743][ T5789] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  386.591979][ T5789] usb 4-1: config 0 has no interface number 0
[  386.614773][ T5789] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=b4.98
[  386.626267][ T3517] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  386.656651][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.676566][ T5789] usb 4-1: config 0 descriptor??
[  386.714561][ T5789] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  387.184315][T12241] loop4: detected capacity change from 0 to 256
[  387.319739][T12243] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  387.342180][ T5789] gspca_vc032x: reg_r err -71
[  387.364969][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.394359][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.418570][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.439142][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.444530][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.477842][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.498262][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.507363][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.548566][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.554146][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.576669][T12246] loop2: detected capacity change from 0 to 256
[  387.578779][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.608544][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.617231][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.635166][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.638300][T12246] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  387.665368][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.671136][T12246] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  387.692832][T12246] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  387.718232][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.739257][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.756287][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.786787][ T5789] gspca_vc032x: I2c Bus Busy Wait 00
[  387.809587][ T5789] gspca_vc032x: Unknown sensor...
[  387.814774][ T5789] vc032x: probe of 4-1:0.153 failed with error -22
[  387.864965][ T5789] usb 4-1: USB disconnect, device number 19
[  387.878551][ T5863] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  388.100612][ T5863] usb 5-1: config 255 has an invalid interface number: 175 but max is 0
[  388.118531][ T5863] usb 5-1: config 255 has no interface number 0
[  388.135289][ T5863] usb 5-1: config 255 interface 175 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  388.169872][ T5863] usb 5-1: New USB device found, idVendor=04bb, idProduct=0930, bcdDevice= e.5d
[  388.201459][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.228478][ T5863] usb 5-1: Product: syz
[  388.233249][ T5863] usb 5-1: Manufacturer: syz
[  388.237929][ T5863] usb 5-1: SerialNumber: syz
[  388.239997][T12235] loop5: detected capacity change from 0 to 32768
[  388.271608][T12249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.288626][T12249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.323155][T12235] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  388.476726][T12235] XFS (loop5): Ending clean mount
[  388.565103][T12249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.600685][T12249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.628426][ T5796] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  388.684467][ T9585] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  388.832633][ T5863] asix 5-1:255.175 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  388.853547][ T5863] asix: probe of 5-1:255.175 failed with error -71
[  388.869225][ T5796] usb 4-1: Using ep0 maxpacket: 8
[  388.887473][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.952977][ T5796] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  388.965955][ T5863] usb 5-1: USB disconnect, device number 7
[  389.037167][ T5796] usb 4-1: New USB device found, idVendor=dc75, idProduct=fbe3, bcdDevice=92.2f
[  389.065760][ T5796] usb 4-1: New USB device strings: Mfr=122, Product=57, SerialNumber=0
[  389.095755][ T5796] usb 4-1: Product: syz
[  389.108204][ T5796] usb 4-1: Manufacturer: syz
[  389.126906][ T5796] usb 4-1: config 0 descriptor??
[  389.225286][T12270] loop2: detected capacity change from 0 to 32768
[  389.263598][T12270] XFS: noikeep mount option is deprecated.
[  389.298477][T12270] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  389.504408][T12270] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  389.582866][T12270] XFS (loop2): Starting recovery (logdev: internal)
[  389.640400][ T5796] hid-generic 0003:DC75:FBE3.0022: unbalanced delimiter at end of report description
[  389.688407][ T5796] hid-generic: probe of 0003:DC75:FBE3.0022 failed with error -22
[  389.707395][T12270] XFS (loop2): Ending recovery (logdev: internal)
[  389.883159][ T5796] usb 4-1: USB disconnect, device number 20
[  390.073536][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.575666][T12320] loop4: detected capacity change from 0 to 1024
[  390.649213][T12320] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  390.663176][T12324] loop3: detected capacity change from 0 to 128
[  390.671666][T12320] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  390.725276][T12324] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  390.760002][T12320] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  390.793542][T12324] hpfs: filesystem error: improperly stopped
[  390.800183][T12320] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  390.819408][T12324] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  390.827235][T12324] hpfs: You really don't want any checks? You are crazy...
[  390.866067][T12320] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  390.904732][T12324] hpfs: hpfs_map_sector(): read error
[  390.925459][T12324] hpfs: code page support is disabled
[  390.957368][T12324] hpfs: hpfs_map_4sectors(): unaligned read
[  390.990959][T12329] loop2: detected capacity change from 0 to 1024
[  390.993327][T12324] hpfs: hpfs_map_4sectors(): unaligned read
[  391.028884][T12324] hpfs: filesystem error: unable to find root dir
[  391.040089][T12331] loop5: detected capacity change from 0 to 1024
[  391.192179][T12329] hfsplus: bad catalog entry type
[  391.304262][ T1090] hfsplus: b-tree write err: -5, ino 4
[  391.319772][   T12] hfsplus: b-tree write err: -5, ino 4
[  392.003024][T12356] loop4: detected capacity change from 0 to 4096
[  392.020636][T12356] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  392.065679][T12356] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  392.123323][T12356] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  392.205126][T12364] mkiss: ax0: crc mode is auto.
[  392.270386][T12356] ntfs3: loop4: ino=5, "/" directory corrupted
[  392.598900][T12374] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2284'.
[  393.214778][T12393] loop3: detected capacity change from 0 to 24
[  393.263333][T12393] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  393.287466][T12393] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  393.633298][T12376] loop2: detected capacity change from 0 to 32768
[  394.046099][T12416] loop4: detected capacity change from 0 to 64
[  394.306706][T12421] loop4: detected capacity change from 0 to 65
[  394.325363][T12421] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  394.647111][T12426] loop3: detected capacity change from 0 to 512
[  394.734341][T12426] Quota error (device loop3): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  394.796413][T12426] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  394.807845][T12426] EXT4-fs error (device loop3): ext4_acquire_dquot:6940: comm syz.3.2308: Failed to acquire dquot type 1
[  394.869414][T12426] EXT4-fs (loop3): 1 truncate cleaned up
[  394.890184][T12426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  394.918826][T12426] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.098741][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.551937][T12450] loop2: detected capacity change from 0 to 2364
[  396.061741][T12439] loop4: detected capacity change from 0 to 32768
[  396.078706][T12439] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2312 (12439)
[  396.145465][T12439] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  396.166144][T12439] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  396.177072][   T23] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  396.207608][T12439] BTRFS info (device loop4): using free space tree
[  396.312881][T12467] loop3: detected capacity change from 0 to 4096
[  396.324047][T12467] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  396.378598][   T23] usb 6-1: Using ep0 maxpacket: 8
[  396.396135][T12467] ntfs3: loop3: Failed to load $Extend (-22).
