last executing test programs:

2.963963841s ago: executing program 1 (id=5794):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@grpquota}, {@auto_da_alloc}, {@grpquota}]}, 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl35o6OyUwS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYfayoYjL5xoHrf24NpstiVRr3/6VxJJvq91fJL/PZZn/h8Rv30VcaKwsd7qyupCqVxOl/L8ZG3x8mR1ZfXkxcXSfDqfXpqemTn99sz0e+++s/HkvTtr6xvn/vn+kzsfnv762Np3v9w7fCuJM3EgL2tvx1O43p6ZiIn8NRmJM+sOnOpBZf0k2e0LYEeG8jgfiawPOBRDedQDL78vI6IODKhE/MOAas4AMs25/abz4PrLN8u7/0FzAtRq+6P2J833RmJfY240upY8NjPKXonxHtSf1fHrn7dvZVv07n0IgC1dvxERp4aHH+v/DkZb/7dzp7ZxzPo69H/w/NzJxj9v7u0w/ik8HP9Eh/HPWIfY3Ymt479wr/OZO1wEWicb/70fncZ/Dxetxofy3P8aY76R5MLFcpr1bVk3eTxG9mb5zdZzTq/drXcrax//ZVtWf2ssmF/HveF1TZ0r1UpP0+Z2929EvLrF+DfpcP+z1+PcNus4mt5+rVvZ1u1/tuo/R7ze8f4/muskm69PTjaeh8nWU7HR3zeP/t6t/t1uf3b/Rzdv/3jSvl5bffI6ftr3b9qtbCLJF02f8Pnfk3zWSO/J910t1WpLUxF7ko837p9upn9sy7eOz9p//Fjn+N/s+d8fEZ9vs/03j9zsemg/3P+5J7r/XRL1pGvR3Y+++KFb/dvr/95qpI7ne7bT/3W+0tG89GmeZgAAAAAAAOhfhYg4EEmh+DBdKBSLzc93HInRQrlSrZ24UFm+NBeN78qOx0ihtdI91vZ5iKn887Ct/PS6/ExEHI6Ib4f2N/LF2Up5brcbDwAAAAAAAAAAAAAAAAAAAH1irMv3/zN/DO321QHPnJ/8hsG1Zfz34peegL7k/38YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09m231tQfXZrP83JWV5YXKlZNzaXWhuLg8W5ytLF0uzlcq8+W0OFtZ3OrfK1cql6emY/nqZC1NapPVldXzi5XlS7XzFxdL8+n5dOS5tAoAAAAAAAAAAAAAAAAAAABeLNWV1YVSuZwuvVyJQt68bZ91MD+hHy7+xUoM98dlSPQ4sYudEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD//0efKxA=")
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)

2.72776837s ago: executing program 1 (id=5797):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x21, 0x5548, &(0x7f00000058c0)="$eJzs3E1vG1UXAOBjp2nffrwlQizYdVCFlEi1Vacfgl2BVny2qgosWIFju5Zb2xPFrhu66oIlYsE/QSCxYslvYMGaHWIBYocE8txJoS2VKsWOSfM80vjMvXPnzL2jJNKZiRzAgbWS/f5rJU7G0YhYiogTEcV+pdwKl1J4MSJORUT1H1ul7H/QcTgijkXEyWnylLNSHvryzOT0hV/e+e27H44cOv7Vtz8ubtXAor0cEYPNtH93kGLeTfFW2d+c9Io4OD8pYzowuF228xTvdjaKDHebO+OaRTzXTePzzTujabzZb7amsdu7WfRvDtMFR5PuTp7ihFvNraLd7mwUsTfKi9i9l+a1fS/9bbs3Gqc87TLfp0X6GI93YurvbHfSejZvF7E1HJf9KW/e7mxP46SM5eWilffbxTw2dnOn/9Neeq83vLOdTTpbo14+zC7UG6/UGxdrja283Rl3zteag/bF89lqtz8dVht3moNL3Tzv9jv1Vj5Yy1a7rVat0chWL3c2es3h/Uajfq5+tnZhLUt7Z7I3r32Y9dvZ6jS+3hveGff6o+xmvpWlM9ay9fq5V9ey043s/avXs+s3rly5ev2Djy9/dO21q2+/UQ56bFrZ6vrZ9fVa42xtvbG2uxsw0/Vnc17/Z+WkZ7h+2JXKoicAsP+o/4FFmF/9v3Uj4vH6vzrj+j/U/zOxr+rfg17/z2H9sCvqfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+un5a/fKnZWUvt42f//suv5sl2JiGpE/PkvluLwQzmXyjzLTxi//Mgcvq9EkWF6jSPldiwiLpXbH8/N+y4AAADAs+ub+6e+SNV6+lh5qrOOznlW7JH00KZ64pMZ5atExPLKzzPKVp1+vDCjZMXP96HYnlG24gHW/2aULD1yOzSrbE+l+HV/N4UHKylCJYXqo2fMbLUAAMDCLD0U9rYKAQAAYC99/sQjt/d0HuyxSuy8ytx5F1z85/3fL/uOprZXfwAAALB/VRY9AQAAAGDuivrf9/8BAADAsy19/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NxNbtpAGAbgz8Yu9E9FVfe9SndwjB6hyy4rDtBLcAR6hV6AM5BdjhBBhMdBISIJxGNQoueR7MGWeT3mZzEz0gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECfrurF9N+f73+75qw33eR5GgAAAOCQVb2YNi/G6fhje/5ze+pre1xERBkRh8bug3i3lzloc+pHrq8f9OF/RJOwvcew3T5ExI+0beJL358CAAAAvEnVdreczSdptJ5240v3is5O+A7TpE356WemWxcRUY+vM6WV27xvmcKa33cVvzOlNRNYo0xhacqtypV2lObvvpu1G91ritSUT78/27MDAABnNNhrzjsKAQAA4Jx+XboD9OH9s1cUcbeUuVsKHKZmtBdhsQ8AAABer+LSHQAAAAB614z/T6n/F8fU/6uy1/+LG/X/AAAA4MVS/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6tKoX0+VsPumas950k+dpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALhlf95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmf7Q8U1yh4iouBBL3a7ra29iQclePBPEEK6rbFbf7Q52FKEXLxJzr2IHkUEJd76D3jqTWihl3rrYQ8VRPCyMrMz2UkTcGPIzJp8PvDmfXcymfd9MxDynTcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURu9M4yTbdCZxXOy79/jWStbff6LP3Nl4sJi1LI7qTPr/4aXqh6jbXCIAAAAcHUlZ34cQHqabS1kfd/L6Py2PyWr+b5+ZxGU9/2TdX/Zl7Z+1X35+9MLWQJ3JONlJL60OB6d3ptI6uFnOt2f/9YhWfuXzZy9JfkPi99efH6X59Yy+vnv33XYeHqsjWwDgvzhV9kVQ/j6U9f0mEwPgyGhVCu+i/v8r6TScFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEANRuvhqTKOQgiLrWmcuf/41spu/Z2NB4tlO3/79kb1nNkp0hDCpdXh4HSNc5l312/cvLI8HA6u1R+8HEJoavS3i+lf+XCGg0No5PocVPD3eDze03cdbz7nfQVxcbNnOLg9Lzk3HzT4QwkAgEMpLVpW1z9MN5eyfdFCCOPvttf/r1XiMGP9/+ij8/eqY1Xr/35tM5x/vbWrn/Wu37j5xurV5cuDy4NP3jzTf6t/9sK5cxd6+bOSnicmAAAA7E+7aNX6P17Yuf5/shKHGev/z7/pfzkd6bd8q/7fabro13QmAAAAR9tzr/z5R7TL/qjdDl8sr61d60+2W5/PTLYNpLpnx4pWrf+ThaazAgAAAOowWo+2rf9frMRhxvX/p79/8cfqOZMQwoli/f/UyqfDi/VNZ67V8efETc8RAACAZp0oWnX9P83f/4+3XnmIQwivvzqJi38DOFP9n7z31Q/VsZLK+/9n65viXIq7k+uR990QWt1tX/61scQAAAA4lI4XLSv2f083lz7+6eQHbe//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANTtnwAAAP//gQBD5A==")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

2.11361566s ago: executing program 2 (id=5806):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000200), 0x3, 0x55a3, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x0, {0x9, @usage=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x7]}, {0x0, @struct={0x9, 0xbe0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x2]}, {0x0, @struct={0xab6}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @struct={0x5, 0x1}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x10]}, {0x400}})

1.980681041s ago: executing program 3 (id=5807):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0x10d, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x4, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c)
syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x8400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.839012452s ago: executing program 3 (id=5808):
pidfd_send_signal(0xffffffffffffffff, 0x37, &(0x7f0000000100)={0x80000005, 0x80, 0x8001}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001014010008a70000fcdbdf2508004c0000000000080015000400000008004b001300000008004b0013000000080001000100000008004a000200000008004c"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8800)

1.730669411s ago: executing program 0 (id=5809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x50, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844)

1.635712758s ago: executing program 3 (id=5810):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000), 0xa}, 0x70)

1.558827315s ago: executing program 0 (id=5811):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)={[{@gid}]})

1.458768252s ago: executing program 3 (id=5812):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x22, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000, 0x1})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

1.316911284s ago: executing program 3 (id=5813):
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000400)={[{@ssd_spread}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x63)

1.316129724s ago: executing program 0 (id=5821):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc00, &(0x7f0000000000)=ANY=[@ANYBLOB='iocharset=cp869,umask=00000000000000000000002,gid=', @ANYRESOCT=0x0, @ANYRES8=0x0], 0xfe, 0x1524, &(0x7f00000037c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000740)=""/158, 0x9e)

1.278408447s ago: executing program 1 (id=5814):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4c49f8c41109"], 0x33)
close(r0)

1.166673016s ago: executing program 1 (id=5815):
syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1.069870924s ago: executing program 0 (id=5816):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44c1}, 0x4008010)

927.971375ms ago: executing program 0 (id=5817):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

858.803521ms ago: executing program 2 (id=5818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r1, 0x301, 0x0, 0x3, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044800)

759.223399ms ago: executing program 0 (id=5819):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x15, {0x15, 0x1, "5cc03ecca353976f2837ff70af796fbed3997d"}}, 0x0, 0x0, 0x0}, 0x0)

690.744134ms ago: executing program 2 (id=5820):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xb8}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000010028bd7000fedbdf25706362632866637279707429"], 0xe0}, 0x1, 0x0, 0x0, 0x48000}, 0x4040840)

539.972097ms ago: executing program 2 (id=5822):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

341.748423ms ago: executing program 2 (id=5823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x70bd2a, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886)

227.026021ms ago: executing program 1 (id=5824):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x51e, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x90)

208.817413ms ago: executing program 3 (id=5825):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0)
io_setup(0x1, &(0x7f0000000000)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f00000035c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5, r0, 0x0, 0x0, 0x84}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x12b, r0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}])

144.356769ms ago: executing program 2 (id=5826):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)

0s ago: executing program 1 (id=5827):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x300, 0x0, 0x0, 0x9d, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb4}}, 0x0)

kernel console output (not intermixed with test programs):

