last executing test programs:

8m1.628428833s ago: executing program 1 (id=240):
r0 = io_uring_setup(0x63d6, &(0x7f0000000240)={0x0, 0xa94b, 0x400, 0x0, 0x167})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket(0x10, 0x400000000080803, 0x0)
fcntl$dupfd(r5, 0x406, r5)
ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x201049e, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES16], 0x1, 0x644, &(0x7f0000001180)="$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")
msgget$private(0x0, 0x500)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03fffffff00000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000140)={r7})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_IE={0x4}]}, 0x34}}, 0x0)

7m56.89492133s ago: executing program 1 (id=249):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xc005d, 0x0, 0x1, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000000ce"], 0x10)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}})

7m56.499719411s ago: executing program 1 (id=252):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000180)=[0x0, <r2=>0x0], &(0x7f00000000c0), 0x2, r1})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x4, r2, r1, 0xeeeeeeee})

7m56.312568082s ago: executing program 1 (id=255):
syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM")
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x20040, 0x0)

7m55.414142663s ago: executing program 1 (id=258):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a)

7m54.883338094s ago: executing program 1 (id=259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="7072656665727265645f736c6f743d3030308b303030303030303030303030303030322c6865617274626561743d676c6762616c2c6c6f63616c666c6f636b732c75737271756f74612c6e6f757365725f78617474722c636c755b0c737465725f737461636b3d6f326362"], 0x1, 0x473e, &(0x7f0000008f00)="$eJzs221oXWcBB/Dn3MY12dosL93arnu5bQWDjpDu03R+qHHqqu36onPSKfEmzdLoTW5MbnTgkNkvoiAoRVBRYSqMfZnDaWFf5hAGviCbQpkgOL/JYAp+sLgVFrn3nJPcc3LTc5cbC66/H7Q35+V5znPzv89z7jnPSSlRPzu7VJ5dKlfmy7Wph5fuKn+xVl2emw6lq2T98a8LIVy949OZTX5O+kNsK+tkCxz/4Ic//sm7QvjTyW98dGVlZaWZ0kDoC20cavn50r8enWp9TZVyZRr1tqsr9eflJ9/45TuutEeR0yGEXeva1bAthPCpX4WwPYQwmKwbSl4bb3BHCCEKITz1u3/+pLebJrTUef7BV18+ee7ogXPjzz790uWZExvuHIXw/ereO2fmXju47Z5X3r0FhwcAgEIfOXX8gRNjh8LzUei/0LP++/ru5DX9fnzsnZ+9/4mete0rdGbbVQwVAAAActau/weiN9vM16UzawPJ63OPnH7ghWhtuwvb/29H7j9+74fGDiXzv9G67Xcnq/7xgW3NOdT8vG9+/ncwV779/O/acZ74+sVfz1+3+fan7UuPOxCi0mhmuVQaHQ3h5Hi8vCe6vlStLdXf83Btef7M5o/7dpHNP569z3wKkgn9TvMfytVfNP+/99Nfeqavp5t3MBzyn9rGcnn9R5k2svlvPJb/9KtRR/kP58oV5X/fizsv/WZ7N+8gf0Teikz+z8Qd8UDrDuV4AGjk/+2e4vx35eovyv+H4xeeOt3y/E+n3bYxzgxEjbb2ZkaAN5P1Ax3Wc63L9v84iEwGyS9yo/7/ei7/m3L1F+V/rPb3P/yti/P/RuP/yHg3dV47svnHQZQze6z1/8FScf+/efWn15OJryvn//uzf7n4ma7O1Wn+0WotjfaPOP93JJt/ciLODp7N32Sn4//uXP1F/X/P8EOPz26i3R/rS9rZH4XhlqdOLzROYf1r89XNS5rG5oVNHOQakM0//q1luk7y5Haz/w8Uj/97cvUX5f/4vm++/9Eunv/t22D8HzP+dySbf/zYd+ZZ6IL838jlvzdXf1H+F3/+i2MPbcn4v6axfFj+Hcnmf/267Wv3f0odXf/dkitfdP/nwNALT/61i+v/tH3pcdP7P+l9iJEovv9De9n8b9hwvyuf/9e+wO/LlSvq/9/59ysvHuzm7z+iXncAupDNf0e8ss0FYEv+6SDRtv/fmqu/KP8vNz46m7j+a37j603zb7n+3x6vP2H870g2/53xyswXgMea/zfP/9H6/v+fXP635eovyv/ykdGer23x+b/R/pH8H6LRVjb//g33a+T/xw7O/7fnyhXl/5X9P3vtzpbxfzO3gsdc629aNv8bN9yv2f97i/O/I1euKP/vfeu3zz3WRfvf1UVZ8vnH5/pMd0q+m3d6/V/O1V+U/49HLp0/+D+4/rvb+b8j2fzjWfO3kn/++n9/rv6i/H9w/EeLPV39/Xf7/O+TPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKYMJa8DISqNZpZLpdHREIaT5T3h+miycmZislqb+vxSCLuS9eUwFM1Ua5OV6sTsfO3M9ESlWq1NhXBTsn1X6I2WqrX6xFxl4ebVuvqis9OVxfrkdKUeQtidrL817Ezrmpytz1UWmvumZW6IKl9YrtUro8tL04th7+r6Hen6mcXa8sItq3XdWKotLpytzE+cmV1839jY2FjYt9rmwWj6kfr0fD1ubby1USYtOxC1vJnm5ttajve52vLifKXaXH97S5lqbapSbSlzR8vx6ovL81OV+vREtTaTHq/cUrblvTU370+2jYTBeNv2ZEVSNu9w8nrvkVOfOHX00Lrt5Sib9/zy3PTYzjYVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC29vw97/1uCKEnXiqFEA6nP0TJv4zzD7768slzRw+cG3/26Zcuz5xotw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBzPy9RhHEcgN8Z2yyQWm9CHgNDRPQmYUG/iKRyjezYpXNQp4QMigLDiI4FQRDULSoIOgWVf0HUwWOn6lKHDgYRVIzOpO0Km7uyYzvPA8s7wzDvfOGF2Zn3M7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsHGc27nQlbSXd29d/JX7QuhMj20OIYxES9tf9nWE7hDCt6/TZ8Iqbaa7qv+3E7NjtVeN/mwdGHt0YyRqvP7s3Oy65RDFgyv2d0VxPDjYeP/t6u7A86mBKIQ470LIxfzo07OlEEJH3oWQi1+f5i4l9/dNaznJzaJt9H2815WMfynvQsjF9j2fe0vpM94aNPGkxkZyoXJxYOV/f72BNfDt5d2pq+9jg1p4r9L3/yj9ecQrhpmTRz+8yLsIcjMzO3ks7xoAAIDWOl8n/w/blrYfXIlCd7k29/9elf/3VPW/ev6/7P6Om6PTzYQQce3cZLI/tL+JPgvgdP+1O29Kzc33lNexHlpL/l9sDeX/f+tcz3poLfl/sTWY/9Mm5P/FJv8n8Vr+X0hPbu1deJl3EeRG/g8AAMVz+MT4ZGVoOHn53/Kzszav703bSpqnP7w91f94xbyR/PD/duT4+MFDQ8PpuNdOCC6v/xAvHv2Rfu9R3WYmqr67qLf+Q8+z+bnrqySJlX/8fiOrL7uu9R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+M3u3NMwCEZhGP1uK6I2WhVNWPhJ8IEGRgQghRkN6GDCAAyEgAIGcs5yb/IsLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP96/yuvj+0hjptUakqeyya/8cT7OfuW+H5X32uHErAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxg4cyAAAAAAI87fOo/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//+HvIOg==")
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b)

7m54.469075454s ago: executing program 32 (id=259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x1000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="7072656665727265645f736c6f743d3030308b303030303030303030303030303030322c6865617274626561743d676c6762616c2c6c6f63616c666c6f636b732c75737271756f74612c6e6f757365725f78617474722c636c755b0c737465725f737461636b3d6f326362"], 0x1, 0x473e, &(0x7f0000008f00)="$eJzs221oXWcBB/Dn3MY12dosL93arnu5bQWDjpDu03R+qHHqqu36onPSKfEmzdLoTW5MbnTgkNkvoiAoRVBRYSqMfZnDaWFf5hAGviCbQpkgOL/JYAp+sLgVFrn3nJPcc3LTc5cbC66/H7Q35+V5znPzv89z7jnPSSlRPzu7VJ5dKlfmy7Wph5fuKn+xVl2emw6lq2T98a8LIVy949OZTX5O+kNsK+tkCxz/4Ic//sm7QvjTyW98dGVlZaWZ0kDoC20cavn50r8enWp9TZVyZRr1tqsr9eflJ9/45TuutEeR0yGEXeva1bAthPCpX4WwPYQwmKwbSl4bb3BHCCEKITz1u3/+pLebJrTUef7BV18+ee7ogXPjzz790uWZExvuHIXw/ereO2fmXju47Z5X3r0FhwcAgEIfOXX8gRNjh8LzUei/0LP++/ru5DX9fnzsnZ+9/4mete0rdGbbVQwVAAAActau/weiN9vM16UzawPJ63OPnH7ghWhtuwvb/29H7j9+74fGDiXzv9G67Xcnq/7xgW3NOdT8vG9+/ncwV779/O/acZ74+sVfz1+3+fan7UuPOxCi0mhmuVQaHQ3h5Hi8vCe6vlStLdXf83Btef7M5o/7dpHNP569z3wKkgn9TvMfytVfNP+/99Nfeqavp5t3MBzyn9rGcnn9R5k2svlvPJb/9KtRR/kP58oV5X/fizsv/WZ7N+8gf0Teikz+z8Qd8UDrDuV4AGjk/+2e4vx35eovyv+H4xeeOt3y/E+n3bYxzgxEjbb2ZkaAN5P1Ax3Wc63L9v84iEwGyS9yo/7/ei7/m3L1F+V/rPb3P/yti/P/RuP/yHg3dV47svnHQZQze6z1/8FScf+/efWn15OJryvn//uzf7n4ma7O1Wn+0WotjfaPOP93JJt/ciLODp7N32Sn4//uXP1F/X/P8EOPz26i3R/rS9rZH4XhlqdOLzROYf1r89XNS5rG5oVNHOQakM0//q1luk7y5Haz/w8Uj/97cvUX5f/4vm++/9Eunv/t22D8HzP+dySbf/zYd+ZZ6IL838jlvzdXf1H+F3/+i2MPbcn4v6axfFj+Hcnmf/267Wv3f0odXf/dkitfdP/nwNALT/61i+v/tH3pcdP7P+l9iJEovv9De9n8b9hwvyuf/9e+wO/LlSvq/9/59ysvHuzm7z+iXncAupDNf0e8ss0FYEv+6SDRtv/fmqu/KP8vNz46m7j+a37j603zb7n+3x6vP2H870g2/53xyswXgMea/zfP/9H6/v+fXP635eovyv/ykdGer23x+b/R/pH8H6LRVjb//g33a+T/xw7O/7fnyhXl/5X9P3vtzpbxfzO3gsdc629aNv8bN9yv2f97i/O/I1euKP/vfeu3zz3WRfvf1UVZ8vnH5/pMd0q+m3d6/V/O1V+U/49HLp0/+D+4/rvb+b8j2fzjWfO3kn/++n9/rv6i/H9w/EeLPV39/Xf7/O+TPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKYMJa8DISqNZpZLpdHREIaT5T3h+miycmZislqb+vxSCLuS9eUwFM1Ua5OV6sTsfO3M9ESlWq1NhXBTsn1X6I2WqrX6xFxl4ebVuvqis9OVxfrkdKUeQtidrL817Ezrmpytz1UWmvumZW6IKl9YrtUro8tL04th7+r6Hen6mcXa8sItq3XdWKotLpytzE+cmV1839jY2FjYt9rmwWj6kfr0fD1ubby1USYtOxC1vJnm5ttajve52vLifKXaXH97S5lqbapSbSlzR8vx6ovL81OV+vREtTaTHq/cUrblvTU370+2jYTBeNv2ZEVSNu9w8nrvkVOfOHX00Lrt5Sib9/zy3PTYzjYVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPC29vw97/1uCKEnXiqFEA6nP0TJv4zzD7768slzRw+cG3/26Zcuz5xotw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBfduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBzPy9RhHEcgN8Z2yyQWm9CHgNDRPQmYUG/iKRyjezYpXNQp4QMigLDiI4FQRDULSoIOgWVf0HUwWOn6lKHDgYRVIzOpO0Km7uyYzvPA8s7wzDvfOGF2Zn3M7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsHGc27nQlbSXd29d/JX7QuhMj20OIYxES9tf9nWE7hDCt6/TZ8Iqbaa7qv+3E7NjtVeN/mwdGHt0YyRqvP7s3Oy65RDFgyv2d0VxPDjYeP/t6u7A86mBKIQ470LIxfzo07OlEEJH3oWQi1+f5i4l9/dNaznJzaJt9H2815WMfynvQsjF9j2fe0vpM94aNPGkxkZyoXJxYOV/f72BNfDt5d2pq+9jg1p4r9L3/yj9ecQrhpmTRz+8yLsIcjMzO3ks7xoAAIDWOl8n/w/blrYfXIlCd7k29/9elf/3VPW/ev6/7P6Om6PTzYQQce3cZLI/tL+JPgvgdP+1O29Kzc33lNexHlpL/l9sDeX/f+tcz3poLfl/sTWY/9Mm5P/FJv8n8Vr+X0hPbu1deJl3EeRG/g8AAMVz+MT4ZGVoOHn53/Kzszav703bSpqnP7w91f94xbyR/PD/duT4+MFDQ8PpuNdOCC6v/xAvHv2Rfu9R3WYmqr67qLf+Q8+z+bnrqySJlX/8fiOrL7uu9R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+M3u3NMwCEZhGP1uK6I2WhVNWPhJ8IEGRgQghRkN6GDCAAyEgAIGcs5yb/IsLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP96/yuvj+0hjptUakqeyya/8cT7OfuW+H5X32uHErAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxg4cyAAAAAAI87fOo/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//+HvIOg==")
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b)

6.24579276s ago: executing program 4 (id=2148):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c8", 0x60, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f00000001c0)=ANY=[])