[  396.403721][T12467] ntfs3: loop3: Failed to initialize $Extend.
[  396.413882][   T23] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  396.447699][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.456290][T12439] BTRFS info (device loop4): enabling ssd optimizations
[  396.495103][T12439] BTRFS info (device loop4): auto enabling async discard
[  396.503241][   T23] usb 6-1: Product: syz
[  396.507475][   T23] usb 6-1: Manufacturer: syz
[  396.533795][   T23] usb 6-1: SerialNumber: syz
[  396.555286][   T23] usb 6-1: config 0 descriptor??
[  396.590690][   T23] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  396.601539][   T28] audit: type=1800 audit(1760274616.266:130): pid=12439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2312" name="file1" dev="loop4" ino=260 res=0 errno=0
[  396.610207][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  396.676464][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  396.676495][T12488] loop2: detected capacity change from 0 to 512
[  396.704827][   T23] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  396.725727][ T8939] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  396.733010][T12488] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  396.742058][   T23] usb 6-1: media controller created
[  396.797678][T12488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  396.801453][T12457] dvb-usb: bulk message failed: -22 (3/0)
[  396.841557][T12488] EXT4-fs (loop2): 1 truncate cleaned up
[  396.852422][T12488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.899912][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  397.062006][   T23] cxusb: set interface failed
[  397.066779][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  397.079369][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.316502][   T23] DVB: Unable to find symbol mt352_attach()
[  397.353385][   T23] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  397.455554][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2333'.
[  397.699712][   T23] rc_core: IR keymap rc-dvico-portable not found
[  397.706222][   T23] Registered IR keymap rc-empty
[  397.766546][   T23] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  397.822652][   T23] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input24
[  397.884656][   T23] dvb-usb: schedule remote query interval to 100 msecs.
[  397.923000][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  397.983122][   T23] usb 6-1: USB disconnect, device number 12
[  398.160586][   T23] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  398.395533][T12520] loop2: detected capacity change from 0 to 4096
[  398.483959][T12520] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  398.711102][   T23] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  398.790406][T12530] loop2: detected capacity change from 0 to 1024
[  398.864435][T12532] netlink: 'syz.3.2347': attribute type 10 has an invalid length.
[  398.902993][   T23] usb 6-1: Using ep0 maxpacket: 16
[  398.913775][T12532] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  398.915067][   T23] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  398.955527][  T967] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  398.968264][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.977682][T12532] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  398.997717][   T23] usb 6-1: config 0 descriptor??
[  399.027596][T12532] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  399.095464][T12532] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  399.158480][  T967] usb 5-1: Using ep0 maxpacket: 32
[  399.169199][  T967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.193248][  T967] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.238722][  T967] usb 5-1: config 0 interface 0 has no altsetting 0
[  399.258372][  T967] usb 5-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  399.281180][  T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.324875][  T967] usb 5-1: config 0 descriptor??
[  399.466264][   T23] cherry 0003:046A:0027.0023: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.5-1/input0
[  399.501754][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2353'.
[  399.538410][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  399.745581][    T9] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  399.750081][   T23] usb 6-1: USB disconnect, device number 13
[  399.760756][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.760784][    T9] usb 4-1: Product: syz
[  399.786102][    T9] usb 4-1: Manufacturer: syz
[  399.788297][  T967] wacom 0003:056A:0057.0024: hidraw1: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.4-1/input0
[  399.798579][    T9] usb 4-1: SerialNumber: syz
[  399.841049][    T9] usb 4-1: config 0 descriptor??
[  399.875521][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  399.899923][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  399.920180][    T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  399.948565][    T9] usb 4-1: media controller created
[  399.953181][  T967] usb 5-1: USB disconnect, device number 8
[  399.994240][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  400.059930][T12539] dvb-usb: bulk message failed: -22 (7/0)
[  400.129266][    T9] DVB: Unable to find symbol mt352_attach()
[  400.187052][    T9] DVB: Unable to find symbol nxt6000_attach()
[  400.194810][    T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  400.212771][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28
[  400.235512][    T9] dvb-usb: schedule remote query interval to 1000 msecs.
[  400.247437][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  400.265108][    T9] dvb-usb: bulk message failed: -22 (7/0)
[  400.273357][    T9] dvb-usb: bulk message failed: -22 (7/0)
[  400.289710][    T9] usb 4-1: USB disconnect, device number 21
[  400.438404][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  400.795364][T12561] loop2: detected capacity change from 0 to 1024
[  401.029025][ T3517] hfsplus: b-tree write err: -5, ino 4
[  401.036679][T12565] loop4: detected capacity change from 0 to 4096
[  401.077521][T12565] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  401.455763][T12557] loop5: detected capacity change from 0 to 40427
[  401.498404][T12557] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  401.541145][T12557] F2FS-fs (loop5): invalid crc value
[  401.600000][T12557] F2FS-fs (loop5): Found nat_bits in checkpoint
[  401.786442][T12557] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  402.103218][ T9585] syz-executor: attempt to access beyond end of device
[  402.103218][ T9585] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  402.143896][ T9585] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  402.298324][  T967] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  402.467556][T12573] loop2: detected capacity change from 0 to 40427
[  402.483126][T12573] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  402.519475][T12573] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  402.533683][T12596] sit0: entered promiscuous mode
[  402.542072][  T967] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  402.575020][T12596] netlink: 'syz.4.2375': attribute type 1 has an invalid length.
[  402.578245][  T967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.610311][T12596] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2375'.
[  402.620224][  T967] usb 4-1: Product: syz
[  402.634281][T12573] F2FS-fs (loop2): Found nat_bits in checkpoint
[  402.636709][  T967] usb 4-1: Manufacturer: syz
[  402.671969][  T967] usb 4-1: SerialNumber: syz
[  402.703265][  T967] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  402.827884][T12573] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  402.834443][   T23] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  402.856689][T12573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  403.058594][T12586] random: crng reseeded on system resumption
[  403.648595][T12612] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2381'.
[  403.908535][   T23] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  403.939841][   T23] ath9k_htc: Failed to initialize the device
[  403.959729][ T5863] usb 4-1: USB disconnect, device number 22
[  404.023929][ T5863] usb 4-1: ath9k_htc: USB layer deinitialized
[  404.073357][T12622] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma?