er 19 using dummy_hcd
[  377.214551][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.229911][T14273] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0
[  377.246588][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.277216][   T23] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  377.321668][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.351979][   T23] usb 2-1: config 0 descriptor??
[  377.558298][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3803'.
[  378.020251][   T23] razer 0003:1532:010E.0007: failed to enable macro keys: -71
[  378.045486][   T23] razer 0003:1532:010E.0007: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0
[  378.110884][   T23] usb 2-1: USB disconnect, device number 19
[  378.182098][T14292] loop3: detected capacity change from 0 to 2048
[  378.244305][T14292] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.311669][T14294] fido_id[14294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  378.724526][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  378.732324][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  378.762494][T14305] Zero length message leads to an empty skb
[  379.131835][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'.
[  379.170531][T14315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3817'.
[  379.200156][T14315] netlink: 'syz.2.3817': attribute type 19 has an invalid length.
[  379.212854][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3817'.
[  379.450069][   T23] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  379.652461][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.670366][   T23] usb 1-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  379.679474][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.711139][   T23] usb 1-1: config 0 descriptor??
[  379.840152][   T35] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  380.040269][   T35] usb 3-1: Using ep0 maxpacket: 32
[  380.062995][   T35] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  380.078453][   T35] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  380.091006][   T35] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  380.108147][   T35] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  380.125313][   T35] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  380.137390][   T35] usb 3-1: Product: syz
[  380.157483][   T35] usb 3-1: Manufacturer: syz
[  380.167704][   T35] usb 3-1: SerialNumber: syz
[  380.173288][   T23] wacom 0003:056A:0059.0008: hidraw0: USB HID v10.00 Device [HID 056a:0059] on usb-dummy_hcd.0-1/input0
[  380.207417][   T35] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26
[  380.441663][   T23] usb 1-1: USB disconnect, device number 22
[  380.571145][    T9] usb 3-1: USB disconnect, device number 19
[  380.598681][    T9] appletouch 3-1:1.0: input: appletouch disconnected
[  381.287748][T14378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3849'.
[  381.332406][ T5864] IPVS: starting estimator thread 0...
[  381.339852][T14379] IPVS: ip_vs_edit_dest(): server weight less than zero
[  381.459963][T14380] IPVS: using max 18 ests per chain, 43200 per kthread
[  381.752935][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3858'.
[  382.237561][T14418] loop3: detected capacity change from 0 to 512
[  382.285508][T14418] EXT4-fs (loop3): Test dummy encryption mode enabled
[  382.320224][T14418] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  382.423321][T14418] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  382.435306][T14418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.607189][T14428] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3873'.
[  382.622527][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.986881][T14442] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  384.060042][ T5864] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  384.142183][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'.
[  384.264158][ T5864] usb 2-1: Using ep0 maxpacket: 16
[  384.276085][ T5864] usb 2-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30
[  384.305138][ T5864] usb 2-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  384.336805][ T5864] usb 2-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  384.356326][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0
[  384.364084][ T5864] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  384.380844][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.409316][ T5864] usb 2-1: config 0 descriptor??
[  384.880548][ T5864] waltop 0003:172F:0500.0009: unknown main item tag 0x0
[  384.887578][ T5864] waltop 0003:172F:0500.0009: unknown main item tag 0x0
[  384.909388][ T5864] waltop 0003:172F:0500.0009: unknown main item tag 0x0
[  384.940394][ T5864] waltop 0003:172F:0500.0009: unknown main item tag 0x0
[  384.947434][ T5864] waltop 0003:172F:0500.0009: unknown main item tag 0x0
[  384.962221][ T5864] waltop 0003:172F:0500.0009: hidraw0: USB HID v0.05 Device [HID 172f:0500] on usb-dummy_hcd.1-1/input0
[  385.074109][T14502] loop3: detected capacity change from 0 to 8192
[  385.116185][T14502] FAT-fs (loop3): Unrecognized mount option "ÿ]µLî+AX²k÷KÚ" or missing value
[  385.141686][    T8] usb 2-1: USB disconnect, device number 20
[  385.399417][ T5864] usb 3-1: new low-speed USB device number 20 using dummy_hcd
[  385.581478][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  385.592795][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.603222][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  385.612649][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.624742][ T5864] usb 3-1: config 0 descriptor??
[  386.239494][    T8] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  386.327626][ T5864] usb 3-1: USB disconnect, device number 20
[  386.443822][    T8] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  386.459440][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.467552][    T8] usb 4-1: Product: syz
[  386.476920][    T8] usb 4-1: Manufacturer: syz
[  386.489630][    T8] usb 4-1: SerialNumber: syz
[  386.505395][    T8] usb 4-1: config 0 descriptor??
[  386.908616][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3928'.
[  386.954527][    T8] mos7840 4-1:0.0: required endpoints missing
[  386.980162][    T8] usb 4-1: USB disconnect, device number 14
[  387.993035][T14569] loop3: detected capacity change from 0 to 32768
[  388.045553][T14569] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  388.158499][T14569] XFS (loop3): Ending clean mount
[  388.288521][ T5789] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  388.316047][T14563] orangefs_mount: mount request failed with -4
[  388.423536][T14595] bond0: option packets_per_slave: invalid value (18446744071562067968)
[  388.470727][T14595] bond0: option packets_per_slave: allowed values 0 - 65535
[  389.116789][T14611] loop3: detected capacity change from 0 to 8
[  389.168793][T14611] SQUASHFS error: lzo decompression failed, data probably corrupt
[  389.219069][T14611] SQUASHFS error: Failed to read block 0x91: -5
[  389.236035][T14611] SQUASHFS error: Unable to read metadata cache entry [8f]
[  389.266461][T14611] SQUASHFS error: Unable to read inode 0x11f
[  389.843403][T14622] loop3: detected capacity change from 0 to 8192
[  389.870549][T14622] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  389.888896][T14622] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  389.921847][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3964'.
[  389.939173][T14622] REISERFS (device loop3): using ordered data mode
[  389.986437][T14622] reiserfs: using flush barriers
[  389.995165][T14622] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  390.035972][T14622] REISERFS (device loop3): checking transaction log (loop3)
[  390.052880][T14622] REISERFS (device loop3): Using r5 hash to sort names
[  390.064728][T14622] REISERFS (device loop3): using 3.5.x disk format
[  390.073300][T14622] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  391.230040][T14650] loop3: detected capacity change from 0 to 4096
[  391.428888][T14650] ntfs3: loop3: failed to convert "0000" to iso8859-6
[  391.447141][T14650] ntfs3: loop3: failed to convert "0030" to iso8859-6
[  391.471329][T14650] ntfs3: loop3: failed to convert name for inode 1e.
[  391.494061][T14650] ntfs3: loop3: failed to convert "0032" to iso8859-6
[  391.509453][T14650] ntfs3: loop3: failed to convert "0033" to iso8859-6
[  392.946083][T14696] loop3: detected capacity change from 0 to 4096
[  393.028206][T14696] NILFS (loop3): invalid segment: Checksum error in segment payload
[  393.048194][T14696] NILFS (loop3): trying rollback from an earlier position
[  393.097682][T14696] NILFS (loop3): recovery complete
[  393.118991][T14706] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  393.538814][T14712] loop3: detected capacity change from 0 to 2048
[  393.596719][T14712] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.911786][T14723] loop3: detected capacity change from 0 to 128
[  393.951183][T14723] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  393.986588][T14723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  394.063299][T14723] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40)
[  394.518281][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  394.518298][   T27] audit: type=1400 audit(1756513031.201:163): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  394.523446][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4010'.
[  395.143315][T14731] loop3: detected capacity change from 0 to 32768
[  395.595159][T14755] mkiss: ax0: crc mode is auto.
[  395.628478][   T35] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  395.766623][T14760] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4024'.
[  395.808204][   T35] usb 2-1: Using ep0 maxpacket: 16
[  395.834341][   T35] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  395.868075][   T35] usb 2-1: config 0 has no interface number 0
[  395.904784][   T35] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=f9.c2
[  395.939569][   T35] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.947711][   T35] usb 2-1: Product: syz
[  395.962471][   T35] usb 2-1: Manufacturer: syz
[  395.967218][   T35] usb 2-1: SerialNumber: syz
[  396.001308][   T35] usb 2-1: config 0 descriptor??
[  396.036571][   T35] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.69/input/input28
[  396.250606][ T5145] bcm5974 2-1:0.69: could not read from device
[  396.283419][   T35] usb 2-1: USB disconnect, device number 21
[  397.978099][   T35] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  398.177906][   T35] usb 3-1: Using ep0 maxpacket: 8
[  398.206460][   T35] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  398.236102][   T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.247821][   T35] usb 3-1: Product: syz
[  398.252050][   T35] usb 3-1: Manufacturer: syz
[  398.283090][   T35] usb 3-1: SerialNumber: syz
[  398.299050][   T35] usb 3-1: config 0 descriptor??
[  398.328182][   T35] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  398.349831][   T35] dvb-usb: bulk message failed: -22 (2/0)
[  398.381006][   T35] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  398.413589][   T35] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  398.433324][   T35] usb 3-1: media controller created
[  398.483228][   T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  398.564513][   T35] cxusb: set interface failed
[  398.569796][   T35] dvb-usb: bulk message failed: -22 (1/0)
[  398.655718][   T35] DVB: Unable to find symbol mt352_attach()
[  398.666245][   T35] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  398.777830][   T35] rc_core: IR keymap rc-dvico-portable not found
[  398.784325][   T35] Registered IR keymap rc-empty
[  398.796504][   T35] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  398.816328][T14796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4040'.
[  398.828596][   T35] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input29
[  398.850341][   T35] dvb-usb: schedule remote query interval to 100 msecs.
[  398.867810][   T35] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  398.898190][   T35] usb 3-1: USB disconnect, device number 21
[  399.007288][   T35] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  399.056311][T14779] loop3: detected capacity change from 0 to 32768
[  399.126245][T14779] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  399.208136][T14779] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  399.340884][T14779] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  399.652151][T14779] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  400.357928][   T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  400.577759][   T23] usb 3-1: Using ep0 maxpacket: 32
[  400.591156][   T23] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  400.611783][   T23] usb 3-1: config 0 has no interface number 0
[  400.627680][   T23] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  400.639400][   T23] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  400.653293][   T23] usb 3-1: config 0 interface 255 has no altsetting 0
[  400.665224][   T23] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  400.674900][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.683708][   T23] usb 3-1: Product: syz
[  400.688313][   T23] usb 3-1: Manufacturer: syz
[  400.692949][   T23] usb 3-1: SerialNumber: syz
[  400.714615][   T23] usb 3-1: config 0 descriptor??
[  400.897659][ T5864] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  401.089529][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.113148][ T5864] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  401.155223][ T5864] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  401.178731][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.199516][ T5864] usb 1-1: config 0 descriptor??
[  401.337786][   T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  401.572879][   T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  401.603915][   T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  401.633719][   T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  401.659282][ T5864] lenovo 0003:17EF:6067.000B: unknown main item tag 0xd
[  401.674562][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  401.685139][ T5864] lenovo 0003:17EF:6067.000B: hidraw0: USB HID v0.01 Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0
[  401.707242][   T23] usb 4-1: SerialNumber: syz
[  401.913208][ T5864] usb 1-1: USB disconnect, device number 23
[  402.009299][   T23] usb 4-1: 0:2 : does not exist
[  402.029735][   T23] usb 4-1: unit 255 not found!
[  402.081219][   T23] usb 4-1: USB disconnect, device number 15
[  402.124763][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.175758][    T8] usb 3-1: USB disconnect, device number 22
[  402.917529][   T23] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  403.109476][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  403.135612][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  403.168119][   T23] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  403.194619][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.234164][   T23] usb 2-1: config 0 descriptor??
[  403.251024][T14862] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  403.697682][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.730975][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.749869][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.770145][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.790398][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.810644][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.834228][   T23] logitech 0003:046D:CA04.000C: unknown main item tag 0x0
[  403.864002][   T23] logitech 0003:046D:CA04.000C: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0
[  403.919146][   T23] logitech 0003:046D:CA04.000C: no inputs found
[  403.952573][   T23] usb 2-1: USB disconnect, device number 22
[  404.076497][T14896] fido_id[14896]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  404.103631][T14898] sp0: Synchronizing with TNC
[  404.103653][T14900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4090'.
[  404.201065][T14900] syz_tun (unregistering): left allmulticast mode
[  404.680427][T14914] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4096' sets config #0
[  405.203712][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4103'.