5.642085321s ago: executing program 2 (id=2149):
r0 = gettid()
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180))
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
write$dsp(r1, &(0x7f0000000080)="cd", 0x1)
write$dsp(r1, &(0x7f00000000c0)="1359a7b637341adbff62ec6add15460c682304e4fccad9e34173348bfa33359731791967c61a51691f2e3d3d44601d5154e3516d956d4645ec724600"/84, 0x54)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)

5.330866582s ago: executing program 4 (id=2151):
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000000c0)={0x1, 0xff, 0x1f, 0x0, 0x7})
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x32)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r0, 0x5100)

4.752660482s ago: executing program 4 (id=2152):
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

4.283277753s ago: executing program 2 (id=2154):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r0, 0x4c055000)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))

4.075001273s ago: executing program 2 (id=2156):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x8, 0x3})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x3, 0x0, 0x0, 0x72d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000003, 0x3, 0x400000, 0xd5c], 0x5000, 0x200394})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.748535674s ago: executing program 2 (id=2159):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006)

2.763512045s ago: executing program 2 (id=2165):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xa, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x2, 0xef, 0xfffffff9, 0xbc3, 0xd, "a294e7b46f5e02972913805a9d1b78d681c441"})
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="9b2b705dda546548ddee2b3bdb92cf453d7f6f14d5ed0e5fa1d71d064bbbd8870d", 0x21}], 0x1)
madvise(&(0x7f000091e000/0x1000)=nil, 0x1000, 0x19)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

2.503820725s ago: executing program 5 (id=2167):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe}}}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}]}}]}, 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, 0x0, 0x0, 0x0)

2.334408446s ago: executing program 5 (id=2168):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0417"], 0x528}}, 0xc000)

2.275363776s ago: executing program 3 (id=2169):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x40}]}, 0x10)
syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000078000000000001"], 0x0)

2.127265006s ago: executing program 3 (id=2170):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x500, 0x0, 0x0, 0xf, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x3f0, 0x0, 0xfca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})

2.016081616s ago: executing program 5 (id=2171):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r1, 0x0, 0x11, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)

1.931556476s ago: executing program 3 (id=2172):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000280)=ANY=[])

1.862331726s ago: executing program 5 (id=2173):
r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0xff, 0x1f, 0x0, 0x7})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, 0x0, 0x32)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

1.666973807s ago: executing program 0 (id=2174):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_MSRS(r6, 0x4140aecd, 0x0)

1.628103287s ago: executing program 2 (id=2175):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0))
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4044050}, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x0, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006)

1.588097807s ago: executing program 3 (id=2176):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
r1 = socket$packet(0x11, 0x3, 0x300)
dup(r1)
r2 = fcntl$dupfd(r0, 0x406, r1)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0})
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)

1.559959637s ago: executing program 5 (id=2177):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020400090f0000001100000000000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a"], 0x78}, 0x1, 0x7}, 0x0)

1.147486238s ago: executing program 5 (id=2178):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020a020874200000000000109022d00010000800009040000fe030000000921fdff000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "3fd505a5"}]}}, 0x0}, 0x0)

1.114854608s ago: executing program 3 (id=2179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@remote}, {@in6=@private1, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

964.740438ms ago: executing program 4 (id=2180):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f00000005c0)={0x1d, r1}, 0x10, &(0x7f0000000500)={&(0x7f00000006c0)=@canfd={{0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "d16a54e224c2025a324c27cfca8148da618a5d00ba07b06df64f902293c8051b0c4c6af8230d7a32f4b9fd11799198763830aade32f59666c43bdaded7d8cd68"}, 0x48}}, 0x0)

908.819848ms ago: executing program 0 (id=2181):
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}})
ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f00000001c0))

815.574508ms ago: executing program 4 (id=2182):
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x500, 0x0, 0x0, 0xf, 0x0, 0x0, {}, {}, {}, {}, 0x2, 0x3f0, 0x0, 0xfca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})

773.344298ms ago: executing program 0 (id=2183):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000400000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/136], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r1, 0x0, 0x11, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c)

659.845248ms ago: executing program 3 (id=2184):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @dev, 0x1ff}, 0x1c)
ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'geneve0\x00'})
close(0xffffffffffffffff)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)

599.442199ms ago: executing program 0 (id=2185):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x7, 0xfefb, 0x2, 0x7, 0x7, 0x9, 0x6, 0x6, 0x81, 0x7, 0x20, 0x3, 0x40}, {0x7, 0x3, 0x2, 0x80, 0x0, 0x2f, 0x64, 0x0, 0x5, 0xd2, 0x4, 0xd7, 0x2}, {0x2, 0x8, 0x0, 0xfe, 0x6, 0x40, 0xd9, 0x5, 0x6, 0x5, 0x9, 0x3, 0x10000000}], 0xfffffff8})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000200)="360f7881a94c400f01ca0fc72b66b9b40a000066b89200000066ba000000000f3066b9800000c00f326635000100000f3036f33e260f0766b9fc0a000066b80018000066ba000000000f300fc735660f7dd2", 0x52}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

513.982079ms ago: executing program 4 (id=2186):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xa, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x3eae, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x2, 0xef, 0xfffffff9, 0xbc3, 0xd, "a294e7b46f5e02972913805a9d1b78d681c441"})
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="9b2b705dda546548ddee2b3bdb92cf453d7f6f14d5ed0e5fa1d71d064bbbd8870d", 0x21}], 0x1)
madvise(&(0x7f000091e000/0x1000)=nil, 0x1000, 0x19)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

259.488889ms ago: executing program 0 (id=2187):
r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0xff, 0x1f, 0x0, 0x7})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r0, 0x0, 0x32)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

0s ago: executing program 0 (id=2188):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f00000000c0))

kernel console output (not intermixed with test programs):