[  404.210635][T12625] macsec1: entered promiscuous mode
[  404.222807][T12625] bridge0: port 3(macsec1) entered blocking state
[  404.242848][T12625] bridge0: port 3(macsec1) entered disabled state
[  404.250559][T12625] macsec1: entered allmulticast mode
[  404.256077][T12625] bridge0: entered allmulticast mode
[  404.265171][T12625] macsec1: left allmulticast mode
[  404.276322][T12625] bridge0: left allmulticast mode
[  404.499586][   T28] audit: type=1326 audit(1760274624.156:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12633 comm="syz.5.2391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b21f8eec9 code=0x0
[  404.615428][   T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  404.673063][T12642] loop3: detected capacity change from 0 to 128
[  404.703203][T12642] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  404.717172][T12642] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.785007][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  404.811265][   T23] usb 3-1: Using ep0 maxpacket: 8
[  404.819456][   T23] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  404.833892][   T23] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  404.847965][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.860817][   T23] usb 3-1: Product: syz
[  404.865266][   T23] usb 3-1: Manufacturer: syz
[  404.870659][   T23] usb 3-1: SerialNumber: syz
[  404.879306][   T23] usb 3-1: config 0 descriptor??
[  404.890369][   T23] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  404.899072][   T23] usb 3-1: setting power ON
[  404.903788][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  404.917698][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  404.928661][   T23] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  404.937561][   T23] usb 3-1: media controller created
[  404.977351][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  405.001165][   T23] usb 3-1: selecting invalid altsetting 6
[  405.015183][   T23] usb 3-1: digital interface selection failed (-22)
[  405.031369][   T23] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  405.041815][   T23] usb 3-1: setting power OFF
[  405.046552][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  405.054657][   T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  405.065481][   T23] (NULL device *): no alternate interface
[  405.101200][T12630] dvb-usb: bulk message failed: -22 (3/0)
[  405.130014][T12630] cxusb: i2c wr: len=80 is too big!
[  405.130014][T12630] 
[  405.171715][   T23] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  405.197516][   T23] usb 3-1: USB disconnect, device number 21
[  405.512414][T12659] loop4: detected capacity change from 0 to 128
[  405.540805][T12659] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  405.554349][T12659] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  405.610453][ T8939] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  405.710524][T12665] binder: 12664:12665 ioctl c00c620f 200000000500 returned -22
[  405.939735][T12672] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2407'.
[  406.122610][   T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  406.320687][   T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  406.341371][   T23] usb 5-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[  406.356559][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.375919][   T23] usb 5-1: config 0 descriptor??
[  406.418284][ T5863] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  406.557853][T12674] loop3: detected capacity change from 0 to 32768
[  406.608382][ T5863] usb 3-1: Using ep0 maxpacket: 16
[  406.633536][T12674] read_mapping_page failed!
[  406.642142][ T5863] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.654470][T12674] ERROR: (device loop3): txCommit: 
[  406.654470][T12674] 
[  406.665440][ T5863] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.679611][ T5863] usb 3-1: config 0 interface 0 has no altsetting 0
[  406.692064][ T5863] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  406.693623][T12674] jfs_mkdir: dtSearch returned -17
[  406.710157][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.739307][ T5863] usb 3-1: config 0 descriptor??
[  406.839217][   T23] waltop 0003:172F:0502.0025: unknown main item tag 0x0
[  406.852032][   T23] waltop 0003:172F:0502.0025: item fetching failed at offset 3/5
[  406.863652][   T23] waltop: probe of 0003:172F:0502.0025 failed with error -22
[  406.928489][  T967] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  407.104710][ T5796] usb 5-1: USB disconnect, device number 9
[  407.110801][  T967] usb 6-1: Using ep0 maxpacket: 16
[  407.126119][  T967] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  407.137887][  T967] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  407.147714][  T967] usb 6-1: Product: syz
[  407.154822][   T23] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  407.163837][  T967] usb 6-1: Manufacturer: syz
[  407.169332][  T967] usb 6-1: SerialNumber: syz
[  407.181229][  T967] usb 6-1: config 0 descriptor??
[  407.182963][ T5863] microsoft 0003:045E:009D.0026: collection stack underflow
[  407.202625][ T5863] microsoft 0003:045E:009D.0026: item 0 2 0 12 parsing failed
[  407.214348][ T5863] microsoft 0003:045E:009D.0026: parse failed
[  407.224892][ T5863] microsoft: probe of 0003:045E:009D.0026 failed with error -22
[  407.358976][   T23] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  407.370594][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  407.377314][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  407.386583][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.406701][ T5789] usb 3-1: USB disconnect, device number 22
[  407.408287][   T23] usb 4-1: config 0 descriptor??
[  407.446278][ T5863] usb 6-1: USB disconnect, device number 14
[  408.065644][   T23] usb 4-1: USB disconnect, device number 23
[  408.243487][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2423'.
[  408.668260][   T23] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  408.739025][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2429'.
[  408.868632][   T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30
[  408.891005][   T23] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  408.918212][   T23] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.949858][   T23] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[  408.987027][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  408.998268][   T23] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  409.007391][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.029588][   T23] usb 5-1: config 0 descriptor??
[  409.123854][T12713] loop5: detected capacity change from 0 to 40427
[  409.138734][T12713] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  409.156520][T12713] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  409.174097][T12713] F2FS-fs (loop5): invalid crc value
[  409.202049][T12713] F2FS-fs (loop5): Found nat_bits in checkpoint
[  409.354496][T12713] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  409.368799][T12713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  409.393699][T12729] tipc: New replicast peer: 255.255.255.255
[  409.415564][T12729] tipc: Enabled bearer <udp:syz2>, priority 10
[  409.462742][   T23] asus 0003:0B05:1ABE.0028: item fetching failed at offset 0/3
[  409.509031][   T23] asus 0003:0B05:1ABE.0028: Asus hid parse failed: -22
[  409.516098][   T23] asus: probe of 0003:0B05:1ABE.0028 failed with error -22
[  409.711625][T12720] loop2: detected capacity change from 0 to 32768
[  409.768036][   T23] usb 5-1: USB disconnect, device number 10
[  409.813247][T12720] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  410.014941][T12720] XFS (loop2): Ending clean mount
[  410.041871][T12720] XFS (loop2): Quotacheck needed: Please wait.
[  410.194609][T12720] XFS (loop2): Quotacheck: Done.