[  406.257007][ T5781] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  406.439678][ T5781] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  406.457134][ T5781] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  406.474248][ T5781] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  406.484781][ T5781] usb 3-1: config 1 has no interface number 1
[  406.499064][ T5781] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  406.515956][ T5781] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0
[  406.532334][ T5781] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  406.541914][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.555618][T14975] x_tables: ip_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0
[  406.564751][ T5781] usb 3-1: Product: syz
[  406.569257][ T5781] usb 3-1: Manufacturer: syz
[  406.573919][ T5781] usb 3-1: SerialNumber: syz
[  406.656979][   T35] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  406.827189][ T5781] usb 3-1: Failed to set altset
[  406.832186][ T5781] usb 3-1: 0:2: cannot create sequencer device
[  406.858587][   T35] usb 4-1: Using ep0 maxpacket: 32
[  406.867094][ T5781] usb 3-1: Failed to set altset
[  406.876120][   T35] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  406.893872][ T5781] snd-usb-audio: probe of 3-1:1.2 failed with error -71
[  406.895746][   T35] usb 4-1: config 0 has no interface number 0
[  406.914309][ T5781] usb 3-1: USB disconnect, device number 23
[  406.923868][   T35] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  406.946473][   T35] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  406.968398][   T35] usb 4-1: config 0 interface 255 has no altsetting 0
[  406.985845][   T35] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  407.006534][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  407.022561][   T35] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.036350][   T35] usb 4-1: Product: syz
[  407.040987][   T35] usb 4-1: Manufacturer: syz
[  407.045624][   T35] usb 4-1: SerialNumber: syz
[  407.070684][   T35] usb 4-1: config 0 descriptor??
[  407.578931][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4137'.
[  407.668934][T14997] bond0: (slave syz_tun): Releasing backup interface
[  407.982816][T14969] loop3: detected capacity change from 0 to 32768
[  408.027711][T14969] (syz.3.4123,14969,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "01777777777777777777777" or missing value
[  408.085595][T14969] (syz.3.4123,14969,1):ocfs2_fill_super:1178 ERROR: status = -22
[  408.117185][   T23] usb 4-1: USB disconnect, device number 16
[  408.826195][T15025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4149'.
[  408.854475][T15025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4149'.
[  408.866590][T15022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4149'.
[  409.045732][T15027] CIFS: iocharset name too long
[  409.498363][T15046] netlink: 'syz.3.4160': attribute type 4 has an invalid length.
[  409.861609][T15062] ax25_connect(): syz.3.4168 uses autobind, please contact jreuter@yaina.de
[  410.322576][T15081] hub 9-0:1.0: USB hub found
[  410.342741][T15081] hub 9-0:1.0: 1 port detected
[  410.626201][   T35] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  410.663747][T15097] devtmpfs: Too few inodes for current use
[  410.852660][T15104] loop3: detected capacity change from 0 to 256
[  410.866394][   T35] usb 2-1: Using ep0 maxpacket: 32
[  410.876017][   T35] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  410.912751][   T35] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  410.931325][T15104] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  410.934654][   T35] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  410.953092][   T35] usb 2-1: Product: syz
[  410.957848][   T35] usb 2-1: Manufacturer: syz
[  410.962848][   T35] usb 2-1: SerialNumber: syz
[  410.966584][T15104] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  410.975531][   T35] usb 2-1: config 0 descriptor??
[  410.996575][T15104] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  411.004301][T15104] UDF-fs: Scanning with blocksize 512 failed
[  411.023480][T15084] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  411.027253][T15104] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  411.035357][   T35] hub 2-1:0.0: bad descriptor, ignoring hub
[  411.069102][T15104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.077000][   T35] hub: probe of 2-1:0.0 failed with error -5
[  411.174791][   T27] audit: type=1800 audit(1756513047.863:164): pid=15104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4188" name="file2" dev="loop3" ino=66 res=0 errno=0
[  411.386557][   T23] usb 2-1: USB disconnect, device number 23
[  412.110440][T15142] loop3: detected capacity change from 0 to 256
[  412.191212][T15142] FAT-fs (loop3): Directory bread(block 64) failed
[  412.219095][T15142] FAT-fs (loop3): Directory bread(block 65) failed
[  412.252213][T15142] FAT-fs (loop3): Directory bread(block 66) failed
[  412.293897][T15142] FAT-fs (loop3): Directory bread(block 67) failed
[  412.316414][T15142] FAT-fs (loop3): Directory bread(block 68) failed
[  412.323008][T15142] FAT-fs (loop3): Directory bread(block 69) failed
[  412.356249][T15142] FAT-fs (loop3): Directory bread(block 70) failed
[  412.362842][T15142] FAT-fs (loop3): Directory bread(block 71) failed
[  412.405561][T15142] FAT-fs (loop3): Directory bread(block 72) failed
[  412.436146][T15142] FAT-fs (loop3): Directory bread(block 73) failed
[  413.297114][T15186] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4227'.
[  413.706172][   T23] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  413.730520][T15204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4236'.
[  413.901941][T15213] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  413.922425][   T23] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17
[  413.948185][   T23] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[  413.973502][   T23] usb 2-1: Product: syz
[  413.983643][   T23] usb 2-1: Manufacturer: syz
[  413.995409][   T23] usb 2-1: SerialNumber: syz
[  414.023337][   T23] usb 2-1: config 0 descriptor??
[  414.045022][   T23] ch341 2-1:0.0: ch341-uart converter detected
[  414.269570][T15223] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4246'.
[  414.284552][T15225] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4245'.
[  414.296447][T15225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4245'.
[  414.342749][T15221] loop3: detected capacity change from 0 to 4096
[  414.501971][T15221] ntfs3: loop3: ino=21, "file1" fiemap is not supported for compressed file (cp -r)
[  414.667676][   T23] usb 2-1: failed to send control message: -71
[  414.673971][   T23] ch341-uart: probe of ttyUSB0 failed with error -71
[  414.700182][   T23] usb 2-1: USB disconnect, device number 24
[  414.729492][   T23] ch341 2-1:0.0: device disconnected
[  415.404582][   T27] audit: type=1326 audit(1756513052.093:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15256 comm="syz.3.4261" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa778ebe9 code=0x0
[  415.601636][   T27] audit: type=1326 audit(1756513052.294:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.2.4264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x0
[  415.630622][   T27] audit: type=1326 audit(1756513052.324:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15265 comm="syz.2.4264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x0
[  417.228831][   T27] audit: type=1326 audit(1756513053.914:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  417.300248][   T27] audit: type=1326 audit(1756513053.914:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  417.322695][    C0] vkms_vblank_simulate: vblank timer overrun
[  417.401434][   T27] audit: type=1326 audit(1756513053.954:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  417.423814][    C0] vkms_vblank_simulate: vblank timer overrun
[  417.475056][   T27] audit: type=1326 audit(1756513053.954:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  417.525846][   T27] audit: type=1326 audit(1756513053.954:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  417.575536][   T27] audit: type=1326 audit(1756513053.954:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  417.644032][   T27] audit: type=1326 audit(1756513053.954:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15308 comm="syz.0.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  418.352931][T15338] nbd: must specify a device to reconfigure
[  419.575467][ T5781] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  419.755562][ T5781] usb 4-1: Using ep0 maxpacket: 32
[  419.770011][ T5781] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  419.789776][ T5781] usb 4-1: config 0 has no interface number 0
[  419.803258][ T5781] usb 4-1: config 0 interface 12 has no altsetting 0
[  419.822805][ T5781] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  419.836540][ T5781] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.854902][ T5781] usb 4-1: Product: syz
[  419.862724][ T5781] usb 4-1: Manufacturer: syz
[  419.873277][ T5781] usb 4-1: SerialNumber: syz
[  419.889819][ T5781] usb 4-1: config 0 descriptor??
[  420.166581][T15393] netlink: zone id is out of range
[  420.245287][ T5864] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  420.445224][ T5864] usb 2-1: Using ep0 maxpacket: 32
[  420.460861][ T5864] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.473103][ T5864] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.483851][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0
[  420.495242][ T5864] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  420.504362][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.515476][ T5864] usb 2-1: config 0 descriptor??
[  420.564243][ T5781] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  420.574481][ T5781] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  420.582467][ T5781] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  420.590875][ T5781] f81534: probe of 4-1:0.12 failed with error -71
[  420.604669][ T5781] usb 4-1: USB disconnect, device number 17
[  420.619539][ T8826] udevd[8826]: setting mode of /dev/bus/usb/004/017 to 020664 failed: No such file or directory
[  420.630667][ T8826] udevd[8826]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory
[  420.685355][    T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  420.792040][T15409] netlink: 'syz.0.4334': attribute type 1 has an invalid length.
[  420.800200][T15409] netlink: 'syz.0.4334': attribute type 2 has an invalid length.
[  420.887386][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.898793][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.908762][    T8] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  420.918024][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.930059][    T8] usb 3-1: config 0 descriptor??
[  420.957335][ T5864] wacom 0003:056A:0057.000D: hidraw0: USB HID vb.27 Device [HID 056a:0057] on usb-dummy_hcd.1-1/input0
[  421.181363][ T5781] usb 2-1: USB disconnect, device number 25
[  421.358854][    T8] hid-retrode 0003:0403:97C1.000E: item fetching failed at offset 3/5
[  421.373778][    T8] hid-retrode: probe of 0003:0403:97C1.000E failed with error -22
[  421.459357][T15418] netlink: 'syz.3.4338': attribute type 29 has an invalid length.
[  421.528577][T15420] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4339'.
[  421.583394][ T5864] usb 3-1: USB disconnect, device number 24
[  422.105034][   T27] audit: type=1326 audit(1756513058.794:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.3.4347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2aa778ebe9 code=0x0
[  422.210741][   T27] audit: type=1326 audit(1756513058.844:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15435 comm="syz.3.4347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f2aa778ebe9 code=0x0
[  424.637210][T15496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4377'.
[  424.719985][T15500] netlink: 'syz.0.4378': attribute type 29 has an invalid length.
[  425.115776][T15510] overlay: Unknown parameter '\ns_resolver'
[  425.309847][T15517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4386'.
[  426.332244][T15530] loop3: detected capacity change from 0 to 32768
[  426.369115][T15530] XFS: noikeep mount option is deprecated.
[  426.466437][T15530] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  426.698485][T15530] XFS (loop3): Ending clean mount
[  426.720662][T15530] XFS (loop3): Quotacheck needed: Please wait.
[  426.873253][T15530] XFS (loop3): Quotacheck: Done.
[  427.030907][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  427.634868][T15572] tmpfs: Bad value for 'nr_inodes'
[  429.449115][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4430'.
[  429.458666][T15624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4430'.
[  429.480240][T15624] team0: entered promiscuous mode
[  429.494229][T15624] dummy0: entered promiscuous mode
[  429.505470][T15624] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  429.522364][T15624] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  429.547019][T15624] team0: left promiscuous mode
[  429.553440][T15624] dummy0: left promiscuous mode
[  429.565715][T15624] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  429.583435][T15624] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  430.030389][   T35] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  430.224368][   T35] usb 1-1: Using ep0 maxpacket: 8
[  430.246335][   T35] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  430.264542][   T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.283275][   T35] usb 1-1: Product: syz
[  430.293400][   T35] usb 1-1: Manufacturer: syz
[  430.303555][   T35] usb 1-1: SerialNumber: syz
[  430.315456][   T35] usb 1-1: config 0 descriptor??
[  430.324489][   T35] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  430.332908][   T35] dvb-usb: bulk message failed: -22 (2/0)
[  430.344331][   T35] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  430.354802][   T35] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  430.364856][   T35] usb 1-1: media controller created
[  430.441799][   T35] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  430.540643][   T35] cxusb: set interface failed
[  430.545951][   T35] dvb-usb: bulk message failed: -22 (1/0)
[  430.608938][   T35] DVB: Unable to find symbol mt352_attach()
[  430.615517][   T35] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  430.722667][   T35] rc_core: IR keymap rc-dvico-portable not found
[  430.729768][   T35] Registered IR keymap rc-empty
[  430.746916][   T35] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  430.769084][   T35] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input33
[  430.788990][   T35] dvb-usb: schedule remote query interval to 100 msecs.
[  430.798663][   T35] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  430.828362][   T35] usb 1-1: USB disconnect, device number 24
[  430.945218][   T35] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  431.591367][T15677] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4454' sets config #0
[  432.487874][T15704] loop3: detected capacity change from 0 to 128
[  432.535934][T15704] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  433.803771][ T5864] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  433.871739][T15729] netlink: 'syz.1.4478': attribute type 6 has an invalid length.
[  434.006558][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  434.023819][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  434.053622][ T5864] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  434.073086][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.084605][ T5781] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  434.094182][ T5864] usb 4-1: config 0 descriptor??
[  434.100292][T15720] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  434.275896][ T5781] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  434.294785][ T5781] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  434.321395][ T5781] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  434.341016][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  434.359480][ T5781] usb 3-1: SerialNumber: syz
[  434.528761][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.536458][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.550826][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.558488][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.566275][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.583614][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.596186][ T5781] usb 3-1: 0:2 : does not exist