0: detected capacity change from 0 to 64
[  263.201508][ T6993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  263.243563][ T6993] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.110567][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  264.202887][ T7016] tipc: Started in network mode
[  264.245206][ T7016] tipc: Node identity ac14140f, cluster identity 4711
[  264.263273][ T7016] tipc: New replicast peer: 255.255.255.255
[  264.290478][ T7016] tipc: Enabled bearer <udp:syz2>, priority 10
[  264.317208][ T7021] tipc: Cannot configure node identity twice
[  264.338499][ T7025] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(27266280029029) <= P.seqno(0) <= S.SWH(27266280029103)) and (P.ackno exists or LAWL(186689737573056) <= P.ackno(186689737573057) <= S.AWH(186689737573057), sending SYNC...
[  264.347639][ T7021] tipc: Cannot configure node identity twice
[  264.400755][ T7027] loop3: detected capacity change from 0 to 512
[  264.470940][ T7027] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  264.488241][ T7027] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.800663][ T7034] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.595: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  264.978291][ T4293] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  265.169908][ T4293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.186173][ T4293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  265.205777][ T4293] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.236113][ T4293] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  265.255741][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.285392][ T4293] hub 3-1:1.0: bad descriptor, ignoring hub
[  265.294519][ T4293] hub: probe of 3-1:1.0 failed with error -5
[  265.338488][ T4293] cdc_wdm 3-1:1.0: skipping garbage
[  265.348089][ T4293] cdc_wdm 3-1:1.0: skipping garbage
[  265.353408][ T4293] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  265.561702][ T4333] tipc: Node number set to 2886997007
[  266.711212][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  267.275736][ T7043] loop5: detected capacity change from 0 to 1024
[  267.302083][ T7043] EXT4-fs: Ignoring removed orlov option
[  267.326941][ T7043] EXT4-fs: Ignoring removed nomblk_io_submit option
[  267.359362][ T7043] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.471531][ T7047] loop3: detected capacity change from 0 to 8
[  267.478371][ T7047] squashfs: Unknown parameter 'threads'
[  268.673337][ T7057] loop0: detected capacity change from 0 to 1024
[  270.108692][ T7057] hfsplus: failed to load extents file
[  270.121519][ T7043] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  270.168954][ T7043] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  270.238260][ T4333] usb 3-1: USB disconnect, device number 4
[  270.257232][ T7064] loop4: detected capacity change from 0 to 2048
[  270.431744][ T7064] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  270.445236][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  270.471793][ T7064] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.746267][ T7077] loop3: detected capacity change from 0 to 512
[  271.090620][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  271.236260][ T7077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  271.463550][ T7077] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  272.308097][ T7088] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.609: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  272.857725][ T7096] loop0: detected capacity change from 0 to 2048
[  272.876089][ T7096] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  273.234291][ T7101] loop4: detected capacity change from 0 to 8
[  273.241279][ T7101] squashfs: Unknown parameter 'threads'
[  273.335973][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  273.577511][ T6690] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  273.681844][ T7104] loop4: detected capacity change from 0 to 64
[  275.129341][ T7113] loop2: detected capacity change from 0 to 1024
[  275.677877][ T7113] hfsplus: failed to load extents file
[  275.766286][ T4296] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  275.843125][ T7119] loop3: detected capacity change from 0 to 1024
[  275.862865][ T7119] EXT4-fs: Ignoring removed orlov option
[  275.872803][ T7119] EXT4-fs: Ignoring removed nomblk_io_submit option
[  275.979536][ T7119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  276.073086][ T7119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  276.180002][ T7119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  276.440677][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  278.776555][ T7147] loop4: detected capacity change from 0 to 512
[  279.374688][ T7155] loop2: detected capacity change from 0 to 8
[  279.382228][ T7155] squashfs: Unknown parameter 'threads'
[  279.649027][ T7147] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  279.658215][ T7147] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.941131][ T7147] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.626: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  280.070107][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  281.723397][ T7170] loop4: detected capacity change from 0 to 1024
[  281.770289][ T7170] hfsplus: failed to load extents file
[  283.835633][ T4264] Bluetooth: hci0: command 0x0406 tx timeout
[  283.837042][ T4293] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  283.946351][ T7190] loop3: detected capacity change from 0 to 8
[  283.953896][ T7190] squashfs: Unknown parameter 'threads'
[  284.068125][ T7192] loop0: detected capacity change from 0 to 512
[  284.082560][ T4293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.125952][ T4293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  284.155762][ T4293] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.186418][ T4293] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  284.223571][ T7192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  284.238078][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.256554][ T7192] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.292344][ T4293] hub 3-1:1.0: bad descriptor, ignoring hub
[  284.338612][ T4293] hub: probe of 3-1:1.0 failed with error -5
[  284.398140][ T6690] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  284.522616][ T7192] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.639: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  284.642234][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  284.674651][ T4293] cdc_wdm 3-1:1.0: skipping garbage
[  284.680882][ T4293] cdc_wdm 3-1:1.0: skipping garbage
[  284.686190][ T4293] cdc_wdm: probe of 3-1:1.0 failed with error -22
[  286.338851][ T4294] usb 3-1: USB disconnect, device number 5
[  288.317151][ T7226] loop0: detected capacity change from 0 to 64
[  288.756731][ T7233] loop2: detected capacity change from 0 to 1024
[  288.780212][ T7233] hfsplus: failed to load extents file
[  288.859498][ T7233] netlink: 'syz.2.647': attribute type 10 has an invalid length.
[  288.867308][ T7233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.647'.
[  288.876826][ T7233] bridge0: port 4(veth0_vlan) entered blocking state
[  288.883904][ T7233] bridge0: port 4(veth0_vlan) entered disabled state
[  288.898678][ T7233] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  289.376651][ T7236] loop0: detected capacity change from 0 to 512
[  289.486476][ T7236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  289.547273][ T7236] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.936713][ T7236] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  290.187115][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  291.937543][ T7271] loop0: detected capacity change from 0 to 2048
[  291.948844][ T7271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.357151][ T4333] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  292.701535][ T7280] loop3: detected capacity change from 0 to 1024
[  292.885934][ T7280] hfsplus: failed to load extents file
[  292.991698][ T7282] UBIFS error (pid: 7282): cannot open "(null)", error -22
[  293.310682][ T4333] usb 3-1: Using ep0 maxpacket: 32
[  293.355185][ T4333] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  293.413607][ T4333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  293.466060][ T4333] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  293.530956][ T4296] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  293.541635][ T7277] netlink: 'syz.3.662': attribute type 10 has an invalid length.
[  293.549467][ T7277] netlink: 40 bytes leftover after parsing attributes in process `syz.3.662'.
[  293.558480][ T7277] bridge0: port 4(veth0_vlan) entered blocking state
[  293.565221][ T7277] bridge0: port 4(veth0_vlan) entered disabled state
[  293.573681][ T7277] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  293.596623][ T4333] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  293.626354][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.640023][ T7284] loop0: detected capacity change from 0 to 64
[  293.656712][ T4333] usb 3-1: Product: syz
[  293.678118][ T4333] usb 3-1: Manufacturer: syz
[  293.682781][ T4333] usb 3-1: SerialNumber: syz
[  293.733680][ T4333] usb 3-1: config 0 descriptor??
[  293.875761][ T7287] loop3: detected capacity change from 0 to 512
[  294.025141][ T7287] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  294.044567][ T7287] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.349073][ T7301] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.665: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  294.355371][ T7300] sch_tbf: burst 824 is lower than device lo mtu (65550) !
[  294.839941][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  295.134805][ T4294] usb 3-1: USB disconnect, device number 6
[  296.864427][ T7321] UBIFS error (pid: 7321): cannot open "(null)", error -22
[  298.068331][ T7336] loop4: detected capacity change from 0 to 1024
[  298.105680][ T7336] hfsplus: failed to load extents file
[  298.201276][ T7336] netlink: 'syz.4.677': attribute type 10 has an invalid length.
[  298.209443][ T7336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.677'.
[  298.218904][ T7336] bridge0: port 4(veth0_vlan) entered blocking state
[  298.225890][ T7336] bridge0: port 4(veth0_vlan) entered disabled state
[  298.240945][ T7336] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  299.176395][ T7345] loop2: detected capacity change from 0 to 512
[  299.980502][ T7345] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  300.000056][ T7345] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  300.625683][ T7355] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.680: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  300.879112][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  301.169231][ T7363] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  302.110425][ T7369] UBIFS error (pid: 7369): cannot open "(null)", error -22
[  302.633407][ T7371] loop2: detected capacity change from 0 to 2048
[  302.728651][ T7371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  302.737212][ T7371] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.954863][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  304.042700][ T7390] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  304.315654][ T7397] loop4: detected capacity change from 0 to 512
[  304.717266][ T7397] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  304.779069][ T7397] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.168784][ T7407] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #2: comm syz.4.695: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  306.064710][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  306.194375][ T7411] device batadv0 entered promiscuous mode
[  306.214105][ T7411] device macvtap1 entered promiscuous mode
[  306.229822][ T7411] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  306.250112][ T7411] device batadv0 left promiscuous mode
[  306.351610][ T7415] bridge0: port 4(gretap0) entered blocking state
[  306.364435][ T7415] bridge0: port 4(gretap0) entered disabled state
[  306.422877][ T7415] device gretap0 entered promiscuous mode
[  306.503781][ T7418] UBIFS error (pid: 7418): cannot open "(null)", error -22
[  306.682338][ T7415] bridge0: port 4(gretap0) entered blocking state
[  306.696657][ T7415] bridge0: port 4(gretap0) entered forwarding state
[  307.036415][ T7416] device gretap0 left promiscuous mode
[  307.048649][ T7416] bridge0: port 4(gretap0) entered disabled state
[  307.338670][ T7420] loop5: detected capacity change from 0 to 2048
[  307.641783][ T7420] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  307.741801][ T7420] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  308.246037][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  308.490352][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.706'.
[  309.818232][ T5230] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  310.038104][ T5230] usb 1-1: Using ep0 maxpacket: 16
[  310.047644][ T5230] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  310.078038][ T5230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.086080][ T5230] usb 1-1: Product: syz
[  310.108006][ T5230] usb 1-1: Manufacturer: syz
[  310.112758][ T5230] usb 1-1: SerialNumber: syz
[  310.848886][ T5230] usb 1-1: config 0 descriptor??
[  310.864493][ T5230] go7007: probe of 1-1:0.0 failed with error -12
[  311.323456][ T7470] loop5: detected capacity change from 0 to 64
[  312.378834][ T7482] loop4: detected capacity change from 0 to 2048
[  312.412110][ T7482] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  313.788835][ T7492] netlink: 176 bytes leftover after parsing attributes in process `syz.4.722'.
[  313.821835][ T7492] device ip6gretap0 entered promiscuous mode
[  313.842370][ T7492] netlink: 176 bytes leftover after parsing attributes in process `syz.4.722'.
[  314.188032][ T4639] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  314.712316][ T4639] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75
[  314.729148][ T4639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.737571][ T4639] usb 5-1: Product: syz
[  314.745089][ T4639] usb 5-1: Manufacturer: syz
[  314.750204][ T4639] usb 5-1: SerialNumber: syz
[  314.876212][ T4639] usb 5-1: config 0 descriptor??
[  314.882694][ T4337] usb 1-1: USB disconnect, device number 3
[  314.990716][ T7502] loop3: detected capacity change from 0 to 512
[  315.679890][ T4639] viperboard 5-1:0.0: version 0.00 found at bus 005 address 002
[  315.773300][ T7502] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  315.782423][ T7502] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  315.806010][ T4639] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  315.968205][ T4639] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  315.984026][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  316.683049][ T4639] usb 5-1: USB disconnect, device number 2
[  316.942897][ T7515] loop5: detected capacity change from 0 to 1024
[  317.047610][ T7515] EXT4-fs: Ignoring removed orlov option
[  317.053997][ T7515] EXT4-fs: Ignoring removed nomblk_io_submit option
[  317.066172][ T7515] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  317.091537][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  317.808590][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  317.970210][ T7515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  318.013343][ T7515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  318.288858][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  319.084532][ T7546] loop4: detected capacity change from 0 to 1024
[  319.107807][ T7546] hfsplus: failed to load extents file
[  319.241144][ T7546] netlink: 'syz.4.735': attribute type 10 has an invalid length.
[  319.249001][ T7546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.735'.
[  319.258445][ T7546] bridge0: port 4(veth0_vlan) entered blocking state
[  319.265562][ T7546] bridge0: port 4(veth0_vlan) entered disabled state
[  319.280335][ T7546] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  320.525809][ T7564] loop5: detected capacity change from 0 to 1024
[  320.568955][ T7564] EXT4-fs: Ignoring removed orlov option
[  320.606745][ T7564] EXT4-fs: Ignoring removed nomblk_io_submit option
[  320.638789][ T7564] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  320.723312][ T7564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  320.741247][ T7564] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  320.758267][ T7573] device syz_tun entered promiscuous mode
[  321.240137][ T7586] loop4: detected capacity change from 0 to 1024
[  322.190118][ T7586] hfsplus: failed to load extents file
[  322.200561][ T7584] netlink: 'syz.4.749': attribute type 10 has an invalid length.
[  322.212540][ T7584] netlink: 40 bytes leftover after parsing attributes in process `syz.4.749'.
[  322.221791][ T7584] bridge0: port 4(veth0_vlan) entered blocking state
[  322.229004][ T7584] bridge0: port 4(veth0_vlan) entered disabled state
[  322.236962][ T7584] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  322.434924][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  326.751494][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.756'.
[  326.778099][ T7602] bridge0: port 3(erspan0) entered disabled state
[  326.784731][ T7602] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.792859][ T7602] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.928386][ T4645] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  328.136713][ T4645] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.191511][ T4645] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  328.308763][ T4645] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.421566][ T4645] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  328.548067][ T4645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.698972][ T4645] hub 1-1:1.0: bad descriptor, ignoring hub
[  328.704940][ T4645] hub: probe of 1-1:1.0 failed with error -5
[  329.030901][ T4645] cdc_wdm 1-1:1.0: skipping garbage
[  330.264054][ T4645] cdc_wdm 1-1:1.0: skipping garbage
[  330.377653][ T4645] cdc_wdm: probe of 1-1:1.0 failed with error -22
[  331.089169][ T7637] loop5: detected capacity change from 0 to 2048
[  331.101569][ T7637] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.010049][ T4645] usb 1-1: USB disconnect, device number 4
[  332.178926][ T7649] loop4: detected capacity change from 0 to 2048
[  332.252576][ T7649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  332.275629][ T7649] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.421865][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  334.979630][ T7684] loop2: detected capacity change from 0 to 2048
[  334.991716][ T7684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.050725][ T7689] loop0: detected capacity change from 0 to 512
[  336.150609][ T7689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  336.159633][ T7689] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  336.750393][ T7701] loop4: detected capacity change from 0 to 1024
[  337.278827][ T7701] hfsplus: failed to load extents file
[  337.422321][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  337.448651][ T7700] netlink: 'syz.4.784': attribute type 10 has an invalid length.