[  410.353045][ T5786] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  410.428439][   T23] tipc: Node number set to 4278255617
[  411.278624][T12755] loop4: detected capacity change from 0 to 32768
[  411.350747][T12755] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  411.465327][T12763] loop3: detected capacity change from 0 to 32768
[  411.511096][T12763] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  411.552220][T12755] XFS (loop4): Ending clean mount
[  411.568760][T12763] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  411.694356][T12763] (syz.3.2446,12763,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  411.725840][T12763] (syz.3.2446,12763,0):ocfs2_get_suballoc_slot_bit:2709 ERROR: read block 137438953477 failed -12
[  411.757387][T12763] (syz.3.2446,12763,0):ocfs2_get_suballoc_slot_bit:2741 ERROR: status = -12
[  411.789057][T12763] (syz.3.2446,12763,0):ocfs2_test_inode_bit:2823 ERROR: get alloc slot and bit failed -12
[  411.809695][ T8939] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  411.829222][T12763] (syz.3.2446,12763,1):ocfs2_test_inode_bit:2864 ERROR: status = -12
[  411.837394][T12763] (syz.3.2446,12763,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  412.110984][ T5785] ocfs2: Unmounting device (7,3) on (node local)
[  412.805055][T12807] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  413.008389][   T23] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  413.072084][T12793] loop4: detected capacity change from 0 to 32768
[  413.099741][T12793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2453 (12793)
[  413.150859][T12793] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  413.167390][T12813] loop3: detected capacity change from 0 to 4096
[  413.176251][T12793] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  413.196266][T12793] BTRFS info (device loop4): enabling auto defrag
[  413.196905][T12813] ntfs3: loop3: ino=3, Correct links count -> 2.
[  413.223393][   T23] usb 3-1: unable to get BOS descriptor or descriptor too short
[  413.242360][   T23] usb 3-1: not running at top speed; connect to a high speed hub
[  413.254150][T12793] BTRFS info (device loop4): doing ref verification
[  413.273421][   T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  413.298261][T12793] BTRFS info (device loop4): use no compression
[  413.301861][T12813] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  413.312971][   T23] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  413.333522][T12793] BTRFS info (device loop4): force clearing of disk cache
[  413.348908][T12793] BTRFS info (device loop4): max_inline at 57
[  413.355381][   T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  413.368944][T12793] BTRFS info (device loop4): disabling free space tree
[  413.377788][T12813] ntfs3: loop3: failed to convert "0080" to cp863
[  413.389811][   T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  413.399752][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.407887][   T23] usb 3-1: Product: syz
[  413.426295][T12813] ntfs3: loop3: failed to convert name for inode 1e.
[  413.429455][   T23] usb 3-1: Manufacturer: syz
[  413.458188][   T23] usb 3-1: SerialNumber: syz
[  413.568770][T12793] BTRFS info (device loop4): enabling ssd optimizations
[  413.618535][T12793] BTRFS info (device loop4): auto enabling async discard
[  413.686917][T12793] BTRFS info (device loop4): rebuilding free space tree
[  413.722395][T12809] loop5: detected capacity change from 0 to 32768
[  413.784050][T12793] BTRFS info (device loop4): disabling free space tree
[  413.809650][T12793] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  413.843270][T12793] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  413.914295][   T23] usb 3-1: 0:2 : does not exist
[  413.980339][   T23] usb 3-1: USB disconnect, device number 23
[  414.108254][ T5796] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  414.232734][ T8939] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  414.276581][T12836] loop5: detected capacity change from 0 to 512
[  414.299709][T12836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  414.323525][T12836] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  414.351130][ T5796] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.394870][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0
[  414.427082][ T5796] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  414.446654][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.489213][ T5796] usb 4-1: config 0 descriptor??
[  414.517354][T12836] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 512 (only 1 groups)
[  414.668781][ T9585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.929109][ T5796] aquacomputer_d5next 0003:0C70:F014.0029: unknown main item tag 0x0
[  414.937408][ T5796] aquacomputer_d5next 0003:0C70:F014.0029: unknown main item tag 0x0
[  414.968455][ T5796] aquacomputer_d5next 0003:0C70:F014.0029: unknown main item tag 0x0
[  414.987918][ T5796] aquacomputer_d5next 0003:0C70:F014.0029: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0
[  415.144094][ T5796] usb 4-1: USB disconnect, device number 24
[  415.242494][T12847] fido_id[12847]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  415.304717][T12852] loop4: detected capacity change from 0 to 16
[  415.322096][T12852] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  415.688102][T12844] loop2: detected capacity change from 0 to 32768
[  415.792281][T12844] JBD2: Ignoring recovery information on journal
[  415.848742][T12844] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  416.022648][T12866] loop3: detected capacity change from 0 to 4096
[  416.078987][T12866] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  416.114719][T12844] (syz.2.2471,12844,0):ocfs2_group_extend:306 ERROR: The disk is too old and small. Force to do offline resize.
[  416.127340][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2480'.
[  416.257717][ T5786] ocfs2: Unmounting device (7,2) on (node local)
[  417.044144][T12884] loop3: detected capacity change from 0 to 1024
[  417.180269][T12884] hfsplus: bad catalog entry type
[  417.286059][T12870] loop5: detected capacity change from 0 to 40427
[  417.295842][   T12] hfsplus: b-tree write err: -5, ino 4
[  417.307796][T12870] F2FS-fs (loop5): invalid crc value
[  417.325299][T12870] F2FS-fs (loop5): Found nat_bits in checkpoint
[  417.518273][ T5796] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  417.528412][T12870] F2FS-fs (loop5): Start checkpoint disabled!
[  417.570936][T12870] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  417.701103][T12899] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2494'.
[  417.738291][ T5796] usb 3-1: Using ep0 maxpacket: 32
[  417.746878][ T1325] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  417.774645][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.798621][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.816448][ T5796] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  417.860799][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.906970][ T5796] usb 3-1: config 0 descriptor??
[  417.932998][ T5796] hub 3-1:0.0: USB hub found
[  418.161018][ T5796] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[  418.170592][T12905] loop4: detected capacity change from 0 to 4096
[  418.187582][T12905] EXT4-fs: Ignoring removed bh option
[  418.204282][T12905] EXT4-fs (loop4): Test dummy encryption mode enabled
[  418.230142][T12905] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  418.254991][T12905] System zones: 0-5
[  418.305330][T12905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  418.378728][ T5796] usbhid 3-1:0.0: can't add hid device: -71
[  418.385844][ T5796] usbhid: probe of 3-1:0.0 failed with error -71
[  418.399298][T12905] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  418.459423][ T5796] usb 3-1: USB disconnect, device number 24
[  418.533682][ T8939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.889933][T12926] loop4: detected capacity change from 0 to 256
[  419.021929][T12926] FAT-fs (loop4): Directory bread(block 64) failed
[  419.046115][T12926] FAT-fs (loop4): Directory bread(block 65) failed
[  419.059657][T12926] FAT-fs (loop4): Directory bread(block 66) failed
[  419.097994][T12931] loop5: detected capacity change from 0 to 1024
[  419.098611][T12926] FAT-fs (loop4): Directory bread(block 67) failed
[  419.130489][T12931] EXT4-fs: Ignoring removed nomblk_io_submit option
[  419.158669][T12926] FAT-fs (loop4): Directory bread(block 68) failed
[  419.171443][T12926] FAT-fs (loop4): Directory bread(block 69) failed
[  419.192462][T12931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  419.209022][T12926] FAT-fs (loop4): Directory bread(block 70) failed
[  419.215639][T12926] FAT-fs (loop4): Directory bread(block 71) failed
[  419.250794][T12926] FAT-fs (loop4): Directory bread(block 72) failed
[  419.257424][T12926] FAT-fs (loop4): Directory bread(block 73) failed
[  419.470907][ T9585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.508517][ T5796] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  419.628596][T12945] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2514'.
