last executing test programs:

2m2.200158617s ago: executing program 3 (id=260):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec1392106d04d308280b011a030109024700010000000009046900000e010000082402010202"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
dup(0xffffffffffffffff)

2m0.681872673s ago: executing program 3 (id=272):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010002, &(0x7f0000000000)=ANY=[], 0x1, 0x6055, &(0x7f0000000440)="$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")
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

1m58.978936712s ago: executing program 3 (id=293):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
writev(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)="7661e1bc65b89258981b4214e2afe21820ad0873d03a5ea9350ed0187aec2aaf0fba454a47c9267d51a39e876089d52d2eeca351f69d0d839b9b1b1a3b3456caeb0e014d5b836b6a128691431434aca33ceaf2ec4b9cf548b6dbd5e890ec233146b8a101d3eaefe90112e352197322e4eedd", 0x72}, {&(0x7f0000000240)="473778498f8ba87b1b5712b3a6446d24770aa9d2bf67e1a308586af7fb1b5acd20aeb874dc09a7da26f2f1004010bcd0c43e7925c04b18b661139295560d0dd5f99548040e49bebd58d32483338a7b77755a303d4a209bdb7f59c407cd33f62a19853e91b323d4d86ba1cd11497b8578ff93127599d82657fff02f52f0da7acc9a1c7789a2a9f768c3", 0x89}, {&(0x7f0000000300)="9f9b554a49a3998df494d1db295f5184102318e02b6b9bbc1148ad21a481abfd8ac35e9f64bc21f2a629b381ca3ab408c7c677eadf9b7191a445d0cbf6a6b3ce67a9a597db3bb06ca1cd8a547808aa5327359a094cd60eb1a4d0eb2dc91c992ffff471d6b18e9faeda33d0478e345ddde310bd049ae4bd6dda6d0885f42785d71a54a3407867eee99f", 0x89}, {&(0x7f0000000140)="6d3bdc38434071ccb2b9c63a0e7660aced12cc", 0x13}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f00000003c0)="58833e54b6d40f297bb3602604fac45a6916d0b716e4d07e12499774815c8c5f0bc0c72c5adf5b6d348ace8cdd5780ff5b4d410b8e3486f25077acf2cc3b15bbbceed4b8d0d347ff8915885d4a2673d4994ae49a5850408bc4c133e8ecd45168fa1810f36741e32d", 0x68}, {&(0x7f0000000440)="e7f366ff5f8a197f60fb7773f11cd085b65bf3e64828021887c5091ec81ab75139c7e4eafaca65f0c4e61f5495d554a51be9ea71", 0x34}, {&(0x7f0000000480)="0b9a8b4e6c276cfcab7d12ec073f43b99c66c4020e0d038d95a63d72bc00d91d2dfbb1359b05e50fbd11c5bb95e004dc6ed65aac45b331120a292c12d62fc223d1092e8788721246868a96bfaefecdf1f8f22c338385db2847853d28f318f3e4df8cb75173e06f06ca8830f5b5daf3e8c3c1a8783b10f3e256c91ece51f902414700fdf3421a739ff509928bc8ff3d2cb824d33eacee982024e3d046c7f5bd5665167ffc1565f0a4d005914e0299c1c3ae071d7c352c82494257d483e622fa25687ea3742d4e9579fd581ff43cf5b8a14a", 0xd1}, {&(0x7f0000000580)="5a79c270102bbf5ba78808a7c511f52ad8b1e5fc0b84786177a20b0a9c0a00b66e68065523", 0x25}], 0x9)

1m58.172102976s ago: executing program 3 (id=301):
syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="000b9240c8aee6631ad071808fe5ec25c497c626f69d02a71d1d27602d048db08101209e5e4cce0e9628b0636f3baa"], 0x1, 0x639, &(0x7f0000000680)="$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")
creat(&(0x7f0000000200)='./bus\x00', 0x10)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
preadv2(r0, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b)

1m57.956742079s ago: executing program 3 (id=303):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8")
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xb24d547a82164f02, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

1m57.378948379s ago: executing program 3 (id=308):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x408c5333, &(0x7f0000000280))

1m57.079551564s ago: executing program 32 (id=308):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0x408c5333, &(0x7f0000000280))

34.661884112s ago: executing program 5 (id=924):
r0 = getpid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10)
process_vm_writev(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

34.346015327s ago: executing program 5 (id=927):
syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

34.118747681s ago: executing program 5 (id=929):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
write$binfmt_script(r0, 0x0, 0x0)

33.951134474s ago: executing program 5 (id=930):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000200)='./file0/file0\x00')
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

33.684712408s ago: executing program 5 (id=935):
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
write$tun(r1, &(0x7f0000000240)=ANY=[], 0x2f6)

33.284275235s ago: executing program 5 (id=939):
r0 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x80)
ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x8000000, 0x0, 0x9, '&\x00', 0x0, 0xd3, 0x4a, 0x0, 0x0, 0x0, 0xe})

32.653756526s ago: executing program 33 (id=939):
r0 = gettid()
timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x80)
ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x8000000, 0x0, 0x9, '&\x00', 0x0, 0xd3, 0x4a, 0x0, 0x0, 0x0, 0xe})

4.903668157s ago: executing program 1 (id=1101):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc)
write$vga_arbiter(r1, &(0x7f00000000c0)=@unlock_all, 0xb)

4.68949851s ago: executing program 0 (id=1103):
r0 = socket(0x15, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))

4.658210331s ago: executing program 1 (id=1104):
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x5)

4.408142215s ago: executing program 0 (id=1107):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[], 0x5, 0x55a2, &(0x7f0000006980)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount$nfs(&(0x7f0000000100)='\a..', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

3.822605375s ago: executing program 2 (id=1111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r1, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000200001"], 0x234}}, 0x0)

3.477621301s ago: executing program 4 (id=1114):
pipe(&(0x7f0000000400))
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0)

3.428406572s ago: executing program 2 (id=1115):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r1}, 0x18)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14)
read(r0, &(0x7f00000000c0)=""/199, 0xc7)

3.378279113s ago: executing program 1 (id=1116):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
fallocate(r0, 0x0, 0xfea000, 0x2000402)

3.157373456s ago: executing program 2 (id=1128):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
truncate(&(0x7f00000000c0)='./file0/file0\x00', 0x4)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

3.082615097s ago: executing program 1 (id=1119):
r0 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x87)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x458001, 0x30)

2.788741133s ago: executing program 1 (id=1121):
syz_emit_ethernet(0x83, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2008410, &(0x7f0000000bc0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45aca9836c319f437199ff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2680b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2100931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7245c84268030000000000000008886b313bd01a22d576e414011a4f0a897514329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515e34ac8c454a30dd54a580abcf2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55afad76a7b7a000016181a40ff1ec9da9ccc1191c2116322020c66d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5863380a41da382e73ea142b01b4a742fa11c0927ba811dd60903d575e2449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4ab22052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cfe0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a00000", @ANYBLOB="dd8c5296ca9f73154fa61d2f48231e064bdc3ba1f00ab7c8ac6abab05313a1f3f7d297d893da20186e749d98ea9fd9e581d670c795458b60306688602c"], 0x80, 0x5557, &(0x7f0000009300)="$eJzs3M1rI2UYAPB30m3X/bSIB287sAgtbMKmH4sehKq7+IFdih8HT5om05DdJFOaNK31IuhRPPifiIInj/4NHjx7Ew+KN0HJzMS1rh+7JG3a3d8PJs/MO5NnnncILc9MSAAeW/Pxrz9H4XI4F0KYCSFcjEK2HhVLZi0Pz4QQroQQSn9ZomL8z4G5EML5EMLlYfI8Z1Ts+vza4OrqT6//8s13Z89c+OLr76c3a2Dang0hdLbz9b1OHtNmHu8U47VBK4udlUER8x2du8V2mse9ZDPLsFcbHVfL4nIzPz7d3u0N41a7Vh/GZmsrG9/u5ifsDZqjPNkb7tR2su1GspnFVi/NYvMgr2v/IP/bdtDr53kaRb4PsvSh3x/FfDzZT/L5bN/NYr3bL8bzvGkj2R/GQRGL04V62m5kdWyOc6VPtjda3d39eJDs9FppN16tVJ+rVG+UqztpI+knK+Vap3FjJV5otoeHlftJrbPWTNNmO6nU085ivNCs18vVarxwM9ls1bpxtVpZrlwvry4Wa9fiV26/E7cb8cIwvtTq7s612r14K92J83csxkuV5ecX46vV+K31jXjjzVu31jfefu/mu7dfXH/t5eKg+8qKF5auLy2Vq9fLS9XFEzD/4f/dB5x/f5z5f1IU/RDzj8a7PPDfHv4D9uHckRQCcHrc1/8H/T9w9E57/x8m2f8PWyr9///3v6Xx+/+x+t+T2v+f4vnDWNxgAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4bP0w++Wr2cp8vn2hGL9UDD1VbEchhFII4fd/MBPmDuWcKfLM/svxs3+r4dsoZBmG5zhbLOdDCGvF8tuTR30VAAAA4NH11UdXPsu79fxlftoFcZzymzali+9PKF8UQpid/3FC2UrDl6cnlCz7fJ8J+xPKlt3AemIiqV4obrmdmUi2BzUzCh9fujeYTSjKQ+lYywEAAI7FzKFwvF0IAAAAx+nTaRfAdERh9Chz9Cw4++b9vUeb5w7tAwAAAE6haNoFAAAAAEcu6//9/h8AAAA82vLf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPdu4lB2kgjgPwvy3l4SMS494LeAh3cAyP4NKlcAAvwdIlXsELcAbceQQDhnZCLIFIZLBKvi/ptNNOfswAm5k2BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuKdv9Xr+5ePrT7fm7Pa3yTMaAAAA4JxtvZ43B9O2/jSdf55OvUz1IiLKiDg3d69i2MmsUk59oX190oevEU3C4TNGaXsSEW/T9uPFvb8FAAAAeFyb5WrWztbbIi0BfH7Tb7f4O9pFm/LZu0x5RUTU0++Z0spD8SpTWPP/HsSHTGnNAtY4U1i75DY4f214bcjkty3KX46rzi6NZLxofsTxaWMAAOBBdGcCF2YhAAAAPID3fXeAfhTH4nifcdTu0g3BSacGAAAA9OhPn9UtMvcDAAAA+Pc083/v/wMAAID/VnVNo/b9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzTtl7PN8vV7NL1xZU5u/1t8o0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICf7M+7DYAwGINB84YOZf9hkSegTHNXffqtFAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+rUmWxtZ4k+y9No6eR5KzU+Pq1Lg7N54+GLM/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7988bRxEFAPzd3u3lDyCMQS4MKEgU0BD7EhJSQgGyKPgISJZzDoYLgcQFiSyQG6iQ6zQISoSQQKbLd0gdS2lCl8KFkahBu7frbBKDD+vYvdi/nzQ7b8+jmTd7J8vPuzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUNp+J15KiridHaaGcfnanZ21pazfeqTP3Nq4O5u1LG7tt9A3b48/+cn2cvXk1Ezl5Kv6kwEAAOBoaJf1fUTcSzcXsj6Zyuv/tByT1fzfPzOMy3r+0bp/a2ftePGl2bL+/+3X+y/sLjQ1XCebdHll0J9/PJXO/7TFiffsviM6+ZXPf/fSzt+Q5P3157fT/Hq2vr19+91uHh6rI1sA4CBOl30RlD8PZX2vycQAODI6lcK7rP/bU83mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH7fV4qoxbETHbeRBntnbWlvbqb23cnS3b+Zs3N6pzZlOkEbG8MuinNe5l0l27fuOTxcGgf3WUIPkvg/cNTkXEWCc8SPDhCGMi/n1M8fGM5nbxz0FrMtJoNEiK92dS8hlnUH72xj9zQ9+QAAA4tNKiZXX9vXRzIXutNR3x1w8P1/+vVeIYsf6//9H5O9W1qvV/r7YdTr651cufzV27fuONlcuLl/qX+p++eab3Vu/shXPnLsxl12p+bjmS/nzTaQIAAPAE6xatWv8n04/f/z9ZiWPE+v/z73pfVtdqq//39OCmX9OZAAAAHEXd3ei5V/78o7XHiFa3G18srq5e7Q2Pu+dnhsda0z2gY0Wr1v/t6aazAgAAAOqwvd566P7/xUocI97/f/rHF3+uztmOiBMRVyKif3rpyuBifduZaHX8oXK+ULfpnQIAANCUE0Wr3v9P8+f/k91HHpKIeP3VYVz+r6tR6v/2e1//VF2r+vz/2fq2OJGSmeH1yPuZiM5M0xkBAABwmB0vWlbs/55uLnz8y8kPup7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjb3wEAAP//IP83NQ==")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
rmdir(&(0x7f0000000100)='./control\x00')

2.291935161s ago: executing program 2 (id=1124):
syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\t', 0x1, 0xbb7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)

2.192983492s ago: executing program 0 (id=1125):
syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x49, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0xfffffffe, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0xa, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x30000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x1, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x76, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x8, 0x0, 0x2, 0x2, 0xa, 0x4, 0x6, 0x28, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0xa, 0x7f, 0x9, 0x2, 0xffffffff, 0xc, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x3fc, 0x0, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x87, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x80002, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800001, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1004, 0xa2, 0x7, 0x7fffffff, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x5, 0x120000, 0x3, 0x6, 0x800aaed, 0x4, 0x65], [0x9, 0xbbb1, 0x3, 0xb, 0x5, 0x938, 0xb, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x4, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0xc, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x0, 0xc8, 0x1a, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0xedf6, 0xfffffff7, 0x335e0ac3, 0x7, 0x1, 0x6c1b, 0x0, 0x3dfe, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}})

2.160814883s ago: executing program 6 (id=1126):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), r1)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002"], 0x1c}}, 0x0)

1.941405297s ago: executing program 2 (id=1127):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000480)="e4", 0x1, 0x494}])

1.884313708s ago: executing program 6 (id=1129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x44, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}]}, 0x44}}, 0x0)

1.72810167s ago: executing program 4 (id=1130):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1.592100063s ago: executing program 6 (id=1131):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x7f, 0x80040)
r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {<r2=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000100)={r2, &(0x7f0000000040)=[{}, {0x80000000, <r3=>0x0}], 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000003c0)={{0x80000000, 0x0, 0x6, [0x9, 0x101]}, {0x80000000, r3, 0x0, [0xfb, 0x7]}, 0x2, [0x5, 0x8]})

