last executing test programs:

4.311989101s ago: executing program 0 (id=2818):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006)

3.978503126s ago: executing program 0 (id=2823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x50}, 0x4000040)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00343afbfb020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000002000000000000000000000000ffffe000000117c1"], 0x0)

3.869624769s ago: executing program 2 (id=2824):
memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0)
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0xc4009420, &(0x7f0000000040))

3.73756759s ago: executing program 0 (id=2828):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r0, 0x0)
keyctl$get_security(0x11, r0, 0x0, 0x0)

3.625711882s ago: executing program 4 (id=2830):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.590040651s ago: executing program 0 (id=2831):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000000000", 0x1c)

3.429522843s ago: executing program 0 (id=2834):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYRES16=0x0], 0x1, 0x5eeb, &(0x7f000000e480)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000300)=""/104, 0x68)

3.413214878s ago: executing program 4 (id=2835):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000001200)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRESDEC, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=0x0, @ANYRES8=0x0], 0x5, 0x6fe, &(0x7f0000000b00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
ftruncate(r0, 0x8000c178)

3.048742899s ago: executing program 1 (id=2839):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.013146756s ago: executing program 4 (id=2840):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100e5ff00000000000000000005000100070000000900020073797a30000000000c00078008000840000000d00500050002000000050004000000000012000300686173683a6e6574"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

2.568732499s ago: executing program 4 (id=2847):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r0, 0x0, 0x0)

2.100613099s ago: executing program 0 (id=2853):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xc002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0xc, {0xc, 0x0, "8092000000efa9d37219"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.010656243s ago: executing program 2 (id=2855):
r0 = fsopen(&(0x7f0000000040)='cgroup\x00', 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='cpu', 0x0, r1)

1.956635721s ago: executing program 5 (id=2856):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000640)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@utf8}, {@utf8no}, {}, {}, {@shortname_lower}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_lower}, {@shortname_lower}, {@fat=@check_strict}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}]}, 0x1, 0x363, &(0x7f0000000280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000001c0)=""/202, 0xff4)

1.537904465s ago: executing program 3 (id=2857):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f0000000700)={'bond0\x00', 0x3102})

1.468289498s ago: executing program 5 (id=2858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)

1.382047095s ago: executing program 2 (id=2859):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000200), 0x1, 0x53c, &(0x7f00000025c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

1.305774831s ago: executing program 3 (id=2860):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000a40), 0x6, 0x77c, &(0x7f00000002c0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
truncate(&(0x7f0000000040)='./file0\x00', 0x9)

1.305489949s ago: executing program 5 (id=2861):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0)

1.221345814s ago: executing program 5 (id=2862):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001700)={@cgroup=r0, r1, 0x2f, 0x20, 0x4, @void, @void, @void, @value}, 0x20)

1.117071663s ago: executing program 1 (id=2863):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wg2\x00', @random='\x00\x00\x00 \x00'})

1.06270241s ago: executing program 1 (id=2864):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b2308217f05"], 0xffdd)

1.03187126s ago: executing program 5 (id=2865):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000186dd60d5b33204180000fc0000000000000000000000000000000000000000000000000000000000000062"], 0x0)

1.013006516s ago: executing program 3 (id=2866):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000cc0)="1b2fa4110050", 0x0, 0xfffffffc, 0x0, 0x0, 0x0})

907.762668ms ago: executing program 4 (id=2867):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r1, 0x303, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

859.666622ms ago: executing program 1 (id=2868):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x2201, &(0x7f00000000c0))

859.127705ms ago: executing program 5 (id=2869):
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESHEX, @ANYRESDEC], 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0xd8}}, 0x40044)

777.893288ms ago: executing program 3 (id=2870):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
lseek(r0, 0x401, 0x4)