[  337.456433][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.784'.
[  337.465713][ T7700] bridge0: port 4(veth0_vlan) entered blocking state
[  337.472800][ T7700] bridge0: port 4(veth0_vlan) entered disabled state
[  337.480770][ T7700] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  344.074788][ T7776] loop4: detected capacity change from 0 to 2048
[  344.318976][ T7776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  344.337993][ T7776] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.379128][ T4294] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  344.510816][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  344.568291][ T4294] usb 1-1: Using ep0 maxpacket: 16
[  344.576018][ T4294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.607544][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  344.678062][ T4294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  344.699837][ T4294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  344.710183][ T4294] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  344.736567][ T4294] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  344.747400][ T4294] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  344.779641][ T4294] usb 1-1: Manufacturer: syz
[  344.797924][ T4294] usb 1-1: config 0 descriptor??
[  344.909489][ T7796] loop4: detected capacity change from 0 to 4096
[  344.936023][ T7796] ntfs3: Unknown parameter 'nocase'
[  344.981006][ T6690] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  345.398705][ T4294] rc_core: IR keymap rc-hauppauge not found
[  345.404679][ T4294] Registered IR keymap rc-empty
[  345.420633][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.468093][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.499849][ T4294] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  345.549163][ T4294] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[  345.601692][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.648598][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.688105][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.768070][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.858474][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.898120][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.948173][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  345.988564][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  346.028096][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  346.058372][ T4294] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  346.101227][ T4294] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  346.132625][ T4294] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  346.177474][ T4294] usb 1-1: USB disconnect, device number 5
[  348.065002][ T7843] capability: warning: `syz.4.827' uses 32-bit capabilities (legacy support in use)
[  348.810884][ T7847] loop5: detected capacity change from 0 to 4096
[  348.831249][ T7847] ntfs3: Unknown parameter 'nocase'
[  349.045252][ T6690] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  350.258200][ T6609] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  350.458219][ T6609] usb 5-1: Using ep0 maxpacket: 8
[  350.468528][ T7854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.520803][ T7854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  351.523202][ T6609] usb 5-1: unable to get BOS descriptor or descriptor too short
[  351.600254][ T6609] usb 5-1: unable to read config index 0 descriptor/start: -71
[  351.624870][ T6609] usb 5-1: can't read configurations, error -71
[  354.925909][ T7925] loop5: detected capacity change from 0 to 512
[  354.968482][ T7925] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  354.977545][ T7925] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  356.253368][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  356.545458][ T7941] loop0: detected capacity change from 0 to 1024
[  357.279081][ T7941] EXT4-fs: Ignoring removed orlov option
[  357.284782][ T7941] EXT4-fs: Ignoring removed nomblk_io_submit option
[  357.329654][ T7941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  357.509531][ T7941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  358.102380][ T7941] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  358.593844][ T7965] loop5: detected capacity change from 0 to 128
[  358.742395][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  358.802452][ T7965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  358.812379][ T7965] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  359.340495][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  359.789597][ T7981] loop5: detected capacity change from 0 to 512
[  359.972131][ T7981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  359.981344][ T7981] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  360.421986][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  364.063036][ T8037] loop3: detected capacity change from 0 to 512
[  364.186907][ T8037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  364.196741][ T8037] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  364.810104][ T8049] loop5: detected capacity change from 0 to 2048
[  365.938520][ T8049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  366.216483][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  368.183791][ T8076] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  369.965715][ T8089] loop5: detected capacity change from 0 to 4096
[  370.002403][ T8089] ntfs3: Unknown parameter 'nocase'
[  370.079025][ T6690] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  370.214410][ T8097] loop3: detected capacity change from 0 to 2048
[  370.255623][ T8097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.412165][ T8129] loop0: detected capacity change from 0 to 1024
[  373.449408][ T8129] EXT4-fs: Ignoring removed orlov option
[  373.455117][ T8129] EXT4-fs: Ignoring removed nomblk_io_submit option
[  373.489437][ T8129] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  373.608799][ T8129] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  373.640220][ T8129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  373.975338][   T26] audit: type=1326 audit(1733543418.521:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.3.899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ec937fed9 code=0x0
[  374.037694][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  375.832583][ T8148] loop2: detected capacity change from 0 to 4096
[  375.894728][ T8148] ntfs3: Unknown parameter 'nocase'
[  376.674664][   T26] audit: type=1326 audit(1733543421.221:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz.3.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec937fed9 code=0x7fc00000
[  378.529903][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  378.536337][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  380.939825][ T8199] loop0: detected capacity change from 0 to 4096
[  381.019380][ T8199] ntfs3: Unknown parameter 'nocase'
[  385.246694][ T5078] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  385.857122][ T8248] loop4: detected capacity change from 0 to 4096
[  385.877284][ T8248] ntfs3: Unknown parameter 'nocase'
[  386.048126][ T5078] usb 3-1: Using ep0 maxpacket: 32
[  386.237587][ T5078] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  386.277500][ T5078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.338103][ T5078] usb 3-1: Product: syz
[  386.345942][ T5078] usb 3-1: Manufacturer: syz
[  386.355186][ T5078] usb 3-1: SerialNumber: syz
[  386.391750][ T5078] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  386.648248][ T4337] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  386.858603][ T4337] usb 5-1: Using ep0 maxpacket: 16
[  386.866382][ T4337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  386.888072][ T4337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  386.899059][ T4337] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  386.912551][ T4337] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  386.937062][ T4337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.960913][ T4337] usb 5-1: config 0 descriptor??
[  386.992235][ T4337] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10
[  387.033015][ T3607] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  387.083331][ T3607] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  387.117396][ T3607] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  387.178347][ T3607] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  387.202732][ T8257] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  387.237792][ T4241] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  387.248645][ T4337] usb 5-1: USB disconnect, device number 5
[  387.257000][ T3607] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  389.624932][ T8332] loop5: detected capacity change from 0 to 4096
[  389.631868][ T5078] gspca_stk1135: reg_w 0x353 err -71
[  389.638999][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  389.665847][ T5078] gspca_stk1135: Sensor write failed
[  389.686956][ T8332] ntfs3: Unknown parameter 'nocase'
[  389.693403][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  389.708079][ T5078] gspca_stk1135: Sensor write failed
[  389.716625][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  389.885301][ T5078] gspca_stk1135: Sensor read failed
[  389.900028][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  389.906770][ T5078] gspca_stk1135: Sensor read failed
[  389.922539][ T5078] gspca_stk1135: Detected sensor type unknown (0x0)
[  389.939754][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  389.960868][ T5078] gspca_stk1135: Sensor read failed
[  389.976617][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  390.013618][ T5078] gspca_stk1135: Sensor read failed
[  390.128050][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  390.134436][ T5078] gspca_stk1135: Sensor write failed
[  390.140170][ T5078] gspca_stk1135: serial bus timeout: status=0x00
[  390.146523][ T5078] gspca_stk1135: Sensor write failed
[  390.182678][ T5078] stk1135: probe of 3-1:64.0 failed with error -71
[  390.223072][ T5078] usb 3-1: USB disconnect, device number 7
[  390.878037][ T8346] loop2: detected capacity change from 0 to 32768
[  390.915883][ T8346] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.958 (8346)
[  391.440201][ T8346] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  391.450625][ T8346] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  391.459508][ T8346] BTRFS info (device loop2): turning on flush-on-commit
[  391.466482][ T8346] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  391.476128][ T8346] BTRFS info (device loop2): use zstd compression, level 3
[  391.483463][ T8346] BTRFS info (device loop2): using free space tree
[  391.834258][ T8374] tipc: Started in network mode
[  391.839363][ T8374] tipc: Node identity 800, cluster identity 4711
[  391.845869][ T8374] tipc: Node number set to 2048
[  391.853610][ T8374] tipc: Cannot configure node identity twice
[  391.902195][ T8346] BTRFS info (device loop2): enabling ssd optimizations
[  392.690852][ T4254] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  394.106708][ T8412] tipc: Started in network mode
[  394.111771][ T8412] tipc: Node identity 800, cluster identity 4711
[  394.128124][ T8412] tipc: Node number set to 2048
[  394.133647][ T8412] tipc: Cannot configure node identity twice
[  395.205732][ T8416] loop5: detected capacity change from 0 to 32768
[  395.213845][ T8416] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.978 (8416)
[  395.230447][ T8416] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  395.240721][ T8416] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  395.249528][ T8416] BTRFS info (device loop5): turning on flush-on-commit
[  395.256522][ T8416] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  395.265993][ T8416] BTRFS info (device loop5): use zstd compression, level 3
[  395.273285][ T8416] BTRFS info (device loop5): using free space tree
[  395.562526][ T8433] mmap: syz.0.980 (8433) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  395.654770][ T8416] BTRFS info (device loop5): enabling ssd optimizations
[  395.756057][ T8441] loop4: detected capacity change from 0 to 8
[  395.815769][ T8441] squashfs: Unknown parameter 'threads'
[  395.865233][ T5458] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  398.102453][ T8453] netlink: 'syz.0.983': attribute type 4 has an invalid length.
[  398.549570][ T8461] netlink: 40 bytes leftover after parsing attributes in process `syz.5.987'.
[  398.908848][ T8468] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  398.936845][ T8468] tipc: Started in network mode
[  398.958141][ T8468] tipc: Node identity 800, cluster identity 4711
[  399.061705][ T8468] tipc: Node number set to 2048
[  399.066872][ T8468] tipc: Cannot configure node identity twice
[  399.173707][ T8472] ptrace attach of ""[8475] was attempted by "./syz-executor exec"[8472]
[  399.648571][   T33] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  400.628476][   T33] usb 5-1: Using ep0 maxpacket: 32
[  400.632803][   T33] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  400.688829][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.711427][   T33] usb 5-1: Product: syz
[  400.715652][   T33] usb 5-1: Manufacturer: syz
[  400.746836][   T33] usb 5-1: SerialNumber: syz
[  400.918215][   T33] usb 5-1: config 0 descriptor??
[  402.131000][   T33] airspy 5-1:0.0: Board ID: 00
[  402.136990][   T33] airspy 5-1:0.0: Firmware version: 
[  402.532667][   T33] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e
[  402.579233][   T33] airspy 5-1:0.0: Registered as swradio24
[  402.598974][   T33] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  402.644560][   T33] usb 5-1: USB disconnect, device number 6
[  404.122719][ T8550] loop3: detected capacity change from 0 to 4096
[  404.139291][ T8550] ntfs3: Unknown parameter 'nocase'
[  404.699813][ T8563] netlink: 'syz.0.1017': attribute type 4 has an invalid length.
[  406.129581][ T8579] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  406.626140][ T8590] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  407.908534][ T8608] netlink: 'syz.3.1031': attribute type 4 has an invalid length.
[  409.158775][ T8623] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1036'.
[  409.468159][ T4736] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  409.648280][ T4736] usb 3-1: device descriptor read/64, error -71
[  410.201664][ T8637] loop5: detected capacity change from 0 to 8
[  410.228065][ T8637] squashfs: Unknown parameter 'threads'
[  411.208247][ T4736] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  411.368190][ T4736] usb 3-1: device descriptor read/64, error -71
[  411.389139][ T6690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  411.599827][ T4736] usb usb3-port1: attempt power cycle
[  412.668124][ T4736] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  412.934240][ T4736] usb 3-1: device not accepting address 10, error -71
[  413.072333][ T8656] loop2: detected capacity change from 0 to 1024
[  413.081342][ T8656] hfsplus: failed to load extents file
[  413.121634][ T6690] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  413.131918][ T8656] netlink: 'syz.2.1047': attribute type 10 has an invalid length.
[  413.139862][ T8656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1047'.
[  413.149256][ T8656] bridge0: port 4(veth0_vlan) entered blocking state
[  413.156012][ T8656] bridge0: port 4(veth0_vlan) entered disabled state
[  413.163831][ T8656] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  413.984988][ T8677] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  414.028162][ T8680] loop0: detected capacity change from 0 to 8
[  414.037309][ T8680] squashfs: Unknown parameter 'threads'
[  416.694160][ T8714] loop4: detected capacity change from 0 to 32768
[  416.726917][ T8714] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1067 (8714)
[  416.783992][ T8714] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  416.794287][ T8714] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  416.803066][ T8714] BTRFS info (device loop4): turning on flush-on-commit
[  416.810083][ T8714] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  416.819758][ T8714] BTRFS info (device loop4): use zstd compression, level 3
[  416.826990][ T8714] BTRFS info (device loop4): using free space tree
[  417.126266][ T8714] BTRFS info (device loop4): enabling ssd optimizations
[  417.453393][ T8691] syz.2.1055 (8691): drop_caches: 2
[  417.463299][ T4259] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  420.531328][ T8796] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  422.018580][ T8811] loop5: detected capacity change from 0 to 128
[  422.047332][ T8808] netlink: 'syz.3.1093': attribute type 4 has an invalid length.
[  422.682169][ T3518] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[  422.698135][ T3518] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[  422.721110][ T3518] hid-generic 0000:0003:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  422.976229][ T8789] syz.0.1086 (8789): drop_caches: 2
[  422.993973][ T8811] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  423.003118][ T8811] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  423.343510][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  423.433005][ T8838] loop0: detected capacity change from 0 to 8
[  423.443326][ T8838] squashfs: Unknown parameter 'threads'
[  424.053366][ T5230] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  424.104454][ T6690] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  424.278075][ T5230] usb 3-1: Using ep0 maxpacket: 16
[  424.286686][ T5230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.368086][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  424.508075][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  424.519562][ T5230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  424.529675][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  424.545517][ T5230] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  425.346390][ T5230] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  425.394644][ T5230] usb 3-1: Manufacturer: syz
[  425.409016][ T8853] netlink: 'syz.3.1104': attribute type 4 has an invalid length.
[  425.419694][ T5230] usb 3-1: config 0 descriptor??
[  426.448493][ T5230] rc_core: IR keymap rc-hauppauge not found
[  426.454530][ T5230] Registered IR keymap rc-empty
[  426.465756][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  426.518131][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  426.621828][ T5231] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  426.661875][ T5230] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  427.481028][ T5230] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11
[  427.528183][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.549860][ T5231] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping
[  427.588100][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.595720][ T5231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  427.626091][ T5231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  427.638164][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.662312][ T5231] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  427.671942][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.688302][ T5231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.706586][ T5231] usb 1-1: Product: syz