1.509806534s ago: executing program 4 (id=1132):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYBLOB="5333c923ead7d62a1aa7e1ad6926618430329b0ea6e6e24d7310d2249d89707d2a2ee55d187812e2a0109f36ed3b24151208962f1353f76d5dc207c8b61a67695d2e4632e520"], 0x1, 0x199, &(0x7f0000000440)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.502805024s ago: executing program 2 (id=1133):
syz_mount_image$jfs(&(0x7f00000021c0), &(0x7f0000002140)='./bus\x00', 0x2008010, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6286, &(0x7f000000dc80)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV29OXT9ikfqrVqvV6gWs2+q93W4XEbHZ3qZ5z+B0PAAcMpvxSdddoEPyL9ogIp7ouhPAQqu67gAzce/+rfUq5Vu1Xw/WttvztSC78t+sdu7vmDSdZvwak3k9v+5EP56Z0J+VOfVhkeT8e+P5X9puH6X1Zp3/vEzKf7R961Nxcv798fzHHJ38e3vmX6qc/+CR8u/LHwAAAAAAFlj+9/9jHZ//XXr8XdmXh53/XZtTHwAAAAAAAADgs/a44//tqIz/BwAAAIuq+aze+M1TD5ZN+i62ZvnFKuLJsfWBwqSbZVa77gcAAAAAAAAAAAAAlGSwfQ3vxSpiGBFPrq7Wdd38tI3Xj+pxtz/sSt9/KFnXf+QBAGDbx0+N3ctfRSxHxMX0XX/D1dXVul5eWa1X65Wl/H52tLRcr7Q+1+Zps2xptI83xINR3fyy5dZ2bdM+L09rH/99zWON6v4+OjYfHQYOABGx/Wp0zyvSEVPXT0fX73I4HBz/R4/jn/3o+nkKAAAAzF5d13WVvs77eDrn3+u6UwDAXOTX//HzAmq1Wq1Wq49e3Vbv7Xa7iIjN9jbNewbD8QPAIbMZn3TdBTok/6INIuK5rjsBLLSq6w4wE/fu31qvUr5V+/Ugje+erwXZlf9mtbVd3n6v6TTj15jM6/l1J/rxzIT+PDunPiySnH9vPP9L2+2jtN6s85+XSfk3+3msg/50LeffH89/zNHJv7dn/qXK+Q8eKf++/AEAAAAAYIHlf/8/tlDnf0cH3Z2pHnb+d21mjwoAAAAAAAAAs3Xv/q31fN9rPv//hT3Wc//n0ZTzr+RfpJx/uv9/58Kbl8bW67fm7771IP9/3b+1/vsb//x8nu43/6U8U6VnVpWeEVV6pGqQpgfcsQnuDPuj5pGGVa8/SNf81MN340pcjY04vWvdXjoeHrSf2dXe9HS41V73t9vP7mof7LTn7c/tah+mK53qldx+Mtbjp3E13tlqb9qWpuz/8pT2ekp7zr/v+C9Szn/Q+mnyX03t1di0cfej3v8d9+3pXo/z5pUv/ur07HdnqjvR39m3tmb/XuigP1v/T54Yxc+vb1w7efPyjRvXzkSa7Fp6NtLkM5bzH6afnP9LL26357/77eP17kejR85/UdyJwcT8X2zNN/v78pz71oWc/yj95PzfSe17H/+HOf/Jx/8rHfQHAAAAAAAAAAAAAAAAHqau661bRN+MiPPp/p+u7s0EAOYrv/7XSV4+r7p/0O3/uHs/uuq/Wj3nulqw/sy1/rSe9eO9vVD7qz5Q/d8F68/C1W313t5oFxHx1/Y2zXuGX+71ywCARfZpRPyj607QGfkXLH/fXzM90XVngLm6/sGHP7589erGtetd9wQAAAAAAAAAOKg8/udaa/znE3Vd3x5bb9f4r2/F2uOO/znIMzsDjE4YqLr/6Pv0ML2Ifq813PjzMWn87+HO3MPG/x5MebzhlPbRlPalKe3LU9r3vNGjJef/fGu88xMRcXxs+PUSxn8dH/O+BDn/F1rP5yb/r4yt186//u1hzr+3K/9TN97/2anrH3z46pX3L7+38d7GT86dOXP63PnzFy5cOPXulasbp7f/22GPZyvnn8e+dh1oWXL+OXP5lyXn/6VUy78sOf8vp1r+Zcn55/d78i9Lzj9/9pF/WXL+L6da/mXJ+X811fIvS87/lVTLvyw5/6+lWv5lyfm/mmr5lyXnfzLV8i9Lzv9UqveZ/8qs+8V85PzzGS7Hf1ly/vnKBvmXJed/NtXyL0vO/1yq5V+WnP9rqZZ/WXL+X0+1/MuS8z+favmXJef/jVTLvyw5/wupln9Zcv7fTLX8y5Lz/1aq5V+WnP/rqZZ/WXL+3071/vKfdtcbh0XO/zupdvyXJef/3VTLvyw5/zdSLf+yPPj+fzNmzJjJM13/ZQIAAAAAAAAAAAAAxs3jcuKu9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+xw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHd3MXKd9f3Az+yb1w4kBkL+Tv5OWDvGGGeTXb/EL7QuJkBIE16a15K+xHa9a2fBb/HaJUmj2lGgRMKotKJtuGgLKGpzU2FVuaBVQLlArSpVIu0FvUFUqFxEbUABqSpFkK1mzvM8OzM7O7PrHa9nz/l8pOSXnTkz58yZZ2b3a+e7AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Ta8f/KzlSzLKpVKfsHaLHtTda4eWVu75D1X9vgAAACApftF7d+vX5Mu2L+AG9Vt8483ffvFmZmZmezj/X8y+MWZmXTFSJYNrsqy2nXRxe8/XKnfJngmG6701X3d12H3/R2uH+hw/WCH64c6XL+qw/XDHa6fcwLmWJ1V0p1tqv3n2vyUZtdmg7XrNrW41TOVVX3Vc5dum1Vqt5kZPJJNZceyyWy8Yft820pt+5c2VPd1Vxb31Ve3r/XVFfLjpw7HY6iEc7ypYV+z9xn98H3ZyE9+/NThvzrz2vWtZsfT0HB/+XFu2Vg9zk+HS/JjrWSr0jmJx9lXd5zrWzwn/Q3HWandrvrfzcf5+gKPs3/2MJdV83M+nPXV/vuV2nkaqGQtztP6cNlPb86y7PzsYTdvM2dfWV+2puGSvtnnZzhfkdX7qC6lt2YDi1qnGxawTqtzYlPjOm1+TcTnf0O43cA8x1D/NP3w6aG65/3nM5eyTqPqo57vtdK8Brv9WumVNRjXxSu1B/1syzW4KTz+pzbPvwZbrp0WazA97ro1uLHTGuwb6q8dc3oSKrXbzK7BbQ3b99f2VKnNVze3X4NjZ46fGpt+4slbp44fOjp5dPLEjm3bxnfs2rVnz56xI1PHJsfzf1/i2e59a7K+9BrYGM5dfA28q2nb+qU685WhOe+/l/o6HG7zOlzbtG23X4cDzQ+usjwvyLlrOn9tPFA96cMX+rJ5XmO152fr0l+H6XHXvQ4H6l6HLb+ntHgdDizgdVjd5tTWhf3MMlD3T6tjmP97wdLW4Nq6Ndj880jzGuz2zyO9sgaHw7r47tb5vxesD8f77Ohifx7pn7MG08MN7z3VS9LP+8N7aqPVuryhesVVQ9nZ6cnTtz1+6MyZ09uyMJbF2+rWSvN6XVP3mLI567Vv0et1/9RNz97Q4vK14VwN31r91/C8z1V1m523tX+uat/dWp/Phku3Z2F02XKfz1bfzavncyjLvvStp+/7xlNfev+857OaNz89tvSfxVMurXv/HZzn/Tfm/jfy/aW7eqZ/cCB//fanszPY8H7c+FQN1N67KrV9vz62sPfjwfDPcr8fX9vm/Xhd07bdfj8ebH5w8f240ulPO5am+fkcDuvk2Hj79+PqNuu2L3ZNDrR9P745zEo4/+8OSSHlorq1M9+6TfsaGBgMj2sg7qFxne5o2H4wZLPqvl7YfmnrdMvN+X31p0c3a7nW6UjTtt1ep+nPvuZbp5VOf/p2aZqfz+GwLq7d0X6dVrd5eefS3ztXx/+se+8c6rQGB/uHqsc8mBZh7f0+m1kd1+Bt2eHsZHYsm6hdO1RbT5XavkZvX9gaHAr/LPd75bo2a3BL07bdXoPp+9h8a68yMPfBd0Hz8zkc1sVzt7dfg9VtPrC7uz+7bgmXpG3qfnZt/vO1+f7M64am03S51spAOM5v7W7/Z7PVbY7tWWzObH+ebgmXXNXiPDW/fud7TU1ky3Oe1oXjfG3P/OepejzVbb64d4HraX+WZeceu6P2573h71f+9ux3Xmz4e5dWf6dz7rE7fvTmI/+wmOMHYOV7Ix9r8u91dX8ztZC//wcAAABWhJj7+8JM5H8AAAAojJj74/8Vnsj/AAAAUBgx9w+EmZQk/6/7wGtTb5zLUjN/JojXp9Nwd75d7LiOh69HZmZVL7/j+cn//vtzC9t3X5ZlP7/791puv+7ueFy5kXCcFz/YePkcL966oH0ffPBc2m99f/3L4f7j41noMmhVwR3Psuylaz5f28/Iwxdq8+W7D9bmfeeffaa6zet786/j7V99W779n4fy7/4jhxpu/2o4Dz8Ic/ye1ucj3u5rF969fvdDs/uLt6tsvLr2sJ97JL/f+HtyvvBMvn08z/Md/zc+98LXqts//s7Wx3+ur/XxvxDu9/kw//fGfPv656D6dbzdZ8Lxx/3F29321W+2PP6Ln823P3Vnvt3BMOP+t4SvN9352lT9+Xq8cqjhcWUfyreL+x//zh/Wro/3F++/+fiHD1xoOB/N6+Plf83vZ6xp+3h53E/0d037r95P/fqM+3/hDw42nOdO+79436s3Vu+3ef+3NG136rGttf3P3l/jb2z6i898vuX+4vHs/5tTDY9n/73hdRz2/9wjYT2G6392Mb+/5t+ucPDexvefuP2X155reDzRXT/J93/xvUdrc9Xw6jVXvenNV59/R/XcZdkrq/L767T/o395suH4v3Jdfj7i9bGj37z/+cT9n/7U6ImT02enJtJZfeqa2u/O+XB+PPF4rwnvrc1fHzh55tHJ0yPjI+NZNlLcX6F3yb4a5o/ycb791jNz3kG3Phiezxv+7KU1m//lc/Hyf3sgv/zCPfn3rXeF7b4QLl8bnr/F7X+u5zZcV3t9V14ORzgz9/cFL8X6Tf+5Z0Ebhsff/HNBXO+n3v5o7TxUr6t934iv6yUe//cm8vv5ejivM+E3M2+8bnZ/9dvH341w4f789b7k8xfe5uLz+tfh+f7ID/L7j8cVH+/3ws8x31zX+H4X18fXz/U133/tt3icD+8n2fmfNZzheL4vvH5dy8OLv4ckO3997es/Tvdz/aIe5nymn5geOzZ14uzjY2cmp8+MTT/x5IHjJ8+eOHOg9rs8D3yi0+1n35/W1N6fJiZ37cxq71Yn83GZXenjP/Xg4Ynd45snJo8cOnvkzIOnJk8fPTw9fXhyYnrzoSNHJj/V6fZTE/u2bd+7Y/f20aNTE/v27N27Y+/o1ImT1cPID6qDXeOfHD1x+kDtJtP7du7ddvvtO8dHj5+cmNy3e3x89Gyn29e+N41Wb/27o6cnjx06M3V8cnR66snJfdv27tq1veNvAzx+6sj0yNjpsyfGzk5Pnh7LH8vImdrF1e99nW5PMU3/e/7zbLNK/ov4so/dsiv9ftaq55+e967yTZp+gehr4XfR/NNbTu1ZyNcx9w+GmZQk/wMAAEAZxNw/FGYi/wMAAEBhxNy/KsxE/gcAAIDCiLl/OMykJPm/cP3/decWtH/9f/3/+vOl/1+y/v/9vdb/z98v9P+7Y6n9e/3/QP9/mfr/+fVxK/3/lX38+v/6/8zVa/3/mPtXZ1kp8z8AAACUQcz9a8JM5H8AAAAojJj7rwozkf8BAACgMGLuf1OYSUnyv/6//r/+v/6//n/r/ev/r0z6/+3p/3eg/z+Wlav/f76bx6//r//PXL3W/4+5/81hJiXJ/wAAAFAGMfdfHWYi/wMAAEBhxNx/TZiJ/A8AAACFEXP/2jCTkuR//X/9/2Xv//+R/r/+v/6//v/lo//fnv5/B/r/Pv9f/1//n67qtf5/zP1vCTMpSf4HAACAMoi5/61hJvI/AAAA9J6BS7tZzP1vCzOZk/8vcQcAAADAFRdz/7VZUxG8JH//r/+v/9/7n/+/Kl2n/6//n/Vk/78/0//vHfr/7en/d6D/r/+v/6//T1f1Wv+/lvuz4eztYSYlyf8AAABQBjH3XxdmIv8DAABAYcTc///CTOR/AAAAKIyY+9eFmZQk/+v/6//3fv/f5//r//d6/9/n//cS/f/29P870P/X/9f/1/+nq3qt/x9z//VhJiXJ/wAAAFAGMfffEGYi/wMAAEBhxNz//8NM5H8AAAAojJj714eZlCT/6//3eP8/Nkf1//X/9f/1//X/F0T/vz39/w70//X/9f/1/+mqZer//1eWZQvq/8fcf2OYSUnyPwAAAJRBzP03hZnI/wAAAFAYMfe/I8xE/gcAAIDCiLl/JMykJPlf/7/H+/95D37I5//r/+v/6//r/y+M/n97+v8d6P/r/3el/z9zTv9f/59cr33+f8z9G8JMSpL/AQAAoAxi7t8YZiL/AwAAQGHE3H9zmIn8DwAAAIURc/+mMJOS5H/9/xXR/8+63P9flen/6//r/+v/F5T+f3v6/x3o/+v/+/x//X+6qtf6/zH3vzPMpCT5HwAAAMog5v7NYSbyPwAAABRGzP3vCjOR/wEAAKAwYu7fEmZSkvyv/1/K/r/P/9f/1//X/y8s/f/29P870P/X/9f/1/+nq3qt/x9z/7vDTEqS/wEAAKAMYu7fGmYi/wMAAEBhxNx/S5iJ/A8AAACFEXP/aJhJSfK//r/+v/6//r/+f+v96/+vTPr/7en/d6D/r/+v/6//T1f1Wv8/5v5bw0xKkv8BAACgDGLuvy3MRP4HAACAwoi5fyzMRP4HAACAwoi5fzzMpCT5X/9f/1//X/9/Uf3/d8zer/5/Tv+/t+j/t6f/34H+v/7/Fe//D+r/Uyi91v+PuX9bmElJ8j8AAACUQcz928NM5H8AAAAojJj7d4SZyP8AAABQGDH37wwzKUn+1//X/9f/1//3+f+t96//vzLp/7fX/f5/fIj6//r/+v8+/1//n7l6rf8fc//tYSYlyf8AAABQBjH37wozkf8BAACgMGLu3x1mIv8DAABAYcTcvyfMpCT5X/9f/1//X/9f/7/1/vX/Vyb9//Z8/n8H+v/6//r/+v8s0f2/X/9Vr/X/Y+7fG2ZSkvwPAAAAZRBz/3vCTOR/AAAAKIyY+38pzET+BwAAgMKIuf+Xw0xKkv/1/xu659WHu7D+f2Wg8csWm+j/6/83rw/9f/1//f/LT/+/Pf3/DvT/9f/1//X/6ap5+/8hei93/z/m/n1hJiXJ/wAAAFAGMff/SpiJ/A8AAACFEXP/e8NM5H8AAAAojJj794eZlCT/6//7/H/9f/1//f/W+1/u/v9QvF/9/yXR/29P/78D/X/9f/1//X+6qtc+/z/m/veFmZQk/wMAAEAZxNx/R5iJ/A8AAACFEXP/+8NM5H8AAAAojJj7PxBmUpL8r/+v/79S+v9X6f/r/zc9nqL1/33+f3fo/7en/9+B/r/+v/6//j9d1Wv9/5j7PxhmUpL8DwAAAGUQc/+dYSbyPwAAABRGzP0fCjOR/wEAAKAwYu6/K8ykJPlf/1//f6X0/zP9f/3/psej/6//34r+f3v6/x3o/+v/6//r/9NVvdb/j7n/V8NMSpL/AQAAoAxi7r87zET+BwAAgMKIuf+eMBP5HwAAAAoj5v4Ph5mUJP/r/+v/6//r/+v/t96//v/KpP/f3grr///i6nC5/n9O/7+3j3+x/f+Bpq8vS///+/P1/2dWNd9e/5/Lodf6/zH3fyTMpCT5HwAAAMog5v6PhpnI/wAAAFAYMfd/LMxE/gcAAIDCiLn/18JMSpL/9f+rxzHbXtb/L2r/v0//X/9f/78k9P/bW2H9f5//30T/v7eP3+f/6/8zV6/1/2PuvzfMpCT5HwAAAMog5v77wkzkfwAAACiMmPvvDzOR/wEAAKAwYu5/IMykJPlf/9/n/5ej/+/z/zP9f/3/ktD/b0//vwP9f/3/Xuv//4f+Pytbr/X/Y+5/MMykJPkfAAAAyiDm/ofCTOR/AAAAKIyY+389zET+BwAAgMKIuf/jYSYlyf/6/yul/z+yQvv/T+v/X8b+/01X59vp/+v/M6tE/f8bF3vfmf5/Z/r/+v+91v/3+f+scL3W/4+5/+Ewk4Xn/+EFbwkAAABcETH3/0aYSUn+/h8AAADKIOb+3wwzkf8BAACgMGLu/60wk5Lkf/3/ldL/9/n/mf6/z/9vejz6//r/rSxf/z++8/j8f/1//f9I/1//X/+fZr3W/4+5/7fDTEqS/wEAAKAMYu5/JMxE/gcAAIAVodX/k90s5v4DYSbyPwAAABRGzP0Hw0xKkv/1//X/9f97tP//pxv/+bvf/ujBbfr/+v/6/4uyrJ//X33xX7nP/78k+v8d6P/r/+v/6//TVb3W/4+5/1CYSUnyPwAAAJRBzP2/E2Yi/wMAAEBhxNx/OMxE/gcAAIDCiLl/IsykJPlf/1//X/+/R/v/K/jz/+P50P9v1LX+f3zT1f9vKe/fp1V0efv/D832xPX/F9v/H2p5qf6//v9KPn79f/1/5uq1/n/M/ZNhJiXJ/wAAAFAGIff3Hcnn7BXyPwAAABRGzP1Hw0zkfwAAACiMmPsfDTMpSf7X/9f/1//X//f5/633367/Xxnw+f+9KvXvf1p7oej/N+md/n9r+v/6/yv5+PX/9f+Zq9f6/zH3T4WZlCT/AwAAQBnE3P+JMBP5HwAAAAoj5v5PhpnI/wAAAFAYMfcfCzMpSf7X/9f/1//X/9f/b73/nv38f/3/tpbav9f/D/T/y93//x/9f/1//X+6o9f6/zH3Hw8z+T/27uTJsjKt4/hJLaqyAhfuXLgxwnDln8BC1xquXbhxY4ThAgdUnCmcRxQEZ0VwHkAFQUQF5wFURHEGFaeeJ3qiaYjqqKzneSqHk+dmVt6895z3/XwWPE1SWfc2UVHFr5Ivp5P9DwAAAD3I3X973GL/AwAAQDNy93953GL/AwAAQDNy939F3NLJ/tf/n6X/v1Ep6/8Pvv/V/X++4jn2/5+j/z/u9fX/+v+W6f+n6f9XGO//Lw7D0Ff/7/n/+n/9P2syt/4/d/9Xxi2d7H8AAADoQe7+r4pb7H8AAABoRu7+O+IW+x8AAACakbv/q+OWTvb/of5/Z+iz/8+M1/P/Pf9f/6//1/8v3Gb7/7uv/cyn/z9x///ofatedqb9f4vP/7849sFt9/Nnte33f8L+/9Jxn6//p0Vz6/9z939N3NLJ/gcAAIAe5O7/2rjF/gcAAIBm5O6/M26x/wEAAKAZufu/Lm7pZP+v7/n/l/c+vtD+v+j/9f97H9D/6//1/4vl+f/Tenr+/x0v3Xr7a09++lOnef2O+v9R2+7nl/7+Pf9f/89Rc+v/c/d/fdzSyf4HAACAHuTu/4a4xf4HAACAZuTu/8a4xf4HAACAZuTu/6a4pZP9v77+f9HP/y/6f/3/3gf0//p//f9i6f+n9dT/38zr6//1//p//T/rNbf+P3f/N8ctnex/AAAA6EHu/m+JW+x/AAAAaEbu/rviFvsfAAAAmpG7/0rc0sn+1/+ff///1tz6/4v6f/2//l//3y79/zT9/wr6f/2//l//z1rNrf/P3X933NLJ/gcAAIAe5O7/1rjF/gcAAIBm5O7/trjF/gcAAIBm5O7/9rilk/2v//f8f/2//l//P/76+v9l0v9P0/+voP8/az9/i/5f/6//Z79T9v9vTPy0vZb+P3f/d8Qtnex/AAAA6EHu/u+MW+x/AAAAaEbu/u+KW+x/AAAAaEbu/u+OWzrZ//p//b/+X/9/0/3/0R96e/T/4/T/m6H/nzab/n/nwuiH9f+L7/89/1//r//ngLk9/z93//fELZ3sfwAAAOhB7v7vjVsm9v+pfzMfAAAA2Krc/d8Xt/j6PwAAACxeVme5+78/bulk/+v/9f/6f/2/5/+Pv/5U///Uvven/58X/f+02fT/x9D/6/+X/P71//p/jppb/5+7/wfilk72PwAAAPQgd/89cYv9DwAAAM3I3f+DcYv9DwAAAM3I3f9DcUsn+3+8/7/x1/X/J6P/P/j+9f/jPz7W1f/n96j/n+z/P9fz//uk/5+2+f7/kv7/4Pev/z9H237/jff/l1d9vv6fMXPr/3P33xu3rBp+h/8BFQAAAJit3P33xS2dfP0fAAAAepC7/4fjFvsfAAAAmpG7//64pZP97/n/+n/9//L6f8//v26bz/8fNt7/X9D/n5D+f5rn/6+g/9f/6/89/5+1mlv/n7v/gbilk/0PAAAAPXjg9WFv9//IMNj/AAAAsET7/92BY/57/bn7fzRusf8BAACgGbn7fyxu6WT/6//1//p//b/+f/z1T9v/r3owsuf/b4b+f5r+fwX9/3n08xca6/8fPO7z59D/36X/Z2YO9P/P3Pj4tvr/3P0/Hrd0sv8BAACgB7n7fyJusf8BAACgGbn7fzJusf8BAACgGbn7fypu6WT/n3v/PxHE6v/1//p//X9L/f8q+v/N0P9P0/+voP/3/H/P/9f/s1Y3+v+DPx9uq//P3f/TcUsn+x8AAAB6kLv/Z+IW+x8AAACakbv/wbjF/gcAAIBm5O7/2bilk/3fy/P/bz305/p//f/+v1/6f/3/2Ovr/5dJ/z9N/7+C/l//r//X/7NWB57/v8+2+v/c/Q/FLZ3sfwAAAOhB7v6H4xb7HwAAAJqRu//n4hb7HwAAAJqRu//n45ZO9n8v/f9hm+r/8+P6f/3/oP/X/+v/N6Lb/n9n7Feio47p/5//0iuff/Aj+n/9v/5f/6//Zw1m0f9fvfFPl7n7fyFu6WT/AwAAQA9y9/9i3GL/AwAAQDNy9/9S3GL/AwAAQDNy9/9y3HLK/f+pa31Xm6P/9/x//b/+X/8//vr6/2Xqtv8/Ic//X0H/r//X/+v/WatZ9P/7/jx3/6/ELb7+DwAAAM3I3f+rcYv9DwAAAM3I3f9rcYv9DwAAAM3I3f/rcUsn+1//r//X/+v/9f/jr3+z/f/uME7/vxn6/2n6/xX0//p//b/+n7WaW/+fu/+RuKWT/Q8AAAA9yN3/aNxi/wMAAEAzcvf/Rtxi/wMAAEAzcvf/ZtzSyf7X/+v/9f/6f/3/+Ot7/v8y6f+n6f+HYXhs4g2M9f9XL+n/9f/6f/0/N2lu/X/u/t+KWzrZ/wAAANCD3P2PxS32PwAAADQjd//jcYv9DwAAAM3I3f/bcUsn+1//r/8/7/7/zatXr864/9/7Ia3/1/+Pvb7+f5n0/9P0/yt4/r/+X/+v/2et5tb/5+5/Im7pZP8DAABAD3L3Pxm32P8AAADQjNz9vxO32P8AAADQjNz9T8Utnex//b/+3/P/9f/n0v9f0f8fpv/fjPPr/wf9v/5f/7+C/l//r//nsE31/2/Ez/er+v/c/b8bt3Sy/wEAAKAHufufjlvsfwAAAGhG7v7fi1vsfwAAAGhG7v7fj1s62f/6f/3/nPv/a9+x/n+h/b/n/x+h/98Mz/+fpv9fQf+v/9f/6/9Zq031/8f1/of/PHf/H8Qtnex/AAAA6EHu/mfiFvsfAAAAmpG7/9m4xf4HAACAZuTu/8O4pZP9r//X/x/s/6/39nPp/z3/X/8/tN3/7w76/7XT/0/T/6+g/2+z//+koaH+//Kxn6//Z47m1v/n7v+juKWT/Q8AAAA9yN3/x3GL/Q8AAADNyN3/J3GL/Q8AAADNyN3/p3FLS/v/rePTt+X3/5cOfaL+fxiGl+9s5Pn/+n/9/9B2/19/V/X/66P/n6b/X0H/32b/7/n/+n+2Zm79f+7+P4tbWtr/AAAA0Lnc/X8et9j/AAAA0Izc/X8Rt9j/AAAA0Izc/X8Zt3Sy/5ff/x/+RP3/cKbn/+v/9z6g/9f/6/8X66z9/UO78Wua/l//r/8f7ed3jvnnnkH/r//X/zNibv1/7v6/ils62f8AAADQg9z9z8Ut9j8AAAA0I3f/83GL/Q8AAADNyN3/13FLJ/tf/6//1/8vs//f1f/r//X/o+by/P/bbvu8F/X/+v8W+/8p+n/9v/6fw+bW/+fu/5u4pZP9DwAAAD3I3f+3cYv9DwAAAM3I3f9C3GL/AwAAQDNe2As5d4e/G4Yu9//R/v+W4Xqhet1Y/x+Nmv5/n+P6/51huKL/1/97/n/8eND/6/83YC79v+f/39z71//r/5f8/k/V/3/G0c/X/9OiufX/uftfjFs62f8AAADQg9z9fx+32P8AAADQjNz9/xC32P8AAADQjNz9L8Utnex/z/9v8Pn/t+j/9f/Tr6//1/+3TP8/Tf+/gv7/7P18/qyq/1/u8/8/Wf/P+syt/8/d/49xy97w+8xPucn/mwAAAMCM5O7/p7ilk6//AwAAQA9y9/9z3GL/AwAAQDNy9/9L3NLJ/tf/N9j/e/6//n/F6+v/9f8t0/9P0/+v0E//vzv2wW3382e17fffTP/v+f+s0dz6/9z9/xq3dLL/AQAAoG2v7/0xd/+/xS32PwAAADQjd/+/xy32PwAAADQjd//LcUsn+1//r/9vv///Yv3/odfX/+v/W6b/z1/Rx+n/V+in/x+17X5+6e9f/6//56i59f+5+1+JWzrZ/wAAANCD3P3/EbfY/wAAANCM3P3/GbfY/wAAANCM3P3/Fbc0sf8vrPwW+v+++v+docf+3/P/9f/6/54sp/9/ePQXac//1//r/5f7/vX/+n+Omlv/n7v/1Z0LDe5/AAAAaNcXfvaXvXLSb/vq3h93h/+OW+x/AAAAaEbu/v+JW+x/AAAAaEbu/v+NWzrZ//r/vvr/Pp//r//X/+v/e7Kc/n+c/l//r/9f7vvX/+v/OWpu/X/u/v+LW/YNv9X/FT0AAABgoy6e7pvn7v//uKWTr/8DAABAD3L3vy1uObL/r57w32oHAAAA5iZ3/9vjlk6+/q//n3n/P5xT/x/fTv9/nf5f/z/2+vr/ZdL/Tztj/391R/+v/5+g/9f/j/f/1/6q/r9Xc+v/c/c//cTQ5f4HAACARh34HYV37P1xd3hn3GL/AwAAQDNy978rbrH/AQAAoBm5+98dt3Sy//X/M+//b+r5/5frf3n+f+f9/z27o6+v/9f/t0z/P83z/1fQ/+v/9f+e/89anaL/3xuk593/5+5/T9zSyf4HAACAHuTuf2/cYv8DAABAM3L3vy9usf8BAACgGbn73x+3dLL/9f9b6P/vvTQM59r/n+D5//r/Pvr/Y16/nf7/02698twXfcnjj+j/uWGT/X/+WND/6//1/9fp//X/+n8Om9vz/3P3fyBu6WT/AwAAQA9y978Wt9j/AAAA0Izc/R+MW67t/2e39a4AAACAdcrd/6G4pZOv/+v/W3z+/zL7//x7vYX+/8ry+v9sinvv/z3/X/9/lOf/T9P/r6D/1//r//X/rNXp+v/7L3zBZx37Xa2l/8/d/+G4pZP9DwAAAD3I3f+RuCX3/86pf+seAAAAmJnc/R+NW3z9HwAAAJqRu//1uKWT/a//1//Ppf9Pnv9/4/M8//86/b/+/zT0/9P0/yvo//X/+n/9P2s1t+f/5+7/WNzSyf4HAACAHuTufyNusf8BAACgGbn7Px632P8AAADQjNz9b8Ytnex//b/+X/+v/9f/j7++/n+Z9P/T9P8r6P/1//p//T9rNbf+P3f/JwIAAP//Ht1wxQ==")
chdir(&(0x7f0000000380)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x48c7e, 0x8)
mknod$loop(&(0x7f0000000780)='./bus\x00', 0x2000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