[  434.601122][ T5864] logitech 0003:046D:CA04.000F: unknown main item tag 0x0
[  434.610169][ T5864] logitech 0003:046D:CA04.000F: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.3-1/input0
[  434.629976][ T5781] usb 3-1: unit 255 not found!
[  434.649851][ T5864] logitech 0003:046D:CA04.000F: no inputs found
[  434.708857][ T5781] usb 3-1: USB disconnect, device number 25
[  434.757640][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  434.819861][ T5864] usb 4-1: USB disconnect, device number 18
[  434.836708][T15754] fido_id[15754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  435.033733][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  435.873780][   T55] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  436.063431][   T55] usb 3-1: Using ep0 maxpacket: 8
[  436.075357][   T55] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  436.096765][   T55] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  436.115342][   T55] usb 3-1: config 0 interface 0 has no altsetting 0
[  436.130999][   T55] usb 3-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  436.149070][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.171685][   T55] usb 3-1: config 0 descriptor??
[  436.426042][T15784] loop3: detected capacity change from 0 to 32768
[  436.448649][T15784] (syz.3.4502,15784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  436.469445][T15784] (syz.3.4502,15784,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  436.490897][T15796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4515'.
[  436.510071][T15796] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4515'.
[  436.517115][T15784] JBD2: Ignoring recovery information on journal
[  436.544237][T15793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4515'.
[  436.609125][   T55] a4tech 0003:09DA:000A.0010: unbalanced collection at end of report description
[  436.621060][T15784] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  436.656492][   T55] a4tech 0003:09DA:000A.0010: parse failed
[  436.668775][   T55] a4tech: probe of 0003:09DA:000A.0010 failed with error -22
[  436.733698][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  436.799187][   T55] usb 3-1: USB disconnect, device number 26
[  437.337005][T15820] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4519'.
[  437.367543][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4519'.
[  437.556531][T15828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4522'.
[  437.575705][T15828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4522'.
[  437.609102][T15828] team0: entered promiscuous mode
[  437.620105][T15828] team_slave_0: entered promiscuous mode
[  437.633452][T15828] team_slave_1: entered promiscuous mode
[  437.661021][T15828] team0: left promiscuous mode
[  437.666081][T15828] team_slave_0: left promiscuous mode
[  437.673628][T15828] team_slave_1: left promiscuous mode
[  438.844046][T15867] comedi comedi3: 8255: I/O port conflict (0x404f26,4)
[  438.851056][T15867] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  438.874714][T15869] devtmpfs: Too few inodes for current use
[  438.895845][T15867] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  438.902390][T15867] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  438.939751][T15867] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  438.977765][T15867] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  439.008162][T15867] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  439.040368][T15867] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  439.051171][T15867] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  439.065758][T15867] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  439.072608][T15867] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  439.081835][T15867] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  439.092757][T15867] comedi comedi3: 8255: I/O port conflict (0x400,4)
[  439.118998][T15867] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  439.462253][T15866] loop3: detected capacity change from 0 to 32768
[  439.519687][T15866] JBD2: Ignoring recovery information on journal
[  439.582857][T15866] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  439.818897][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  440.158347][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  440.165442][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  441.069318][T15941] loop3: detected capacity change from 0 to 512
[  441.109638][T15941] EXT4-fs: Ignoring removed nomblk_io_submit option
[  441.132348][T15941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  441.185424][T15941] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  441.203393][T15941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002]
[  441.211556][T15941] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80)
[  441.261961][T15941] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features
[  441.275319][T15941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  441.327851][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.048854][T15967] loop3: detected capacity change from 0 to 512
[  442.076936][T15967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  442.121906][T15967] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  442.205828][T15967] EXT4-fs (loop3): 1 truncate cleaned up
[  442.227941][T15967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.296702][T15975] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  442.448869][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.135065][T15991] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  444.553611][   T27] audit: type=1326 audit(1756513081.247:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  444.628165][   T27] audit: type=1326 audit(1756513081.247:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  444.653058][   T27] audit: type=1326 audit(1756513081.277:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  444.674990][   T27] audit: type=1326 audit(1756513081.277:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16042 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  445.259396][   T27] audit: type=1326 audit(1756513081.957:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  445.296360][   T27] audit: type=1326 audit(1756513081.957:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  445.352604][   T27] audit: type=1326 audit(1756513081.957:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  445.409882][   T27] audit: type=1326 audit(1756513081.957:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  445.452943][   T27] audit: type=1326 audit(1756513081.957:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16066 comm=04 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f379b18ebe9 code=0x7ffc0000
[  445.589894][T16076] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  446.222354][T16084] nbd: must specify a device to reconfigure
[  447.742352][   T35] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  447.854641][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'.
[  447.870483][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4663'.
[  447.937580][   T35] usb 3-1: Using ep0 maxpacket: 32
[  447.974477][   T35] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  447.993865][   T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.009779][   T35] usb 3-1: Product: syz
[  448.014242][   T35] usb 3-1: Manufacturer: syz
[  448.018969][   T35] usb 3-1: SerialNumber: syz
[  448.034128][   T35] usb 3-1: config 0 descriptor??
[  448.542415][    T8] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[  448.543790][T16147] netlink: zone id is out of range
[  448.667248][   T35] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  448.722857][   T35] peak_usb: probe of 3-1:0.0 failed with error -71
[  448.733911][   T35] usb 3-1: USB disconnect, device number 27
[  448.754794][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  448.784966][    T8] usb 1-1: unable to read config index 0 descriptor/start: -71
[  448.793785][    T8] usb 1-1: can't read configurations, error -71
[  448.905658][   T23] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  449.099817][   T23] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17
[  449.109038][   T23] usb 4-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[  449.117625][   T23] usb 4-1: Product: syz
[  449.121992][   T23] usb 4-1: Manufacturer: syz
[  449.126628][   T23] usb 4-1: SerialNumber: syz
[  449.134492][   T23] usb 4-1: config 0 descriptor??
[  449.141961][   T23] ch341 4-1:0.0: ch341-uart converter detected
[  449.673191][T16163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4682'.
[  449.759938][   T23] usb 4-1: failed to send control message: -71
[  449.770585][   T23] ch341-uart: probe of ttyUSB0 failed with error -71
[  449.807500][   T23] usb 4-1: USB disconnect, device number 19
[  449.833795][   T23] ch341 4-1:0.0: device disconnected
[  451.751739][    T8] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  451.941639][    T8] usb 2-1: Using ep0 maxpacket: 16
[  451.949130][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.970954][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.992062][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  452.018667][    T8] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  452.032086][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.044625][    T8] usb 2-1: config 0 descriptor??
[  452.361664][   T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  452.483592][    T8] hid-generic 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[  452.558349][   T23] usb 1-1: Using ep0 maxpacket: 32
[  452.585165][   T23] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  452.604712][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.613380][   T23] usb 1-1: Product: syz
[  452.617742][   T23] usb 1-1: Manufacturer: syz
[  452.623645][   T23] usb 1-1: SerialNumber: syz
[  452.631117][   T23] usb 1-1: config 0 descriptor??
[  452.689143][    T8] usb 2-1: USB disconnect, device number 26
[  453.045756][   T27] audit: type=1326 audit(1756513089.748:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16260 comm="syz.3.4729" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2aa778ebe9 code=0x0
[  453.275624][   T23] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  453.319741][   T27] audit: type=1326 audit(1756513090.018:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.352098][   T27] audit: type=1326 audit(1756513090.018:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.401704][   T27] audit: type=1326 audit(1756513090.018:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.424762][   T23] peak_usb: probe of 1-1:0.0 failed with error -71
[  453.441639][   T23] usb 1-1: USB disconnect, device number 27
[  453.481455][   T27] audit: type=1326 audit(1756513090.018:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.541418][   T27] audit: type=1326 audit(1756513090.018:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.581370][   T27] audit: type=1800 audit(1756513090.018:192): pid=16268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4732" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  453.620315][   T27] audit: type=1326 audit(1756513090.048:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.650602][   T27] audit: type=1326 audit(1756513090.048:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16267 comm="syz.1.4732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  453.870567][T16280] tmpfs: Bad value for 'size'
[  453.994839][T16282] loop3: detected capacity change from 0 to 512
[  454.015149][T16282] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  454.065512][T16282] EXT4-fs (loop3): 1 truncate cleaned up
[  454.104915][T16282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  454.345815][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.773024][T16304] loop3: detected capacity change from 0 to 256
[  454.881907][T16304] FAT-fs (loop3): Directory bread(block 64) failed
[  454.888547][T16304] FAT-fs (loop3): Directory bread(block 65) failed
[  454.916403][T16304] FAT-fs (loop3): Directory bread(block 66) failed
[  454.931060][T16304] FAT-fs (loop3): Directory bread(block 67) failed
[  454.951347][T16304] FAT-fs (loop3): Directory bread(block 68) failed
[  454.957930][T16304] FAT-fs (loop3): Directory bread(block 69) failed
[  454.972519][T16304] FAT-fs (loop3): Directory bread(block 70) failed
[  454.987843][T16304] FAT-fs (loop3): Directory bread(block 71) failed
[  454.996447][T16304] FAT-fs (loop3): Directory bread(block 72) failed
[  455.003809][T16304] FAT-fs (loop3): Directory bread(block 73) failed
[  455.214980][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'.
[  455.224897][T16317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4757'.
[  455.605555][T16332] vivid-004: disconnect
[  455.615818][T16331] vivid-004: reconnect
[  455.683295][T16334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4764'.
[  455.751490][   T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  455.830699][T16340] usb usb8: usbfs: process 16340 (syz.2.4767) did not claim interface 3 before use
[  455.961106][   T23] usb 4-1: Using ep0 maxpacket: 16
[  455.990293][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.021824][   T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[  456.048860][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.076587][   T23] usb 4-1: config 0 descriptor??
[  456.552103][   T23] apple 0003:05AC:027C.0012: hidraw0: USB HID v0.05 Device [HID 05ac:027c] on usb-dummy_hcd.3-1/input0
[  456.785892][    T8] usb 4-1: USB disconnect, device number 20
[  456.933512][T16355] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4774'.
[  457.471716][ T5781] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  457.662307][ T5781] usb 2-1: Using ep0 maxpacket: 32
[  457.671037][ T5781] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  457.681780][ T5781] usb 2-1: config 0 has no interface number 0
[  457.699314][ T5781] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  457.708800][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.717417][ T5781] usb 2-1: Product: syz
[  457.722960][ T5781] usb 2-1: Manufacturer: syz
[  457.727685][ T5781] usb 2-1: SerialNumber: syz
[  457.739303][ T5781] usb 2-1: config 0 descriptor??
[  457.756854][ T5781] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  457.987099][ T5781] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  458.007056][ T5781] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  458.239533][T16385] mkiss: ax0: crc mode is auto.
[  458.491659][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  458.499816][   T23] usb 2-1: USB disconnect, device number 27
[  458.553041][   T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  458.602594][   T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  458.653222][   T23] quatech2 2-1:0.51: device disconnected
[  458.659547][T16393] netlink: 11 bytes leftover after parsing attributes in process `syz.3.4791'.
[  458.777646][T16397] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4792'.
[  458.936248][T16401] loop3: detected capacity change from 0 to 1024
[  459.002319][ T1096] hfsplus: b-tree write err: -5, ino 4
[  459.801960][   T23] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  459.866242][T16437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4813'.
[  460.007515][T16439] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  460.014984][   T23] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  460.030625][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.048259][   T23] usb 1-1: Product: syz
[  460.057146][   T23] usb 1-1: Manufacturer: syz
[  460.080653][   T23] usb 1-1: SerialNumber: syz
[  460.101992][   T23] usb 1-1: config 0 descriptor??
[  460.316297][T16451] mkiss: ax0: crc mode is auto.
[  460.388912][T16453] loop3: detected capacity change from 0 to 64
[  460.670705][   T55] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  460.742512][   T23] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  460.764300][   T23] asix: probe of 1-1:0.0 failed with error -71
[  460.777229][   T23] usb 1-1: USB disconnect, device number 28
[  460.902784][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  460.913878][   T55] usb 3-1: New USB device found, idVendor=1b96, idProduct=000e, bcdDevice= 0.00
[  460.923545][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.944703][   T55] usb 3-1: config 0 descriptor??