[  427.711376][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.726766][ T5231] usb 1-1: Manufacturer: syz
[  427.737040][ T5231] usb 1-1: SerialNumber: syz
[  427.748221][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.757380][ T5231] usb 1-1: config 0 descriptor??
[  427.778771][ T8858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  427.787208][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.796086][ T5231] option 1-1:0.0: GSM modem (1-port) converter detected
[  427.828259][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.868501][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.918274][ T5230] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  427.949775][ T5230] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  427.980795][ T5230] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  428.021168][ T5231] usb 1-1: USB disconnect, device number 6
[  428.039106][ T5230] usb 3-1: USB disconnect, device number 12
[  428.057248][ T5231] option 1-1:0.0: device disconnected
[  428.426906][ T8898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'.
[  429.251297][ T8903] loop5: detected capacity change from 0 to 8
[  429.336226][ T8903] squashfs: Unknown parameter 'threads'
[  431.821523][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'.
[  431.924061][ T5230] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  432.765262][ T8949] loop4: detected capacity change from 0 to 32768
[  432.798028][ T5230] usb 4-1: Using ep0 maxpacket: 32
[  432.820999][ T8949] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1136 (8949)
[  432.880607][ T5230] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  433.022739][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.191848][ T5230] usb 4-1: Product: syz
[  433.285299][ T5230] usb 4-1: Manufacturer: syz
[  433.315599][ T8949] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  433.325956][ T8949] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  433.335197][ T8949] BTRFS info (device loop4): turning on flush-on-commit
[  433.342229][ T8949] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  433.351700][ T8949] BTRFS info (device loop4): use zstd compression, level 3
[  433.359043][ T8949] BTRFS info (device loop4): using free space tree
[  433.373641][ T5230] usb 4-1: SerialNumber: syz
[  433.380294][ T5230] usb 4-1: config 0 descriptor??
[  433.613405][ T8949] BTRFS info (device loop4): enabling ssd optimizations
[  433.848146][ T4733] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  433.891166][ T4259] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  434.072737][ T5230] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  434.090145][ T5230] peak_usb 4-1:0.0 can0: sending command failure: -22
[  434.101827][ T5230] peak_usb 4-1:0.0 can0: sending command failure: -22
[  434.198271][ T4733] usb 1-1: Using ep0 maxpacket: 8
[  434.217608][ T4733] usb 1-1: config 0 has an invalid interface number: 224 but max is 0
[  434.258299][ T4733] usb 1-1: config 0 has no interface number 0
[  434.313298][ T4733] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  434.323535][ T5230] peak_usb: probe of 4-1:0.0 failed with error -22
[  434.366648][ T5230] usb 4-1: USB disconnect, device number 4
[  434.373782][ T4733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.473427][ T4733] usb 1-1: config 0 descriptor??
[  435.624534][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1146'.
[  438.161611][ T9021] loop3: detected capacity change from 0 to 128
[  439.019820][ T5230] usb 1-1: USB disconnect, device number 7
[  439.202239][ T9021] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  439.222689][ T9021] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  439.273812][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'.
[  439.518167][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  439.578414][ T4293] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  439.774688][ T4293] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  439.785276][ T4293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.796552][ T4293] usb 5-1: Product: syz
[  439.801163][ T4293] usb 5-1: Manufacturer: syz
[  439.805944][ T4293] usb 5-1: SerialNumber: syz
[  439.815080][ T4293] usb 5-1: config 0 descriptor??
[  439.957993][ T9046] loop0: detected capacity change from 0 to 512
[  440.119075][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  440.125447][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  440.134815][ T4293] usb-storage 5-1:0.0: USB Mass Storage device detected
[  440.150883][ T9046] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  440.159886][ T9046] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  440.377628][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  440.380223][ T4293] usb 5-1: USB disconnect, device number 7
[  440.702184][ T9061] loop0: detected capacity change from 0 to 4096
[  440.739466][ T9061] ntfs3: Unknown parameter 'nocase'
[  441.099778][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'.
[  441.105771][ T9076] loop3: detected capacity change from 0 to 512
[  441.205039][ T9076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  441.221780][ T9076] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.430795][ T4293] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  441.481951][ T9085] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.1171: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  441.851773][ T4293] usb 3-1: Using ep0 maxpacket: 16
[  441.880677][ T4293] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  441.891153][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  441.902158][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  441.912131][ T4293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  441.921961][ T4293] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  442.087192][ T4293] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  442.103044][ T4293] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  442.111442][ T4293] usb 3-1: Manufacturer: syz
[  442.218923][ T4293] usb 3-1: config 0 descriptor??
[  442.361916][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  442.718221][ T4293] rc_core: IR keymap rc-hauppauge not found
[  442.724216][ T4293] Registered IR keymap rc-empty
[  442.765724][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  442.808077][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  442.840337][ T4293] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  442.901030][ T4293] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12
[  442.968179][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  442.998155][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.029035][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.068109][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.098308][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.149978][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.198096][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.230197][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.278301][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.318118][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.318674][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'.
[  443.440875][ T4293] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  443.489243][ T4293] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  443.516280][ T4293] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  443.655827][ T4293] usb 3-1: USB disconnect, device number 13
[  444.253225][ T9121] loop5: detected capacity change from 0 to 4096
[  444.282235][ T9121] ntfs3: Unknown parameter 'nocase'
[  444.559323][ T9127] loop2: detected capacity change from 0 to 7
[  444.616580][ T9127] Dev loop2: unable to read RDB block 7
[  444.648737][ T9127]  loop2: unable to read partition table
[  444.654577][ T9127] loop2: partition table beyond EOD, truncated
[  444.708407][ T9127] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  445.243124][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'.
[  447.189517][ T9176] loop4: detected capacity change from 0 to 512
[  447.250640][ T9157] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  447.551330][ T9176] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  447.560681][ T9176] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  447.573432][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1205'.
[  447.999745][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  448.405168][ T9201] loop0: detected capacity change from 0 to 4096
[  448.406599][ T9203] netlink: 'syz.3.1212': attribute type 4 has an invalid length.
[  448.462610][ T9201] ntfs3: Unknown parameter 'nocase'
[  449.302170][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1216'.
[  450.128633][ T9240] netlink: 'syz.2.1224': attribute type 4 has an invalid length.
[  451.987172][ T9260] tipc: Started in network mode
[  452.022120][ T9260] tipc: Node identity ac14140f, cluster identity 4711
[  452.061371][ T9260] tipc: New replicast peer: 255.255.255.255
[  452.067782][ T9260] tipc: Enabled bearer <udp:syz2>, priority 10
[  452.260260][ T9262] [U] ›+p]ÚTeHÝî+;Û’ÏE=oÕí_¡×K»Ø‡
[  452.279759][ T9263] tipc: Cannot configure node identity twice
[  452.583221][ T9266] loop5: detected capacity change from 0 to 4096
[  452.600701][ T9266] ntfs3: Unknown parameter 'nocase'
[  453.182031][ T4434] tipc: Node number set to 2886997007
[  455.412272][ T4434] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  455.618077][ T4434] usb 4-1: Using ep0 maxpacket: 8
[  455.665751][ T4434] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  455.686744][ T4434] usb 4-1: config 179 has no interface number 0
[  455.709950][ T4434] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  455.730609][ T4434] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  455.754338][ T4434] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  455.772148][ T4434] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  455.784898][   T26] audit: type=1326 audit(1733543500.341:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  455.807536][ T4434] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  455.821252][   T26] audit: type=1326 audit(1733543500.341:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  455.843920][ T4434] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  455.855442][ T4434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.868151][ T9303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  455.906247][   T26] audit: type=1326 audit(1733543500.341:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  455.988238][   T26] audit: type=1326 audit(1733543500.341:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  456.075355][   T26] audit: type=1326 audit(1733543500.341:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9312 comm="syz.2.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  456.459849][ T4434] usb 4-1: USB disconnect, device number 5
[  456.459921][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  456.459995][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  458.114883][ T9350] loop5: detected capacity change from 0 to 8
[  458.121766][ T9350] squashfs: Unknown parameter 'threads'
[  459.012989][ T9360] kvm: emulating exchange as write
[  459.055105][ T9364] loop2: detected capacity change from 0 to 4096
[  459.088962][ T9364] ntfs3: Unknown parameter 'nocase'
[  459.190097][ T4296] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  460.167434][ T9392] netlink: 'syz.3.1273': attribute type 4 has an invalid length.
[  461.492980][   T26] audit: type=1326 audit(1733543506.021:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.0.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f555937fed9 code=0x0
[  461.751901][   T26] audit: type=1326 audit(1733543506.301:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9400 comm="syz.0.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555937fed9 code=0x7fc00000
[  462.158078][ T9429] loop3: detected capacity change from 0 to 128
[  462.839085][ T9429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  462.846670][ T9434] netlink: 'syz.5.1287': attribute type 4 has an invalid length.
[  462.855671][ T9429] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  463.073697][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  464.017902][ T9460] loop3: detected capacity change from 0 to 4096
[  464.071793][ T9463] tipc: New replicast peer: 255.255.255.255
[  464.175835][ T9463] tipc: Enabled bearer <udp:syz2>, priority 10
[  465.022186][ T9467] loop0: detected capacity change from 0 to 32768
[  465.029444][ T9467] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1295 (9467)
[  465.053761][ T9460] ntfs3: Unknown parameter 'nocase'
[  465.070543][ T9467] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  465.080851][ T9467] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  465.089633][ T9467] BTRFS info (device loop0): turning on flush-on-commit
[  465.096616][ T9467] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  465.106387][ T9467] BTRFS info (device loop0): use zstd compression, level 3
[  465.113601][ T9467] BTRFS info (device loop0): using free space tree
[  465.340887][ T9482] sg_write: process 608 (syz.5.1298) changed security contexts after opening file descriptor, this is not allowed.
[  465.555718][ T9467] BTRFS info (device loop0): enabling ssd optimizations
[  465.758076][ T5230] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  465.789616][ T4253] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  465.950140][ T5230] usb 5-1: unable to get BOS descriptor or descriptor too short
[  465.979814][ T5230] usb 5-1: not running at top speed; connect to a high speed hub
[  466.102721][ T5230] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  466.188367][ T5230] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  466.207721][ T5230] usb 5-1: config 1 has no interface number 1
[  466.240206][ T5230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  466.277591][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.556620][ T5230] usb 5-1: Product: syz
[  466.622858][ T5230] usb 5-1: Manufacturer: syz
[  466.648253][ T5230] usb 5-1: SerialNumber: syz
[  467.274507][   T26] audit: type=1326 audit(1733543511.821:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.2.1306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x0
[  467.942648][   T26] audit: type=1326 audit(1733543512.491:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9510 comm="syz.2.1306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7fc00000
[  468.854616][ T9538] loop3: detected capacity change from 0 to 32768
[  468.879105][ T9538] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1314 (9538)
[  468.900218][ T9538] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  468.910487][ T9538] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  468.919282][ T9538] BTRFS info (device loop3): turning on flush-on-commit
[  468.926251][ T9538] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  468.936056][ T9538] BTRFS info (device loop3): use zstd compression, level 3
[  468.943753][ T9538] BTRFS info (device loop3): using free space tree
[  468.951292][ T4733] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  469.366649][ T5230] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  469.460886][ T4733] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.478323][ T5230] usb 5-1: USB disconnect, device number 8
[  469.503630][ T9560] netlink: 'syz.0.1317': attribute type 4 has an invalid length.
[  469.512028][ T4733] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  469.528175][ T4733] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  469.541711][ T4733] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  469.559239][ T4733] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  469.578094][ T4733] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  469.588245][ T4733] usb 6-1: SerialNumber: syz
[  469.608432][ T9538] BTRFS info (device loop3): enabling ssd optimizations
[  469.687102][ T4296] udevd[4296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  470.100350][ T4733] usb 6-1: 0:2 : does not exist
[  470.105996][ T4733] usb 6-1: unit 5 not found!
[  470.132458][ T4733] usb 6-1: USB disconnect, device number 3
[  470.162863][ T4255] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  470.457346][ T9574] udevd[9574]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  473.317854][ T9606] loop5: detected capacity change from 0 to 32768
[  473.334125][ T9606] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.1331 (9606)
[  473.364451][ T9606] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  473.374719][ T9606] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  473.383535][ T9606] BTRFS info (device loop5): turning on flush-on-commit
[  473.390524][ T9606] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  473.401213][ T9606] BTRFS info (device loop5): use zstd compression, level 3
[  473.408517][ T9606] BTRFS info (device loop5): using free space tree
[  474.101664][ T9606] BTRFS info (device loop5): enabling ssd optimizations
[  474.218305][ T4732] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  474.289313][ T5458] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  474.492934][ T4732] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  474.511526][ T4732] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  474.556166][ T4732] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  474.586508][ T4732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.608277][ T4732] usb 5-1: Product: syz
[  474.621513][ T4732] usb 5-1: Manufacturer: syz
[  474.632834][ T4732] usb 5-1: SerialNumber: syz
[  474.868395][ T4732] usb 5-1: 0:2 : does not exist
[  474.896266][ T4732] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  474.995192][ T4732] usb 5-1: USB disconnect, device number 9
[  477.688142][ T4647] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  477.968110][ T4647] usb 4-1: Using ep0 maxpacket: 32
[  477.974813][ T4647] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  478.038230][ T4647] usb 4-1: config 0 has no interface number 0
[  478.060712][ T4647] usb 4-1: config 0 interface 12 has no altsetting 0
[  478.083511][ T4647] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  478.098382][ T4647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.117083][ T4647] usb 4-1: Product: syz
[  478.128179][ T4647] usb 4-1: Manufacturer: syz
[  478.132871][ T4647] usb 4-1: SerialNumber: syz
[  478.145184][ T4647] usb 4-1: config 0 descriptor??
[  479.464854][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1361'.
[  482.181088][ T9720] loop0: detected capacity change from 0 to 32768
[  482.199301][ T9720] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1365 (9720)
[  482.201882][ T4647] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -32
[  482.305259][ T4647] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32
[  482.364415][ T4647] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  482.414749][ T4647] f81534: probe of 4-1:0.12 failed with error -32
[  482.446424][ T4647] usb 4-1: USB disconnect, device number 6