[  419.712146][ T5796] usb 3-1: Using ep0 maxpacket: 16
[  419.729627][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.741828][ T5796] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  419.751958][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.763316][ T5796] usb 3-1: config 0 descriptor??
[  419.868423][T12949] tipc: Enabling of bearer <ud#:s> rejected, media not registered
[  419.898517][  T967] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  420.111929][  T967] usb 6-1: Using ep0 maxpacket: 8
[  420.121653][  T967] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  420.139490][  T967] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  420.149093][  T967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.157293][  T967] usb 6-1: Product: syz
[  420.181879][  T967] usb 6-1: Manufacturer: syz
[  420.186604][  T967] usb 6-1: SerialNumber: syz
[  420.197444][  T967] usb 6-1: config 0 descriptor??
[  420.217675][ T5796] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.002A/input/input29
[  420.220548][T12959] program syz.4.2521 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  420.233306][  T967] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  420.246777][  T967] usb 6-1: setting power ON
[  420.256972][  T967] dvb-usb: bulk message failed: -22 (2/0)
[  420.288511][  T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  420.309383][  T967] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  420.318306][  T967] usb 6-1: media controller created
[  420.353288][  T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  420.362164][   T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  420.394251][ T5796] appleir 0003:05AC:8241.002A: input,hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  420.396268][T12961] loop4: detected capacity change from 0 to 64
[  420.427003][  T967] usb 6-1: selecting invalid altsetting 6
[  420.446416][ T5796] usb 3-1: USB disconnect, device number 25
[  420.456353][  T967] usb 6-1: digital interface selection failed (-22)
[  420.478648][  T967] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  420.488039][T12944] dvb-usb: bulk message failed: -22 (3/0)
[  420.504841][T12944] cxusb: i2c wr: len=79 is too big!
[  420.504841][T12944] 
[  420.528271][  T967] usb 6-1: setting power OFF
[  420.532957][  T967] dvb-usb: bulk message failed: -22 (2/0)
[  420.578319][   T27] usb 4-1: Using ep0 maxpacket: 16
[  420.583782][  T967] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  420.604182][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.629627][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.639853][  T967] (NULL device *): no alternate interface
[  420.668440][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  420.703084][T12962] fido_id[12962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  420.728249][   T27] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  420.749646][  T967] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  420.759564][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.785235][   T27] usb 4-1: config 0 descriptor??
[  420.798583][  T967] usb 6-1: USB disconnect, device number 15
[  421.235529][   T27] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max
[  421.286125][   T27] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max
[  421.313276][   T27] microsoft 0003:045E:07DA.002B: report_id 12451851 is invalid
[  421.341025][   T27] microsoft 0003:045E:07DA.002B: item 0 4 1 8 parsing failed
[  421.374162][   T27] microsoft 0003:045E:07DA.002B: parse failed
[  421.395508][   T27] microsoft: probe of 0003:045E:07DA.002B failed with error -22
[  421.407439][T12980] loop4: detected capacity change from 0 to 256
[  421.464372][T12982] loop5: detected capacity change from 0 to 1024
[  421.529729][   T27] usb 4-1: USB disconnect, device number 25
[  421.796179][T12986] loop5: detected capacity change from 0 to 1024
[  421.810671][T12986] EXT4-fs: Ignoring removed bh option
[  421.817286][T12986] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  421.893235][T12986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  422.042564][ T9585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.104968][T12998] loop2: detected capacity change from 0 to 1024
[  422.361134][ T1325] hfsplus: b-tree write err: -5, ino 4
[  422.972093][T13026] loop4: detected capacity change from 0 to 2048
[  422.997901][T13029] nbd: couldn't find a device at index 67108864
[  423.026006][T13026] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  423.083383][T13026] UDF-fs: Scanning with blocksize 512 failed
[  423.112388][T13026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  423.272966][T13036] loop2: detected capacity change from 0 to 256
[  423.794471][T13055] loop4: detected capacity change from 0 to 512
[  423.819664][T13055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  423.902118][T13055] EXT4-fs (loop4): 1 truncate cleaned up
[  423.940801][T13055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  423.962092][T13055] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2565'.
[  423.971354][T13055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2565'.
[  423.988786][T13055] bridge1: entered promiscuous mode
[  423.995373][T13055] bridge1: entered allmulticast mode
[  424.117465][ T8939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.394515][T13072] loop3: detected capacity change from 0 to 256
[  424.530539][T13075] loop4: detected capacity change from 0 to 2048
[  424.613346][T13075] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  424.673423][T13073] loop5: detected capacity change from 0 to 4096
[  424.717739][T13073] ntfs3: loop5: ino=3, Correct links count -> 2.
[  424.859801][T13073] ntfs3: loop5: failed to convert "0080" to cp874
[  424.873088][T13073] ntfs3: loop5: failed to convert name for inode 1e.
[  425.336291][T13089] loop3: detected capacity change from 0 to 64
[  425.454436][T13063] loop2: detected capacity change from 0 to 40427
[  425.520795][T13063] F2FS-fs (loop2): invalid crc value
[  425.574433][T13063] F2FS-fs (loop2): Found nat_bits in checkpoint
[  425.754955][T13063] F2FS-fs (loop2): Start checkpoint disabled!
[  425.780977][T13063] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  425.889104][   T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  426.078046][   T42] kworker/u4:2: attempt to access beyond end of device
[  426.078046][   T42] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  426.098209][   T27] usb 4-1: Using ep0 maxpacket: 8
[  426.112693][   T27] usb 4-1: config 12 has an invalid interface number: 212 but max is 0
[  426.123194][   T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  426.130447][   T27] usb 4-1: config 12 has no interface number 0
[  426.143767][   T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  426.158240][   T27] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c
[  426.175860][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.186066][   T27] usb 4-1: Product: syz
[  426.204502][   T27] usb 4-1: Manufacturer: syz
[  426.219325][   T27] usb 4-1: SerialNumber: syz
[  426.247675][   T27] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state.
[  426.267937][   T27] dvb-usb: bulk message failed: -22 (2/0)
[  426.287400][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  426.318011][   T27] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2))
[  426.342839][   T27] usb 4-1: media controller created
[  426.411452][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  426.438070][T13098] dvb-usb: bulk message failed: -22 (4/0)
[  426.446247][T13098] cxusb: i2c read failed
[  426.495788][   T27] cxusb: set interface failed
[  426.511005][   T27] dvb-usb: bulk message failed: -22 (1/0)
[  426.516975][   T27] dvb-usb: bulk message failed: -22 (3/0)
[  426.538372][   T27] usb 4-1: bluebird_gpio_write failed.