752.166595ms ago: executing program 4 (id=2871):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4432, &(0x7f0000004480)="$eJzs3c9PG1ceAPA3A9lANtmFbA5ZaaW1tJF2tbtCkFNbIpUQEgIJTZU2UdWLY8BJaA2OwFQ95EBvkXqq1EPVQ9RKvXGKOPSa/gm99JieI7WHXlpVikplewyewRYuwtCkn8+B8bzf9nfm+fkwvDhRubuwkltYyRWWcuW52ytnc++VS6uLxRAfkJb9Hzm4/ulMN66Tw772/siuXbj0xs2zIXw1/83Tzc3NzVDVG1oaaXr94w/355qPDXGmTrXd1q3tl7dDCKd2jKuqJ4Tw1pchRCGE80naeHLsDyGcCPW8m/c/vJXbp9E8elI8l38282Bj9Mz0+sON9u89CuHT0t//f2fxu3/1jH77333qHgAAAAAAAAAAAAAAAACA59zk9Ws3Xh8eCY+j0Lse7XxedzI5tns+dnPf/LP7bxYAAAAAAAAAAAAAAAAAAAB+p7af/89FJ1s8/z+RHMfa1N98tftjpHumXrs2cXF4JNn/PdqR/1KS9P35njDYYt/37P7v5zP1W+//vrOfvWqMr9HvQIjiodR5HA8NhfB5svH76ehYXCqvVP53u7y6NL9vw3hupeNf370/FZ1kQ/9O4z+eab/7+///bcfVVD2/tX+X2AstHf+etuW++CDqKP4XMvUOIv7sXTr+vbW0/uYCY/UJoBr/j3p3j/9Epv3uxP/I1qv+kEvNANU1TC5qv14hLR3/+ueamjqTD7Ld/f9zJv4XM+0f1vy/lv0ioqV0/P9US+tLldi+/wfj3e//S5n2DyP+1fGv+f7vSDr+R+uJvakitU+y0/l/MtN+U/x/2s9x34iTcf4lSl0B61E9vd3/qyMtHf++Hfnbv//ijtZ/lzP1D+r3X6Pfxu+/xvT/n6j++4/W0vHvb1uu0/t/KlOv2/P/WG39x16l43+slpZeOw/U/nYa/+lM+92Kf21V0teI//Z88svRevpn1n8dScf/z/XEuLnEWu1vbf0X7b7+v5Jp/zDWf9Xxr8Xd7fVFkY7/8bblqvH/uoPv/6uZet2PfwjD1vp7lo7/ibblavd/3+7xn8nU63b8/93NxgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeA+PJcSBE8VDqPI6HhkK4kJyfDsei2cJ8frZUnnt3JYSJJD0XTkZ3SuXZQim/sFSeL+YLpVJ5LoSLSf6p0BetlMqV/GLh3qWttvqju8XCcmW2WKiEECaT9H+EE422Zhcqi4V7IYTLW3l/jcvL9+4WlvLzC8uvDA8PD4eprTEMRsX3K8WlSr33em4I01t1B6KmwdWyr2yN5Xj0Tnl1ealQqqVfbapTKs8VSk11ZpK8j8NgVFleXZorVIr5UvlOo7/DNJYcJ6auv3n96siO/FtR/Th+sMMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd6PPryJyGE3vpZHEIYa7yIWpV/9KR4Lv9s5sHG6Jnp9YcbT9uVAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBXduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrBL/ygRA1EcgN+MhX8qj2EVks42oogWRgRPoMfwMHoUL+EdLCxsLWRhd4ZdshtIs1t9X/NIfsy8B/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADmuX0anh/bLiLFyf9xxOfr1/dmfl/q+9Xu80cHmJH9uXsYrm/arrx72sovy6+fPi/Tv9+3l1jXs/pdfYz2ZLxPK7XP6eRcU/s2NV/tex4pNxHRl/wi5dw08+4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMEOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UUfRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//sfkf5w==")
creat(&(0x7f0000000000)='./file0\x00', 0x0)
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)="4a49041524a646a31f5e5f9b465a05fbd5931236a21f80f4fe45b6fbbcc496ac01278cebdf03b61f91dfc5e4a96d85bc3db91b6e36eefa0a88ea0cfcefdca8c7f2976e71ec187955bb192c5b38fd99a39f", 0x51, 0x1)

675.64935ms ago: executing program 1 (id=2872):
syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7, 0x5, 0xa, 0x10, 0x3}, 0x0, 0x0})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000300)=""/36, &(0x7f0000000080)=0x24)

493.824096ms ago: executing program 3 (id=2873):
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
connect$pptp(r0, &(0x7f0000000900)={0x18, 0x2, {0x0, @private}}, 0x1e)

432.706335ms ago: executing program 2 (id=2874):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x601}, 0x1c}}, 0x0)

341.164688ms ago: executing program 3 (id=2875):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045009, &(0x7f0000000040)=0x2)

224.910319ms ago: executing program 2 (id=2876):
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9)

62.617505ms ago: executing program 1 (id=2877):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140))

0s ago: executing program 2 (id=2878):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e00010069703667726574617000"], 0x50}}, 0x0)

kernel console output (not intermixed with test programs):