1.296250097s ago: executing program 6 (id=1134):
r0 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)

1.13321585s ago: executing program 4 (id=1135):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x1c, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x1c, 0x0, @opaque="ee373935ef0f8da10b47000507b0025a9001e6cc"}}}}, 0x44)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0x9, 0x0, &(0x7f0000000040))

1.069410541s ago: executing program 0 (id=1136):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000010000304fdffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdbd8800000000480012800b00010065727370616e0000380002800500080000000000060011004e21000008000600ac1414390600030007000000060010004e21000004001200060010004e21000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

858.616305ms ago: executing program 4 (id=1137):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRESDEC, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

793.626856ms ago: executing program 6 (id=1138):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x0, 0x4, 0x88, {}, 0x0, 0xffff})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040))

502.321371ms ago: executing program 0 (id=1139):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)

375.977883ms ago: executing program 4 (id=1140):
syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x1103, &(0x7f0000000300)="$eJzs2LFqFEEYB/D/7J6ChZxM+iWghYIEw/kCKRSusbCxsTus7LxKucfJG/gakso+5gFSBOyV3fU0AUHxDg+O3w+W3e/Pznwz5UwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgN0luJzlokrrOmiQl6bqz+UWSbp3f+9Q2KXn5Zr589m72fDn+lj5rUvpRQ12P79c6q7N6XJ8enDyoy/cf3rbXWpZ0Ob9aLe68uNzqVvre7VZnBAAAgP3wbWPTYZ67O+sPAAAA/MlWLxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANlTXH02SknTd2fwiSbfbZQEAAAAbKmnyevq7fLwG+OVxPk/LkCf5cprk61A8yek4/tFftPv46kZ5698XDgAAAHumXDuPP8zk57m8zw4zydHRWP945fIkaYeT+U3nV6vF8ByuFuV/bgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjODhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAKYKAAD//xIs078=")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080))
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESOCT, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2)
write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7)

321.019584ms ago: executing program 1 (id=1141):
pipe(&(0x7f0000000400))
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0)

316.381704ms ago: executing program 6 (id=1142):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4)
recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
bind$unix(r1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e)

0s ago: executing program 0 (id=1143):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/212, 0xd4}], 0x1, 0xc, 0x4)

kernel console output (not intermixed with test programs):