[  482.490036][ T9720] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  482.501885][ T9720] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  482.510802][ T9720] BTRFS info (device loop0): turning on flush-on-commit
[  482.517862][ T9720] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  482.528247][ T9720] BTRFS info (device loop0): use zstd compression, level 3
[  482.536124][ T9720] BTRFS info (device loop0): using free space tree
[  482.669120][ T9721] input: syz1 as /devices/virtual/input/input13
[  482.768119][ T9720] BTRFS info (device loop0): enabling ssd optimizations
[  483.020205][ T4253] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  484.838447][ T9774] loop3: detected capacity change from 0 to 128
[  485.658835][ T9774] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  485.668143][ T9774] ext4 filesystem being mounted at /254/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  486.331873][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  486.524688][ T9794] loop2: detected capacity change from 0 to 8
[  486.540877][ T9794] squashfs: Unknown parameter 'threads'
[  488.362939][ T9829] loop5: detected capacity change from 0 to 128
[  489.158932][ T9829] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  489.167871][ T9829] ext4 filesystem being mounted at /225/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  489.410101][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  489.756671][ T9851] loop2: detected capacity change from 0 to 7
[  489.806844][ T9851] Dev loop2: unable to read RDB block 7
[  489.824961][ T9851]  loop2: unable to read partition table
[  489.834904][ T9851] loop2: partition table beyond EOD, truncated
[  489.851284][ T9851] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  490.066643][ T9856] netlink: 'syz.3.1405': attribute type 4 has an invalid length.
[  490.297217][ T5230] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[  490.311589][ T5230] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0
[  490.325153][ T9848] [U] ›+p]ÚTeHÝî+;Û’ÏE=oÕí_¡×K»Ø‡
[  490.345148][ T5230] hid-generic 0000:0003:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  491.948077][ T4434] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  492.159970][ T4434] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.210724][ T4434] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  492.239058][ T4434] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  492.284427][ T3518] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[  492.293445][ T3518] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0
[  492.311544][ T3518] hid-generic 0000:0003:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  492.328482][ T4434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.380389][ T4434] usb 4-1: config 0 descriptor??
[  493.034093][ T9918] netlink: 'syz.3.1417': attribute type 10 has an invalid length.
[  493.266884][ T9918] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  495.622887][   T22] usb 4-1: USB disconnect, device number 7
[  495.924106][ T9945] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1432'.
[  497.678051][ T4434] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  497.868073][ T4434] usb 3-1: Using ep0 maxpacket: 8
[  497.874817][ T4434] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  497.926443][ T4434] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x93, skipping
[  498.098340][ T4434] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  498.181844][ T4434] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  498.233316][ T4434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.371983][ T4434] usb 3-1: Product: syz
[  498.377833][ T4434] usb 3-1: Manufacturer: syz
[  498.388079][ T4434] usb 3-1: SerialNumber: syz
[  498.410720][ T4434] usb 3-1: config 0 descriptor??
[  499.178240][   T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  499.188536][ T4434] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  499.201376][ T4434] imon 3-1:0.0: unable to initialize intf0, err -19
[  499.212300][ T4434] imon:imon_probe: failed to initialize context!
[  499.229135][ T4434] imon 3-1:0.0: unable to register, err -19
[  499.508264][   T22] usb 1-1: Using ep0 maxpacket: 32
[  499.515224][   T22] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  499.524017][   T22] usb 1-1: config 0 has no interface number 0
[  499.530328][   T22] usb 1-1: config 0 interface 12 has no altsetting 0
[  500.303385][   T22] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  500.335441][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.374284][   T22] usb 1-1: Product: syz
[  500.382551][   T22] usb 1-1: Manufacturer: syz
[  500.389353][   T22] usb 1-1: SerialNumber: syz
[  500.407158][   T22] usb 1-1: config 0 descriptor??
[  500.486783][ T4434] usb 3-1: USB disconnect, device number 14
[  500.678403][ T4271] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  500.890000][ T4271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.914361][ T4271] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.932841][ T4271] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  500.948685][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.959841][ T4271] usb 4-1: config 0 descriptor??
[  501.411231][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  501.419290][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  501.432228][ T4271] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  501.576092][ T4271] cp2112 0003:10C4:EA90.0005: error requesting version
[  501.615587][ T4271] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71
[  501.686274][ T4271] usb 4-1: USB disconnect, device number 8
[  501.803104][   T22] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  501.821393][   T22] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  501.868617][   T22] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  501.904870][   T22] f81534: probe of 1-1:0.12 failed with error -71
[  502.029396][   T22] usb 1-1: USB disconnect, device number 8
[  503.518951][T10050] netlink: 'syz.3.1470': attribute type 4 has an invalid length.
[  504.758040][   T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  504.950121][   T22] usb 5-1: Using ep0 maxpacket: 32
[  504.959646][   T22] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping
[  504.992459][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  505.022457][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  505.050369][   T22] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  505.070295][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.090528][   T22] usb 5-1: Product: syz
[  505.103400][   T22] usb 5-1: Manufacturer: syz
[  505.112647][   T22] usb 5-1: SerialNumber: syz
[  505.133112][   T22] usb 5-1: config 0 descriptor??
[  505.630058][T10082] netlink: 'syz.5.1482': attribute type 4 has an invalid length.
[  506.168685][T10089] loop5: detected capacity change from 0 to 1024
[  506.196228][T10089] hfsplus: failed to load extents file
[  506.401836][T10089] netlink: 'syz.5.1483': attribute type 10 has an invalid length.
[  506.580944][T10089] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1483'.
[  506.635484][T10089] bridge0: port 4(veth0_vlan) entered blocking state
[  506.664279][T10089] bridge0: port 4(veth0_vlan) entered disabled state
[  506.675625][T10089] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  507.280798][T10107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'.
[  507.599803][ T4434] usb 5-1: USB disconnect, device number 10
[  507.718621][T10113] netlink: 'syz.4.1493': attribute type 4 has an invalid length.
[  509.791213][T10151] loop0: detected capacity change from 0 to 1024
[  511.367510][T10151] hfsplus: failed to load extents file
[  511.377116][T10148] syz.4.1504 (10148): drop_caches: 2
[  511.406783][T10150] netlink: 'syz.0.1505': attribute type 10 has an invalid length.
[  511.415670][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1505'.
[  511.424845][T10150] bridge0: port 4(veth0_vlan) entered blocking state
[  511.431647][T10150] bridge0: port 4(veth0_vlan) entered disabled state
[  511.439518][T10150] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  512.090040][ T4264] Bluetooth: hci1: unexpected event for opcode 0x0c47
[  513.376472][T10187] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  513.383464][T10187] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  513.418135][T10187] vhci_hcd vhci_hcd.0: Device attached
[  513.470113][T10191] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  513.562846][T10187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  513.599983][T10187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  513.608839][ T4271] vhci_hcd: vhci_device speed not set
[  513.636160][T10187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  513.659469][T10187] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  513.688441][ T4271] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  513.710164][T10188] vhci_hcd: connection reset by peer
[  513.725825][   T29] vhci_hcd: stop threads
[  513.733225][   T29] vhci_hcd: release socket
[  513.747768][   T29] vhci_hcd: disconnect device
[  514.533381][T10203] loop3: detected capacity change from 0 to 1024
[  514.557289][T10203] hfsplus: failed to load extents file
[  514.631759][T10203] netlink: 'syz.3.1521': attribute type 10 has an invalid length.
[  514.639723][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1521'.
[  514.649408][T10203] bridge0: port 4(veth0_vlan) entered blocking state
[  514.656420][T10203] bridge0: port 4(veth0_vlan) entered disabled state
[  514.671778][T10203] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  516.572660][ T4264] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  516.583803][ T4264] Bluetooth: hci1: Injecting HCI hardware error event
[  516.605512][ T4264] Bluetooth: hci1: hardware error 0x00
[  517.689081][T10240] loop2: detected capacity change from 0 to 7
[  517.745309][T10240] Dev loop2: unable to read RDB block 7
[  517.775825][T10240]  loop2: unable to read partition table
[  517.782578][T10240] loop2: partition table beyond EOD, truncated
[  517.932352][T10248] loop4: detected capacity change from 0 to 1024
[  518.588554][T10248] hfsplus: failed to load extents file
[  518.600959][T10247] netlink: 'syz.4.1534': attribute type 10 has an invalid length.
[  518.609284][T10247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1534'.
[  518.618343][T10247] bridge0: port 4(veth0_vlan) entered blocking state
[  518.625050][T10247] bridge0: port 4(veth0_vlan) entered disabled state
[  518.632811][T10247] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  518.666953][T10240] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  518.768201][ T4264] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  518.856351][ T4271] vhci_hcd: vhci_device speed not set
[  519.471646][T10267] loop5: detected capacity change from 0 to 512
[  519.552419][T10267] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  519.579935][T10267] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  520.200838][T10286] loop4: detected capacity change from 0 to 1024
[  521.495516][T10286] hfsplus: failed to load extents file
[  521.502820][T10286] netlink: 'syz.4.1550': attribute type 10 has an invalid length.
[  521.510828][T10286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1550'.
[  521.519945][T10286] bridge0: port 4(veth0_vlan) entered blocking state
[  521.526794][T10286] bridge0: port 4(veth0_vlan) entered disabled state
[  521.537088][T10286] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  523.025261][T10295] loop2: detected capacity change from 0 to 7
[  523.091644][T10295] Dev loop2: unable to read RDB block 7
[  523.123739][T10295]  loop2: unable to read partition table
[  523.186324][T10295] loop2: partition table beyond EOD, truncated
[  523.195978][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  523.205999][T10295] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  523.240208][ T3622] Dev loop2: unable to read RDB block 7
[  523.245792][ T3622]  loop2: unable to read partition table
[  523.288205][ T3622] loop2: partition table beyond EOD, truncated
[  523.486446][T10305] input: syz1 as /devices/virtual/input/input14
[  523.514779][T10306] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  523.668133][ T4293] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  523.988088][ T4293] usb 6-1: Using ep0 maxpacket: 32
[  523.995067][ T4293] usb 6-1: config 0 has an invalid interface number: 89 but max is 0
[  524.015484][ T4293] usb 6-1: config 0 has no interface number 0
[  524.049646][ T4293] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  524.101854][T10323] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0
[  524.135769][ T4293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.193883][T10321] IPVS: stopping master sync thread 10323 ...
[  524.263906][ T4293] usb 6-1: Product: syz
[  524.316356][ T4293] usb 6-1: Manufacturer: syz
[  524.384556][ T4293] usb 6-1: SerialNumber: syz
[  524.678929][ T4293] usb 6-1: config 0 descriptor??
[  524.718450][ T4293] hub 6-1:0.89: bad descriptor, ignoring hub
[  524.724486][ T4293] hub: probe of 6-1:0.89 failed with error -5
[  524.988210][ T4293] option 6-1:0.89: GSM modem (1-port) converter detected
[  525.143190][ T4293] usb 6-1: USB disconnect, device number 4
[  525.248994][ T4293] option 6-1:0.89: device disconnected
[  525.270905][T10335] loop2: detected capacity change from 0 to 512
[  525.387657][T10335] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  525.466016][T10335] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  525.730155][T10345] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  525.753624][T10349] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  525.915171][T10349] device geneve0 left promiscuous mode
[  528.150942][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  530.200829][T10429] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  531.055760][T10440] loop4: detected capacity change from 0 to 512
[  531.442691][T10440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  531.528795][T10440] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  531.997258][T10474] netlink: 'syz.2.1605': attribute type 4 has an invalid length.
[  532.302601][T10481] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  533.425767][T10509] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  533.489717][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  534.855588][T10556] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  535.705320][T10570] loop3: detected capacity change from 0 to 512
[  535.810560][T10570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  535.819595][T10570] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  535.923958][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  536.545482][T10596] loop2: detected capacity change from 0 to 4096
[  536.561973][T10596] ntfs3: Unknown parameter 'nocase'
[  536.683787][T10609] process 'syz.3.1635' launched '/dev/fd/4' with NULL argv: empty string added
[  536.968833][T10616] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  537.209213][T10625] loop2: detected capacity change from 0 to 7
[  537.247575][T10625] Dev loop2: unable to read RDB block 7
[  537.281656][T10625]  loop2: AHDI p1
[  537.393862][T10625] loop2: partition table partially beyond EOD, truncated
[  537.538580][T10629] loop4: detected capacity change from 0 to 8
[  537.548431][T10629] squashfs: Unknown parameter 'threads'
[  538.472988][T10645] netlink: 'syz.0.1645': attribute type 4 has an invalid length.
[  538.802048][T10656] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  539.250652][T10665] loop4: detected capacity change from 0 to 512
[  539.310834][T10665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  539.321791][T10665] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  539.424472][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  540.207833][T10686] loop4: detected capacity change from 0 to 8
[  540.221478][T10686] squashfs: Unknown parameter 'threads'
[  541.006766][T10687] netlink: 'syz.3.1659': attribute type 4 has an invalid length.
[  541.294661][T10694] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  541.820071][T10714] loop4: detected capacity change from 0 to 512
[  543.623818][T10714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  543.632931][T10714] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  543.922726][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  544.024330][T10731] loop2: detected capacity change from 0 to 1024
[  544.051666][T10731] hfsplus: failed to load extents file
[  544.557467][T10728] netlink: 'syz.2.1674': attribute type 10 has an invalid length.
[  544.566722][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1674'.
[  544.576621][T10728] bridge0: port 4(veth0_vlan) entered blocking state
[  544.583652][T10728] bridge0: port 4(veth0_vlan) entered disabled state
[  544.592087][T10728] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  544.896050][T10739] loop0: detected capacity change from 0 to 8
[  544.906694][T10739] squashfs: Unknown parameter 'threads'
[  545.613795][T10740] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  546.445460][T10765] loop5: detected capacity change from 0 to 512
[  547.232790][T10765] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  547.242274][T10765] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  547.498876][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  548.040034][T10784] loop4: detected capacity change from 0 to 1024
[  548.050880][T10784] hfsplus: failed to load extents file
[  548.093475][T10784] netlink: 'syz.4.1690': attribute type 10 has an invalid length.
[  548.101453][T10784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1690'.
[  548.110982][T10784] bridge0: port 4(veth0_vlan) entered blocking state
[  548.117775][T10784] bridge0: port 4(veth0_vlan) entered disabled state
[  548.126261][T10784] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  548.498121][T10794] loop2: detected capacity change from 0 to 8
[  548.507809][T10794] squashfs: Unknown parameter 'threads'
[  549.130151][T10793] netlink: 'syz.3.1696': attribute type 4 has an invalid length.
[  549.701177][T10808] loop3: detected capacity change from 0 to 512
[  549.789630][T10808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  549.798820][T10808] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  549.860659][   T26] audit: type=1326 audit(1733543594.411:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9c77fed9 code=0x7ffc0000
[  549.967865][   T26] audit: type=1326 audit(1733543594.451:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9c77fed9 code=0x7ffc0000
[  549.991221][   T26] audit: type=1326 audit(1733543594.451:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fae9c77fed9 code=0x7ffc0000
[  550.013463][    C1] vkms_vblank_simulate: vblank timer overrun
[  550.019647][   T26] audit: type=1326 audit(1733543594.451:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9c77fed9 code=0x7ffc0000
[  550.041977][   T26] audit: type=1326 audit(1733543594.451:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.5.1702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9c77fed9 code=0x7ffc0000
[  550.064217][    C1] vkms_vblank_simulate: vblank timer overrun
[  550.340279][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  550.520436][T10825] netlink: 'syz.0.1709': attribute type 4 has an invalid length.