[  460.950556][T16455] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  461.103451][T16463] loop3: detected capacity change from 0 to 40427
[  461.122910][T16463] F2FS-fs (loop3): invalid crc value
[  461.143073][T16463] F2FS-fs (loop3): Found nat_bits in checkpoint
[  461.218062][T16463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  461.284425][   T27] audit: type=1800 audit(1756513097.989:195): pid=16463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4826" name="bus" dev="loop3" ino=10 res=0 errno=0
[  461.382527][   T55] ntrig 0003:1B96:000E.0013: unbalanced delimiter at end of report description
[  461.396028][T16470] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4827'.
[  461.396865][ T5789] syz-executor: attempt to access beyond end of device
[  461.396865][ T5789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  461.423887][   T55] ntrig 0003:1B96:000E.0013: parse failed
[  461.429806][   T55] ntrig: probe of 0003:1B96:000E.0013 failed with error -22
[  461.447487][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  461.574664][   T55] usb 3-1: USB disconnect, device number 28
[  462.322274][T16483] mkiss: ax0: crc mode is auto.
[  462.650613][   T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  462.825645][T16505] Bluetooth: MGMT ver 1.22
[  462.840754][   T23] usb 4-1: Using ep0 maxpacket: 16
[  462.852476][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.871444][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.910545][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  462.964177][   T23] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  462.985976][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.015318][   T23] usb 4-1: config 0 descriptor??
[  463.455073][   T23] hid-generic 0003:0457:07DA.0014: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0
[  463.622173][ T5864] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  463.674601][   T23] usb 4-1: USB disconnect, device number 21
[  463.810165][ T5864] usb 3-1: Using ep0 maxpacket: 32
[  463.817086][ T5864] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  463.829031][ T5864] usb 3-1: config 0 has no interface number 0
[  463.838513][ T5864] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  463.847942][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.856053][ T5864] usb 3-1: Product: syz
[  463.860437][ T5864] usb 3-1: Manufacturer: syz
[  463.865056][ T5864] usb 3-1: SerialNumber: syz
[  463.872941][ T5864] usb 3-1: config 0 descriptor??
[  463.882722][ T5864] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  464.091381][ T5864] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  464.103997][ T5864] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  464.544472][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  464.552687][ T5864] usb 3-1: USB disconnect, device number 29
[  464.568222][ T5864] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  464.618759][ T5864] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  464.655536][ T5864] quatech2 3-1:0.51: device disconnected
[  464.778723][T16545] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4859'.
[  464.808814][T16544] loop3: detected capacity change from 0 to 4096
[  464.859471][T16546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  465.020648][   T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  465.241216][   T23] usb 1-1: Using ep0 maxpacket: 16
[  465.262439][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.286265][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.291275][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4867'.
[  465.304003][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  465.338431][   T23] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  465.364275][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.383545][   T23] usb 1-1: config 0 descriptor??
[  465.750139][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  465.822371][   T23] hid-generic 0003:0457:07DA.0015: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[  466.086109][   T55] usb 1-1: USB disconnect, device number 29
[  466.202832][T16580] sp0: Synchronizing with TNC
[  466.227409][T16580] sp0: Found TNC
[  466.341248][   T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  466.540554][   T23] usb 4-1: Using ep0 maxpacket: 32
[  466.558234][   T23] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  466.570247][   T23] usb 4-1: config 0 has no interface number 0
[  466.589864][   T23] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  466.604206][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.621425][   T23] usb 4-1: Product: syz
[  466.626228][   T23] usb 4-1: Manufacturer: syz
[  466.632465][   T23] usb 4-1: SerialNumber: syz
[  466.648222][   T23] usb 4-1: config 0 descriptor??
[  466.656807][   T23] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  466.888920][   T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  466.915380][   T23] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  467.140070][   T55] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  467.341090][   T55] usb 2-1: Using ep0 maxpacket: 16
[  467.348327][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  467.352729][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.356716][   T23] usb 4-1: USB disconnect, device number 22
[  467.399916][   T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.404649][   T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  467.437932][   T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  467.457058][   T55] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  467.470870][   T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  467.477432][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.499041][   T23] quatech2 4-1:0.51: device disconnected
[  467.517352][   T55] usb 2-1: config 0 descriptor??
[  467.850880][T16621] sp0: Synchronizing with TNC
[  467.907295][T16621] sp0: Found TNC
[  467.997755][   T55] ryos 0003:1E7D:31CE.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0
[  468.330603][ T5864] usb 2-1: USB disconnect, device number 28
[  470.266936][T16672] loop3: detected capacity change from 0 to 32768
[  470.341136][T16672] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  470.455040][T16672] (syz.3.4921,16672,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0
[  470.475776][T16672] (syz.3.4921,16672,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2
[  470.485722][T16710] use of bytesused == 0 is deprecated and will be removed in the future,
[  470.494756][T16710] use the actual size instead.
[  470.500043][T16672] (syz.3.4921,16672,1):ocfs2_rename:1485 ERROR: status = -2
[  470.517918][T16672] (syz.3.4921,16672,1):ocfs2_rename:1690 ERROR: status = -2
[  470.615567][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  470.665774][T16713] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  471.666439][T16748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4957'.
[  471.995628][T16762] netlink: 'syz.1.4964': attribute type 1 has an invalid length.
[  472.615553][T16783] sp0: Synchronizing with TNC
[  472.679894][T16787] netlink: 'syz.3.4976': attribute type 1 has an invalid length.
[  472.895010][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4979'.
[  472.904655][T16794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4979'.
[  473.072133][T16796] [U] 
[  473.803695][T16817] [U] 
[  473.825965][   T27] audit: type=1326 audit(1756513110.520:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa778ebe9 code=0x7ffc0000
[  473.889423][   T27] audit: type=1326 audit(1756513110.520:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa778ebe9 code=0x7ffc0000
[  473.959313][   T35] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  473.968770][   T27] audit: type=1326 audit(1756513110.550:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f2aa778ebe9 code=0x7ffc0000
[  474.019845][   T27] audit: type=1326 audit(1756513110.550:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa778ebe9 code=0x7ffc0000
[  474.071502][   T27] audit: type=1326 audit(1756513110.550:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16815 comm="syz.3.4991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa778ebe9 code=0x7ffc0000
[  474.209002][   T35] usb 3-1: Using ep0 maxpacket: 16
[  474.222388][   T35] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  474.243194][   T35] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  474.267736][   T35] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  474.281950][   T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.296995][   T35] usb 3-1: Product: syz
[  474.309215][   T35] usb 3-1: Manufacturer: syz
[  474.315797][   T35] usb 3-1: SerialNumber: syz
[  474.572059][   T35] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  474.638539][   T35] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  474.667272][   T35] usb 3-1: USB disconnect, device number 30
[  474.705701][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  475.312897][   T27] audit: type=1326 audit(1756513112.010:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  475.361288][   T27] audit: type=1326 audit(1756513112.040:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  475.389743][   T27] audit: type=1326 audit(1756513112.040:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  475.418178][   T27] audit: type=1326 audit(1756513112.040:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16867 comm="syz.2.5014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  475.536099][T16873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5017'.
[  475.575177][T16873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5017'.
[  476.201509][ T5864] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  476.398722][ T5864] usb 4-1: Using ep0 maxpacket: 16
[  476.412199][ T5864] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  476.427244][ T5864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  476.465222][ T5864] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  476.491312][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.514276][ T5864] usb 4-1: Product: syz
[  476.518497][ T5864] usb 4-1: Manufacturer: syz
[  476.533325][ T5864] usb 4-1: SerialNumber: syz
[  476.780775][ T5864] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  476.839214][ T5864] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  476.864235][ T5864] usb 4-1: USB disconnect, device number 23
[  476.900978][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  477.877501][T16931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'.
[  478.097564][T16940] binder: Bad value for 'stats'
[  478.418763][ T5864] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  478.427649][T16954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5056'.
[  478.573604][T16956] loop3: detected capacity change from 0 to 8192
[  478.599701][T16956] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  478.612916][ T5864] usb 1-1: Using ep0 maxpacket: 16
[  478.619123][T16956] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  478.623461][ T5864] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  478.644612][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  478.656566][ T5864] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  478.668810][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.670987][T16956] REISERFS (device loop3): using ordered data mode
[  478.679212][ T5864] usb 1-1: Product: syz
[  478.687764][ T5864] usb 1-1: Manufacturer: syz
[  478.692621][ T5864] usb 1-1: SerialNumber: syz
[  478.699052][T16956] reiserfs: using flush barriers
[  478.717954][T16956] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  478.756967][T16956] REISERFS (device loop3): checking transaction log (loop3)
[  478.780744][T16963] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  478.800924][T16956] REISERFS (device loop3): Using rupasov hash to sort names
[  478.809567][   T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  478.817562][T16956] REISERFS (device loop3): using 3.5.x disk format
[  478.845993][T16956] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  478.888671][T16956] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  478.928757][   T35] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  478.929216][T16956] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  478.948739][ T5864] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  479.005729][T16956] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  479.054935][T16956] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  479.087367][ T5864] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  479.132589][ T5864] usb 1-1: USB disconnect, device number 30
[  479.141265][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  479.173643][T16956] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  479.191606][T16956] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  479.217099][T16956] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  479.308665][   T35] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  479.506508][   T35] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  479.535133][   T35] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  479.557299][   T35] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  479.569743][   T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  479.596749][   T35] usb 2-1: SerialNumber: syz
[  479.841881][   T35] usb 2-1: 0:2 : does not exist
[  479.882652][   T35] usb 2-1: USB disconnect, device number 29
[  479.933553][ T8826] udevd[8826]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  480.238612][T16998] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  480.406059][T17002] netlink: 54775 bytes leftover after parsing attributes in process `syz.2.5078'.
[  481.326093][T17010] loop3: detected capacity change from 0 to 32768
[  481.605509][T17040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5096'.
[  481.638289][   T35] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  481.846106][   T35] usb 1-1: config index 0 descriptor too short (expected 3133, got 61)
[  481.872016][   T35] usb 1-1: config 0 has an invalid interface number: 156 but max is 1
[  481.894682][   T35] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  481.926315][   T35] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  481.959655][   T35] usb 1-1: config 0 has no interface number 0
[  481.966115][   T35] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  481.991640][   T35] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  482.018496][   T35] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  482.033998][   T35] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  482.051631][   T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.088567][   T35] usb 1-1: config 0 descriptor??
[  482.116651][   T35] gspca_main: spca561-2.14.0 probing abcd:cdee
[  482.139779][T17052] vivid-000: disconnect
[  482.145142][T17050] vivid-000: reconnect
[  482.338848][   T35] spca561: probe of 1-1:0.156 failed with error -22
[  482.346805][   T35] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  482.373215][   T35] usb 1-1: MIDIStreaming interface descriptor not found
[  482.508182][   T35] usb 1-1: USB disconnect, device number 31
[  482.857335][T17062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5107'.
[  483.098659][T17070] usb usb8: usbfs: process 17070 (syz.3.5110) did not claim interface 0 before use
[  483.311518][T17076] netlink: 54775 bytes leftover after parsing attributes in process `syz.3.5113'.
[  483.324121][T17074] overlayfs: workdir and upperdir must be separate subtrees
[  483.753935][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5120'.
[  483.947857][   T35] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  484.160476][   T35] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  484.187749][   T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.216200][   T35] usb 1-1: Product: syz
[  484.226319][   T35] usb 1-1: Manufacturer: syz
[  484.236435][   T35] usb 1-1: SerialNumber: syz
[  484.249231][   T35] usb 1-1: config 0 descriptor??
[  484.267153][   T35] ch341 1-1:0.0: ch341-uart converter detected
[  484.686792][   T35] usb 1-1: failed to send control message: -71
[  484.703535][   T35] ch341-uart: probe of ttyUSB0 failed with error -71
[  484.725428][   T35] usb 1-1: USB disconnect, device number 32
[  484.755982][   T35] ch341 1-1:0.0: device disconnected