[  135.537563][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.559057][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.590163][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.600937][ T5262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.615100][ T5262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.627436][ T5262] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.640719][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.655505][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.692809][ T5262] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.727883][ T5262] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.757049][ T5262] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.764213][ T5550] loop0: detected capacity change from 0 to 4096
[  135.765955][ T5262] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.873027][ T5550] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  136.094400][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.140051][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.246855][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  136.287063][ T4358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.332218][ T4358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.403852][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  136.889125][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'.
[  137.446261][   T27] audit: type=1326 audit(1753405276.335:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  137.468387][    C1] vkms_vblank_simulate: vblank timer overrun
[  137.564932][   T27] audit: type=1326 audit(1753405276.335:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  137.582390][ T5571] loop5: detected capacity change from 0 to 32768
[  137.614707][   T27] audit: type=1326 audit(1753405276.395:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  137.669338][ T5571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.310 (5571)
[  137.713224][   T27] audit: type=1326 audit(1753405276.395:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  137.789453][ T5571] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.807852][ T4622] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  137.814892][   T27] audit: type=1326 audit(1753405276.395:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  137.815926][ T5571] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  137.910726][ T4400] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  137.917968][ T5571] BTRFS info (device loop5): force clearing of disk cache
[  137.934488][   T27] audit: type=1326 audit(1753405276.395:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  137.947866][ T5571] BTRFS info (device loop5): enabling auto defrag
[  137.960912][ T4400] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  138.008834][ T5571] BTRFS info (device loop5): max_inline at 0
[  138.029964][ T4622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.047165][   T27] audit: type=1326 audit(1753405276.395:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  138.061644][ T4622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.087313][ T5571] BTRFS info (device loop5): enabling disk space caching
[  138.125066][ T5571] BTRFS info (device loop5): disk space caching is enabled
[  138.138098][   T27] audit: type=1326 audit(1753405276.395:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.0.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  138.152615][ T4622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  138.227894][ T4622] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.268952][ T4622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.347490][ T4622] usb 2-1: config 0 descriptor??
[  138.374048][ T5571] BTRFS info (device loop5): enabling ssd optimizations
[  138.423342][ T5608] fido_id[5608]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  138.448382][ T5571] BTRFS info (device loop5): rebuilding free space tree
[  138.536834][ T5571] BTRFS info (device loop5): disabling free space tree
[  138.544668][ T5571] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.572232][ T5592] loop2: detected capacity change from 0 to 32768
[  138.579327][ T5571] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.741953][ T5592] XFS (loop2): Mounting V5 Filesystem
[  138.844675][ T4622] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  138.873298][ T4622] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  139.043045][ T5592] XFS (loop2): Ending clean mount
[  139.057065][ T4418] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  139.082443][   T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  139.113226][ T5592] XFS (loop2): Quotacheck needed: Please wait.
[  139.123954][ T4335] usb 2-1: USB disconnect, device number 7
[  139.211294][ T5648] fido_id[5648]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  139.253953][ T5592] XFS (loop2): Quotacheck: Done.
[  139.271176][ T5262] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.320551][   T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.351261][   T26] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  139.361067][   T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.449517][   T26] usb 1-1: config 0 descriptor??
[  139.786627][ T4273] XFS (loop2): Unmounting Filesystem
[  139.898374][   T26] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  139.925836][   T26] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0009/input/input9
[  140.078514][   T26] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  140.165421][ T5644] loop0: detected capacity change from 0 to 1764
[  140.279793][ T5668] input: syz1 as /devices/virtual/input/input10
[  140.321628][ T4494] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  140.825309][ T5678] loop2: detected capacity change from 0 to 512
[  140.917263][ T5678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  140.957319][ T5678] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002]
[  140.968670][ T5678] System zones: 0-7
[  140.985407][ T5678] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  141.038387][  T126] usb 1-1: USB disconnect, device number 4
[  141.038519][    C1] keytouch 0003:0926:3333.0009: usb_submit_urb(ctrl) failed: -19
[  141.076151][ T5685] loop5: detected capacity change from 0 to 128
[  141.086966][ T5685] EXT4-fs: Ignoring removed nobh option
[  141.137491][ T5685] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  141.179436][ T5685] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.217514][ T5689] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  141.317364][ T5262] EXT4-fs (loop5): unmounting filesystem.
[  141.678738][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  141.954785][ T5706] loop2: detected capacity change from 0 to 512
[  142.115996][ T5706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.448: inode #1: comm syz.2.448: iget: illegal inode #
[  142.217278][ T5706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.448: error while reading EA inode 1 err=-117
[  142.333703][ T5706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.448: inode #1: comm syz.2.448: iget: illegal inode #
[  142.428300][ T5706] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.448: error while reading EA inode 1 err=-117
[  142.493128][ T5706] EXT4-fs (loop2): 1 orphan inode deleted
[  142.537944][ T5706] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  142.573963][ T5691] loop1: detected capacity change from 0 to 40427
[  142.708378][ T5691] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  142.800468][ T5691] F2FS-fs (loop1): invalid crc value
[  142.842520][ T5701] loop0: detected capacity change from 0 to 131072
[  142.852472][ T5701] F2FS-fs (loop0): invalid crc value
[  142.874198][  T126] Process accounting resumed
[  142.909774][ T5691] F2FS-fs (loop1): Found nat_bits in checkpoint
[  142.961777][ T5701] F2FS-fs (loop0): Found nat_bits in checkpoint
[  143.009049][ T5701] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  143.069644][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  143.187894][ T5691] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.420007][ T4267] syz-executor: attempt to access beyond end of device
[  143.420007][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.067476][ T5743] netlink: 12 bytes leftover after parsing attributes in process `syz.5.465'.
[  144.507977][ T4622] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  144.707366][ T5755] loop0: detected capacity change from 0 to 64
[  144.719366][ T4622] usb 5-1: Using ep0 maxpacket: 32
[  144.736572][ T4622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.764229][   T27] audit: type=1800 audit(1753405283.655:103): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name="file1" dev="loop0" ino=18 res=0 errno=0
[  144.790967][ T4622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.806286][ T4622] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  144.822449][ T4622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.842966][ T4622] usb 5-1: config 0 descriptor??
[  145.110736][ T5763] device syzkaller1 entered promiscuous mode
[  145.276074][ T4622] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  145.674024][ T5776] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.701811][ T5778] device syzkaller1 entered promiscuous mode
[  145.805704][ T4284] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  145.812522][ T4270] Bluetooth: hci5: command 0x1003 tx timeout
[  145.872052][ T5776] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.029714][ T5776] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.152425][ T5776] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.325847][ T5776] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.343578][ T5776] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.361589][ T5776] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.386997][ T5776] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.520306][ T5745] usb 5-1: string descriptor 0 read error: -71
[  147.167054][ T5809] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[  147.358871][ T4403] usb 5-1: USB disconnect, device number 4
[  147.492970][   T26] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[  147.566174][ T5821] loop2: detected capacity change from 0 to 64
[  147.679798][   T26] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  147.700339][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.740875][   T26] usb 2-1: config 0 descriptor??
[  147.810584][ T5813] loop0: detected capacity change from 0 to 32768
[  147.975142][ T5813] XFS (loop0): Mounting V5 Filesystem
[  148.027109][ T5816] loop4: detected capacity change from 0 to 40427
[  148.091620][ T5816] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  148.100050][ T5816] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  148.127219][ T5816] F2FS-fs (loop4): invalid crc value
[  148.179183][ T5813] XFS (loop0): Ending clean mount
[  148.180962][ T5816] F2FS-fs (loop4): Found nat_bits in checkpoint
[  148.214523][ T5813] XFS (loop0): Quotacheck needed: Please wait.
[  148.336510][ T5813] XFS (loop0): Quotacheck: Done.
[  148.393957][ T5816] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  148.423055][ T5816] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.560281][ T5844] loop5: detected capacity change from 0 to 512
[  148.579387][ T4268] XFS (loop0): Unmounting Filesystem
[  148.639201][ T5816] F2FS-fs (loop4): Unrecognized mount option "�����������	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����" or missing value
[  148.679552][ T5844] EXT4-fs error (device loop5): ext4_init_orphan_info:586: comm syz.5.504: inode #0: comm syz.5.504: iget: illegal inode #
[  148.716221][ T5844] EXT4-fs (loop5): get orphan inode failed
[  148.765456][   T26] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  148.776141][   T26] asix: probe of 2-1:0.0 failed with error -71
[  148.796114][   T26] usb 2-1: USB disconnect, device number 8
[  148.812948][ T5844] EXT4-fs (loop5): mount failed
[  149.405974][ T5862] loop1: detected capacity change from 0 to 2048
[  149.463571][ T5863] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.497204][   T27] audit: type=1804 audit(1753405288.385:104): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.512" name="/newroot/102/bus/file1" dev="loop1" ino=15 res=1 errno=0
[  149.653111][ T5863] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  149.684482][ T5863] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  149.728012][ T5863] Remounting filesystem read-only
[  149.735702][ T4267] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  150.097975][  T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.300791][  T126] usb 5-1: Using ep0 maxpacket: 8
[  150.309838][  T126] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  150.318885][  T126] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  150.334259][  T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  150.346785][  T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  150.357534][  T126] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.374732][  T126] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  150.384042][  T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.616125][  T126] usb 5-1: GET_CAPABILITIES returned 0
[  150.622279][  T126] usbtmc 5-1:16.0: can't read capabilities
[  150.794885][ T5892] input: syz1 as /devices/virtual/input/input12
[  150.836166][   T14] usb 5-1: USB disconnect, device number 5
[  151.447518][ T5910] loop1: detected capacity change from 0 to 4096
[  151.621320][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  151.678064][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  151.884530][ T5915] loop5: detected capacity change from 0 to 8192
[  151.955311][ T5915] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  151.969135][ T5915] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  151.979332][ T5915] REISERFS (device loop5): using ordered data mode
[  151.987356][ T5915] reiserfs: using flush barriers
[  152.013698][ T5915] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  152.047482][ T5915] REISERFS (device loop5): checking transaction log (loop5)
[  152.106420][ T5915] REISERFS (device loop5): Using r5 hash to sort names
[  152.120902][ T5915] REISERFS (device loop5): using 3.5.x disk format
[  152.134208][ T5915] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  152.530139][ T5940] loop4: detected capacity change from 0 to 47
[  152.703466][ T5946] loop1: detected capacity change from 0 to 128
[  152.785890][ T5948] loop2: detected capacity change from 0 to 128
[  152.837611][ T5948] FAT-fs (loop2): bogus sectors per cluster 0
[  152.885288][ T5948] FAT-fs (loop2): Can't find a valid FAT filesystem
[  153.149381][ T5956] netlink: 116 bytes leftover after parsing attributes in process `syz.2.552'.
[  153.598075][  T126] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  153.799355][  T126] usb 3-1: config 48 has too many interfaces: 48, using maximum allowed: 32
[  153.811291][ T5975] loop5: detected capacity change from 0 to 32768
[  153.817880][  T126] usb 3-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config
[  153.829693][  T126] usb 3-1: config 48 has 0 interfaces, different from the descriptor's value: 48
[  153.839222][  T126] usb 3-1: New USB device found, idVendor=056a, idProduct=034d, bcdDevice= 0.00
[  153.852303][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.873778][ T5975] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  153.900157][ T5975] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  153.919817][ T5975] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  153.931822][ T5975] OCFS2: File system is now read-only.
[  153.937404][ T5975] (syz.5.559,5975,0):ocfs2_find_leaf:1941 ERROR: status = -30
[  153.948350][ T5975] (syz.5.559,5975,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  153.956836][ T5975] (syz.5.559,5975,0):ocfs2_get_clusters:624 ERROR: status = -30
[  153.965027][ T5975] (syz.5.559,5975,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30
[  153.973907][ T5975] (syz.5.559,5975,0):ocfs2_read_virt_blocks:981 ERROR: status = -30
[  153.984551][ T5975] (syz.5.559,5975,0):ocfs2_read_dir_block:511 ERROR: status = -30
[  153.993268][ T5975] (syz.5.559,5975,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5
[  154.002123][ T5975] (syz.5.559,5975,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5
[  154.011149][ T5975] (syz.5.559,5975,0):ocfs2_mknod:298 ERROR: status = -5
[  154.018882][ T5975] (syz.5.559,5975,0):ocfs2_mknod:502 ERROR: status = -5
[  154.026008][ T5975] (syz.5.559,5975,0):ocfs2_create:676 ERROR: status = -5
[  154.075717][  T126] usb 3-1: string descriptor 0 read error: -71
[  154.108119][  T126] usb 3-1: USB disconnect, device number 6
[  154.207397][ T5262] ocfs2: Unmounting device (7,5) on (node local)
[  154.226065][   T27] audit: type=1326 audit(1753405293.115:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6878e9a9 code=0x7ffc0000
[  154.309187][   T27] audit: type=1326 audit(1753405293.165:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e6878d310 code=0x7ffc0000
[  154.351999][   T27] audit: type=1326 audit(1753405293.165:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6878e9a9 code=0x7ffc0000
[  154.416135][   T27] audit: type=1326 audit(1753405293.175:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2e6878d60a code=0x7ffc0000
[  154.472543][   T27] audit: type=1326 audit(1753405293.175:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2e687c1265 code=0x7ffc0000
[  154.524034][   T27] audit: type=1326 audit(1753405293.365:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6878e9a9 code=0x7ffc0000
[  154.546892][ T5986] loop0: detected capacity change from 0 to 512
[  154.555658][   T27] audit: type=1326 audit(1753405293.365:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6878e9a9 code=0x7ffc0000
[  154.606790][   T27] audit: type=1326 audit(1753405293.365:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2e6878d310 code=0x7ffc0000
[  154.614200][ T5986] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.563: iget: bad extended attribute block 1
[  154.630298][   T27] audit: type=1326 audit(1753405293.365:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e6878e5ab code=0x7ffc0000
[  154.664327][   T27] audit: type=1326 audit(1753405293.365:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.1.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e6878e9a9 code=0x7ffc0000
[  154.688817][ T5986] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.563: couldn't read orphan inode 15 (err -117)
[  154.778600][ T5986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  154.818951][ T5986] EXT4-fs (loop0): shut down requested (1)
[  154.879733][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  155.179287][ T6004] loop2: detected capacity change from 0 to 1024
[  155.202772][ T6004] EXT4-fs: Ignoring removed orlov option
[  155.242099][ T6004] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  155.405905][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  155.477807][   T26] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  155.513246][ T6017] loop0: detected capacity change from 0 to 1024
[  155.530548][ T6017] EXT4-fs: Ignoring removed nobh option
[  155.536180][ T6017] EXT4-fs: Ignoring removed bh option
[  155.545100][ T6017] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.627942][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  155.666480][ T6017] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.688489][   T26] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  155.707815][   T26] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  155.719285][   T26] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  155.736990][   T26] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  155.746193][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.757625][ T6010] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  155.828047][   T14] usb 2-1: Using ep0 maxpacket: 16
[  155.844746][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.892408][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.910914][   T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.926957][   T14] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  155.944207][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.956493][   T14] usb 2-1: config 0 descriptor??
[  155.972298][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  156.079275][ T4335] usb 5-1: USB disconnect, device number 6
[  156.382092][   T14] HID 045e:07da: Invalid code 65791 type 1
[  156.414438][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input13
[  156.432011][   T14] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  156.638103][ T4622] usb 2-1: USB disconnect, device number 9
[  156.679546][ T6043] fido_id[6043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  157.087999][   T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  157.277977][   T14] usb 5-1: Using ep0 maxpacket: 32
[  157.296278][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.329941][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.340231][   T14] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  157.350591][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.384990][   T14] usb 5-1: config 0 descriptor??
[  157.481568][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'.
[  157.848807][   T14] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  158.015924][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'.
[  158.120521][ T4622] usb 5-1: USB disconnect, device number 7
[  158.146785][ T6074] loop5: detected capacity change from 0 to 8
[  158.174387][ T6071] fido_id[6071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  158.320618][ T6078] program syz.1.599 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  158.389189][ T6074] SQUASHFS error: lzo decompression failed, data probably corrupt
[  158.398185][ T6074] SQUASHFS error: Failed to read block 0x0: -5
[  158.436251][ T6074] SQUASHFS error: lzo decompression failed, data probably corrupt
[  158.480597][ T6074] SQUASHFS error: Failed to read block 0x0: -5
[  158.675165][ T6068] loop2: detected capacity change from 0 to 32768
[  158.806579][ T6068] XFS (loop2): Mounting V5 Filesystem
[  158.973714][ T6068] XFS (loop2): Ending clean mount
[  159.002900][ T6088] loop5: detected capacity change from 0 to 4096
[  159.015863][ T6076] loop0: detected capacity change from 0 to 32768
[  159.054641][ T6068] XFS (loop2): Quotacheck needed: Please wait.
[  159.123820][ T6068] XFS (loop2): Quotacheck: Done.
[  159.259908][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  159.259924][   T27] audit: type=1800 audit(1753405298.155:121): pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.595" name="bus" dev="loop2" ino=9291 res=0 errno=0
[  159.457894][   T27] audit: type=1800 audit(1753405298.215:122): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.601" name="file1" dev="loop5" ino=33 res=0 errno=0