[  426.588324][   T27] dvb-usb: bulk message failed: -22 (3/0)
[  426.594199][   T27] usb 4-1: bluebird_gpio_write failed.
[  426.728856][   T27] DVB: Unable to find symbol dib7000p_attach()
[  426.758249][   T27] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)'
[  426.958272][   T27] rc_core: IR keymap rc-dvico-mce not found
[  426.966792][   T27] Registered IR keymap rc-empty
[  427.014312][   T27] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  427.041608][T13111] loop4: detected capacity change from 0 to 32768
[  427.051064][   T27] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input30
[  427.064017][T13111] XFS: noikeep mount option is deprecated.
[  427.082992][   T27] dvb-usb: schedule remote query interval to 100 msecs.
[  427.099275][   T27] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected.
[  427.116784][   T27] usb 4-1: USB disconnect, device number 26
[  427.164039][T13111] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  427.351365][T13111] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  427.384762][   T27] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected.
[  427.493237][T13111] XFS (loop4): Starting recovery (logdev: internal)
[  427.584153][T13111] XFS (loop4): Ending recovery (logdev: internal)
[  427.923879][ T8939] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  429.001475][T13158] loop3: detected capacity change from 0 to 32768
[  429.037081][T13158] XFS: ikeep mount option is deprecated.
[  429.106432][T13158] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  429.401094][T13158] XFS (loop3): Ending clean mount
[  429.437040][T13191] loop2: detected capacity change from 0 to 512
[  429.568918][ T5785] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  429.627370][T13168] loop4: detected capacity change from 0 to 32768
[  429.649446][T13181] loop5: detected capacity change from 0 to 32768
[  429.677501][T13168] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2610 (13168)
[  429.714686][T13168] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  429.729098][T13168] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  429.737821][T13168] BTRFS info (device loop4): setting nodatasum
[  429.745138][T13168] BTRFS info (device loop4): doing ref verification
[  429.753150][T13168] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  429.799824][T13168] BTRFS info (device loop4): trying to use backup root at mount time
[  429.811096][T13181] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  429.820231][T13168] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  429.833077][T13168] BTRFS info (device loop4): trying to use backup root at mount time
[  429.841390][T13168] BTRFS info (device loop4): using free space tree
[  429.848019][T13168] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 512
[  429.862561][T13168] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  429.949714][T13168] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 512
[  430.014549][T13168] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  430.067885][T13181] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  430.089504][T13168] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  430.128795][T13168] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  430.187283][T13181] XFS (loop5): Starting recovery (logdev: internal)
[  430.218410][T13168] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 512
[  430.317812][T13215] loop3: detected capacity change from 0 to 512
[  430.321153][T13181] XFS (loop5): Ending recovery (logdev: internal)
[  430.360893][T13215] EXT4-fs: Ignoring removed bh option
[  430.417047][T13215] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  430.470274][ T9585] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  430.489214][T13168] BTRFS info (device loop4): enabling ssd optimizations
[  430.496475][T13168] BTRFS info (device loop4): auto enabling async discard
[  430.607007][T13215] EXT4-fs (loop3): 1 truncate cleaned up
[  430.633326][T13215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  430.813368][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.843246][ T8939] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  431.055213][T13231] loop3: detected capacity change from 0 to 512
[  431.150612][T13231] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  431.302948][T13231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.346464][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2627'.
[  431.395985][T13235] loop2: detected capacity change from 0 to 4096
[  431.481187][T13235] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  431.562310][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.729192][T13235] ntfs3: loop2: Failed to load $Extend (-22).
[  431.735381][T13235] ntfs3: loop2: Failed to initialize $Extend.
[  432.385607][T13259] loop3: detected capacity change from 0 to 2048
[  432.465571][T13259] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.692784][T13259] UDF-fs: error (device loop3): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  432.715695][T13268] loop5: detected capacity change from 0 to 2048
[  432.743846][T13268] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27485, location=27485
[  432.800309][T13268] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 100: 0x6a != 0x00
[  432.829738][T13268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.855187][   T28] audit: type=1800 audit(1760274652.516:132): pid=13268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2645" name="file1" dev="loop5" ino=1367 res=0 errno=0
[  433.273648][T13281] netlink: 'syz.3.2649': attribute type 66 has an invalid length.
[  433.405771][T13285] loop5: detected capacity change from 0 to 512
[  433.458974][T13285] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  433.468665][T13285] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  433.629071][T13285] FAT-fs (loop5): FAT read failed (blocknr 128)
[  433.756509][T13263] loop2: detected capacity change from 0 to 40427
[  433.790236][T13263] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  433.847264][T13263] F2FS-fs (loop2): invalid crc value
[  433.891866][T13263] F2FS-fs (loop2): Found nat_bits in checkpoint
[  434.054705][T13302] loop4: detected capacity change from 0 to 1024
[  434.082894][T13263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  434.105495][T13298] loop3: detected capacity change from 0 to 4096
[  434.158669][T13298] ntfs3: loop3: ino=3, Correct links count -> 2.
[  434.356393][T13298] ntfs3: loop3: failed to convert "0080" to cp874
[  434.370931][ T5786] syz-executor: attempt to access beyond end of device
[  434.370931][ T5786] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  434.386602][ T3517] hfsplus: b-tree write err: -5, ino 4
[  434.395732][ T5786] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  434.408393][T13298] ntfs3: loop3: failed to convert name for inode 1e.