[  484.769154][T17093] loop3: detected capacity change from 0 to 40427
[  484.799319][T17093] F2FS-fs (loop3): invalid crc value
[  484.826096][T17093] F2FS-fs (loop3): Found nat_bits in checkpoint
[  484.988280][T17093] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  485.054260][   T27] audit: type=1800 audit(1756513121.752:205): pid=17093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5122" name="file1" dev="loop3" ino=10 res=0 errno=0
[  485.128417][ T5789] syz-executor: attempt to access beyond end of device
[  485.128417][ T5789] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  485.153028][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  485.377850][    T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  485.562076][    T8] usb 3-1: Using ep0 maxpacket: 16
[  485.583743][    T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  485.607635][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.630707][    T8] usb 3-1: Product: syz
[  485.635029][    T8] usb 3-1: Manufacturer: syz
[  485.663372][    T8] usb 3-1: SerialNumber: syz
[  485.674992][    T8] usb 3-1: config 0 descriptor??
[  485.689254][    T8] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  486.104637][    T8] usb 3-1: clie_3_5_startup: get interface number bad return length: 0
[  486.127815][    T8] visor: probe of 3-1:0.0 failed with error -5
[  486.356054][    T8] usb 3-1: USB disconnect, device number 31
[  487.185770][T17158] raw_sendmsg: syz.2.5152 forgot to set AF_INET. Fix it!
[  487.586450][T17172] loop3: detected capacity change from 0 to 512
[  487.614137][T17172] EXT4-fs: Ignoring removed orlov option
[  487.694109][T17172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  487.733606][T17180] syz.2.5162 (17180): drop_caches: 4
[  487.740074][T17172] ext4 filesystem being mounted at /1333/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.883893][T17172] EXT4-fs: Cannot change journaled quota options when quota turned on
[  488.023168][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.251741][   T27] audit: type=1326 audit(1756513126.952:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  490.316738][   T27] audit: type=1326 audit(1756513126.982:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  490.375510][   T27] audit: type=1326 audit(1756513126.982:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  490.430249][   T27] audit: type=1326 audit(1756513126.982:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  490.461457][T17271] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  490.494629][   T27] audit: type=1326 audit(1756513126.982:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  490.577565][   T27] audit: type=1326 audit(1756513126.982:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  490.652972][   T27] audit: type=1326 audit(1756513126.982:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.1.5203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  492.003710][T17298] loop3: detected capacity change from 0 to 32768
[  492.063455][T17298] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  492.099220][T17298] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  492.154822][T17298] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  492.188395][    T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  492.200903][    T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  492.324572][    T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms
[  492.356108][    T8] gfs2: fsid=syz:syz.0: jid=0: Done
[  492.374509][T17298] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  492.448453][T17311] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  492.454972][T17311] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  492.471524][T17311] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  492.483451][T17311] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  492.492547][T17311] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  492.514253][T17311] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  492.534959][T17311] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  492.589898][T17311] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  492.622812][T17311] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  492.656923][T17311] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  492.692487][T17311] comedi comedi3: 8255: I/O port conflict (0xd4,4)
[  492.742950][T17311] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  493.007757][ T2130] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  493.209215][ T2130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.236766][ T2130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.253511][ T2130] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  493.276746][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.295322][T17298] gfs2: fsid=syz:syz.0: fatal: invalid metadata block
[  493.295322][T17298]   bh = 2049 (type: exp=14, found=8)
[  493.295322][T17298]   function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1417
[  493.332261][ T2130] usb 3-1: config 0 descriptor??
[  493.349034][T17298] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  493.362476][T17298] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  493.378339][T17298] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  493.402470][T17298] gfs2: fsid=syz:syz.0: File system withdrawn
[  493.414693][T17298] CPU: 1 PID: 17298 Comm: syz.3.5217 Not tainted syzkaller #0
[  493.422225][T17298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  493.432415][T17298] Call Trace:
[  493.435771][T17298]  <TASK>
[  493.438752][T17298]  dump_stack_lvl+0x16c/0x230
[  493.443490][T17298]  ? kobject_uevent_env+0x363/0x8c0
[  493.448755][T17298]  ? show_regs_print_info+0x20/0x20
[  493.454001][T17298]  ? load_image+0x3b0/0x3b0
[  493.458550][T17298]  ? kobject_uevent_env+0x363/0x8c0
[  493.463789][T17298]  gfs2_withdraw+0xe50/0x13b0
[  493.468503][T17298]  ? gfs2_lm+0x220/0x220
[  493.472771][T17298]  ? __wait_on_bit+0x2d0/0x2d0
[  493.477559][T17298]  ? bit_waitqueue+0x30/0x30
[  493.482183][T17298]  gfs2_metatype_check_ii+0x78/0x90
[  493.487493][T17298]  gfs2_quota_init+0xc85/0xe80
[  493.492303][T17298]  ? qd_put+0x1a0/0x1a0
[  493.496479][T17298]  ? inode_go_inval+0x12d/0x2b0
[  493.501372][T17298]  gfs2_make_fs_rw+0x3f5/0x530
[  493.506151][T17298]  ? gfs2_jdesc_check+0x2a0/0x2a0
[  493.511205][T17298]  ? do_raw_spin_lock+0x121/0x2c0
[  493.516278][T17298]  ? __rwlock_init+0x150/0x150
[  493.521076][T17298]  ? do_raw_spin_unlock+0x121/0x230
[  493.526309][T17298]  gfs2_reconfigure+0x612/0xb10
[  493.531306][T17298]  reconfigure_super+0x21e/0x880
[  493.536305][T17298]  vfs_fsconfig_locked+0x16c/0x320
[  493.541451][T17298]  __se_sys_fsconfig+0x700/0x850
[  493.546422][T17298]  ? __x64_sys_fsconfig+0xc0/0xc0
[  493.551491][T17298]  ? lockdep_hardirqs_on+0x98/0x150
[  493.556720][T17298]  ? __x64_sys_fsconfig+0x20/0xc0
[  493.561769][T17298]  do_syscall_64+0x55/0xb0
[  493.566205][T17298]  ? clear_bhb_loop+0x40/0x90
[  493.570898][T17298]  ? clear_bhb_loop+0x40/0x90
[  493.575593][T17298]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  493.581521][T17298] RIP: 0033:0x7f2aa778ebe9
[  493.585958][T17298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  493.605581][T17298] RSP: 002b:00007f2aa855d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  493.614014][T17298] RAX: ffffffffffffffda RBX: 00007f2aa79c5fa0 RCX: 00007f2aa778ebe9
[  493.622002][T17298] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004
[  493.629989][T17298] RBP: 00007f2aa7811e19 R08: 0000000000000000 R09: 0000000000000000
[  493.637978][T17298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  493.645959][T17298] R13: 00007f2aa79c6038 R14: 00007f2aa79c5fa0 R15: 00007ffd01c103d8
[  493.653962][T17298]  </TASK>
[  493.657078][    C1] vkms_vblank_simulate: vblank timer overrun
[  493.930611][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  493.947595][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  493.955232][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  493.967954][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  493.975530][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  493.987065][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  494.022059][ T2130] steelseries 0003:1038:12B6.0017: unknown main item tag 0x0
[  494.048003][ T2130] steelseries 0003:1038:12B6.0017: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0
[  494.144978][ T2130] steelseries 0003:1038:12B6.0017: hid_hw_raw_request() failed with -71
[  494.185154][ T2130] usb 3-1: USB disconnect, device number 32
[  494.240151][T17355] netlink: 'syz.3.5233': attribute type 2 has an invalid length.
[  494.321333][T17349] fido_id[17349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  494.563641][T17367] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5240'.
[  495.012033][T17389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5247'.
[  495.461127][T17402] loop3: detected capacity change from 0 to 256
[  495.584863][   T27] audit: type=1326 audit(1756513132.283:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17404 comm="syz.0.5254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f379b18ebe9 code=0x0
[  495.639149][T17402] FAT-fs (loop3): Directory bread(block 64) failed
[  495.645748][T17402] FAT-fs (loop3): Directory bread(block 65) failed
[  495.671422][T17402] FAT-fs (loop3): Directory bread(block 66) failed
[  495.684414][T17402] FAT-fs (loop3): Directory bread(block 67) failed
[  495.694011][T17402] FAT-fs (loop3): Directory bread(block 68) failed
[  495.711596][T17402] FAT-fs (loop3): Directory bread(block 69) failed
[  495.728865][T17402] FAT-fs (loop3): Directory bread(block 70) failed
[  495.747636][T17402] FAT-fs (loop3): Directory bread(block 71) failed
[  495.764023][T17402] FAT-fs (loop3): Directory bread(block 72) failed
[  495.781763][T17402] FAT-fs (loop3): Directory bread(block 73) failed
[  497.904077][T17464] loop3: detected capacity change from 0 to 1024
[  497.938248][T17464] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  497.979070][T17464] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  498.040088][T17464] EXT4-fs error (device loop3): ext4_get_journal_inode:5807: inode #32: comm syz.3.5271: iget: special inode unallocated
[  498.078985][T17464] EXT4-fs (loop3): no journal found
[  498.116615][T17464] EXT4-fs (loop3): can't get journal size
[  498.148966][T17464] EXT4-fs (loop3): filesystem is read-only
[  498.200185][T17464] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  498.409388][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.126674][ T2130] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  499.316431][ T2130] usb 3-1: Using ep0 maxpacket: 16
[  499.328731][ T2130] usb 3-1: unable to get BOS descriptor or descriptor too short
[  499.337812][ T2130] usb 3-1: config 9 has an invalid interface number: 48 but max is 0
[  499.346540][ T2130] usb 3-1: config 9 has no interface number 0
[  499.352703][ T2130] usb 3-1: config 9 interface 48 has no altsetting 0
[  499.363155][ T2130] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  499.372584][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.380974][ T2130] usb 3-1: Product: syz
[  499.385181][ T2130] usb 3-1: Manufacturer: syz
[  499.389865][ T2130] usb 3-1: SerialNumber: syz
[  499.612461][ T2130] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  500.014551][ T2130] gspca_vc032x: reg_w err -71
[  500.019631][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.024938][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.030476][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.035791][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.041245][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.047045][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.052366][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.058407][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.063729][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.069192][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.074521][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.080344][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.085753][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.091210][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.096688][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.102002][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.107643][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.112962][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.118458][ T2130] gspca_vc032x: I2c Bus Busy Wait 00
[  500.123772][ T2130] gspca_vc032x: Unknown sensor...
[  500.128940][ T2130] vc032x: probe of 3-1:9.48 failed with error -22
[  500.137809][ T2130] usb 3-1: USB disconnect, device number 33
[  501.039111][T17531] ptrace attach of "./syz-executor exec"[5797] was attempted by "\x22"[17531]
[  501.176560][T17533] netlink: 'syz.0.5300': attribute type 5 has an invalid length.
[  501.255540][T17538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5302'.
[  501.283209][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'.
[  501.553998][T17549] netlink: 4108 bytes leftover after parsing attributes in process `syz.1.5308'.
[  501.590851][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  501.597773][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  501.626873][T17551] loop3: detected capacity change from 0 to 256
[  501.634387][T17551] exfat: Deprecated parameter 'namecase'
[  501.752203][T17551] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  502.583972][T17589] ptrace attach of "./syz-executor exec"[5792] was attempted by "\x22"[17589]
[  503.649586][   T27] audit: type=1326 audit(1756513140.354:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  503.671971][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.732406][   T27] audit: type=1326 audit(1756513140.384:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  503.754934][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.812031][   T27] audit: type=1326 audit(1756513140.394:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  503.872182][   T27] audit: type=1326 audit(1756513140.394:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  503.946233][T17635] netlink: 'syz.1.5348': attribute type 5 has an invalid length.
[  503.955660][   T27] audit: type=1326 audit(1756513140.394:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  504.030682][   T27] audit: type=1326 audit(1756513140.394:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  504.053157][    C0] vkms_vblank_simulate: vblank timer overrun
[  504.122361][   T27] audit: type=1326 audit(1756513140.394:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.1.5346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960978ebe9 code=0x7ffc0000
[  504.389450][T17643] program syz.1.5352 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  504.706889][T17632] loop3: detected capacity change from 0 to 32768
[  504.789748][T17632] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.865862][T17632] XFS (loop3): Ending clean mount
[  504.935458][    T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  505.027381][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  505.127074][    T8] usb 2-1: Using ep0 maxpacket: 8
[  505.145879][   T55] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  505.167930][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  505.182930][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  505.212384][    T8] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  505.232451][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.257203][    T8] usb 2-1: config 0 descriptor??
[  505.361443][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  505.382017][   T55] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  505.415954][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  505.437239][   T55] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  505.474155][   T55] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  505.484021][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.496183][   T55] usb 3-1: config 0 descriptor??
[  505.711725][    T8] nti 0003:0757:0A00.0018: unknown main item tag 0x3
[  505.743271][   T55] hdpvr 3-1:0.0: firmware version 0x51 dated 
[  505.752632][    T8] nti 0003:0757:0A00.0018: unknown main item tag 0x2
[  505.765289][   T55] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  505.775519][    T8] nti 0003:0757:0A00.0018: unknown main item tag 0x3