[  159.590996][ T4273] XFS (loop2): Unmounting Filesystem
[  160.078625][ T6112] sctp: [Deprecated]: syz.5.612 (pid 6112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.078625][ T6112] Use struct sctp_sack_info instead
[  160.471070][ T6118] loop5: detected capacity change from 0 to 512
[  160.491647][ T6118] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  160.585844][ T6118] EXT4-fs (loop5): 1 truncate cleaned up
[  160.617920][ T6118] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  160.885584][ T5262] EXT4-fs (loop5): unmounting filesystem.
[  160.891025][ T6109] loop1: detected capacity change from 0 to 32768
[  161.001851][ T6109] XFS (loop1): Mounting V5 Filesystem
[  161.123332][ T6109] XFS (loop1): Ending clean mount
[  161.142672][ T6109] XFS (loop1): Quotacheck needed: Please wait.
[  161.241299][ T6109] XFS (loop1): Quotacheck: Done.
[  161.406498][ T6119] loop2: detected capacity change from 0 to 32768
[  161.472206][   T27] audit: type=1800 audit(1753405300.365:123): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.608" name="file1" dev="loop2" ino=4 res=0 errno=0
[  161.528004][ T4370] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  161.593519][ T4267] XFS (loop1): Unmounting Filesystem
[  161.737853][ T4370] usb 1-1: Using ep0 maxpacket: 32
[  161.745317][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.781043][ T4370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.811479][ T4370] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  161.838113][ T4370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.897410][ T6140] loop5: detected capacity change from 0 to 32768
[  161.907112][ T4370] usb 1-1: config 0 descriptor??
[  161.973887][ T6140] 
[  161.973887][ T6140]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  161.973887][ T6140] 
[  162.131073][ T6145] read_mapping_page failed!
[  162.136113][ T6145] ERROR: (device loop5): txCommit: 
[  162.136113][ T6145] 
[  162.210893][ T6140] read_mapping_page failed!
[  162.227995][ T6140] ERROR: (device loop5): txCommit: 
[  162.227995][ T6140] 
[  162.260941][ T6143] loop2: detected capacity change from 0 to 4096
[  162.270384][ T6147] read_mapping_page failed!
[  162.274971][ T6147] ERROR: (device loop5): txCommit: 
[  162.274971][ T6147] 
[  162.350712][ T4370] ft260 0003:0403:6030.000D: unknown main item tag 0x7
[  162.418237][ T4370] ft260 0003:0403:6030.000D: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  162.443960][ T6150] netlink: 'syz.1.620': attribute type 10 has an invalid length.
[  162.467296][ T5262] 
[  162.467296][ T5262]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.467296][ T5262] 
[  162.488206][ T5262] 
[  162.488206][ T5262]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.488206][ T5262] 
[  162.517684][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.549754][ T4370] ft260 0003:0403:6030.000D: chip code: 6424 8183
[  162.585952][ T6150] device bridge_slave_1 left promiscuous mode
[  162.601059][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.660580][ T6150] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  162.955132][ T4370] usb 1-1: USB disconnect, device number 5
[  163.070230][ T6157] fido_id[6157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  163.091818][ T6166] netlink: 'syz.4.628': attribute type 4 has an invalid length.
[  163.236178][ T6167] netlink: 'syz.4.628': attribute type 4 has an invalid length.
[  163.434265][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'.
[  163.518215][ T6171] loop5: detected capacity change from 0 to 8192
[  163.550936][ T6171] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  163.579154][ T6171] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  163.597963][ T6171] REISERFS (device loop5): using ordered data mode
[  163.604683][ T6171] reiserfs: using flush barriers
[  163.625969][ T6171] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  163.644193][ T6171] REISERFS (device loop5): checking transaction log (loop5)
[  163.701565][ T6182] loop2: detected capacity change from 0 to 128
[  163.713616][ T6182] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  163.724712][ T6182] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.867093][ T6182] EXT4-fs error (device loop2): make_indexed_dir:2333: inode #2: block 18: comm syz.2.637: bad entry in directory: rec_len is smaller than minimal - offset=36, inode=128, rec_len=9, size=1000 fake=0
[  163.970623][ T6182] EXT4-fs (loop2): Remounting filesystem read-only
[  163.988906][ T6171] REISERFS (device loop5): Using tea hash to sort names
[  163.996383][ T6171] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  164.058671][ T6171] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  164.115062][ T6192] loop0: detected capacity change from 0 to 128
[  164.163342][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  164.197684][ T6192] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  164.239004][ T6192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  164.333874][ T6192] EXT4-fs (loop0): shut down requested (2)
[  164.464188][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  164.581750][ T4400] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  164.772532][ T4400] usb 3-1: Using ep0 maxpacket: 32
[  164.779735][ T4400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.807824][ T4400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.830047][ T4400] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  164.847920][ T4400] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.860569][ T4400] usb 3-1: config 0 descriptor??
[  164.874820][ T6191] loop4: detected capacity change from 0 to 32768
[  164.954703][ T6191] XFS (loop4): Mounting V5 Filesystem
[  165.007994][   T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  165.123540][ T6191] XFS (loop4): Ending clean mount
[  165.134094][ T6191] XFS (loop4): Quotacheck needed: Please wait.
[  165.167613][ T6217] loop1: detected capacity change from 0 to 8
[  165.197970][   T14] usb 6-1: Using ep0 maxpacket: 16
[  165.205482][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.246469][ T6217] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.254247][   T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.261759][ T6217] SQUASHFS error: Failed to read block 0x0: -5
[  165.281003][ T6217] SQUASHFS error: lzo decompression failed, data probably corrupt
[  165.288860][   T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  165.288912][   T14] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  165.288946][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.307454][ T4400] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  165.333395][ T6191] XFS (loop4): Quotacheck: Done.
[  165.342361][   T14] usb 6-1: config 0 descriptor??
[  165.353268][   T27] audit: type=1800 audit(1753405304.245:124): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  165.385097][ T6217] SQUASHFS error: Failed to read block 0x0: -5
[  165.473636][   T27] audit: type=1800 audit(1753405304.335:125): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.646" name="file2" dev="loop1" ino=3 res=0 errno=0
[  165.798200][   T14] HID 045e:07da: Invalid code 65791 type 1
[  165.822032][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/input/input14
[  165.867233][   T14] microsoft 0003:045E:07DA.000F: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  166.070394][   T14] usb 6-1: USB disconnect, device number 2
[  166.220745][ T6230] fido_id[6230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  166.418054][ T4400] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  166.559431][ T6223] loop0: detected capacity change from 0 to 40427
[  166.588490][ T6223] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  166.596337][ T6223] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  166.607879][ T4400] usb 2-1: Using ep0 maxpacket: 8
[  166.619654][ T4400] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  166.628347][ T6195] usb 3-1: string descriptor 0 read error: -71
[  166.655086][ T4400] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.678567][ T4400] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.708376][ T6223] F2FS-fs (loop0): invalid crc value
[  166.718171][ T4400] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.749182][ T6223] F2FS-fs (loop0): Found nat_bits in checkpoint
[  166.761556][ T4400] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.807027][ T6242] loop5: detected capacity change from 0 to 512
[  166.816180][ T4400] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  166.837161][ T6242] EXT4-fs: Ignoring removed orlov option
[  166.852262][ T4400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.864776][ T6241] block nbd4: shutting down sockets
[  166.891949][ T6242] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  166.953556][ T6223] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  166.970457][ T6223] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  167.044475][ T6242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  167.102651][ T4400] usb 2-1: GET_CAPABILITIES returned 0
[  167.109899][ T4400] usbtmc 2-1:16.0: can't read capabilities
[  167.191799][ T6242] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2195: inode #15: comm syz.5.654: corrupted in-inode xattr
[  167.270340][ T6242] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.654: couldn't read orphan inode 15 (err -117)
[  167.323008][ T6242] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  167.390351][ T6251] loop2: detected capacity change from 0 to 1024
[  167.399528][ T4400] usb 2-1: USB disconnect, device number 10
[  167.429819][ T6251] EXT4-fs: Ignoring removed nobh option
[  167.435459][ T6251] EXT4-fs: Ignoring removed bh option
[  167.450951][ T4335] usb 3-1: USB disconnect, device number 7
[  167.480604][ T6251] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  167.585933][ T6251] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  167.783191][ T5262] EXT4-fs (loop5): unmounting filesystem.
[  167.884328][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  168.298835][ T6267] loop2: detected capacity change from 0 to 512
[  168.340980][ T6267] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  168.474377][ T6267] EXT4-fs (loop2): 1 truncate cleaned up
[  168.524966][ T6267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  168.788765][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  168.828584][ T4335] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  168.913957][ T6259] loop5: detected capacity change from 0 to 32768
[  168.931161][ T6283] loop2: detected capacity change from 0 to 128
[  168.966395][ T6283] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  169.013140][ T6283] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  169.073193][   T27] audit: type=1800 audit(1753405307.965:126): pid=6283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.668" name="bus" dev="loop2" ino=12 res=0 errno=0
[  169.073358][ T4335] usb 1-1: Using ep0 maxpacket: 16
[  169.153286][ T4335] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.162361][ T6259] XFS (loop5): Mounting V5 Filesystem
[  169.178942][ T4335] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  169.210196][ T4335] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.281400][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  169.292243][ T4335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.366274][ T4335] usb 1-1: Product: syz
[  169.381986][ T4335] usb 1-1: Manufacturer: syz
[  169.402282][ T4335] usb 1-1: SerialNumber: syz
[  169.470091][ T6259] XFS (loop5): Ending clean mount
[  169.484093][ T6259] XFS (loop5): Quotacheck needed: Please wait.
[  169.598081][ T4622] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  169.651229][ T4335] usb 1-1: 0:2 : does not exist
[  169.658849][ T6259] XFS (loop5): Quotacheck: Done.
[  169.690891][ T4335] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  169.770929][ T4335] usb 1-1: USB disconnect, device number 6
[  169.815111][ T4622] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  169.847042][ T4622] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024
[  169.878311][ T4622] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  169.898217][ T4622] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  169.917683][ T4622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.930672][ T6289] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  169.968385][ T5262] XFS (loop5): Unmounting Filesystem
[  170.039688][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.270367][   T14] usb 2-1: USB disconnect, device number 11
[  170.533291][ T6312] loop0: detected capacity change from 0 to 8
[  171.143581][ T6315] loop2: detected capacity change from 0 to 32768
[  171.152911][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'.
[  171.443223][ T6329] device bridge0 entered promiscuous mode
[  171.483774][ T6329] device macsec1 entered promiscuous mode
[  171.514334][ T6329] bridge0: port 2(macsec1) entered blocking state
[  171.540947][ T6329] bridge0: port 2(macsec1) entered disabled state
[  171.579036][ T6329] device bridge0 left promiscuous mode
[  171.638445][  T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  171.833054][  T126] usb 3-1: Using ep0 maxpacket: 32
[  171.840154][  T126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  171.873465][ T6338] device syzkaller1 entered promiscuous mode
[  171.892722][  T126] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  171.924832][  T126] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  171.969466][  T126] usb 3-1: Product: syz
[  171.973706][  T126] usb 3-1: Manufacturer: syz
[  171.994638][  T126] usb 3-1: SerialNumber: syz
[  172.028896][  T126] usb 3-1: config 0 descriptor??
[  172.045372][ T6328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  172.073614][  T126] hub 3-1:0.0: bad descriptor, ignoring hub
[  172.081897][  T126] hub: probe of 3-1:0.0 failed with error -5
[  172.303466][ T6351] netlink: 32 bytes leftover after parsing attributes in process `syz.5.693'.
[  172.465642][ T6358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.695'.
[  172.484272][ T6356] loop1: detected capacity change from 0 to 2048
[  172.522524][ T6356] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.748063][ T6328] usb 3-1: reset high-speed USB device number 8 using dummy_hcd
[  172.917854][   T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  172.989100][ T6328] usb 3-1: device firmware changed
[  173.005576][ T6366] loop1: detected capacity change from 0 to 512
[  173.015021][ T4622] usb 3-1: USB disconnect, device number 8
[  173.119546][   T26] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.139998][   T26] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.154270][ T6360] loop0: detected capacity change from 0 to 40427
[  173.172463][   T26] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  173.182294][ T4622] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  173.200057][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  173.216771][   T26] usb 6-1: SerialNumber: syz
[  173.222117][ T6360] F2FS-fs (loop0): invalid crc value
[  173.275739][ T6360] F2FS-fs (loop0): Found nat_bits in checkpoint
[  173.395152][ T4622] usb 3-1: Using ep0 maxpacket: 32
[  173.405001][ T4622] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  173.406044][ T6360] F2FS-fs (loop0): Start checkpoint disabled!
[  173.443730][   T26] usb 6-1: 0:2 : does not exist
[  173.464204][ T4622] usb 3-1: string descriptor 0 read error: -22
[  173.490621][ T4622] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  173.490690][ T6360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  173.515016][   T26] usb 6-1: USB disconnect, device number 3
[  173.522003][ T4622] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  173.585694][ T4622] usb 3-1: config 0 descriptor??
[  173.591896][ T6354] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  173.602374][ T4622] hub 3-1:0.0: bad descriptor, ignoring hub
[  173.618115][ T4622] hub: probe of 3-1:0.0 failed with error -5
[  173.769574][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.945834][ T4358] kworker/u4:6: attempt to access beyond end of device
[  173.945834][ T4358] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  173.988157][ T4622] usb 3-1: USB disconnect, device number 9
[  174.331908][ T6371] loop1: detected capacity change from 0 to 40427
[  174.419026][ T6371] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  174.427181][ T6371] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  174.555708][ T6371] F2FS-fs (loop1): invalid crc value
[  174.565025][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.704'.
[  174.599631][ T6371] F2FS-fs (loop1): Found nat_bits in checkpoint
[  174.615599][ T6376] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.785483][ T6371] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  174.817613][ T6371] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  175.022960][ T6376] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.078410][ T6394] block nbd2: server does not support multiple connections per device.
[  175.126729][ T6393] block nbd2: shutting down sockets
[  175.175904][   T33] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  175.216828][   T33] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  175.807916][ T4622] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  175.997994][ T4622] usb 5-1: Using ep0 maxpacket: 16
[  176.005918][ T4622] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.036966][ T6421] netlink: 'syz.1.711': attribute type 5 has an invalid length.
[  176.046446][ T4622] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  176.090310][ T4622] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.102476][ T6424] loop5: detected capacity change from 0 to 64
[  176.113384][ T4622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.153217][ T4622] usb 5-1: Product: syz
[  176.163370][ T4622] usb 5-1: Manufacturer: syz
[  176.203946][ T4622] usb 5-1: SerialNumber: syz
[  176.453845][ T4622] usb 5-1: 0:2 : does not exist
[  176.470911][ T4622] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  176.496952][ T4284] Bluetooth: hci2: link tx timeout
[  176.503622][ T4284] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  176.533078][ T4622] usb 5-1: USB disconnect, device number 8
[  176.829045][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.858133][ T4732] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  177.047863][ T4732] usb 1-1: Using ep0 maxpacket: 16
[  177.059767][ T4732] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.110979][ T4732] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.142474][ T4732] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  177.188677][ T4732] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  177.221665][ T4732] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  177.241171][ T4732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  177.257820][ T4732] usb 1-1: SerialNumber: syz
[  177.285308][ T4732] hub 1-1:1.0: bad descriptor, ignoring hub
[  177.303227][ T4732] hub: probe of 1-1:1.0 failed with error -5
[  177.311715][ T4732] cdc_ether: probe of 1-1:1.0 failed with error -22
[  177.323625][  T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  177.382929][ T6439] loop1: detected capacity change from 0 to 32768
[  177.487914][ T6439] XFS (loop1): Mounting V5 Filesystem
[  177.530093][  T126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.545485][  T126] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  177.616565][  T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.683724][  T126] usb 3-1: config 0 descriptor??
[  177.684265][ T6439] XFS (loop1): Starting recovery (logdev: internal)
[  177.697647][ T6428] raw-gadget.0 gadget.0: fail, usb_ep_set_wedge returned -11
[  177.758661][ T6439] XFS (loop1): Ending recovery (logdev: internal)
[  177.843180][   T14] usb 1-1: USB disconnect, device number 7
[  177.871029][   T27] audit: type=1800 audit(1753405316.765:127): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.728" name="file1" dev="loop1" ino=7430 res=0 errno=0
[  178.130248][  T126] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor
[  178.151008][  T126] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0010/input/input15
[  178.263745][  T126] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  178.379440][ T6475] device batadv_slave_1 entered promiscuous mode
[  178.436313][ T6473] device batadv_slave_1 left promiscuous mode
[  178.474143][ T6444] loop2: detected capacity change from 0 to 1764
[  178.588114][ T4284] Bluetooth: hci2: command 0x0406 tx timeout
[  178.957992][   T26] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  179.098712][  T126] usb 3-1: USB disconnect, device number 10
[  179.158039][   T26] usb 5-1: Using ep0 maxpacket: 8
[  179.165649][   T26] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  179.209746][   T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  179.231807][ T6488] netlink: 428 bytes leftover after parsing attributes in process `syz.5.746'.
[  179.255468][   T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200
[  179.261922][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.5.746'.
[  179.265971][   T26] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.300576][   T26] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  179.315863][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.545316][ T4267] XFS (loop1): Unmounting Filesystem
[  179.553067][   T26] usb 5-1: GET_CAPABILITIES returned 0
[  179.563700][   T26] usbtmc 5-1:16.0: can't read capabilities
[  179.608008][ T4622] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  179.766950][ T4335] usb 5-1: USB disconnect, device number 9
[  179.817836][ T4622] usb 1-1: Using ep0 maxpacket: 32
[  179.826233][ T4622] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  179.867034][ T4622] usb 1-1: config 0 has no interface number 0
[  179.890036][ T4622] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  179.907991][ T4622] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.926347][ T4622] usb 1-1: Product: syz
[  179.930677][ T4622] usb 1-1: Manufacturer: syz
[  179.935598][ T4622] usb 1-1: SerialNumber: syz
[  179.962431][ T4622] usb 1-1: config 0 descriptor??
[  179.968091][   T26] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  179.987630][ T4622] smsc95xx v2.0.0
[  180.161224][   T26] usb 6-1: Using ep0 maxpacket: 32
[  180.171990][   T26] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  180.208249][   T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.237249][   T26] usb 6-1: config 0 descriptor??
[  180.251805][   T26] gspca_main: sunplus-2.14.0 probing 041e:400b
[  180.456423][ T6503] loop1: detected capacity change from 0 to 32768
[  180.503312][ T6503] XFS (loop1): Mounting V5 Filesystem
[  180.650587][ T6503] XFS (loop1): Ending clean mount