[  258.773579][T10859] FAT-fs (loop4): Directory bread(block 70) failed
[  258.781013][T10859] FAT-fs (loop4): Directory bread(block 71) failed
[  258.781023][T10837] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  258.798266][T10859] FAT-fs (loop4): Directory bread(block 72) failed
[  258.805667][T10859] FAT-fs (loop4): Directory bread(block 73) failed
[  258.838386][T10837] XFS (loop1): Ending clean mount
[  258.856527][T10837] XFS (loop1): Quotacheck needed: Please wait.
[  258.940368][ T5288] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  258.968497][T10837] XFS (loop1): Quotacheck: Done.
[  259.015258][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  259.054016][ T5221] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  259.120633][ T5288] usb 4-1: Using ep0 maxpacket: 16
[  259.142917][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.169129][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.187798][ T5288] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  259.197687][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.211457][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.232076][ T5288] usb 4-1: config 0 descriptor??
[  259.237227][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.268533][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00
[  259.285800][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.318557][T10880] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  259.330975][    T9] usb 3-1: config 0 descriptor??
[  259.670568][ T5288] apple 0003:05AC:027D.0044: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0
[  259.744901][T10896] loop1: detected capacity change from 0 to 128
[  259.901004][ T5288] usb 4-1: USB disconnect, device number 18
[  259.979214][    T9] usb 3-1: USB disconnect, device number 22
[  260.205437][T10888] loop0: detected capacity change from 0 to 40427
[  260.224079][T10888] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  260.239699][T10888] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  260.312508][T10888] F2FS-fs (loop0): Found nat_bits in checkpoint
[  260.452220][T10888] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  260.459308][T10888] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  260.670425][ T5224] syz-executor: attempt to access beyond end of device
[  260.670425][ T5224] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  260.723135][ T5224] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  260.745959][T10924] loop3: detected capacity change from 0 to 4096
[  260.840127][T10933] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  261.002101][T10939] loop5: detected capacity change from 0 to 64
[  261.090225][ T5287] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  261.250123][ T5287] usb 5-1: Using ep0 maxpacket: 16
[  261.256812][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.307710][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.333966][T10948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1953'.
[  261.352162][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  261.390032][ T5287] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00
[  261.419521][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.459051][ T5287] usb 5-1: config 0 descriptor??
[  261.640279][ T1744] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  261.689699][T10961] netlink: 134732 bytes leftover after parsing attributes in process `syz.2.1957'.
[  261.825248][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.858523][ T1744] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.874992][ T5287] wacom 0003:056A:0022.0046: Unknown device_type for 'HID 056a:0022'. Assuming pen.
[  261.900385][ T1744] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  261.934238][ T1744] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.942730][ T5287] wacom 0003:056A:0022.0046: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.4-1/input0
[  261.980046][ T1744] usb 6-1: config 0 descriptor??
[  261.986040][ T5287] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0022.0046/input/input49
[  262.080697][    T9] usb 5-1: USB disconnect, device number 17
[  262.241321][T10985] loop0: detected capacity change from 0 to 1764
[  262.350086][T10993] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1973'.
[  262.360625][ T5234] Bluetooth: hci5: command 0x0406 tx timeout
[  262.401335][T10993] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  262.415122][T10997] loop2: detected capacity change from 0 to 164
[  262.424105][ T1744] input: HID 28bd:0933 Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0047/input/input52
[  262.479060][T10999] loop0: detected capacity change from 0 to 1024
[  262.515868][ T1744] uclogic 0003:28BD:0933.0047: input,hidraw0: USB HID v5.50 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0
[  262.528418][T10999] hfsplus: bad catalog entry type
[  262.616997][   T61] hfsplus: b-tree write err: -5, ino 4
[  262.657626][ T5308] usb 6-1: USB disconnect, device number 15
[  262.748098][T11011] loop4: detected capacity change from 0 to 256
[  262.777403][T11010] sp0: Synchronizing with TNC
[  262.810183][ T1744] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  262.991663][ T1744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.030093][ T1744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.055243][ T1744] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  263.085855][ T1744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.116850][ T1744] usb 4-1: config 0 descriptor??
[  263.249154][T11021] loop4: detected capacity change from 0 to 4096
[  263.255058][T11001] loop1: detected capacity change from 0 to 32768
[  263.276157][T11021] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  263.330199][T11001] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  263.369347][T11021] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  263.562635][ T1744] lg-g15 0003:046D:C222.0048: unknown main item tag 0x0