[  505.782296][    T8] nti 0003:0757:0A00.0018: unknown global tag 0xd
[  505.799566][    T8] nti 0003:0757:0A00.0018: item 0 0 1 13 parsing failed
[  505.816291][    T8] nti: probe of 0003:0757:0A00.0018 failed with error -22
[  505.951543][   T55] hdpvr 3-1:0.0: device init failed
[  505.958773][   T55] hdpvr: probe of 3-1:0.0 failed with error -12
[  505.973098][    T8] usb 2-1: USB disconnect, device number 30
[  506.013652][   T55] usb 3-1: USB disconnect, device number 34
[  506.615345][   T55] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  506.745574][T17715] vlan2: entered promiscuous mode
[  506.755479][T17715] bridge0: entered promiscuous mode
[  506.822232][   T55] usb 1-1: Using ep0 maxpacket: 16
[  506.870230][   T55] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  506.883731][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.913067][   T55] usb 1-1: Product: syz
[  506.923053][   T55] usb 1-1: Manufacturer: syz
[  506.953430][   T55] usb 1-1: SerialNumber: syz
[  506.974799][   T55] usb 1-1: config 0 descriptor??
[  506.997483][   T55] visor 1-1:0.0: Sony Clie 3.5 converter detected
[  507.183979][   T27] audit: type=1326 audit(1756513143.884:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  507.206412][    C0] vkms_vblank_simulate: vblank timer overrun
[  507.253093][   T27] audit: type=1326 audit(1756513143.914:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  507.299731][   T27] audit: type=1326 audit(1756513143.924:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17725 comm="syz.2.5385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  507.436488][T17735] overlayfs: workdir and upperdir must be separate subtrees
[  507.450228][   T55] usb 1-1: clie_3_5_startup: get interface number bad return length: 0
[  507.469662][   T55] visor: probe of 1-1:0.0 failed with error -5
[  507.637599][T17741] loop3: detected capacity change from 0 to 256
[  507.672476][T17741] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  507.708865][   T55] usb 1-1: USB disconnect, device number 33
[  507.724420][T17741] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  507.762146][T17741] exFAT-fs (loop3): Filesystem has been set read-only
[  508.466745][T17768] tmpfs: Cannot retroactively limit inodes
[  511.734931][    T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  511.758880][T17893] can0: slcan on ptm0.
[  511.895251][T17892] can0 (unregistered): slcan off ptm0.
[  511.935612][    T8] usb 1-1: Using ep0 maxpacket: 16
[  511.967623][    T8] usb 1-1: unable to get BOS descriptor or descriptor too short
[  512.001259][    T8] usb 1-1: config 9 has an invalid interface number: 48 but max is 0
[  512.021469][    T8] usb 1-1: config 9 has no interface number 0
[  512.041304][    T8] usb 1-1: config 9 interface 48 has no altsetting 0
[  512.071232][    T8] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b
[  512.094757][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.146807][    T8] usb 1-1: Product: syz
[  512.154362][    T8] usb 1-1: Manufacturer: syz
[  512.180615][    T8] usb 1-1: SerialNumber: syz
[  512.426944][    T8] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  512.842158][    T8] gspca_vc032x: reg_w err -71
[  512.852819][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  512.875036][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  512.891409][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  512.910935][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  512.944818][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  512.968617][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  512.973974][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.011278][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.030633][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.052635][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.059997][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.074454][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.082271][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.105100][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.121457][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.134434][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.152781][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.164459][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.169800][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  513.214891][    T8] gspca_vc032x: Unknown sensor...
[  513.220071][    T8] vc032x: probe of 1-1:9.48 failed with error -22
[  513.250139][    T8] usb 1-1: USB disconnect, device number 34
[  513.334967][   T35] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  513.457578][T17934] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5479'.
[  513.529175][   T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  513.550040][   T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  513.566647][   T35] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  513.599861][   T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.620862][   T35] usb 3-1: config 0 descriptor??
[  514.080883][   T35] hid (null): report_id 393985501 is invalid
[  514.098725][   T35] macally 0003:060B:0001.0019: report_id 393985501 is invalid
[  514.140486][   T35] macally 0003:060B:0001.0019: item 0 4 1 8 parsing failed
[  514.175224][   T35] macally: probe of 0003:060B:0001.0019 failed with error -22
[  514.287760][   T35] usb 3-1: USB disconnect, device number 35
[  514.473561][T17970] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5492'.
[  514.561059][T17974] loop3: detected capacity change from 0 to 256
[  514.604446][T17974] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  514.652796][T17974] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  515.899300][T18008] netlink: 'syz.2.5508': attribute type 1 has an invalid length.
[  516.161644][T18018] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8)
[  516.192948][T18020] usb usb8: usbfs: process 18020 (syz.2.5514) did not claim interface 4 before use
[  517.048679][T18054] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  517.154735][ T2130] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  517.304156][   T35] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  517.331856][T18064] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5536'.
[  517.357492][ T2130] usb 4-1: config 0 has an invalid interface number: 145 but max is 0
[  517.374333][ T2130] usb 4-1: config 0 has no interface number 0
[  517.394806][ T2130] usb 4-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00
[  517.419452][ T2130] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.434259][ T2130] usb 4-1: Product: syz
[  517.444047][ T2130] usb 4-1: Manufacturer: syz
[  517.448981][ T2130] usb 4-1: SerialNumber: syz
[  517.469449][ T2130] usb 4-1: config 0 descriptor??
[  517.489368][ T2130] usb-storage 4-1:0.145: USB Mass Storage device detected
[  517.497180][   T35] usb 2-1: Using ep0 maxpacket: 8
[  517.505478][   T35] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  517.528771][   T35] usb 2-1: config 0 interface 0 has no altsetting 0
[  517.545536][ T2130] usb-storage 4-1:0.145: device ignored
[  517.571644][   T35] usb 2-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[  517.614384][   T35] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.655368][T18074] Bluetooth: MGMT ver 1.22
[  517.665568][   T35] usb 2-1: config 0 descriptor??
[  517.733052][ T2130] usb 4-1: USB disconnect, device number 24
[  518.127900][   T35] chicony 0003:04F2:0418.001A: hidraw0: USB HID v0.04 Device [HID 04f2:0418] on usb-dummy_hcd.1-1/input0
[  518.400895][ T2130] usb 2-1: USB disconnect, device number 31
[  518.642666][T18097] loop3: detected capacity change from 0 to 1024
[  518.668225][T18097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  518.728373][T18097] ext4 filesystem being mounted at /1430/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  518.763957][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  518.763974][   T27] audit: type=1800 audit(1756513155.465:229): pid=18097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5551" name="file1" dev="loop3" ino=15 res=0 errno=0
[  518.810863][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  519.458330][T18121] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[  520.294264][T18142] loop3: detected capacity change from 0 to 256
[  520.301675][   T27] audit: type=1800 audit(1756513156.986:230): pid=18139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5576" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  520.567162][T18147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5570'.
[  521.175396][T18167] loop3: detected capacity change from 0 to 512
[  521.251649][T18167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  521.330216][T18167] ext4 filesystem being mounted at /1438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  521.471028][T18167] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 3: comm syz.3.5582: lblock 8 mapped to illegal pblock 3 (length 26)
[  521.530493][T18167] EXT4-fs (loop3): Remounting filesystem read-only
[  521.639319][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.043854][   T35] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  522.235643][   T35] usb 3-1: Using ep0 maxpacket: 16
[  522.245782][   T35] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  522.270561][   T35] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  522.282187][   T35] usb 3-1: config 0 interface 0 has no altsetting 0
[  522.290341][   T35] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  522.300755][   T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.314936][   T35] usb 3-1: config 0 descriptor??
[  522.762603][   T35] microsoft 0003:045E:009D.001B: collection stack underflow
[  522.783235][   T35] microsoft 0003:045E:009D.001B: item 0 2 0 12 parsing failed
[  522.803166][   T35] microsoft 0003:045E:009D.001B: parse failed
[  522.819864][   T35] microsoft: probe of 0003:045E:009D.001B failed with error -22
[  522.837658][   T27] audit: type=1800 audit(1756513159.546:231): pid=18211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5603" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  522.996274][ T2130] usb 3-1: USB disconnect, device number 36
[  524.873764][T18245] loop3: detected capacity change from 0 to 32768
[  524.921157][T18245] XFS: noikeep mount option is deprecated.
[  524.961105][T18245] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  525.119078][T18245] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  525.166640][T18285] netlink: 204 bytes leftover after parsing attributes in process `syz.1.5633'.
[  525.175982][T18285] netlink: 'syz.1.5633': attribute type 3 has an invalid length.
[  525.179516][T18245] XFS (loop3): Starting recovery (logdev: internal)
[  525.240756][T18245] XFS (loop3): Ending recovery (logdev: internal)
[  525.424221][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  526.382111][T18310] vivid-004: disconnect
[  526.393816][T18309] vivid-004: reconnect
[  527.014575][   T27] audit: type=1326 audit(1756513163.726:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.071126][   T27] audit: type=1326 audit(1756513163.726:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.147251][   T27] audit: type=1326 audit(1756513163.726:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.232306][   T27] audit: type=1326 audit(1756513163.726:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.319181][   T27] audit: type=1326 audit(1756513163.726:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.356340][   T27] audit: type=1326 audit(1756513163.746:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.397215][   T27] audit: type=1326 audit(1756513163.746:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18332 comm="syz.2.5651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8abd8ebe9 code=0x7ffc0000
[  527.423061][   T55] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  527.643111][   T55] usb 2-1: Using ep0 maxpacket: 16
[  527.650937][   T55] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  527.701246][   T55] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[  527.742998][   T55] usb 2-1: config 0 interface 0 has no altsetting 0
[  527.749688][   T55] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  527.783657][   T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.806235][   T55] usb 2-1: config 0 descriptor??
[  527.962880][ T5781] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  528.161428][ T5781] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  528.174400][ T5781] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  528.190251][ T5781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.201849][ T5781] usb 1-1: config 0 descriptor??
[  528.224428][T18352] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  528.244879][   T55] microsoft 0003:045E:009D.001C: collection stack underflow
[  528.268936][   T55] microsoft 0003:045E:009D.001C: item 0 2 0 12 parsing failed
[  528.283649][   T55] microsoft 0003:045E:009D.001C: parse failed
[  528.291872][   T55] microsoft: probe of 0003:045E:009D.001C failed with error -22
[  528.293786][   T35] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  528.463266][ T2130] usb 2-1: USB disconnect, device number 32
[  528.487909][   T35] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  528.501175][   T35] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  528.510794][   T35] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.530976][   T35] usb 4-1: config 0 descriptor??
[  528.710801][ T5781] kye 0003:0458:500F.001D: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  528.723110][ T5781] kye 0003:0458:500F.001D: unknown main item tag 0x2
[  528.732143][ T5781] kye 0003:0458:500F.001D: hidraw0: USB HID v0.05 Device [HID 0458:500f] on usb-dummy_hcd.0-1/input0
[  528.743678][ T5781] kye 0003:0458:500F.001D: tablet-enabling feature report not found
[  528.751708][ T5781] kye 0003:0458:500F.001D: tablet enabling failed
[  528.936030][ T5781] usb 1-1: USB disconnect, device number 35
[  528.973059][   T35] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.001E/input/input34
[  529.163510][   T35] uclogic 0003:28BD:0933.001E: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0
[  529.233651][   T35] usb 4-1: USB disconnect, device number 25
[  529.381008][T18381] fido_id[18381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  530.461585][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5678'.
[  530.883781][T18430] fuse: blksize only supported for fuseblk
[  532.352916][   T55] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  532.389129][T18484] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.5704'.
[  532.580095][   T55] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  532.605182][   T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.632418][   T55] usb 4-1: Product: syz
[  532.646872][   T55] usb 4-1: Manufacturer: syz
[  532.651543][   T55] usb 4-1: SerialNumber: syz
[  532.689843][   T55] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  532.718265][ T5781] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  532.850497][   T27] audit: type=1326 audit(1756513169.557:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18494 comm="syz.0.5709" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f379b18ebe9 code=0x0
[  533.301850][ T2130] usb 4-1: USB disconnect, device number 26
[  534.142206][ T5781] usb 4-1: Service connection timeout for: 256
[  534.155388][ T5781] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  534.192239][ T5781] ath9k_htc: Failed to initialize the device
[  534.208086][ T2130] usb 4-1: ath9k_htc: USB layer deinitialized
[  534.582042][   T55] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  534.776507][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.812486][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  534.832113][   T55] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  534.852072][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.870586][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5733'.
[  534.875359][   T55] usb 1-1: config 0 descriptor??
[  535.090172][T18578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5736'.
[  535.341712][   T55] hid-steam 0003:28DE:1142.001F: unknown main item tag 0x0
[  535.379286][   T55] hid-steam 0003:28DE:1142.001F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  535.480215][   T55] hid-steam 0003:28DE:1142.001F: Steam wireless receiver connected