[  180.670216][ T6503] XFS (loop1): Quotacheck needed: Please wait.
[  180.773560][ T6503] XFS (loop1): Quotacheck: Done.
[  180.835041][ T6503] XFS (loop1): User initiated shutdown received.
[  180.848312][ T6503] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  180.883213][ T6503] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  180.990237][ T4267] XFS (loop1): Unmounting Filesystem
[  180.997932][ T4622] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  181.015927][ T4622] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  181.038916][ T4622] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  181.099275][ T4622] smsc95xx: probe of 1-1:0.67 failed with error -71
[  181.138159][ T4622] usb 1-1: USB disconnect, device number 8
[  181.216711][ T6523] loop2: detected capacity change from 0 to 164
[  181.225990][ T6523] rock: directory entry would overflow storage
[  181.251525][ T6523] rock: sig=0x5245, size=8, remaining=3
[  181.256115][   T26] gspca_sunplus: reg_w_riv err -71
[  181.277945][   T26] sunplus: probe of 6-1:0.0 failed with error -71
[  181.304599][   T26] usb 6-1: USB disconnect, device number 4
[  181.733254][ T6529] loop1: detected capacity change from 0 to 1024
[  181.802489][ T6529] EXT4-fs: Ignoring removed orlov option
[  181.896592][ T6529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  182.008411][ T6538] gre0: Master is either lo or non-ether device
[  182.166993][ T6539] EXT4-fs (loop1): unmounting filesystem.
[  182.363447][ T6550] netlink: 27 bytes leftover after parsing attributes in process `syz.1.768'.
[  182.491214][   T27] audit: type=1326 audit(1753405321.385:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  182.584498][   T27] audit: type=1326 audit(1753405321.385:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  182.663377][   T27] audit: type=1326 audit(1753405321.385:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  182.726962][   T27] audit: type=1326 audit(1753405321.385:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  182.778106][ T4622] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  182.847809][   T27] audit: type=1326 audit(1753405321.385:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6553 comm="syz.0.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  182.987890][ T4622] usb 3-1: Using ep0 maxpacket: 8
[  182.995041][ T4622] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  183.027319][ T4622] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  183.076442][ T4622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  183.106186][ T6567] tipc: Started in network mode
[  183.131651][ T4622] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  183.144065][ T6567] tipc: Node identity ac1414aa, cluster identity 4711
[  183.174625][ T6567] tipc: Enabled bearer <udp:s>, priority 10
[  183.192670][ T4622] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.226760][ T4622] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  183.267206][ T4622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.498908][ T4622] usb 3-1: GET_CAPABILITIES returned 0
[  183.504556][ T4622] usbtmc 3-1:16.0: can't read capabilities
[  183.567261][ T6574] device syzkaller1 entered promiscuous mode
[  183.817129][ T6555] usbtmc 3-1:16.0: usb_control_msg returned -71
[  183.818746][   T14] usb 3-1: USB disconnect, device number 11
[  183.825142][ T6564] loop5: detected capacity change from 0 to 40427
[  183.871983][ T6564] F2FS-fs (loop5): invalid crc value
[  183.894016][ T6564] F2FS-fs (loop5): Found nat_bits in checkpoint
[  184.190491][ T6564] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  184.226734][  T126] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  184.284069][  T126] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  184.511354][ T6564] syz.5.775: attempt to access beyond end of device
[  184.511354][ T6564] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.777006][ T6564] syz.5.775: attempt to access beyond end of device
[  184.777006][ T6564] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.887928][ T4622] tipc: Node number set to 2886997162
[  184.920915][ T6595] loop1: detected capacity change from 0 to 1024
[  184.934576][ T6591] fido_id[6591]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  185.108052][ T5262] syz-executor: attempt to access beyond end of device
[  185.108052][ T5262] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  185.186760][ T6595] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  185.238035][ T6595] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.434229][ T6597] loop2: detected capacity change from 0 to 4096
[  185.505435][ T6597] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  185.591498][   T11] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  185.668350][   T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  185.701736][   T11] EXT4-fs (loop1): This should not happen!! Data will be lost
[  185.701736][   T11] 
[  185.730040][   T11] EXT4-fs (loop1): Total free blocks count 0
[  185.744782][   T11] EXT4-fs (loop1): Free/Dirty block details
[  185.768022][   T11] EXT4-fs (loop1): free_blocks=4293918720
[  185.787986][   T11] EXT4-fs (loop1): dirty_blocks=16
[  185.808130][   T11] EXT4-fs (loop1): Block reservation details
[  185.814485][   T11] EXT4-fs (loop1): i_reserved_data_blocks=1
[  185.903989][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  186.035401][ T6608] device syzkaller1 entered promiscuous mode
[  186.110648][ T6611] overlayfs: failed to resolve './file0': -2
[  186.190952][ T4270] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  186.199907][ T4270] Bluetooth: hci2: Injecting HCI hardware error event
[  186.210170][ T4270] Bluetooth: hci2: hardware error 0x00
[  186.485611][ T6620] loop1: detected capacity change from 0 to 4096
[  186.577035][ T6620] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  186.642100][ T6620] ntfs3: loop1: Failed to load $Extend.
[  187.032713][ T6636] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input16
[  187.118035][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'.
[  187.234588][ T6640] device ipvlan1 entered promiscuous mode
[  187.259011][ T6640] device ipvlan1 left promiscuous mode
[  187.518422][ T6648] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[  187.546203][ T6644] loop5: detected capacity change from 0 to 4096
[  187.565756][ T6650] loop0: detected capacity change from 0 to 512
[  187.586996][ T6644] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  187.627067][ T6650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  187.753589][ T6650] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002]
[  187.803391][ T6650] System zones: 0-7
[  187.845923][ T6650] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  187.850719][ T6659] sctp: [Deprecated]: syz.2.816 (pid 6659) Use of struct sctp_assoc_value in delayed_ack socket option.
[  187.850719][ T6659] Use struct sctp_sack_info instead
[  188.035976][ T6661] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  188.249306][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  188.357974][ T4270] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  188.561701][ T4335] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  188.606720][ T4335] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  188.798430][ T6679] fido_id[6679]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  189.253628][ T6693] loop0: detected capacity change from 0 to 1024
[  189.280371][ T6693] EXT4-fs: Ignoring removed nobh option
[  189.296093][ T6693] EXT4-fs: Ignoring removed bh option
[  189.377334][ T6693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  189.528900][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  190.167288][ T6699] loop1: detected capacity change from 0 to 32768
[  190.233625][ T6699] XFS (loop1): Mounting V5 Filesystem
[  190.257939][  T126] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  190.324807][ T6699] XFS (loop1): Ending clean mount
[  190.470381][  T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.494480][  T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.529742][  T126] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  190.557899][  T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.586080][  T126] usb 3-1: Product: syz
[  190.598934][  T126] usb 3-1: Manufacturer: syz
[  190.603648][  T126] usb 3-1: SerialNumber: syz
[  190.622991][ T4267] XFS (loop1): Unmounting Filesystem
[  190.721741][ T6706] loop0: detected capacity change from 0 to 40427
[  190.758033][ T6706] F2FS-fs (loop0): invalid crc value
[  190.839718][ T6706] F2FS-fs (loop0): Found nat_bits in checkpoint
[  190.843824][  T126] usb 3-1: 0:2 : does not exist
[  190.872126][  T126] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  190.964302][  T126] usb 3-1: USB disconnect, device number 12
[  191.101979][ T6706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  191.238512][ T4493] udevd[4493]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.420221][ T4268] syz-executor: attempt to access beyond end of device
[  191.420221][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  191.468742][ T6742] device syzkaller1 entered promiscuous mode
[  191.612938][ T4268] syz-executor: attempt to access beyond end of device
[  191.612938][ T4268] loop0: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  191.636821][ T4268] syz-executor: attempt to access beyond end of device
[  191.636821][ T4268] loop0: rw=2051, sector=77832, nr_sectors = 53240 limit=40427
[  191.640312][ T6746] input: syz1 as /devices/virtual/input/input17
[  191.659771][ T4370] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  191.683001][ T4268] syz-executor: attempt to access beyond end of device
[  191.683001][ T4268] loop0: rw=2051, sector=45104, nr_sectors = 32720 limit=40427
[  191.737146][ T4268] F2FS-fs (loop0): Issue discard(4614, 4614, 1019) failed, ret: -5
[  191.737199][ T4268] F2FS-fs (loop0): Issue discard(9729, 9729, 6655) failed, ret: -5
[  191.757230][ T4268] F2FS-fs (loop0): Issue discard(5638, 5638, 4090) failed, ret: -5
[  191.857994][ T4370] usb 5-1: Using ep0 maxpacket: 32
[  191.902825][ T4370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.952648][ T4370] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.980101][ T4370] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  192.051517][ T4370] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.074508][ T4370] usb 5-1: config 0 descriptor??
[  192.500842][ T4370] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  192.759934][ T4370] usb 5-1: USB disconnect, device number 10
[  192.868028][ T6765] fido_id[6765]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  193.035526][ T6774] vivid-000: disconnect
[  193.100208][ T6774] vivid-000: reconnect
[  193.695705][ T6793] loop5: detected capacity change from 0 to 512
[  193.703686][ T6794] netlink: 'syz.2.868': attribute type 1 has an invalid length.
[  193.722169][ T6794] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.868'.
[  193.762663][ T6793] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  193.791778][ T6793] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.859877][ T6777] loop1: detected capacity change from 0 to 32768
[  193.950207][ T6793] EXT4-fs error (device loop5): ext4_get_first_dir_block:3583: inode #12: comm syz.5.867: Attempting to read directory block (0) that is past i_size (3)
[  193.997320][ T6777] XFS (loop1): Mounting V5 Filesystem
[  194.110611][ T6777] XFS (loop1): Ending clean mount
[  194.133110][ T6777] XFS (loop1): Quotacheck needed: Please wait.
[  194.168812][ T5262] EXT4-fs (loop5): unmounting filesystem.
[  194.285195][ T1273] ieee802154 phy0 wpan0: encryption failed: -22
[  194.295109][ T6777] XFS (loop1): Quotacheck: Done.
[  194.308307][ T1273] ieee802154 phy1 wpan1: encryption failed: -22
[  194.544458][ T4267] XFS (loop1): Unmounting Filesystem
[  195.020897][ T6830] netlink: 'syz.2.879': attribute type 1 has an invalid length.
[  195.727888][ T4622] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  195.897282][ T6840] loop1: detected capacity change from 0 to 32768
[  195.919609][ T6840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.875 (6840)
[  195.927990][ T4622] usb 3-1: Using ep0 maxpacket: 32
[  195.940329][ T4622] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  195.957479][ T4622] usb 3-1: config 0 has no interface number 0
[  195.968600][ T4622] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  195.987458][ T4622] usb 3-1: config 0 interface 85 has no altsetting 0
[  196.012866][ T4622] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  196.040112][ T4622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.067038][ T4622] usb 3-1: Product: syz
[  196.077352][ T4622] usb 3-1: Manufacturer: syz
[  196.086839][ T4622] usb 3-1: SerialNumber: syz
[  196.186990][ T4622] usb 3-1: config 0 descriptor??
[  196.193179][ T6840] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.242571][ T6840] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  196.302105][ T6840] BTRFS info (device loop1): force clearing of disk cache
[  196.357931][ T6840] BTRFS info (device loop1): enabling auto defrag
[  196.421739][ T6840] BTRFS info (device loop1): max_inline at 0
[  196.461234][ T6840] BTRFS info (device loop1): enabling disk space caching
[  196.507071][ T6840] BTRFS info (device loop1): disk space caching is enabled
[  196.815157][ T6840] BTRFS info (device loop1): enabling ssd optimizations
[  196.823189][ T4622] appletouch 3-1:0.85: Geyser mode initialized.
[  196.850942][ T6840] BTRFS info (device loop1): rebuilding free space tree
[  196.866257][ T4622] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18
[  196.929228][ T6840] BTRFS info (device loop1): disabling free space tree
[  196.980235][ T6840] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  197.037906][ T6840] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  197.063786][ T4622] usb 3-1: USB disconnect, device number 13
[  197.069970][    C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  197.304352][ T4622] appletouch 3-1:0.85: input: appletouch disconnected
[  197.387992][ T4270] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  197.542608][   T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  197.781762][ T6879] loop2: detected capacity change from 0 to 64
[  197.860657][   T27] audit: type=1800 audit(1887623066.756:133): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.893" name="file1" dev="loop2" ino=18 res=0 errno=0
[  197.974955][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  199.034546][ T6908] loop1: detected capacity change from 0 to 2048
[  199.115781][ T6908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  199.153696][ T6886] loop2: detected capacity change from 0 to 32768
[  199.172467][ T6886] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.906 (6886)
[  199.195168][ T6886] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  199.208019][ T6886] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  199.216752][ T6886] BTRFS info (device loop2): force clearing of disk cache
[  199.245295][ T6886] BTRFS info (device loop2): enabling auto defrag
[  199.252400][ T6886] BTRFS info (device loop2): max_inline at 0
[  199.258977][ T6886] BTRFS info (device loop2): enabling disk space caching
[  199.267362][ T6886] BTRFS info (device loop2): disk space caching is enabled
[  199.294295][ T6908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  199.375562][ T6908] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  199.441761][ T6908] EXT4-fs (loop1): This should not happen!! Data will be lost
[  199.441761][ T6908] 
[  199.455318][ T6908] EXT4-fs (loop1): Total free blocks count 0
[  199.461557][ T6908] EXT4-fs (loop1): Free/Dirty block details
[  199.468008][ T6908] EXT4-fs (loop1): free_blocks=2415919104
[  199.474022][ T6908] EXT4-fs (loop1): dirty_blocks=48
[  199.479410][ T6908] EXT4-fs (loop1): Block reservation details
[  199.485444][ T6908] EXT4-fs (loop1): i_reserved_data_blocks=3
[  199.560768][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  199.569388][ T6886] BTRFS info (device loop2): enabling ssd optimizations
[  199.589888][ T6886] BTRFS info (device loop2): rebuilding free space tree
[  199.719539][ T6886] BTRFS info (device loop2): disabling free space tree
[  199.726556][ T6886] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  199.761958][ T6886] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  200.022094][   T33] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  200.352937][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.310842][ T6947] loop1: detected capacity change from 0 to 40427
[  201.363460][ T6947] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  201.374607][ T6957] loop5: detected capacity change from 0 to 8192
[  201.387803][ T6947] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  201.395432][ T6961] loop0: detected capacity change from 0 to 256
[  201.434012][ T6957] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.459538][ T6947] F2FS-fs (loop1): invalid crc value
[  201.514777][ T6947] F2FS-fs (loop1): Found nat_bits in checkpoint
[  201.523677][ T6961] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.787513][ T6947] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  201.798832][ T6947] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  201.965475][ T6947] F2FS-fs (loop1): Unrecognized mount option "�����������	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����" or missing value
[  202.001689][ T6972] loop0: detected capacity change from 0 to 1024
[  202.054541][ T6972] EXT4-fs: Ignoring removed orlov option
[  202.166062][ T6972] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  202.296834][   T27] audit: type=1800 audit(1887623071.186:134): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.919" name="file1" dev="loop0" ino=15 res=0 errno=0
[  202.522834][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  203.540582][ T7009] sp0: Synchronizing with TNC
[  203.608745][ T7012] input: syz1 as /devices/virtual/input/input19
[  203.738545][ T6890] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  203.741907][ T7014] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+�����
[  203.893261][   T27] audit: type=1326 audit(1887623072.786:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  203.915520][    C1] vkms_vblank_simulate: vblank timer overrun
[  203.944086][   T33] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.960280][ T6890] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  203.977517][ T6890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.007307][ T6890] usb 3-1: config 0 descriptor??
[  204.017855][   T27] audit: type=1326 audit(1887623072.786:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.052508][ T6890] gspca_main: spca508-2.14.0 probing 8086:0110
[  204.121839][   T27] audit: type=1326 audit(1887623072.786:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.151256][   T27] audit: type=1326 audit(1887623072.786:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.180990][   T27] audit: type=1326 audit(1887623072.786:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.205653][   T33] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.214692][   T27] audit: type=1326 audit(1887623072.786:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.245288][   T27] audit: type=1326 audit(1887623072.856:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.276619][ T6890] gspca_spca508: reg_read err -32
[  204.286270][ T6890] gspca_spca508: reg_read err -32
[  204.298153][   T27] audit: type=1326 audit(1887623072.886:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.330741][ T6890] gspca_spca508: reg_read err -32
[  204.336522][   T27] audit: type=1326 audit(1887623072.886:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f57fc78e9e3 code=0x7ffc0000
[  204.381616][   T27] audit: type=1326 audit(1887623072.886:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7015 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57fc78e9a9 code=0x7ffc0000
[  204.499680][ T7023] loop0: detected capacity change from 0 to 512
[  204.539165][ T6890] gspca_spca508: reg_read err -71
[  204.545484][ T6890] gspca_spca508: reg write: error -71
[  204.551114][ T7023] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  204.564017][ T6890] spca508: probe of 3-1:0.0 failed with error -71
[  204.573263][ T6890] usb 3-1: USB disconnect, device number 14
[  204.584616][ T7023] EXT4-fs (loop0): 1 truncate cleaned up
[  204.598114][   T33] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.618625][ T7023] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  204.658808][ T7023] fscrypt (loop0, inode 18): Mutually exclusive encryption flags (0x14)
[  204.791614][   T33] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.809385][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  205.454466][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.483198][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.492531][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.508471][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.516103][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  205.528677][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.547007][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.585406][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.593014][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.601320][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.608905][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  205.616295][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.988139][   T26] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  206.177944][   T26] usb 3-1: Using ep0 maxpacket: 32
[  206.185410][   T26] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  206.221267][ T7040] chnl_net:caif_netlink_parms(): no params data found
[  206.224455][   T26] usb 3-1: config 0 has no interface number 0
[  206.249644][ T7039] loop0: detected capacity change from 0 to 32768
[  206.253197][   T26] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  206.275511][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.275867][ T7039] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.948 (7039)
[  206.285114][   T26] usb 3-1: Product: syz
[  206.329385][   T26] usb 3-1: Manufacturer: syz
[  206.334322][   T26] usb 3-1: SerialNumber: syz
[  206.366583][   T26] usb 3-1: config 0 descriptor??
[  206.394172][   T26] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  206.412719][ T7039] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.447988][ T7039] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  206.474874][ T7039] BTRFS info (device loop0): force clearing of disk cache
[  206.489469][ T7039] BTRFS info (device loop0): enabling auto defrag
[  206.512411][ T7039] BTRFS info (device loop0): max_inline at 0
[  206.540302][ T7039] BTRFS info (device loop0): enabling disk space caching