[  551.175819][T10845] blktrace: Concurrent blktraces are not allowed on nullb0
[  552.670225][   T26] audit: type=1326 audit(1733543597.221:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f77fed9 code=0x7ffc0000
[  552.700782][T10859] loop2: detected capacity change from 0 to 512
[  552.745388][T10859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  552.754963][T10859] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  552.783424][   T26] audit: type=1326 audit(1733543597.271:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffa9f77fed9 code=0x7ffc0000
[  552.807173][   T26] audit: type=1326 audit(1733543597.271:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f77fed9 code=0x7ffc0000
[  552.830849][   T26] audit: type=1326 audit(1733543597.271:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f77fed9 code=0x7ffc0000
[  552.854570][   T26] audit: type=1326 audit(1733543597.271:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.1719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffa9f77fed9 code=0x7ffc0000
[  553.001109][T10868] netlink: 'syz.3.1721': attribute type 4 has an invalid length.
[  553.470171][T10877] loop4: detected capacity change from 0 to 1024
[  553.506320][T10877] hfsplus: failed to load extents file
[  554.237579][T10877] netlink: 'syz.4.1724': attribute type 10 has an invalid length.
[  554.245711][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1724'.
[  554.255347][T10877] bridge0: port 4(veth0_vlan) entered blocking state
[  554.262530][T10877] bridge0: port 4(veth0_vlan) entered disabled state
[  554.277665][T10877] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  554.338188][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  554.837527][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1728'.
[  554.884159][T10883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1728'.
[  554.931849][T10883] device bond0 entered promiscuous mode
[  554.937452][T10883] device bond_slave_0 entered promiscuous mode
[  555.008353][T10883] device bond_slave_1 entered promiscuous mode
[  555.035791][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  555.538378][ T4434] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  555.600459][T10899] loop2: detected capacity change from 0 to 7
[  555.630637][T10899] Dev loop2: unable to read RDB block 7
[  555.645802][T10899]  loop2: unable to read partition table
[  555.661709][T10899] loop2: partition table beyond EOD, truncated
[  555.674527][T10899] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  555.738235][ T4434] usb 4-1: Using ep0 maxpacket: 16
[  555.745404][ T4434] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  555.781339][ T4434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.810569][ T4434] usb 4-1: config 0 descriptor??
[  555.840229][ T4434] gspca_main: sonixj-2.14.0 probing 0471:0327
[  555.936605][T10902] netlink: 'syz.4.1735': attribute type 4 has an invalid length.
[  556.544539][T10914] loop0: detected capacity change from 0 to 512
[  556.561856][ T4434] gspca_sonixj: reg_r err -110
[  556.612607][ T4434] sonixj: probe of 4-1:0.0 failed with error -110
[  556.725175][T10914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  556.736405][T10914] ext4 filesystem being mounted at /345/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  557.241981][T10918] loop4: detected capacity change from 0 to 1024
[  557.313529][T10918] hfsplus: failed to load extents file
[  557.392431][T10918] netlink: 'syz.4.1738': attribute type 10 has an invalid length.
[  557.400501][T10918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1738'.
[  557.410146][T10918] bridge0: port 4(veth0_vlan) entered blocking state
[  557.417317][T10918] bridge0: port 4(veth0_vlan) entered disabled state
[  557.432329][T10918] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  557.792448][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  558.087928][T10937] loop2: detected capacity change from 0 to 7
[  558.270215][T10937] Dev loop2: unable to read RDB block 7
[  558.281039][T10937]  loop2: unable to read partition table
[  558.308428][T10937] loop2: partition table beyond EOD, truncated
[  558.323626][T10937] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  558.757856][T10949] netlink: 'syz.5.1749': attribute type 4 has an invalid length.
[  558.997106][ T4434] usb 4-1: USB disconnect, device number 9
[  560.310176][T10972] loop3: detected capacity change from 0 to 1024
[  560.369596][T10972] hfsplus: failed to load extents file
[  560.419943][T10972] netlink: 'syz.3.1752': attribute type 10 has an invalid length.
[  560.517927][T10972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1752'.
[  560.573118][T10942] loop2: detected capacity change from 0 to 32768
[  560.585300][T10972] bridge0: port 4(veth0_vlan) entered blocking state
[  560.598540][T10972] bridge0: port 4(veth0_vlan) entered disabled state
[  560.607016][T10972] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  560.671726][T10942] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1744 (10942)
[  560.818477][T10942] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  560.900125][T10942] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  560.950717][T10942] BTRFS info (device loop2): turning on flush-on-commit
[  560.957750][T10942] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  561.058295][T10942] BTRFS info (device loop2): use zstd compression, level 3
[  561.138565][T10942] BTRFS info (device loop2): using free space tree
[  561.263366][T10983] netlink: 'syz.4.1760': attribute type 4 has an invalid length.
[  561.703150][T10942] BTRFS error (device loop2): open_ctree failed
[  561.823046][T11001] blktrace: Concurrent blktraces are not allowed on nullb0
[  562.851502][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  562.859861][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  563.830776][T11029] netlink: 'syz.5.1771': attribute type 4 has an invalid length.
[  564.867660][T11040] blktrace: Concurrent blktraces are not allowed on nullb0
[  565.064450][T11051] loop2: detected capacity change from 0 to 7
[  565.088419][T11051] Dev loop2: unable to read RDB block 7
[  565.104478][T11051]  loop2: unable to read partition table
[  565.123537][T11051] loop2: partition table beyond EOD, truncated
[  565.158411][T11051] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  565.618310][T11061] loop0: detected capacity change from 0 to 1024
[  565.671731][T11061] hfsplus: failed to load extents file
[  565.719884][ T6690] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  566.143127][T11061] netlink: 'syz.0.1776': attribute type 10 has an invalid length.
[  566.478422][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1776'.
[  566.487534][T11061] bridge0: port 4(veth0_vlan) entered blocking state
[  566.518677][T11061] bridge0: port 4(veth0_vlan) entered disabled state
[  566.562459][T11061] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  566.707009][T11071] netlink: 'syz.2.1784': attribute type 4 has an invalid length.
[  567.742474][T11054] loop3: detected capacity change from 0 to 32768
[  567.760217][T11054] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.1775 (11054)
[  567.895426][T11054] BTRFS error (device loop3): open_ctree failed
[  567.895545][ T6690] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by udevd (6690)
[  568.163868][T11093] blktrace: Concurrent blktraces are not allowed on nullb0
[  569.375635][T11107] netlink: 'syz.4.1796': attribute type 4 has an invalid length.
[  571.958101][  T125] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  572.150676][  T125] usb 3-1: config 13 has an invalid interface number: 38 but max is 0
[  572.161074][  T125] usb 3-1: config 13 has no interface number 0
[  572.168920][  T125] usb 3-1: config 13 interface 38 altsetting 5 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  572.180470][  T125] usb 3-1: config 13 interface 38 has no altsetting 0
[  572.199284][  T125] usb 3-1: New USB device found, idVendor=2304, idProduct=0229, bcdDevice=74.70
[  572.219186][  T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.264224][  T125] usb 3-1: Product: syz
[  572.281090][  T125] usb 3-1: Manufacturer: syz
[  572.302191][  T125] usb 3-1: SerialNumber: syz
[  572.539654][  T125] dvb-usb: found a 'Pinnacle PCTV Dual DVB-T Diversity Stick' in cold state, will try to load a firmware
[  572.663288][  T125] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  572.752121][  T125] dib0700: firmware download failed at 7 with -8
[  572.879368][  T125] usb 3-1: USB disconnect, device number 15
[  573.088469][   T22] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  573.298898][   T22] usb 5-1: Using ep0 maxpacket: 32
[  573.314929][   T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.360587][   T22] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  573.379515][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.402277][   T22] usb 5-1: Product: syz
[  573.413411][   T22] usb 5-1: Manufacturer: syz
[  573.436090][   T22] usb 5-1: SerialNumber: syz
[  573.456170][   T22] usb 5-1: config 0 descriptor??
[  573.625467][T11192] blktrace: Concurrent blktraces are not allowed on nullb0
[  573.712902][T11195] loop5: detected capacity change from 0 to 512
[  574.150350][   T22] snd-usb-audio: probe of 5-1:0.0 failed with error -2
[  574.293660][   T22] usb 5-1: USB disconnect, device number 11
[  574.385074][ T6690] udevd[6690]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  574.425104][T11195] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  574.434240][T11195] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  574.635979][ T5458] EXT4-fs (loop5): unmounting filesystem.
[  575.061862][T11215] loop2: detected capacity change from 0 to 4096
[  575.093536][T11215] ntfs3: Unknown parameter 'nocase'
[  575.177797][T11223] netlink: 'syz.5.1836': attribute type 4 has an invalid length.
[  576.205580][T11236] xt_CT: You must specify a L4 protocol and not use inversions on it
[  576.474131][T11249] netlink: 'syz.5.1847': attribute type 4 has an invalid length.
[  576.890196][T11255] loop5: detected capacity change from 0 to 4096
[  576.917753][T11255] ntfs3: Unknown parameter 'nocase'
[  577.187080][T11263] loop0: detected capacity change from 0 to 1024
[  577.195002][T11263] hfsplus: failed to load extents file
[  577.732094][T11243] netlink: 'syz.0.1843': attribute type 10 has an invalid length.
[  577.753189][T11245] [U] ›+p]ÚTeHÝî+;Û’ÏE=oÕí_¡×K»Ø‡
[  577.790343][T11243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1843'.
[  577.851475][T11243] bridge0: port 4(veth0_vlan) entered blocking state
[  577.882801][T11243] bridge0: port 4(veth0_vlan) entered disabled state
[  577.928955][T11243] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  578.502671][T11289] netlink: 'syz.4.1859': attribute type 4 has an invalid length.
[  578.681121][   T22] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  578.731755][T11294] loop4: detected capacity change from 0 to 4096
[  578.776015][T11294] ntfs3: Unknown parameter 'nocase'
[  578.969858][   T22] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  578.995621][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.008111][   T22] usb 6-1: Product: syz
[  579.012468][   T22] usb 6-1: Manufacturer: syz
[  579.027341][   T22] usb 6-1: SerialNumber: syz
[  579.183707][   T22] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  579.696072][   T22] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  579.866691][ T4264] Bluetooth: hci2: unexpected event 0x0e length: 2 < 3
[  579.919900][ T4647] usb 6-1: USB disconnect, device number 5
[  580.304646][T11313] loop0: detected capacity change from 0 to 128
[  580.400880][T11313] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  580.412530][T11313] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  580.541774][T11317] loop4: detected capacity change from 0 to 1024
[  580.550293][T11317] hfsplus: failed to load extents file
[  580.738778][T11316] netlink: 'syz.4.1867': attribute type 10 has an invalid length.
[  580.746750][T11316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1867'.
[  580.756169][T11316] bridge0: port 4(veth0_vlan) entered blocking state
[  580.763281][T11316] bridge0: port 4(veth0_vlan) entered disabled state
[  580.771213][T11316] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  580.790569][   T22] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  581.238715][   T22] ath9k_htc: Failed to initialize the device
[  581.248863][ T4647] usb 6-1: ath9k_htc: USB layer deinitialized
[  581.471374][T11327] netlink: 'syz.3.1871': attribute type 4 has an invalid length.
[  581.958033][ T5228] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  581.968070][  T125] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  582.088132][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  582.088147][   T26] audit: type=1326 audit(1733543626.631:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11319 comm="syz.5.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9c77fed9 code=0x7fc00000
[  582.148103][ T5228] usb 4-1: Using ep0 maxpacket: 8
[  582.158523][  T125] usb 5-1: Using ep0 maxpacket: 32
[  582.164084][ T5228] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  582.178422][  T125] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  582.245812][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.254548][  T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.284822][ T5228] usb 4-1: Product: syz
[  582.289700][  T125] usb 5-1: Product: syz
[  582.293924][  T125] usb 5-1: Manufacturer: syz
[  582.303893][ T5228] usb 4-1: Manufacturer: syz
[  582.313973][ T5228] usb 4-1: SerialNumber: syz
[  582.318974][  T125] usb 5-1: SerialNumber: syz
[  582.363672][ T5228] usb 4-1: config 0 descriptor??
[  582.378561][  T125] usb 5-1: config 0 descriptor??
[  582.410036][  T125] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  582.606065][  T125] gspca_ov534_9: reg_w failed -71
[  582.625322][ T5228] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  582.637030][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  583.128255][  T125] gspca_ov534_9: Unknown sensor 0000
[  583.128321][  T125] ov534_9: probe of 5-1:0.0 failed with error -22
[  583.170207][  T125] usb 5-1: USB disconnect, device number 12
[  583.714569][T11359] netlink: 'syz.2.1883': attribute type 4 has an invalid length.
[  584.302130][ T5228] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  584.318640][ T5228] usb 4-1: USB disconnect, device number 10
[  584.633340][T11372] loop5: detected capacity change from 0 to 1024
[  584.641809][T11372] hfsplus: failed to load extents file
[  584.794134][ T6690] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  584.838404][T11372] netlink: 'syz.5.1882': attribute type 10 has an invalid length.
[  584.846369][T11372] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1882'.
[  584.855786][T11372] bridge0: port 4(veth0_vlan) entered blocking state
[  584.862675][T11372] bridge0: port 4(veth0_vlan) entered disabled state
[  584.871247][T11372] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  584.981957][   T26] audit: type=1326 audit(1733543629.531:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7fc00000
[  585.040431][T11379] loop4: detected capacity change from 0 to 128
[  585.149091][T11379] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  585.278296][T11379] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  585.698440][T11394] input: syz1 as /devices/virtual/input/input15
[  586.677308][T11403] netlink: 'syz.2.1894': attribute type 4 has an invalid length.
[  587.476748][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  587.614346][T11431] netlink: 'syz.2.1906': attribute type 4 has an invalid length.
[  588.034550][   T26] audit: type=1326 audit(1733543632.581:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.3.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec937fed9 code=0x7fc00000
[  588.969696][T11468] netlink: 'syz.2.1918': attribute type 4 has an invalid length.
[  589.187025][T11472] loop0: detected capacity change from 0 to 128
[  589.318920][T11472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  589.327909][T11472] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  589.717006][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  589.984398][T11491] blktrace: Concurrent blktraces are not allowed on nullb0
[  590.175628][T11500] netlink: 'syz.5.1929': attribute type 4 has an invalid length.
[  590.970936][   T26] audit: type=1326 audit(1733543635.511:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.3.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec937fed9 code=0x7fc00000
[  592.419410][T11533] loop0: detected capacity change from 0 to 128
[  593.079126][T11536] netlink: 'syz.4.1942': attribute type 4 has an invalid length.
[  593.140904][T11533] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  593.150868][T11533] ext4 filesystem being mounted at /382/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  593.226484][T11546] input: syz1 as /devices/virtual/input/input16
[  593.670927][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  594.776064][   T26] audit: type=1326 audit(1733543639.321:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11553 comm="syz.2.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7fc00000
[  594.872027][  T125] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  595.059544][  T125] usb 1-1: config 0 interface 0 altsetting 20 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.083209][  T125] usb 1-1: config 0 interface 0 altsetting 20 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  595.125020][  T125] usb 1-1: config 0 interface 0 has no altsetting 0
[  595.142245][  T125] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  595.167610][  T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.188654][  T125] usb 1-1: config 0 descriptor??
[  595.252495][T11576] netlink: 'syz.2.1955': attribute type 4 has an invalid length.
[  595.607272][  T125] sigmamicro 0003:1C4F:0059.0006: unknown main item tag 0x0
[  595.623748][  T125] sigmamicro 0003:1C4F:0059.0006: unknown main item tag 0x0
[  595.635406][  T125] sigmamicro 0003:1C4F:0059.0006: unknown main item tag 0x0
[  595.645680][  T125] sigmamicro 0003:1C4F:0059.0006: unknown main item tag 0x0
[  595.654357][  T125] sigmamicro 0003:1C4F:0059.0006: unknown main item tag 0x0
[  595.683143][  T125] sigmamicro 0003:1C4F:0059.0006: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.0-1/input0
[  595.810432][  T125] usb 1-1: USB disconnect, device number 9
[  596.163407][T11593] loop2: detected capacity change from 0 to 128
[  596.190815][T11593] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  596.200626][T11593] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  597.109396][T11604] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1964'.
[  597.184837][   T26] audit: type=1326 audit(1733543641.731:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.4.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa9f77fed9 code=0x7fc00000
[  597.237214][T11607] input: syz1 as /devices/virtual/input/input17
[  597.326166][T11609] netlink: 'syz.4.1967': attribute type 4 has an invalid length.
[  598.336930][ T4254] EXT4-fs (loop2): unmounting filesystem.
[  598.499610][T11636] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1976'.