[  435.401863][T13325] loop5: detected capacity change from 0 to 128
[  435.426297][T13310] loop3: detected capacity change from 0 to 32768
[  435.438344][T13325] EXT4-fs (loop5): Test dummy encryption mode enabled
[  435.455603][T13310] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2663 (13310)
[  435.485699][T13325] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  435.500640][T13325] ext4 filesystem being mounted at /334/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  435.520407][T13310] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  435.578610][T13310] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  435.589140][T13310] BTRFS info (device loop3): force zlib compression, level 3
[  435.596602][T13310] BTRFS info (device loop3): force clearing of disk cache
[  435.604314][T13310] BTRFS info (device loop3): turning off barriers
[  435.624627][T13310] BTRFS info (device loop3): doing ref verification
[  435.644924][T13310] BTRFS info (device loop3): enabling disk space caching
[  435.674628][T13310] BTRFS info (device loop3): disk space caching is enabled
[  435.824873][T13325] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  435.858467][T13310] BTRFS info (device loop3): enabling ssd optimizations
[  435.862221][T13354] loop4: detected capacity change from 0 to 512
[  435.875962][   T28] audit: type=1800 audit(1760274655.536:133): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2669" name="file1" dev="loop5" ino=12 res=0 errno=0
[  435.879178][T13310] BTRFS info (device loop3): auto enabling async discard
[  435.932424][T13354] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  435.943213][T13310] BTRFS info (device loop3): rebuilding free space tree
[  436.006934][T13354] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2673: invalid indirect mapped block 4294967295 (level 0)
[  436.079170][T13310] BTRFS info (device loop3): disabling free space tree
[  436.086308][T13310] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  436.121252][T13354] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2673: invalid indirect mapped block 4294967295 (level 1)
[  436.156096][ T9585] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  436.188501][T13310] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  436.223628][T13354] EXT4-fs (loop4): 1 orphan inode deleted
[  436.231375][T13354] EXT4-fs (loop4): 1 truncate cleaned up
[  436.239194][T13354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  436.446029][T13310] BTRFS info (device loop3): balance: start -slimit=4,stripes=7..9
[  436.520837][T13310] BTRFS info (device loop3): balance: ended with status: 0
[  436.531397][ T8939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.552922][T13360] loop5: detected capacity change from 0 to 4096
[  436.691839][ T5785] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  436.809939][T13365] loop4: detected capacity change from 0 to 256
[  436.960187][T13360] ntfs3: loop5: failed to convert "0080" to cp857
[  436.976403][T13365] FAT-fs (loop4): Directory bread(block 64) failed
[  437.007253][T13365] FAT-fs (loop4): Directory bread(block 65) failed
[  437.021471][T13360] ntfs3: loop5: failed to convert name for inode 1e.
[  437.042781][T13365] FAT-fs (loop4): Directory bread(block 66) failed
[  437.078291][T13365] FAT-fs (loop4): Directory bread(block 67) failed
[  437.085045][T13365] FAT-fs (loop4): Directory bread(block 68) failed
[  437.101647][T13367] loop2: detected capacity change from 0 to 4096
[  437.118337][T13365] FAT-fs (loop4): Directory bread(block 69) failed
[  437.125836][T13365] FAT-fs (loop4): Directory bread(block 70) failed
[  437.152621][T13365] FAT-fs (loop4): Directory bread(block 71) failed
[  437.185618][T13365] FAT-fs (loop4): Directory bread(block 72) failed
[  437.193003][T13370] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  437.205308][T13367] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  437.218683][T13365] FAT-fs (loop4): Directory bread(block 73) failed
[  437.238228][T13367] NILFS (loop2): mounting fs with errors
[  438.082219][T13375] loop5: detected capacity change from 0 to 256
[  438.156672][T13375] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  438.574541][T13384] loop4: detected capacity change from 0 to 2048
[  438.651938][T13384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  438.770739][T13384] UDF-fs: error (device loop4): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  439.695550][T13407] macsec1: entered promiscuous mode
[  439.720572][T13407] bridge0: entered promiscuous mode
[  439.736012][T13407] bridge0: port 3(macsec1) entered blocking state
[  439.746142][T13407] bridge0: port 3(macsec1) entered disabled state
[  439.757334][T13407] macsec1: entered allmulticast mode
[  439.766868][T13407] bridge0: entered allmulticast mode
[  439.781574][T13407] macsec1: left allmulticast mode
[  439.786984][T13407] bridge0: left allmulticast mode
[  439.800839][T13407] bridge0: left promiscuous mode
[  439.831600][T13404] loop5: detected capacity change from 0 to 32768
[  439.877677][T13404] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Trying to join cluster "lock_nolock", "errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í"
[  439.896478][T13404] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í: Now mounting FS (format 1801)...
[  439.924301][T13404] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: journal 0 mapped with 5 extents in 0ms
[  439.946998][  T967] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0, already locked for use
[  439.963584][  T967] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Looking at journal...
[  440.110752][  T967] kworker/1:2: attempt to access beyond end of device
[  440.110752][  T967] loop5: rw=0, sector=4398046511104, nr_sectors = 8 limit=32768
[  440.180118][  T967] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: jid=0: Failed
[  440.232893][T13404] gfs2: fsid=errors=withdrawSŠ9ÝÆþ±1] ‰²èâ‘óå]ˆ_î4@N?á^»ËõâÂc_:¡gr=̃·D¶í.0: error recovering journal 0: -5
[  440.479084][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.488297][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.637987][T13423] loop4: detected capacity change from 0 to 1024
[  440.650808][T13425] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2703'.
[  440.661265][T13423] EXT4-fs: Ignoring removed nomblk_io_submit option
[  440.678252][T13425] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2703'.
[  440.709448][T13423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  440.749334][T13423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  440.798956][T13423] System zones: 0-1, 3-36
[  440.898833][T13423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  441.066275][T13438] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  441.089149][T13437] bridge0: entered promiscuous mode
[  441.096819][T13437] macsec1: entered promiscuous mode
[  441.143141][T13437] bridge0: port 3(macsec1) entered blocking state
[  441.165381][ T8939] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  441.174777][T13437] bridge0: port 3(macsec1) entered disabled state
[  441.188033][T13437] macsec1: entered allmulticast mode
[  441.210473][T13437] bridge0: entered allmulticast mode
[  441.229982][T13437] macsec1: left allmulticast mode
[  441.235315][T13437] bridge0: left allmulticast mode
[  441.276107][T13437] bridge0: left promiscuous mode
[  441.728889][T13457] tipc: Started in network mode
[  441.733875][T13457] tipc: Node identity 4, cluster identity 4711
[  441.743530][T13457] tipc: Node number set to 4
[  441.778561][ T5789] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  441.872274][T13463] loop5: detected capacity change from 0 to 1024
[  441.897596][T13463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.936017][T13463] EXT4-fs error (device loop5): ext4_xattr_inode_iget:440: comm syz.5.2720: inode #398253073: comm syz.5.2720: iget: illegal inode #
[  441.963928][T13463] EXT4-fs error (device loop5): ext4_xattr_inode_iget:445: comm syz.5.2720: error while reading EA inode 398253073 err=-117
[  441.970799][ T5789] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.006375][ T5789] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  442.017354][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.044105][ T9585] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.048406][ T5789] usb 5-1: config 0 descriptor??
[  442.416829][T13476] loop5: detected capacity change from 0 to 4096
[  442.491941][ T5789] lenovo 0003:17EF:6047.002C: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0
[  442.792635][   T27] usb 5-1: USB disconnect, device number 11
[  442.906469][T13484] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2728'.
[  443.428868][T13499] loop3: detected capacity change from 0 to 4096
[  443.512779][T13502] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  443.566392][   T28] audit: type=1800 audit(1760274663.226:134): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2734" name="file1" dev="loop3" ino=15 res=0 errno=0
[  444.063211][T13514] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2739'.