[  206.557842][ T7039] BTRFS info (device loop0): disk space caching is enabled
[  206.605910][   T26] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  206.641267][   T26] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  206.734634][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.761688][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.770956][ T7040] device bridge_slave_0 entered promiscuous mode
[  206.819109][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.826297][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.835673][ T7040] device bridge_slave_1 entered promiscuous mode
[  206.905694][ T7068] program syz.4.953 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  206.968312][ T7039] BTRFS info (device loop0): enabling ssd optimizations
[  206.989447][ T7039] BTRFS info (device loop0): rebuilding free space tree
[  207.058881][ T7039] BTRFS info (device loop0): disabling free space tree
[  207.065906][ T7039] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  207.126286][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.139454][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  207.140653][ T6890] usb 3-1: USB disconnect, device number 15
[  207.146914][ T7039] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  207.201909][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.213865][ T6890] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  207.233438][ T7036] loop1: detected capacity change from 0 to 65536
[  207.279851][ T6890] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  207.327268][ T6890] quatech2 3-1:0.51: device disconnected
[  207.404488][ T7036] XFS (loop1): Mounting V5 Filesystem
[  207.497017][ T7036] XFS (loop1): Ending clean mount
[  207.572667][ T4418] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  207.670912][ T4267] XFS (loop1): Unmounting Filesystem
[  207.708348][ T4284] Bluetooth: hci2: command 0x0409 tx timeout
[  207.861415][ T4268] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.316188][ T7040] team0: Port device team_slave_0 added
[  208.364439][ T7040] team0: Port device team_slave_1 added
[  208.368816][    T7] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  208.615643][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.639902][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.714146][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.833487][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.851258][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.898225][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.976277][   T33] device hsr_slave_0 left promiscuous mode
[  209.002705][   T33] device hsr_slave_1 left promiscuous mode
[  209.018371][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.035169][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.058175][   T33] device bridge_slave_1 left promiscuous mode
[  209.068961][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.108466][   T33] device bridge_slave_0 left promiscuous mode
[  209.114782][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.308154][ T6890] ip6_tunnel: ip6gretap0: Local routing loop detected!
[  209.316048][   T33] device veth1_macvtap left promiscuous mode
[  209.337101][   T33] device veth0_macvtap left promiscuous mode
[  209.363837][   T33] device veth1_vlan left promiscuous mode
[  209.384066][   T33] device veth0_vlan left promiscuous mode
[  209.408940][ T7111] loop0: detected capacity change from 0 to 2048
[  209.520750][ T7102] loop2: detected capacity change from 0 to 32768
[  209.525243][ T7111] Dev loop0: RDB in block 1 has bad checksum
[  209.557873][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  209.643856][ T7118] loop1: detected capacity change from 0 to 128
[  209.653476][ T7102] XFS (loop2): Mounting V5 Filesystem
[  209.682972][ T7118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  209.710120][ T7118] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  209.764233][   T27] audit: type=1800 audit(1887623078.656:145): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.958" name="file1" dev="loop1" ino=12 res=0 errno=0
[  209.785079][    T7] usb 5-1: Using ep0 maxpacket: 16
[  209.790451][ T4284] Bluetooth: hci2: command 0x041b tx timeout
[  209.801784][    T7] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  209.812134][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.821252][    T7] usb 5-1: Product: syz
[  209.827932][    T7] usb 5-1: Manufacturer: syz
[  209.832620][    T7] usb 5-1: SerialNumber: syz
[  209.840370][    T7] usb 5-1: config 0 descriptor??
[  209.847680][    T7] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  209.851399][ T7102] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  209.856297][    T7] usb 5-1: Detected FT232H
[  209.995232][ T7102] XFS (loop2): Starting recovery (logdev: internal)
[  210.069109][    T7] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  210.093228][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  210.177082][ T7102] XFS (loop2): Ending recovery (logdev: internal)
[  210.504758][    T7] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  210.549454][ T7128] loop1: detected capacity change from 0 to 8192
[  210.559105][ T4273] XFS (loop2): Unmounting Filesystem
[  210.565457][ T7130] input: syz1 as /devices/virtual/input/input20
[  210.595211][ T7128] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  210.602861][ T7130] input: failed to attach handler leds to device input20, error: -6
[  210.622707][ T7128] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  210.633385][ T7128] REISERFS (device loop1): using ordered data mode
[  210.640571][ T7128] reiserfs: using flush barriers
[  210.687211][ T7128] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  210.718893][ T7128] REISERFS (device loop1): checking transaction log (loop1)
[  210.779240][    T7] usb 5-1: USB disconnect, device number 11
[  210.925531][    T7] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  210.983280][    T7] ftdi_sio 5-1:0.0: device disconnected
[  211.078389][ T7128] REISERFS (device loop1): Using tea hash to sort names
[  211.085960][ T7128] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  211.378547][ T7128] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "��18446744073709551615�01777777777777777777777��V?����Cp~'~8pٻ젌|�^��(
c�o����M�)��0177777777777777777777718446744073709551615����������"
[  211.524115][ T7128] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "��18446744073709551615�01777777777777777777777��V?����Cp~'~8pٻ젌|�^��(
c�o����M�)��0177777777777777777777718446744073709551615����������"
[  211.867876][ T4270] Bluetooth: hci2: command 0x040f tx timeout
[  212.064097][   T33] team0 (unregistering): Port device team_slave_1 removed
[  212.233131][   T33] team0 (unregistering): Port device team_slave_0 removed
[  212.429241][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.545044][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.864942][ T7160] loop1: detected capacity change from 0 to 256
[  212.895464][ T7160] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  213.130099][ T7162] ptrace attach of "./syz-executor exec"[4267] was attempted by "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  213.473089][   T33] bond0 (unregistering): Released all slaves
[  213.657406][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.980'.
[  213.708191][ T4728] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  213.751377][ T7040] device hsr_slave_0 entered promiscuous mode
[  213.798351][ T7040] device hsr_slave_1 entered promiscuous mode
[  213.830523][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.847360][ T7171] loop2: detected capacity change from 0 to 47
[  213.868095][ T7040] Cannot create hsr debugfs directory
[  213.920258][ T4728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.947895][ T4270] Bluetooth: hci2: command 0x0419 tx timeout
[  213.960906][ T4728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.979685][ T4728] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  213.989101][ T4728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.006444][ T4728] usb 2-1: config 0 descriptor??
[  214.337928][ T6892] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  214.421195][ T4728] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  214.426310][ T7040] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  214.429928][ T4728] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0
[  214.450695][ T4728] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0014/input/input21
[  214.456689][ T7040] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  214.479296][ T7040] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  214.497637][ T4728] cm6533_jd 0003:0D8C:0022.0014: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  214.499933][ T7040] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  214.551623][ T6892] usb 1-1: Using ep0 maxpacket: 8
[  214.566628][ T6892] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  214.584448][ T6892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.594196][ T6892] usb 1-1: Product: syz
[  214.613393][ T6892] usb 1-1: Manufacturer: syz
[  214.621700][ T6892] usb 1-1: SerialNumber: syz
[  214.626280][ T4732] usb 2-1: USB disconnect, device number 12
[  214.634647][ T6892] usb 1-1: config 0 descriptor??
[  214.680471][ T6892] gspca_main: sq905-2.14.0 probing 2770:9120
[  214.770830][ T7181] fido_id[7181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  214.773327][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.812130][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  214.821628][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  214.847093][ T7040] 8021q: adding VLAN 0 to HW filter on device team0
[  214.879145][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  214.909325][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  214.918833][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.925973][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.935237][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  214.952257][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  214.963913][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  214.975389][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.982667][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.008443][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  215.019742][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  215.041596][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  215.054215][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  215.064318][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  215.076873][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  215.086086][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  215.094960][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  215.105000][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  215.120286][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  215.130726][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  215.142280][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  215.547957][ T4728] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  215.650817][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.678115][ T6892] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  215.685654][ T6892] sq905: probe of 1-1:0.0 failed with error -71
[  215.703288][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.718507][ T6892] usb 1-1: USB disconnect, device number 9
[  215.728061][ T4728] usb 5-1: Using ep0 maxpacket: 8
[  215.732925][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.739523][ T4728] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  215.768137][ T4728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.776298][ T4728] usb 5-1: Product: syz
[  215.801181][ T4728] usb 5-1: Manufacturer: syz
[  215.816907][ T7205] loop2: detected capacity change from 0 to 1024
[  215.823488][ T4728] usb 5-1: SerialNumber: syz
[  215.845176][ T4728] usb 5-1: config 0 descriptor??
[  215.939713][ T7205] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.977792][ T7205] hfsplus: request for non-existent node 16777216 in B*Tree
[  215.995034][ T7205] hfsplus: request for non-existent node 16777216 in B*Tree
[  216.003211][ T7205] hfsplus: request for non-existent node 16777216 in B*Tree
[  216.085089][ T4728] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  216.112978][ T4358] hfsplus: request for non-existent node 16777216 in B*Tree
[  216.121218][ T4358] hfsplus: request for non-existent node 16777216 in B*Tree
[  216.282885][ T7215] loop1: detected capacity change from 0 to 512
[  216.381657][ T7214] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  216.683042][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  216.699255][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  216.770635][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  216.787004][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  216.787334][ T7215] EXT4-fs (loop1): Test dummy encryption mode enabled
[  216.803048][ T7215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  216.812664][   T27] audit: type=1800 audit(1887623085.706:146): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1003" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  216.836753][ T7040] device veth0_vlan entered promiscuous mode
[  216.870841][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  216.879431][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  216.882870][ T7215] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.999: bad orphan inode 131083
[  216.911802][ T4728] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  216.923148][ T7040] device veth1_vlan entered promiscuous mode
[  216.936498][ T4728] usb 5-1: USB disconnect, device number 12
[  216.954080][ T7215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  216.986806][ T7040] device veth0_macvtap entered promiscuous mode
[  216.998539][ T7040] device veth1_macvtap entered promiscuous mode
[  217.009596][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  217.104028][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  217.143559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  217.156314][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  217.172683][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  217.205299][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.216842][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.242398][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.253265][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.263466][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.274254][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.284159][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  217.294817][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.306535][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.316802][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.326206][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.337136][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.351937][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.362037][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.373120][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.383108][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.395490][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.405611][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.416388][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.428552][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.439965][ T7040] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.449334][ T7040] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.459577][ T7040] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.468580][ T7040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.482618][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.495300][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.630422][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.646737][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.668973][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  217.687346][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.696237][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.713454][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  217.853574][ T7243] program syz.2.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.250518][ T7253] device macvtap0 entered promiscuous mode
[  218.269543][ T7253] device macvtap0 left promiscuous mode
[  218.585084][ T7260] bridge0: port 3(vlan2) entered blocking state
[  218.604718][ T7260] bridge0: port 3(vlan2) entered disabled state
[  218.620008][ T7260] device vlan2 entered promiscuous mode
[  218.631799][ T7260] device dummy0 entered promiscuous mode
[  218.896008][ T7244] loop1: detected capacity change from 0 to 40427
[  218.914799][ T7268] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  218.961219][ T7244] F2FS-fs (loop1): invalid crc value
[  219.002777][ T7244] F2FS-fs (loop1): Found nat_bits in checkpoint
[  219.179636][ T7244] F2FS-fs (loop1): recover fsync data on readonly fs
[  219.242424][ T7244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  219.415951][ T7244] F2FS-fs (loop1): Corrupted max_depth of 3: 1025
[  219.467179][ T7244] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  219.646450][ T7244] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  221.131947][ T7303] loop6: detected capacity change from 0 to 32768
[  221.222848][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1041'.
[  221.301958][ T7303] XFS (loop6): Mounting V5 Filesystem
[  221.405008][ T7328] loop2: detected capacity change from 0 to 256
[  221.430759][ T7328] exfat: Unknown parameter 'ioscard�}�K���T�'
[  221.501403][ T7303] XFS (loop6): Ending clean mount
[  221.539021][ T7303] XFS (loop6): Quotacheck needed: Please wait.
[  221.662483][ T7303] XFS (loop6): Quotacheck: Done.
[  221.693376][ T7313] loop0: detected capacity change from 0 to 32768
[  221.789478][ T7313] XFS (loop0): Mounting V5 Filesystem
[  221.977330][ T7040] XFS (loop6): Unmounting Filesystem
[  222.052268][ T7351] loop2: detected capacity change from 0 to 16
[  222.080676][ T7313] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  222.128076][ T7351] erofs: (device loop2): mounted with root inode @ nid 36.
[  222.172208][ T7313] XFS (loop0): Starting recovery (logdev: internal)
[  222.374353][ T7313] XFS (loop0): Ending recovery (logdev: internal)
[  222.568086][ T4732] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  222.707618][ T4268] XFS (loop0): Unmounting Filesystem
[  222.774263][ T4732] usb 2-1: Using ep0 maxpacket: 8
[  222.799320][ T4732] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  222.838159][ T6890] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  222.842420][ T4732] usb 2-1: config 179 has no interface number 0
[  222.861517][ T4732] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  222.873443][ T4732] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  222.884920][ T4732] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  222.896428][ T4732] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  222.908077][ T4732] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  222.922200][ T4732] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  222.931505][ T4732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.983198][ T7353] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  223.050209][ T6890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.099945][ T6890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.131352][ T6890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  223.171564][ T6890] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[  223.200687][ T6890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.256844][ T6890] usb 3-1: config 0 descriptor??
[  223.402810][ T4352] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22
[  223.496703][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.538309][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.692212][ T6890] wacom 0003:056A:0003.0015: unknown main item tag 0x6
[  223.711366][ T6890] wacom 0003:056A:0003.0015: Unknown device_type for 'HID 056a:0003'. Assuming pen.
[  223.758591][ T6890] wacom 0003:056A:0003.0015: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.2-1/input0
[  223.827113][ T6890] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0003.0015/input/input23
[  223.843264][ T4732] usb 2-1: USB disconnect, device number 13
[  223.849364][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  223.849415][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  223.983851][ T6890] usb 3-1: USB disconnect, device number 16
[  224.266748][ T7367] loop6: detected capacity change from 0 to 32768
[  224.345318][ T7367] XFS (loop6): Mounting V5 Filesystem
[  224.439091][ T7367] XFS (loop6): Ending clean mount
[  224.471317][ T7367] XFS (loop6): Quotacheck needed: Please wait.
[  224.560964][ T7367] XFS (loop6): Quotacheck: Done.
[  224.624085][   T27] audit: type=1800 audit(1887623093.516:147): pid=7367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1053" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  224.925431][ T7389] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  224.998043][ T4728] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  225.179822][ T4728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  225.207850][ T4728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.251089][ T4728] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  225.276369][ T4728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.326734][ T4728] usb 3-1: config 0 descriptor??
[  225.418807][ T7402] device syzkaller1 entered promiscuous mode
[  225.748769][ T4728] logitech 0003:046D:C29C.0016: unexpected long global item
[  225.766904][ T4728] logitech 0003:046D:C29C.0016: parse failed
[  225.783675][ T4728] logitech: probe of 0003:046D:C29C.0016 failed with error -22
[  225.927934][ T6896] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  225.972161][   T27] audit: type=1800 audit(1887623094.866:148): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1069" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  226.000265][    T7] usb 3-1: USB disconnect, device number 17
[  226.138038][ T6896] usb 2-1: Using ep0 maxpacket: 32
[  226.153359][ T6896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  226.174393][ T6896] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  226.194615][ T6896] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  226.211090][ T6896] usb 2-1: Product: syz
[  226.217388][ T6896] usb 2-1: Manufacturer: syz
[  226.255663][ T6896] usb 2-1: SerialNumber: syz
[  226.292662][ T6896] usb 2-1: config 0 descriptor??
[  226.308571][ T7406] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  226.316790][ T6896] hub 2-1:0.0: bad descriptor, ignoring hub