[  535.510350][   T55] hid-steam 0003:28DE:1142.001F: No HID_FEATURE_REPORT submitted -  nothing to read
[  535.549127][   T55] hid-steam 0003:28DE:1142.0020: unknown main item tag 0x0
[  535.584997][T18596] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  535.615695][T18596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  535.655595][   T55] hid-steam 0003:28DE:1142.0020: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  535.731361][   T55] usb 1-1: USB disconnect, device number 36
[  535.765675][   T55] hid-steam 0003:28DE:1142.001F: Steam wireless receiver disconnected
[  535.905705][T18600] fido_id[18600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  536.474503][T18628] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.991259][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5759'.
[  537.031827][T18645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5759'.
[  537.040770][T18645] netlink: 'syz.0.5759': attribute type 7 has an invalid length.
[  537.150124][T18651] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5761'.
[  537.192527][T18651] netlink: 'syz.2.5761': attribute type 5 has an invalid length.
[  537.432443][T18663] netlink: 27 bytes leftover after parsing attributes in process `syz.2.5765'.
[  538.008596][T18689] loop3: detected capacity change from 0 to 128
[  538.029329][T18689] VFS: Found a Xenix FS (block size = 512) on device loop3
[  538.115036][ T5789] sysv_free_block: trying to free block not in datazone
[  538.141949][ T5789] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  538.261883][   T55] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  538.454046][   T55] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  538.464662][T18700] loop3: detected capacity change from 0 to 16
[  538.482190][   T55] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  538.505751][   T55] usb 3-1: config 220 has no interface number 2
[  538.513313][T18700] erofs: (device loop3): mounted with root inode @ nid 36.
[  538.541142][   T55] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  538.552784][T18700] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  538.564779][   T55] usb 3-1: config 220 interface 0 has no altsetting 0
[  538.582565][   T55] usb 3-1: config 220 interface 76 has no altsetting 0
[  538.589612][   T55] usb 3-1: config 220 interface 1 has no altsetting 0
[  538.619016][T18700] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -46 in[60, 4036] out[1851]
[  538.633450][T18700] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  538.647391][   T55] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  538.670423][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.689623][   T55] usb 3-1: Product: syz
[  538.698404][   T55] usb 3-1: Manufacturer: syz
[  538.706078][   T55] usb 3-1: SerialNumber: syz
[  538.745826][T18700] block device autoloading is deprecated and will be removed.
[  538.987941][   T55] usb 3-1: selecting invalid altsetting 0
[  539.009864][   T55] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  539.038607][   T55] usb 3-1: No valid video chain found.
[  539.112988][   T55] usb 3-1: selecting invalid altsetting 0
[  539.118944][   T55] usbtest: probe of 3-1:220.1 failed with error -22
[  539.136450][   T55] usb 3-1: USB disconnect, device number 37
[  539.696867][T18723] netlink: 'syz.3.5796': attribute type 4 has an invalid length.
[  539.709267][T18723] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5796'.
[  541.248301][T18763] ALSA: mixer_oss: invalid OSS volume 'LIøÄ'
[  541.622785][T18770] syz.0.5817[18770] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  541.622934][T18770] syz.0.5817[18770] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  541.832019][T18761] loop3: detected capacity change from 0 to 32768
[  541.857433][T18761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5813 (18761)
[  541.874842][T18761] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  541.907713][T18761] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  541.936286][T18761] BTRFS info (device loop3): enabling ssd optimizations
[  541.948162][T18761] BTRFS info (device loop3): using spread ssd allocation scheme
[  541.960227][T18761] BTRFS info (device loop3): using free space tree
[  542.038195][T18791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5822'.
[  542.052621][ T2130] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  542.065591][T18761] BTRFS info (device loop3): auto enabling async discard
[  542.065685][T18791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5822'.
[  542.271607][ T2130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10
[  542.295815][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  542.301217][ T2130] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  542.348687][ T2130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.370445][ T2130] usb 1-1: config 0 descriptor??
[  542.435747][T18800] ==================================================================
[  542.443874][T18800] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6b2/0x8d0
[  542.451989][T18800] Read of size 2 at addr ffff88802ec4ad22 by task syz.2.5826/18800
[  542.459905][T18800] 
[  542.462259][T18800] CPU: 0 PID: 18800 Comm: syz.2.5826 Not tainted syzkaller #0
[  542.469746][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  542.479854][T18800] Call Trace:
[  542.483158][T18800]  <TASK>
[  542.486114][T18800]  dump_stack_lvl+0x16c/0x230
[  542.490835][T18800]  ? __lock_acquire+0x7c80/0x7c80
[  542.495905][T18800]  ? show_regs_print_info+0x20/0x20
[  542.501141][T18800]  ? load_image+0x3b0/0x3b0
[  542.505710][T18800]  ? __virt_addr_valid+0x469/0x540
[  542.510870][T18800]  print_report+0xac/0x220
[  542.515345][T18800]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  542.516821][T18802] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5827'.
[  542.520654][T18800]  kasan_report+0x117/0x150
[  542.520685][T18800]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  542.520715][T18800]  __xfrm_state_lookup+0x6b2/0x8d0
[  542.544708][T18800]  ? xfrm_state_lookup+0x1a0/0x1a0
[  542.549870][T18800]  ? ipcomp4_init_state+0x257/0x9f0
[  542.555127][T18800]  ? __xfrm_init_state+0xe92/0x11c0
[  542.560380][T18800]  ? xfrm_state_add+0xf6/0xe20
[  542.565188][T18800]  xfrm_state_add+0x25e/0xe20
[  542.569914][T18800]  pfkey_add+0x1e93/0x2da0
[  542.574410][T18800]  ? pfkey_getspi+0xed0/0xed0
[  542.579140][T18800]  ? kmem_cache_free+0xf8/0x280
[  542.584046][T18800]  pfkey_sendmsg+0xbed/0x1050
[  542.588799][T18800]  ? pfkey_release+0x320/0x320
[  542.593650][T18800]  ? aa_sock_msg_perm+0x94/0x150
[  542.598634][T18800]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  542.603960][T18800]  ? security_socket_sendmsg+0x80/0xa0
[  542.609471][T18800]  ? pfkey_release+0x320/0x320
[  542.614279][T18800]  ____sys_sendmsg+0x5bf/0x950
[  542.619086][T18800]  ? __asan_memset+0x22/0x40
[  542.623718][T18800]  ? __sys_sendmsg_sock+0x30/0x30
[  542.628790][T18800]  ? __import_iovec+0x5f2/0x860
[  542.633695][T18800]  ? import_iovec+0x73/0xa0
[  542.638254][T18800]  ___sys_sendmsg+0x220/0x290
[  542.642976][T18800]  ? __sys_sendmsg+0x270/0x270
[  542.647901][T18800]  __se_sys_sendmsg+0x1a5/0x270
[  542.652807][T18800]  ? __x64_sys_sendmsg+0x80/0x80
[  542.657806][T18800]  ? lockdep_hardirqs_on+0x98/0x150
[  542.663053][T18800]  do_syscall_64+0x55/0xb0
[  542.667520][T18800]  ? clear_bhb_loop+0x40/0x90
[  542.672236][T18800]  ? clear_bhb_loop+0x40/0x90
[  542.676958][T18800]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.682904][T18800] RIP: 0033:0x7fe8abd8ebe9
[  542.687358][T18800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.707008][T18800] RSP: 002b:00007fe8accd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.715468][T18800] RAX: ffffffffffffffda RBX: 00007fe8abfc5fa0 RCX: 00007fe8abd8ebe9
[  542.723484][T18800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  542.731494][T18800] RBP: 00007fe8abe11e19 R08: 0000000000000000 R09: 0000000000000000
[  542.739509][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.747514][T18800] R13: 00007fe8abfc6038 R14: 00007fe8abfc5fa0 R15: 00007ffed360e0e8
[  542.755533][T18800]  </TASK>
[  542.758581][T18800] 
[  542.760938][T18800] Allocated by task 17192:
[  542.765385][T18800]  kasan_set_track+0x4e/0x70
[  542.770013][T18800]  __kasan_slab_alloc+0x6c/0x80
[  542.774899][T18800]  slab_post_alloc_hook+0x6e/0x4d0
[  542.780057][T18800]  kmem_cache_alloc+0x11e/0x2e0
[  542.784948][T18800]  xfrm_state_alloc+0x22/0x2a0
[  542.789747][T18800]  __find_acq_core+0x7d8/0x19d0
[  542.794644][T18800]  xfrm_find_acq+0x6a/0x90
[  542.799112][T18800]  xfrm_alloc_userspi+0x57a/0xa90
[  542.804175][T18800]  xfrm_user_rcv_msg+0x596/0x870
[  542.809149][T18800]  netlink_rcv_skb+0x216/0x480
[  542.813946][T18800]  xfrm_netlink_rcv+0x79/0x90
[  542.818666][T18800]  netlink_unicast+0x751/0x8d0
[  542.823468][T18800]  netlink_sendmsg+0x8c1/0xbe0
[  542.828267][T18800]  ____sys_sendmsg+0x5bf/0x950
[  542.833072][T18800]  ___sys_sendmsg+0x220/0x290
[  542.837786][T18800]  __se_sys_sendmsg+0x1a5/0x270
[  542.842681][T18800]  do_syscall_64+0x55/0xb0
[  542.847130][T18800]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  542.853070][T18800] 
[  542.855422][T18800] The buggy address belongs to the object at ffff88802ec4ac00
[  542.855422][T18800]  which belongs to the cache xfrm_state of size 848
[  542.857221][ T2130] aquacomputer_d5next 0003:0C70:F0BD.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.0-1/input0
[  542.869396][T18800] The buggy address is located 290 bytes inside of
[  542.869396][T18800]  freed 848-byte region [ffff88802ec4ac00, ffff88802ec4af50)
[  542.869422][T18800] 
[  542.869426][T18800] The buggy address belongs to the physical page:
[  542.869454][T18800] page:ffffea0000bb1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802ec4a800 pfn:0x2ec48
[  542.915771][T18800] head:ffffea0000bb1200 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  542.924738][T18800] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  542.932767][T18800] page_type: 0xffffffff()
[  542.937137][T18800] raw: 00fff00000000840 ffff888148255c80 dead000000000122 0000000000000000
[  542.945765][T18800] raw: ffff88802ec4a800 0000000080100008 00000001ffffffff 0000000000000000
[  542.954377][T18800] page dumped because: kasan: bad access detected
[  542.960834][T18800] page_owner tracks the page as allocated
[  542.966577][T18800] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5906, tgid 5905 (syz.1.11), ts 91361769821, free_ts 91322811909
[  542.986941][T18800]  post_alloc_hook+0x1cd/0x210
[  542.991812][T18800]  get_page_from_freelist+0x195c/0x19f0
[  542.997408][T18800]  __alloc_pages+0x1e3/0x460
[  543.002039][T18800]  alloc_slab_page+0x5d/0x170
[  543.006761][T18800]  new_slab+0x87/0x2e0
[  543.010872][T18800]  ___slab_alloc+0xc6d/0x12f0
[  543.015604][T18800]  kmem_cache_alloc+0x1b7/0x2e0
[  543.020499][T18800]  xfrm_state_alloc+0x22/0x2a0
[  543.025320][T18800]  __find_acq_core+0x7d8/0x19d0
[  543.030210][T18800]  xfrm_find_acq+0x6a/0x90
[  543.034677][T18800]  xfrm_alloc_userspi+0x57a/0xa90
[  543.035555][ T2130] usb 1-1: USB disconnect, device number 37
[  543.039711][T18800]  xfrm_user_rcv_msg+0x596/0x870
[  543.039731][T18800]  netlink_rcv_skb+0x216/0x480
[  543.039751][T18800]  xfrm_netlink_rcv+0x79/0x90
[  543.060075][T18800]  netlink_unicast+0x751/0x8d0
[  543.064875][T18800]  netlink_sendmsg+0x8c1/0xbe0
[  543.069680][T18800] page last free stack trace:
[  543.074369][T18800]  free_unref_page_prepare+0x7ce/0x8e0
[  543.079871][T18800]  free_unref_page+0x32/0x2e0
[  543.084590][T18800]  __unfreeze_partials+0x1cf/0x210
[  543.089755][T18800]  put_cpu_partial+0x17c/0x250
[  543.094574][T18800]  __slab_free+0x31d/0x410
[  543.099055][T18800]  qlist_free_all+0x75/0xe0
[  543.103599][T18800]  kasan_quarantine_reduce+0x143/0x160
[  543.109103][T18800]  __kasan_slab_alloc+0x22/0x80
[  543.113985][T18800]  slab_post_alloc_hook+0x6e/0x4d0
[  543.119130][T18800]  __kmem_cache_alloc_node+0x13e/0x260
[  543.124630][T18800]  __kmalloc+0xa4/0x240
[  543.128818][T18800]  tomoyo_encode+0x28b/0x540
[  543.133449][T18800]  tomoyo_path_perm+0x2b1/0x4b0
[  543.138352][T18800]  tomoyo_path_symlink+0xa4/0xe0
[  543.143344][T18800]  security_path_symlink+0xe0/0x130
[  543.148594][T18800]  do_symlinkat+0x108/0x3f0
[  543.153128][T18800] 
[  543.155516][T18800] Memory state around the buggy address:
[  543.161178][T18800]  ffff88802ec4ac00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  543.169275][T18800]  ffff88802ec4ac80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  543.177341][T18800] >ffff88802ec4ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  543.185404][T18800]                                ^
[  543.190528][T18800]  ffff88802ec4ad80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  543.198605][T18800]  ffff88802ec4ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  543.206663][T18800] ==================================================================
[  543.214933][T18800] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  543.222153][T18800] CPU: 0 PID: 18800 Comm: syz.2.5826 Not tainted syzkaller #0
[  543.229652][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  543.239734][T18800] Call Trace:
[  543.243083][T18800]  <TASK>
[  543.246035][T18800]  dump_stack_lvl+0x16c/0x230
[  543.250748][T18800]  ? show_regs_print_info+0x20/0x20
[  543.255983][T18800]  ? load_image+0x3b0/0x3b0
[  543.260525][T18800]  panic+0x2c0/0x710
[  543.264470][T18800]  ? bpf_jit_dump+0xd0/0xd0
[  543.269013][T18800]  ? _raw_spin_unlock_irqrestore+0xa9/0x110
[  543.274951][T18800]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  543.280886][T18800]  ? _raw_spin_unlock+0x40/0x40
[  543.285775][T18800]  ? print_memory_metadata+0x314/0x400
[  543.291274][T18800]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  543.296602][T18800]  check_panic_on_warn+0x84/0xa0
[  543.301582][T18800]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  543.306912][T18800]  end_report+0x6f/0x140
[  543.311190][T18800]  kasan_report+0x128/0x150
[  543.315731][T18800]  ? __xfrm_state_lookup+0x6b2/0x8d0
[  543.321054][T18800]  __xfrm_state_lookup+0x6b2/0x8d0
[  543.326237][T18800]  ? xfrm_state_lookup+0x1a0/0x1a0
[  543.331385][T18800]  ? ipcomp4_init_state+0x257/0x9f0
[  543.336632][T18800]  ? __xfrm_init_state+0xe92/0x11c0
[  543.339162][T18804] fido_id[18804]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  543.356096][T18800]  ? xfrm_state_add+0xf6/0xe20
[  543.360896][T18800]  xfrm_state_add+0x25e/0xe20
[  543.365622][T18800]  pfkey_add+0x1e93/0x2da0
[  543.370085][T18800]  ? pfkey_getspi+0xed0/0xed0
[  543.374798][T18800]  ? kmem_cache_free+0xf8/0x280
[  543.379694][T18800]  pfkey_sendmsg+0xbed/0x1050
[  543.384421][T18800]  ? pfkey_release+0x320/0x320
[  543.389328][T18800]  ? aa_sock_msg_perm+0x94/0x150
[  543.394305][T18800]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  543.399628][T18800]  ? security_socket_sendmsg+0x80/0xa0
[  543.405122][T18800]  ? pfkey_release+0x320/0x320
[  543.409944][T18800]  ____sys_sendmsg+0x5bf/0x950
[  543.414743][T18800]  ? __asan_memset+0x22/0x40
[  543.419344][T18800]  ? __sys_sendmsg_sock+0x30/0x30
[  543.424389][T18800]  ? __import_iovec+0x5f2/0x860
[  543.429274][T18800]  ? import_iovec+0x73/0xa0
[  543.433800][T18800]  ___sys_sendmsg+0x220/0x290
[  543.438501][T18800]  ? __sys_sendmsg+0x270/0x270
[  543.443308][T18800]  __se_sys_sendmsg+0x1a5/0x270
[  543.448182][T18800]  ? __x64_sys_sendmsg+0x80/0x80
[  543.453130][T18800]  ? lockdep_hardirqs_on+0x98/0x150
[  543.458357][T18800]  do_syscall_64+0x55/0xb0
[  543.462775][T18800]  ? clear_bhb_loop+0x40/0x90
[  543.467456][T18800]  ? clear_bhb_loop+0x40/0x90
[  543.472145][T18800]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  543.478064][T18800] RIP: 0033:0x7fe8abd8ebe9
[  543.482481][T18800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  543.502110][T18800] RSP: 002b:00007fe8accd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.510561][T18800] RAX: ffffffffffffffda RBX: 00007fe8abfc5fa0 RCX: 00007fe8abd8ebe9
[  543.518632][T18800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  543.526640][T18800] RBP: 00007fe8abe11e19 R08: 0000000000000000 R09: 0000000000000000
[  543.534645][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  543.542649][T18800] R13: 00007fe8abfc6038 R14: 00007fe8abfc5fa0 R15: 00007ffed360e0e8
[  543.550651][T18800]  </TASK>
[  543.554208][T18800] Kernel Offset: disabled
[  543.558564][T18800] Rebooting in 86400 seconds..