[  599.418013][T11643] netlink: 'syz.5.1978': attribute type 4 has an invalid length.
[  599.718215][ T5233] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  599.908193][ T5233] usb 1-1: Using ep0 maxpacket: 32
[  599.915289][ T5233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.967362][ T5233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.996942][ T5233] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[  600.030127][ T5233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.143236][ T5233] usb 1-1: config 0 descriptor??
[  600.225744][T11660] input: syz1 as /devices/virtual/input/input18
[  600.585135][ T5233] hid_mf 0003:0079:1801.0007: item fetching failed at offset 0/2
[  600.605017][ T5233] hid_mf 0003:0079:1801.0007: HID parse failed.
[  600.636312][ T5233] hid_mf: probe of 0003:0079:1801.0007 failed with error -22
[  600.796535][ T5233] usb 1-1: USB disconnect, device number 10
[  600.925856][T11668] device bond0 entered promiscuous mode
[  600.953904][T11668] device bond_slave_0 entered promiscuous mode
[  600.968608][T11668] device bond_slave_1 entered promiscuous mode
[  601.019459][T11675] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1987'.
[  601.033972][T11676] loop3: detected capacity change from 0 to 128
[  601.076051][T11676] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  601.104111][T11676] ext4 filesystem being mounted at /372/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  601.636969][T11685] netlink: 'syz.0.1990': attribute type 4 has an invalid length.
[  601.661898][    C1] sd 0:0:1:0: [sda] tag#789 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  601.672429][    C1] sd 0:0:1:0: [sda] tag#789 CDB: Read(6) 08 00 ee 00 00 41
[  602.159471][T11696] loop0: detected capacity change from 0 to 512
[  602.350161][T11696] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  602.361124][T11696] ext4 filesystem being mounted at /390/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  602.957434][ T4255] EXT4-fs (loop3): unmounting filesystem.
[  603.117550][ T4253] EXT4-fs (loop0): unmounting filesystem.
[  603.136640][T11713] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1998'.
[  603.860202][T11734] netlink: 'syz.3.2005': attribute type 4 has an invalid length.
[  604.296756][T11749] loop4: detected capacity change from 0 to 512
[  604.949897][T11749] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  604.958953][T11749] ext4 filesystem being mounted at /426/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  605.173035][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  606.544453][   T26] audit: type=1326 audit(1733543651.091:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  606.632248][   T26] audit: type=1326 audit(1733543651.141:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  606.654517][    C1] vkms_vblank_simulate: vblank timer overrun
[  606.738806][   T26] audit: type=1326 audit(1733543651.141:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  606.845238][   T26] audit: type=1326 audit(1733543651.141:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  606.867566][    C1] vkms_vblank_simulate: vblank timer overrun
[  606.990102][   T26] audit: type=1326 audit(1733543651.141:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  607.119036][   T26] audit: type=1326 audit(1733543651.141:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  607.482751][   T26] audit: type=1326 audit(1733543651.141:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11782 comm="syz.2.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7ffc0000
[  607.505047][    C1] vkms_vblank_simulate: vblank timer overrun
[  608.562082][T11832] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  610.998205][ T4647] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  611.092548][T11881] loop0: detected capacity change from 0 to 4096
[  611.111695][T11881] ntfs3: Unknown parameter 'nocase'
[  611.258147][ T4647] usb 6-1: Using ep0 maxpacket: 32
[  611.267386][ T4647] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  611.346424][ T4647] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.361553][ T4647] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.408415][   T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  612.028881][ T4647] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  612.053906][ T4647] usb 6-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00
[  612.072708][T11886] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  612.084713][ T4647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.128826][ T4647] usb 6-1: config 0 descriptor??
[  612.258122][   T22] usb 4-1: Using ep0 maxpacket: 8
[  612.430805][   T22] usb 4-1: config 0 has an invalid interface number: 224 but max is 0
[  612.448033][   T22] usb 4-1: config 0 has no interface number 0
[  612.467458][T11893] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2058'.
[  612.547681][   T22] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  612.604185][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.617882][ T4647] wacom 0003:056A:00B7.0008: Unknown device_type for 'HID 056a:00b7'. Assuming pen.
[  613.088306][ T4647] wacom 0003:056A:00B7.0008: hidraw0: USB HID v0.00 Device [HID 056a:00b7] on usb-dummy_hcd.5-1/input0
[  613.100161][   T22] usb 4-1: config 0 descriptor??
[  613.189401][ T4647] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B7.0008/input/input19
[  613.278362][T11900] binder: 11899:11900 ioctl 4018620d 0 returned -22
[  613.298625][ T4647] usb 6-1: USB disconnect, device number 6
[  615.448997][  T125] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  615.649806][  T125] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  615.720320][  T125] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  615.762410][  T125] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  615.798181][  T125] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  615.836418][T11944] blktrace: Concurrent blktraces are not allowed on nullb0
[  615.848210][  T125] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  615.884380][  T125] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  615.918062][  T125] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  615.946727][  T125] usb 5-1: Product: syz
[  615.959047][  T125] usb 5-1: Manufacturer: syz
[  616.001991][  T125] cdc_wdm 5-1:1.0: skipping garbage
[  616.034075][  T125] cdc_wdm 5-1:1.0: skipping garbage
[  616.053865][  T125] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  616.089951][  T125] cdc_wdm 5-1:1.0: Unknown control protocol
[  616.349011][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  616.355838][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  616.364326][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  616.370944][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  616.377571][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  616.384176][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  616.391187][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  616.397792][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  616.404045][  T125] usb 5-1: USB disconnect, device number 13
[  616.420106][T11936] cdc_wdm 5-1:1.0: Tx URB error: -19
[  616.468972][ T4647] usb 4-1: USB disconnect, device number 11
[  617.098974][T11968] loop0: detected capacity change from 0 to 1024
[  617.108056][T11968] hfsplus: failed to load extents file
[  617.298875][T11968] netlink: 'syz.0.2082': attribute type 10 has an invalid length.
[  617.303419][ T6690] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  617.306900][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2082'.
[  617.325885][T11968] bridge0: port 4(veth0_vlan) entered blocking state
[  617.332826][T11968] bridge0: port 4(veth0_vlan) entered disabled state
[  617.341351][T11968] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  619.861008][   T26] audit: type=1326 audit(1733543664.411:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12020 comm="syz.3.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ec937fed9 code=0x7fc00000
[  620.613666][T12055] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2111'.
[  620.803344][T12032] syz.0.2099 (12032): drop_caches: 2
[  621.938317][   T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  622.109899][   T22] usb 1-1: device descriptor read/64, error -71
[  622.378125][   T22] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  622.399367][   T26] audit: type=1326 audit(1733543666.951:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12078 comm="syz.5.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae9c77fed9 code=0x7fc00000
[  622.538065][   T22] usb 1-1: device descriptor read/64, error -71
[  622.668615][   T22] usb usb1-port1: attempt power cycle
[  623.088086][   T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  623.128751][   T22] usb 1-1: device descriptor read/8, error -71
[  623.398304][   T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  623.494237][   T22] usb 1-1: device descriptor read/8, error -71
[  623.688698][   T22] usb usb1-port1: unable to enumerate USB device
[  624.290754][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  624.298890][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  624.348202][   T22] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  624.563489][   T22] usb 6-1: config 0 has no interfaces?
[  624.590345][   T22] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  624.590484][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.590569][   T22] usb 6-1: Product: syz
[  624.590648][   T22] usb 6-1: Manufacturer: syz
[  624.590726][   T22] usb 6-1: SerialNumber: syz
[  624.595507][   T22] usb 6-1: config 0 descriptor??
[  625.583342][   T26] audit: type=1326 audit(1733543670.131:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12133 comm="syz.2.2139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7fc00000
[  627.753745][   T22] usb 6-1: USB disconnect, device number 7
[  628.453020][   T26] audit: type=1326 audit(1733543673.001:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12193 comm="syz.2.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7fc00000
[  628.812353][T12222] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  628.998584][T12227] [U] ›+P]ÚTEHÝÎ+;Û’ÏE=OÕÍ_¡×K»Ø‡
[  629.184689][T12232] netlink: set zone limit has 8 unknown bytes
[  630.468258][ T3518] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  630.660139][ T3518] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  630.718069][ T3518] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  630.718114][ T3518] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  630.718139][ T3518] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.718158][ T3518] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  630.718193][ T3518] usb 6-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  630.718254][ T3518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.749712][ T3518] usb 6-1: config 0 descriptor??
[  630.938932][   T26] audit: type=1326 audit(1733543675.491:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.2.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed56d7fed9 code=0x7fc00000
[  630.991620][T12278] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  630.992933][T12278] device geneve0 left promiscuous mode
[  631.227245][ T3518] hid-u2fzero 0003:20A0:4287.0009: hidraw0: USB HID vff.fd Device [HID 20a0:4287] on usb-dummy_hcd.5-1/input0
[  631.325676][ T3518] hid-u2fzero 0003:20A0:4287.0009: NitroKey U2F LED initialised
[  631.370640][ T3518] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN
[  631.382408][ T3518] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af]
[  631.392641][ T3518] CPU: 1 PID: 3518 Comm: kworker/1:2 Not tainted 6.1.119-syzkaller #0
[  631.400885][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  631.410940][ T3518] Workqueue: usb_hub_wq hub_event
[  631.415986][ T3518] RIP: 0010:u2fzero_rng_read+0x27d/0x710
[  631.421639][ T3518] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 02 e4 ba f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 64 e4 ba f9 48 8d 84 24 80 00 00
[  631.443463][ T3518] RSP: 0018:ffffc9000df46720 EFLAGS: 00010202
[  631.452611][ T3518] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000
[  631.460764][ T3518] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888058b9a569
[  631.468751][ T3518] RBP: ffffc9000df468d0 R08: dffffc0000000000 R09: ffff888058b9a52e
[  631.476730][ T3518] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88805b5dc3e0
[  631.484706][ T3518] R13: 1ffff1100b6bb806 R14: ffff88805b5dc030 R15: dffffc0000000000
[  631.492679][ T3518] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  631.501715][ T3518] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  631.508306][ T3518] CR2: 0000000020304000 CR3: 0000000057ef6000 CR4: 00000000003506e0
[  631.516279][ T3518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  631.524270][ T3518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  631.532249][ T3518] Call Trace:
[  631.535523][ T3518]  <TASK>
[  631.538450][ T3518]  ? __die_body+0x5e/0xa0
[  631.542788][ T3518]  ? die_addr+0x95/0xc0
[  631.546946][ T3518]  ? exc_general_protection+0x3ae/0x590
[  631.552502][ T3518]  ? asm_exc_general_protection+0x22/0x30
[  631.558226][ T3518]  ? u2fzero_rng_read+0x27d/0x710
[  631.563269][ T3518]  ? preempt_schedule_thunk+0x16/0x18
[  631.568649][ T3518]  ? u2fzero_brightness_set+0x2a0/0x2a0
[  631.574201][ T3518]  ? mutex_lock_nested+0x10/0x10
[  631.579147][ T3518]  ? u2fzero_brightness_set+0x2a0/0x2a0
[  631.584701][ T3518]  add_early_randomness+0x78/0x140
[  631.589900][ T3518]  hwrng_register+0x3a0/0x440
[  631.594583][ T3518]  devm_hwrng_register+0x43/0xb0
[  631.599547][ T3518]  u2fzero_probe+0x31a/0x410
[  631.604153][ T3518]  ? hid_map_usage_clear+0x180/0x180
[  631.609437][ T3518]  hid_device_probe+0x298/0x3a0
[  631.614291][ T3518]  ? hid_uevent+0x310/0x310
[  631.618794][ T3518]  really_probe+0x2ab/0xcb0
[  631.623312][ T3518]  __driver_probe_device+0x1a2/0x3d0
[  631.628596][ T3518]  driver_probe_device+0x50/0x420
[  631.633628][ T3518]  __device_attach_driver+0x2cf/0x510
[  631.639085][ T3518]  ? coredump_store+0x90/0x90
[  631.643759][ T3518]  bus_for_each_drv+0x183/0x200
[  631.648609][ T3518]  ? subsys_find_device_by_id+0x310/0x310
[  631.654323][ T3518]  __device_attach+0x359/0x570
[  631.659088][ T3518]  ? device_attach+0x20/0x20
[  631.663676][ T3518]  ? kobject_uevent_env+0x54a/0x8c0
[  631.668887][ T3518]  ? kobject_uevent_env+0x54a/0x8c0
[  631.674081][ T3518]  bus_probe_device+0xba/0x1e0
[  631.678858][ T3518]  ? device_add+0xab9/0xfd0
[  631.683361][ T3518]  device_add+0xb48/0xfd0
[  631.687691][ T3518]  hid_add_device+0x3a5/0x510
[  631.692374][ T3518]  usbhid_probe+0xb2d/0xeb0
[  631.696884][ T3518]  usb_probe_interface+0x5c0/0xaf0
[  631.701992][ T3518]  ? usb_register_driver+0x3d0/0x3d0
[  631.707271][ T3518]  really_probe+0x2ab/0xcb0
[  631.711774][ T3518]  __driver_probe_device+0x1a2/0x3d0
[  631.717054][ T3518]  driver_probe_device+0x50/0x420
[  631.722087][ T3518]  __device_attach_driver+0x2cf/0x510
[  631.727456][ T3518]  ? coredump_store+0x90/0x90
[  631.732129][ T3518]  bus_for_each_drv+0x183/0x200
[  631.736976][ T3518]  ? subsys_find_device_by_id+0x310/0x310
[  631.742692][ T3518]  __device_attach+0x359/0x570
[  631.747457][ T3518]  ? device_attach+0x20/0x20
[  631.752040][ T3518]  ? kobject_uevent_env+0x54a/0x8c0
[  631.757237][ T3518]  ? kobject_uevent_env+0x54a/0x8c0
[  631.762432][ T3518]  bus_probe_device+0xba/0x1e0
[  631.767192][ T3518]  ? device_add+0xab9/0xfd0
[  631.771697][ T3518]  device_add+0xb48/0xfd0
[  631.776035][ T3518]  usb_set_configuration+0x19dd/0x2020
[  631.781508][ T3518]  usb_generic_driver_probe+0x84/0x140
[  631.786973][ T3518]  usb_probe_device+0x130/0x260
[  631.791817][ T3518]  ? usb_register_device_driver+0x240/0x240
[  631.797702][ T3518]  really_probe+0x2ab/0xcb0
[  631.802204][ T3518]  __driver_probe_device+0x1a2/0x3d0
[  631.807750][ T3518]  driver_probe_device+0x50/0x420
[  631.812886][ T3518]  __device_attach_driver+0x2cf/0x510
[  631.818266][ T3518]  ? coredump_store+0x90/0x90
[  631.822938][ T3518]  bus_for_each_drv+0x183/0x200
[  631.827787][ T3518]  ? subsys_find_device_by_id+0x310/0x310
[  631.833506][ T3518]  __device_attach+0x359/0x570
[  631.838267][ T3518]  ? device_attach+0x20/0x20
[  631.842853][ T3518]  ? kobject_uevent_env+0x54a/0x8c0
[  631.848052][ T3518]  ? kobject_uevent_env+0x54a/0x8c0
[  631.853247][ T3518]  bus_probe_device+0xba/0x1e0
[  631.858005][ T3518]  ? device_add+0xab9/0xfd0
[  631.862514][ T3518]  device_add+0xb48/0xfd0
[  631.866844][ T3518]  usb_new_device+0xbdd/0x18f0
[  631.871609][ T3518]  ? usb_disconnect+0x8c0/0x8c0
[  631.876549][ T3518]  ? do_raw_spin_unlock+0x137/0x8a0
[  631.881746][ T3518]  ? _raw_spin_unlock_irq+0x1f/0x40
[  631.886942][ T3518]  ? lockdep_hardirqs_on+0x94/0x130
[  631.892141][ T3518]  hub_event+0x2efe/0x5730
[  631.896577][ T3518]  ? led_work+0x700/0x700
[  631.900904][ T3518]  ? read_lock_is_recursive+0x10/0x10
[  631.906281][ T3518]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  631.912267][ T3518]  ? print_irqtrace_events+0x210/0x210
[  631.917730][ T3518]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  631.923633][ T3518]  ? do_raw_spin_unlock+0x137/0x8a0
[  631.928828][ T3518]  ? process_one_work+0x7a9/0x11d0
[  631.933935][ T3518]  process_one_work+0x8a9/0x11d0
[  631.938875][ T3518]  ? worker_detach_from_pool+0x260/0x260
[  631.944603][ T3518]  ? _raw_spin_lock_irqsave+0x120/0x120
[  631.950507][ T3518]  ? kthread_data+0x4e/0xc0
[  631.955020][ T3518]  ? wq_worker_running+0x97/0x190
[  631.960057][ T3518]  worker_thread+0xa47/0x1200
[  631.964909][ T3518]  ? _raw_spin_unlock+0x40/0x40
[  631.969852][ T3518]  kthread+0x28d/0x320
[  631.974224][ T3518]  ? worker_clr_flags+0x190/0x190
[  631.979283][ T3518]  ? kthread_blkcg+0xd0/0xd0
[  631.983922][ T3518]  ret_from_fork+0x1f/0x30
[  631.988366][ T3518]  </TASK>
[  631.991394][ T3518] Modules linked in:
[  632.047239][ T3518] ---[ end trace 0000000000000000 ]---
[  632.069691][ T3518] RIP: 0010:u2fzero_rng_read+0x27d/0x710
[  632.075465][ T3518] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 02 e4 ba f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 64 e4 ba f9 48 8d 84 24 80 00 00
[  632.113552][ T3518] RSP: 0018:ffffc9000df46720 EFLAGS: 00010202
[  632.128023][ T3518] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000
[  632.136114][ T3518] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888058b9a569
[  632.144174][ T3518] RBP: ffffc9000df468d0 R08: dffffc0000000000 R09: ffff888058b9a52e
[  632.162342][ T3518] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff88805b5dc3e0
[  632.179872][ T3518] R13: 1ffff1100b6bb806 R14: ffff88805b5dc030 R15: dffffc0000000000
[  632.198069][ T3518] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  632.207058][ T3518] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  632.218440][ T3518] CR2: 00007f555950a2d8 CR3: 0000000058c9d000 CR4: 00000000003506e0
[  632.226531][ T3518] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  632.248013][ T3518] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  632.256055][ T3518] Kernel panic - not syncing: Fatal exception
[  632.262386][ T3518] Kernel Offset: disabled
[  632.266704][ T3518] Rebooting in 86400 seconds..