[  444.224144][T13497] loop2: detected capacity change from 0 to 32768
[  444.422543][T13516] loop5: detected capacity change from 0 to 8192
[  444.459343][T13516] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  444.489568][T13516] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  444.509291][T13516] REISERFS (device loop5): using ordered data mode
[  444.515882][T13516] reiserfs: using flush barriers
[  444.524244][T13516] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  444.542689][T13516] REISERFS (device loop5): checking transaction log (loop5)
[  444.556315][T13516] REISERFS (device loop5): Using r5 hash to sort names
[  444.570944][T13516] reiserfs: enabling write barrier flush mode
[  444.630308][T13516] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  444.668867][T13516] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  444.745210][T13516] REISERFS (device loop5): Remounting filesystem read-only
[  444.769444][T13516] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  444.829596][T13516] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  444.876561][T13516] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  444.949990][T13516] REISERFS error (device loop5): zam-7001 reiserfs_find_entry: io error
[  444.978592][T13516] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  445.024611][T13516] REISERFS error (device loop5): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  445.068507][T13516] REISERFS error (device loop5): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  445.110542][T13516] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  445.191244][T13516] REISERFS warning (device loop5): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  445.298591][ T9585] ------------[ cut here ]------------
[  445.304265][ T9585] kernel BUG at fs/reiserfs/journal.c:1916!
[  445.322847][ T9585] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  445.329099][ T9585] CPU: 1 PID: 9585 Comm: syz-executor Not tainted syzkaller #0
[  445.336685][ T9585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  445.346779][ T9585] RIP: 0010:do_journal_release+0x53a/0x550
[  445.352735][ T9585] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 a6 7b 5f ff <0f> 0b e8 9f 7b 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  445.372440][ T9585] RSP: 0018:ffffc90004b8fb00 EFLAGS: 00010293
[  445.375177][T13541] loop3: detected capacity change from 0 to 4096
[  445.378557][ T9585] RAX: ffffffff82260f2a RBX: ffff888065176000 RCX: ffff88802e5e0000
[  445.378576][ T9585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  445.378587][ T9585] RBP: ffffc90004b8fbf8 R08: ffffc90004b8fb77 R09: 0000000000000000
[  445.378600][ T9585] R10: ffffc90004b8fb40 R11: fffff52000971f6f R12: ffffc9000bf29000
[  445.378614][ T9585] R13: 1ffff92000971f64 R14: ffff888065176630 R15: 0000000000000000
[  445.378627][ T9585] FS:  00005555913fb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  445.378644][ T9585] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  445.378657][ T9585] CR2: 00005555914165c8 CR3: 0000000064d92000 CR4: 00000000003506e0
[  445.378675][ T9585] Call Trace:
[  445.378683][ T9585]  <TASK>
[  445.378694][ T9585]  ? journal_release+0x30/0x30
[  445.378737][ T9585]  journal_release+0x1f/0x30
[  445.378767][ T9585]  reiserfs_put_super+0x222/0x480
[  445.378792][ T9585]  ? hook_inode_free_security+0xb0/0xb0
[  445.378814][ T9585]  ? reiserfs_dirty_inode+0x240/0x240
[  445.378843][ T9585]  ? fscrypt_destroy_keyring+0x288/0x2a0
[  445.378874][ T9585]  ? reiserfs_dirty_inode+0x240/0x240
[  445.378898][ T9585]  generic_shutdown_super+0x134/0x2b0
[  445.378929][ T9585]  kill_block_super+0x44/0x90
[  445.503031][ T9585]  deactivate_locked_super+0x97/0x100
[  445.508485][ T9585]  cleanup_mnt+0x429/0x4c0
[  445.512969][ T9585]  task_work_run+0x1ce/0x250
[  445.517622][ T9585]  ? task_work_cancel+0x240/0x240
[  445.522802][ T9585]  ? exit_to_user_mode_loop+0x3b/0x110
[  445.528325][ T9585]  exit_to_user_mode_loop+0xe6/0x110
[  445.533676][ T9585]  exit_to_user_mode_prepare+0xf6/0x180
[  445.539287][ T9585]  syscall_exit_to_user_mode+0x1a/0x50
[  445.544840][ T9585]  do_syscall_64+0x61/0xb0
[  445.549313][ T9585]  ? clear_bhb_loop+0x40/0x90
[  445.554127][ T9585]  ? clear_bhb_loop+0x40/0x90
[  445.558864][ T9585]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  445.564826][ T9585] RIP: 0033:0x7f8b21f901f7
[  445.569299][ T9585] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  445.589115][ T9585] RSP: 002b:00007ffc5f18ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  445.597678][ T9585] RAX: 0000000000000000 RBX: 00007f8b22011d7d RCX: 00007f8b21f901f7
[  445.605868][ T9585] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5f18ed30
[  445.614005][ T9585] RBP: 00007ffc5f18ed30 R08: 0000000000000000 R09: 0000000000000000
[  445.622025][ T9585] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5f18fdc0
[  445.630136][ T9585] R13: 00007f8b22011d7d R14: 000000000006cb22 R15: 00007ffc5f18fe00
[  445.638445][ T9585]  </TASK>
[  445.641708][ T9585] Modules linked in:
[  445.653686][T13543] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  445.673226][ T9585] ---[ end trace 0000000000000000 ]---
[  445.678801][ T9585] RIP: 0010:do_journal_release+0x53a/0x550
[  445.684949][ T9585] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 40 d3 b6 ff e9 ac fc ff ff e8 a6 7b 5f ff <0f> 0b e8 9f 7b 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00
[  445.738168][ T9585] RSP: 0018:ffffc90004b8fb00 EFLAGS: 00010293
[  445.744334][ T9585] RAX: ffffffff82260f2a RBX: ffff888065176000 RCX: ffff88802e5e0000
[  445.752939][ T9585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  445.761740][ T9585] RBP: ffffc90004b8fbf8 R08: ffffc90004b8fb77 R09: 0000000000000000
[  445.770246][ T9585] R10: ffffc90004b8fb40 R11: fffff52000971f6f R12: ffffc9000bf29000
[  445.778546][ T9585] R13: 1ffff92000971f64 R14: ffff888065176630 R15: 0000000000000000
[  445.786671][ T9585] FS:  00005555913fb500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  445.835925][ T9585] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  445.849209][ T9585] CR2: 00007f7ee99e7dac CR3: 0000000064d92000 CR4: 00000000003506e0
[  445.857282][ T9585] Kernel panic - not syncing: Fatal exception
[  445.863684][ T9585] Kernel Offset: disabled
[  445.868285][ T9585] Rebooting in 86400 seconds..