[  226.328465][ T6896] hub: probe of 2-1:0.0 failed with error -5
[  226.631183][ T7419] loop2: detected capacity change from 0 to 65
[  226.705408][ T7419] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  226.977840][ T7406] usb 2-1: reset high-speed USB device number 14 using dummy_hcd
[  227.144214][ T7425] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  227.183842][ T7406] usb 2-1: device firmware changed
[  227.191864][ T6896] usb 2-1: USB disconnect, device number 14
[  227.398038][ T6896] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  227.507399][ T7433] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  227.618021][ T6896] usb 2-1: Using ep0 maxpacket: 32
[  227.630505][ T6896] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  227.701266][ T6896] usb 2-1: string descriptor 0 read error: -22
[  227.707617][ T6896] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  227.745571][ T7439] ptrace attach of "./syz-executor exec"[4273] was attempted by "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  227.768012][ T6896] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  228.024305][ T7447] device bridge0 entered promiscuous mode
[  228.042901][ T7447] device macsec1 entered promiscuous mode
[  228.064705][ T7447] bridge0: port 3(macsec1) entered blocking state
[  228.072040][ T4728] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  228.103669][ T7447] bridge0: port 3(macsec1) entered disabled state
[  228.114629][ T6896] usb 2-1: config 0 descriptor??
[  228.133359][ T7447] device bridge0 left promiscuous mode
[  228.133423][ T7418] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  228.164540][ T6896] hub 2-1:0.0: bad descriptor, ignoring hub
[  228.187781][ T6896] hub: probe of 2-1:0.0 failed with error -5
[  228.269988][ T4728] usb 1-1: Using ep0 maxpacket: 16
[  228.295035][ T4728] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  228.331958][ T4728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.360766][ T4728] usb 1-1: Product: syz
[  228.378856][ T4728] usb 1-1: Manufacturer: syz
[  228.393883][ T4728] usb 1-1: SerialNumber: syz
[  228.426546][ T4728] usb 1-1: config 0 descriptor??
[  228.436753][ T4728] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  228.455832][ T4728] usb 1-1: Detected FT232H
[  228.528299][ T6896] usb 2-1: USB disconnect, device number 15
[  228.650697][ T4728] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  228.718345][ T7446] loop2: detected capacity change from 0 to 40427
[  228.757944][ T7446] F2FS-fs (loop2): invalid crc value
[  228.768784][ T7446] F2FS-fs (loop2): Found nat_bits in checkpoint
[  228.855587][ T7446] F2FS-fs (loop2): recover fsync data on readonly fs
[  228.876388][ T7446] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  228.981003][ T7446] F2FS-fs (loop2): Corrupted max_depth of 3: 1025
[  229.025340][ T7446] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  229.095683][ T4728] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  229.146988][ T7458] loop1: detected capacity change from 0 to 65
[  229.187899][ T7458] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  229.319293][ T4732] usb 1-1: USB disconnect, device number 10
[  229.362606][ T4732] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  229.397570][ T4732] ftdi_sio 1-1:0.0: device disconnected
[  229.507651][ T7463] bridge0: port 3(vlan2) entered blocking state
[  229.553046][ T7463] bridge0: port 3(vlan2) entered disabled state
[  229.586463][ T7463] device vlan2 entered promiscuous mode
[  229.613145][ T7463] device dummy0 entered promiscuous mode
[  229.733617][ T7464] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  230.307988][ T4728] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  230.497831][ T4728] usb 1-1: Using ep0 maxpacket: 8
[  230.504786][ T4728] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  230.537875][ T4728] usb 1-1: config 179 has no interface number 0
[  230.562301][ T4728] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  230.610751][ T4728] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  230.668080][ T4728] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  230.723033][ T4728] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  230.756221][ T4728] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  230.793406][ T4728] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  230.845147][ T4728] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.860132][ T7486] loop2: detected capacity change from 0 to 8192
[  230.887171][ T7476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  230.931919][ T7486] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  231.038097][ T7486] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  231.065122][ T7486] REISERFS (device loop2): using ordered data mode
[  231.090296][ T7486] reiserfs: using flush barriers
[  231.113893][ T7486] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  231.223280][ T4728] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26
[  231.248587][ T7486] REISERFS (device loop2): checking transaction log (loop2)
[  231.429714][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.467473][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.693293][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'.
[  231.722816][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'.
[  231.743018][ T7486] REISERFS (device loop2): Using tea hash to sort names
[  231.758231][ T7486] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  231.774338][ T6892] usb 1-1: USB disconnect, device number 11
[  231.774339][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  231.774378][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  232.048022][ T7486] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "��18446744073709551615�01777777777777777777777��V?����Cp~'~8pٻ젌|�^��(
c�o����M�)��0177777777777777777777718446744073709551615����������"
[  232.219171][ T7486] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "��18446744073709551615�01777777777777777777777��V?����Cp~'~8pٻ젌|�^��(
c�o����M�)��0177777777777777777777718446744073709551615����������"
[  232.529074][ T7503] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  232.536452][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  232.563798][ T7507] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[  232.570414][ T7507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  232.678309][ T7503] vhci_hcd vhci_hcd.0: Device attached
[  232.707866][ T7507] vhci_hcd vhci_hcd.0: Device attached
[  232.727792][ T7511] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9)
[  232.734471][ T7511] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  232.806265][ T7511] vhci_hcd vhci_hcd.0: Device attached
[  232.825214][ T7507] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(5)
[  232.831849][ T7507] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  232.898789][ T7507] vhci_hcd vhci_hcd.0: Device attached
[  232.933293][ T7503] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  232.939979][ T7503] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  232.948154][ T4728] usb 35-2: new low-speed USB device number 2 using vhci_hcd
[  232.978171][ T7503] vhci_hcd vhci_hcd.0: Device attached
[  233.038373][ T7513] vhci_hcd: connection closed
[  233.039670][ T7515] vhci_hcd: connection closed
[  233.044730][ T7508] vhci_hcd: connection reset by peer
[  233.056111][ T7505] vhci_hcd: connection closed
[  233.064896][ T4418] vhci_hcd: stop threads
[  233.094884][ T4418] vhci_hcd: release socket
[  233.116585][ T4418] vhci_hcd: disconnect device
[  233.126564][ T4418] vhci_hcd: stop threads
[  233.137188][ T7520] vhci_hcd: connection closed
[  233.139992][ T4418] vhci_hcd: release socket
[  233.173073][ T4418] vhci_hcd: disconnect device
[  233.195474][ T4418] vhci_hcd: stop threads
[  233.200612][ T4418] vhci_hcd: release socket
[  233.214822][ T4418] vhci_hcd: disconnect device
[  233.261325][ T4418] vhci_hcd: stop threads
[  233.268190][ T4418] vhci_hcd: release socket
[  233.298605][ T4418] vhci_hcd: disconnect device
[  233.337901][ T4418] vhci_hcd: stop threads
[  233.352444][ T4418] vhci_hcd: release socket
[  233.372321][ T4418] vhci_hcd: disconnect device
[  233.449736][ T7530] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1111'.
[  233.477835][ T7530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1111'.
[  233.964699][ T7512] loop0: detected capacity change from 0 to 40427
[  233.988722][ T7546] loop2: detected capacity change from 0 to 1024
[  234.020514][ T7512] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  234.037829][ T3597] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  234.070995][ T7512] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  234.077641][ T7546] EXT4-fs: Ignoring removed orlov option
[  234.085554][ T7546] EXT4-fs: Ignoring removed nomblk_io_submit option
[  234.118095][ T7512] F2FS-fs (loop0): invalid crc value
[  234.180940][ T7546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  234.239771][ T3597] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.250091][ T7512] F2FS-fs (loop0): Found nat_bits in checkpoint
[  234.252695][ T3597] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.288707][ T3597] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  234.317840][ T3597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  234.336735][ T3597] usb 5-1: SerialNumber: syz
[  234.533622][ T7512] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  234.553041][ T7512] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  234.565811][ T3597] usb 5-1: 0:2 : does not exist
[  234.633579][ T3597] usb 5-1: USB disconnect, device number 13
[  234.767651][ T4273] EXT4-fs (loop2): unmounting filesystem.
[  234.869813][   T75] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  234.914037][   T75] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  234.982000][ T7568] loop2: detected capacity change from 0 to 64
[  235.046197][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1126'.
[  235.557661][ T7561] loop1: detected capacity change from 0 to 40427
[  235.595684][ T7561] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  235.639663][ T7561] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  235.698164][ T7561] F2FS-fs (loop1): invalid crc value
[  235.778461][ T7561] F2FS-fs (loop1): Found nat_bits in checkpoint
[  235.878754][ T7590] netlink: 'syz.6.1134': attribute type 4 has an invalid length.
[  235.937825][ T7561] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  236.051956][ T7591] netlink: 'syz.6.1134': attribute type 4 has an invalid length.
[  236.070131][ T7561] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  236.077251][ T7561] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  236.194149][ T7596] device erspan1 entered promiscuous mode
[  236.912270][ T7580] loop2: detected capacity change from 0 to 32768
[  236.995240][ T7580] 
[  236.995240][ T7580]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  236.995240][ T7580] 
[  237.109688][ T7580] read_mapping_page failed!
[  237.114296][ T7580] ERROR: (device loop2): txCommit: 
[  237.114296][ T7580] 
[  237.227302][ T7613] read_mapping_page failed!
[  237.267891][ T7613] ERROR: (device loop2): txCommit: 
[  237.267891][ T7613] 
[  237.346252][ T7610] ==================================================================
[  237.354400][ T7610] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xd74/0x1270
[  237.362009][ T7610] Read of size 4 at addr ffff88806fda370c by task syz.2.1133/7610
[  237.369867][ T7610] 
[  237.372219][ T7610] CPU: 0 PID: 7610 Comm: syz.2.1133 Not tainted 6.1.147-syzkaller #0
[  237.380334][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  237.390432][ T7610] Call Trace:
[  237.393756][ T7610]  <TASK>
[  237.396721][ T7610]  dump_stack_lvl+0x168/0x22e
[  237.401450][ T7610]  ? __lock_acquire+0x7c50/0x7c50
[  237.406527][ T7610]  ? show_regs_print_info+0x12/0x12
[  237.411774][ T7610]  ? load_image+0x3b0/0x3b0
[  237.416334][ T7610]  ? __virt_addr_valid+0x465/0x540
[  237.421494][ T7610]  ? dtInsertEntry+0xd74/0x1270
[  237.426406][ T7610]  print_report+0xa8/0x200
[  237.430878][ T7610]  kasan_report+0x10b/0x140
[  237.435434][ T7610]  ? dtInsertEntry+0xd74/0x1270
[  237.440347][ T7610]  dtInsertEntry+0xd74/0x1270
[  237.445125][ T7610]  ? __get_metapage+0x918/0xfa0
[  237.450025][ T7610]  dtSplitPage+0x24f2/0x31d0
[  237.454893][ T7610]  dtInsert+0xfbd/0x58a0
[  237.459221][ T7610]  ? __kmem_cache_free+0xb6/0x1f0
[  237.464291][ T7610]  ? UniStrupr+0x2e0/0x2e0
[  237.468759][ T7610]  ? dtSearch+0x1c67/0x2050
[  237.473328][ T7610]  jfs_mknod+0x622/0x930
[  237.477619][ T7610]  ? jfs_rmdir+0x850/0x850
[  237.482101][ T7610]  ? __lock_acquire+0x7c50/0x7c50
[  237.487184][ T7610]  ? devcgroup_check_permission+0x2b/0x940
[  237.493046][ T7610]  ? devcgroup_check_permission+0x881/0x940
[  237.499009][ T7610]  ? bpf_lsm_inode_mknod+0x5/0x10
[  237.504185][ T7610]  ? security_inode_mknod+0xc3/0x110
[  237.509530][ T7610]  vfs_mknod+0x424/0x4c0
[  237.513826][ T7610]  do_mknodat+0x34e/0x4c0
[  237.518206][ T7610]  ? do_o_path+0x1f0/0x1f0
[  237.522763][ T7610]  __x64_sys_mknod+0x8a/0xa0
[  237.527398][ T7610]  do_syscall_64+0x4c/0xa0
[  237.531853][ T7610]  ? clear_bhb_loop+0x60/0xb0
[  237.536578][ T7610]  ? clear_bhb_loop+0x60/0xb0
[  237.541292][ T7610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.547243][ T7610] RIP: 0033:0x7f5d0498e9a9
[  237.551709][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.571359][ T7610] RSP: 002b:00007f5d05803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  237.579816][ T7610] RAX: ffffffffffffffda RBX: 00007f5d04bb6080 RCX: 00007f5d0498e9a9
[  237.587829][ T7610] RDX: 0000000000000705 RSI: 0000000000002000 RDI: 0000200000000780
[  237.595840][ T7610] RBP: 00007f5d04a10d69 R08: 0000000000000000 R09: 0000000000000000
[  237.603853][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.611864][ T7610] R13: 0000000000000001 R14: 00007f5d04bb6080 R15: 00007fff31567f98
[  237.619892][ T7610]  </TASK>
[  237.622945][ T7610] 
[  237.625300][ T7610] Allocated by task 7580:
[  237.629660][ T7610]  kasan_set_track+0x4b/0x70
[  237.634302][ T7610]  __kasan_slab_alloc+0x6b/0x80
[  237.639197][ T7610]  slab_post_alloc_hook+0x4b/0x480
[  237.644339][ T7610]  kmem_cache_alloc_lru+0x11a/0x2e0
[  237.649572][ T7610]  jfs_alloc_inode+0x24/0x60
[  237.654206][ T7610]  iget_locked+0x1a9/0x830
[  237.658658][ T7610]  jfs_iget+0x20/0x3c0
[  237.662818][ T7610]  jfs_lookup+0x1c2/0x380
[  237.667188][ T7610]  __lookup_slow+0x27d/0x3a0
[  237.671818][ T7610]  lookup_slow+0x53/0x70
[  237.676107][ T7610]  walk_component+0x2be/0x3f0
[  237.680819][ T7610]  path_lookupat+0x169/0x440
[  237.685460][ T7610]  filename_lookup+0x1f0/0x500
[  237.690271][ T7610]  user_path_at_empty+0x3e/0x60
[  237.695169][ T7610]  __se_sys_chdir+0x91/0x280
[  237.699803][ T7610]  do_syscall_64+0x4c/0xa0
[  237.704259][ T7610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.710205][ T7610] 
[  237.712559][ T7610] Last potentially related work creation:
[  237.718298][ T7610]  kasan_save_stack+0x3a/0x60
[  237.723040][ T7610]  __kasan_record_aux_stack+0xb2/0xc0
[  237.728461][ T7610]  call_rcu+0x154/0x980
[  237.732640][ T7610]  evict+0x7da/0x870
[  237.736557][ T7610]  evict_inodes+0x604/0x690
[  237.741113][ T7610]  generic_shutdown_super+0x93/0x340
[  237.746414][ T7610]  kill_block_super+0x7c/0xe0
[  237.751108][ T7610]  deactivate_locked_super+0x93/0xf0
[  237.756421][ T7610]  cleanup_mnt+0x463/0x4f0
[  237.760857][ T7610]  task_work_run+0x1ca/0x250
[  237.765468][ T7610]  exit_to_user_mode_loop+0xe6/0x110
[  237.770778][ T7610]  exit_to_user_mode_prepare+0xb1/0x140
[  237.776346][ T7610]  syscall_exit_to_user_mode+0x16/0x40
[  237.781823][ T7610]  do_syscall_64+0x58/0xa0
[  237.786251][ T7610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  237.792179][ T7610] 
[  237.794525][ T7610] The buggy address belongs to the object at ffff88806fda2e40
[  237.794525][ T7610]  which belongs to the cache jfs_ip of size 2240
[  237.808266][ T7610] The buggy address is located 12 bytes to the right of
[  237.808266][ T7610]  2240-byte region [ffff88806fda2e40, ffff88806fda3700)
[  237.822104][ T7610] 
[  237.824437][ T7610] The buggy address belongs to the physical page:
[  237.830868][ T7610] page:ffffea0001bf6800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6fda0
[  237.841040][ T7610] head:ffffea0001bf6800 order:3 compound_mapcount:0 compound_pincount:0
[  237.849377][ T7610] memcg:ffff8880240f3d01
[  237.853625][ T7610] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  237.861631][ T7610] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8881482eb280
[  237.870230][ T7610] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff8880240f3d01
[  237.878818][ T7610] page dumped because: kasan: bad access detected
[  237.885246][ T7610] page_owner tracks the page as allocated
[  237.890967][ T7610] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5487, tgid 5485 (syz.1.382), ts 133215510623, free_ts 116606540737
[  237.914604][ T7610]  post_alloc_hook+0x173/0x1a0
[  237.919402][ T7610]  get_page_from_freelist+0x1a26/0x1ac0
[  237.924985][ T7610]  __alloc_pages+0x1df/0x4e0
[  237.929650][ T7610]  alloc_slab_page+0x5d/0x160
[  237.934343][ T7610]  new_slab+0x87/0x2c0
[  237.938426][ T7610]  ___slab_alloc+0xbc6/0x1220
[  237.943113][ T7610]  kmem_cache_alloc_lru+0x1ae/0x2e0
[  237.948326][ T7610]  jfs_alloc_inode+0x24/0x60
[  237.952928][ T7610]  new_inode_pseudo+0x5f/0x1c0
[  237.957705][ T7610]  new_inode+0x25/0x1c0
[  237.961882][ T7610]  jfs_fill_super+0x392/0xac0
[  237.966574][ T7610]  mount_bdev+0x287/0x3c0
[  237.970920][ T7610]  legacy_get_tree+0xe6/0x180
[  237.975609][ T7610]  vfs_get_tree+0x88/0x270
[  237.980051][ T7610]  do_new_mount+0x24a/0xa40
[  237.984566][ T7610]  __se_sys_mount+0x2d6/0x3c0
[  237.989254][ T7610] page last free stack trace:
[  237.993930][ T7610]  free_unref_page_prepare+0x8b4/0x9a0
[  237.999408][ T7610]  free_unref_page+0x2e/0x3f0
[  238.004102][ T7610]  qlist_free_all+0x76/0xe0
[  238.008618][ T7610]  kasan_quarantine_reduce+0x144/0x160
[  238.014088][ T7610]  __kasan_slab_alloc+0x1e/0x80
[  238.018973][ T7610]  slab_post_alloc_hook+0x4b/0x480
[  238.024098][ T7610]  kmem_cache_alloc_lru+0x11a/0x2e0
[  238.029307][ T7610]  __d_alloc+0x31/0x700
[  238.033485][ T7610]  d_alloc+0x47/0x1a0
[  238.037486][ T7610]  lookup_one_qstr_excl+0xc6/0x240
[  238.042661][ T7610]  do_unlinkat+0x188/0x560
[  238.047113][ T7610]  __x64_sys_unlink+0x45/0x50
[  238.051812][ T7610]  do_syscall_64+0x4c/0xa0
[  238.056246][ T7610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  238.062167][ T7610] 
[  238.064500][ T7610] Memory state around the buggy address:
[  238.070138][ T7610]  ffff88806fda3600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  238.078235][ T7610]  ffff88806fda3680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  238.086307][ T7610] >ffff88806fda3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  238.094462][ T7610]                       ^
[  238.098796][ T7610]  ffff88806fda3780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  238.106952][ T7610]  ffff88806fda3800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  238.115026][ T7610] ==================================================================
[  238.173252][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.197826][ T4728] vhci_hcd: vhci_device speed not set
[  238.321566][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.330862][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.340028][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.349173][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.358324][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.367430][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.376590][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.385741][ T7617] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  238.386111][ T7610] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  238.386127][ T7610] CPU: 1 PID: 7610 Comm: syz.2.1133 Not tainted 6.1.147-syzkaller #0
[  238.386150][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  238.386164][ T7610] Call Trace:
[  238.386171][ T7610]  <TASK>
[  238.386179][ T7610]  dump_stack_lvl+0x168/0x22e
[  238.386208][ T7610]  ? memcpy+0x3c/0x60
[  238.386255][ T7610]  ? show_regs_print_info+0x12/0x12
[  238.386280][ T7610]  ? load_image+0x3b0/0x3b0
[  238.386318][ T7610]  panic+0x2c9/0x710
[  238.386349][ T7610]  ? bpf_jit_dump+0xd0/0xd0
[  238.386379][ T7610]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[  238.386414][ T7610]  ? _raw_spin_unlock+0x40/0x40
[  238.386444][ T7610]  ? print_memory_metadata+0x314/0x400
[  238.386481][ T7610]  check_panic_on_warn+0x80/0xa0
[  238.386508][ T7610]  ? dtInsertEntry+0xd74/0x1270
[  238.386544][ T7610]  end_report+0x66/0x110
[  238.386572][ T7610]  kasan_report+0x118/0x140
[  238.386605][ T7610]  ? dtInsertEntry+0xd74/0x1270
[  238.386644][ T7610]  dtInsertEntry+0xd74/0x1270
[  238.386688][ T7610]  ? __get_metapage+0x918/0xfa0
[  238.386713][ T7610]  dtSplitPage+0x24f2/0x31d0
[  238.386780][ T7610]  dtInsert+0xfbd/0x58a0
[  238.386832][ T7610]  ? __kmem_cache_free+0xb6/0x1f0
[  238.386856][ T7610]  ? UniStrupr+0x2e0/0x2e0
[  238.386889][ T7610]  ? dtSearch+0x1c67/0x2050
[  238.386941][ T7610]  jfs_mknod+0x622/0x930
[  238.386973][ T7610]  ? jfs_rmdir+0x850/0x850
[  238.387013][ T7610]  ? __lock_acquire+0x7c50/0x7c50
[  238.387050][ T7610]  ? devcgroup_check_permission+0x2b/0x940
[  238.387080][ T7610]  ? devcgroup_check_permission+0x881/0x940
[  238.387110][ T7610]  ? bpf_lsm_inode_mknod+0x5/0x10
[  238.387139][ T7610]  ? security_inode_mknod+0xc3/0x110
[  238.387166][ T7610]  vfs_mknod+0x424/0x4c0
[  238.387191][ T7610]  do_mknodat+0x34e/0x4c0
[  238.387222][ T7610]  ? do_o_path+0x1f0/0x1f0
[  238.387261][ T7610]  __x64_sys_mknod+0x8a/0xa0
[  238.387284][ T7610]  do_syscall_64+0x4c/0xa0
[  238.387305][ T7610]  ? clear_bhb_loop+0x60/0xb0
[  238.387328][ T7610]  ? clear_bhb_loop+0x60/0xb0
[  238.387351][ T7610]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  238.387387][ T7610] RIP: 0033:0x7f5d0498e9a9
[  238.387406][ T7610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.387426][ T7610] RSP: 002b:00007f5d05803038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  238.387451][ T7610] RAX: ffffffffffffffda RBX: 00007f5d04bb6080 RCX: 00007f5d0498e9a9
[  238.387469][ T7610] RDX: 0000000000000705 RSI: 0000000000002000 RDI: 0000200000000780
[  238.387483][ T7610] RBP: 00007f5d04a10d69 R08: 0000000000000000 R09: 0000000000000000
[  238.387499][ T7610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  238.387514][ T7610] R13: 0000000000000001 R14: 00007f5d04bb6080 R15: 00007fff31567f98
[  238.387538][ T7610]  </TASK>
[  238.395146][ T7610] Kernel Offset: disabled
[  238.677603][ T7610] Rebooting in 86400 seconds..