[  263.598364][T11001] XFS (loop1): Ending clean mount
[  263.607626][ T1744] lg-g15 0003:046D:C222.0048: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0
[  263.634929][T11001] XFS (loop1): Quotacheck needed: Please wait.
[  263.650278][ T5219] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22.
[  263.669468][T11039] loop5: detected capacity change from 0 to 512
[  263.736099][T11039] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  263.736566][T11001] XFS (loop1): Quotacheck: Done.
[  263.751700][T11041] loop4: detected capacity change from 0 to 1024
[  263.780662][ T1744] usb 4-1: USB disconnect, device number 19
[  263.788671][T11041] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  263.817800][T11039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.932473][T11039] EXT4-fs error (device loop5): ext4_add_entry:2435: inode #2: comm syz.5.1992: Directory hole found for htree leaf block 0
[  263.945100][T11025] loop0: detected capacity change from 0 to 32768
[  263.964783][ T5221] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  263.993622][T11037] loop2: detected capacity change from 0 to 32768
[  264.018244][T11039] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  264.035547][T11025] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  264.035547][T11025] 
[  264.132071][T10262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.205541][T11046] loop4: detected capacity change from 0 to 2048
[  264.237468][T11046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  264.792324][T11068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2004'.
[  264.898080][T11075] loop2: detected capacity change from 0 to 512
[  264.921167][T11078] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  264.921167][T11078] The task syz.5.2006 (11078) triggered the difference, watch for misbehavior.
[  264.925448][T11075] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2007: bg 0: block 131: padding at end of block bitmap is not set
[  264.963689][T11075] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  264.979806][T11075] EXT4-fs (loop2): 1 truncate cleaned up
[  265.010886][T11075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.093118][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.140050][ T5286] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  265.300645][ T5286] usb 5-1: Using ep0 maxpacket: 8
[  265.315277][ T5286] usb 5-1: config 0 has no interfaces?
[  265.335558][ T5286] usb 5-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d
[  265.360806][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.381627][ T5286] usb 5-1: Product: syz
[  265.390228][ T5286] usb 5-1: Manufacturer: syz
[  265.402250][ T5286] usb 5-1: SerialNumber: syz
[  265.418272][ T5286] usb 5-1: config 0 descriptor??
[  265.659610][T11082] loop3: detected capacity change from 0 to 32768
[  265.697010][T11082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2009 (11082)
[  265.723613][ T5287] usb 5-1: USB disconnect, device number 18
[  265.749794][T11082] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.780176][T11082] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  265.792233][    T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  265.807164][T11082] BTRFS info (device loop3): using free-space-tree
[  265.847799][T11115] loop5: detected capacity change from 0 to 256
[  265.874272][T11115] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  265.897385][    T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  265.968586][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.998614][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.020732][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0062, bcdDevice= 0.00
[  266.044449][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.063383][    T9] usb 3-1: config 0 descriptor??
[  266.074657][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.076716][ T6283] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.085159][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.127387][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.150100][    T8] usb 2-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00
[  266.169478][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.191312][    T8] usb 2-1: config 0 descriptor??
[  266.495141][    T9] hid-generic 0003:05AC:0062.0049: unbalanced delimiter at end of report description
[  266.533807][    T9] hid-generic 0003:05AC:0062.0049: probe with driver hid-generic failed with error -22
[  266.667646][    T8] wacom 0003:056A:4001.004A: hidraw0: USB HID v0.00 Device [HID 056a:4001] on usb-dummy_hcd.1-1/input0
[  266.726037][  T935] usb 3-1: USB disconnect, device number 23
[  266.951465][    T8] usb 2-1: USB disconnect, device number 21
[  267.001902][T11135] loop0: detected capacity change from 0 to 40427
[  267.037239][T11135] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  267.049122][T11134] loop5: detected capacity change from 0 to 32768
[  267.068432][T11135] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  267.090517][T11134] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2027 (11134)
[  267.106490][T11134] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  267.117296][T11134] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  267.126370][T11134] BTRFS info (device loop5): using free-space-tree
[  267.149308][T11135] F2FS-fs (loop0): Found nat_bits in checkpoint
[  267.363368][T11135] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  267.390265][T11135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  267.430444][T10262] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  267.628402][T11139] loop4: detected capacity change from 0 to 32768
[  267.682737][T11139] XFS: ikeep mount option is deprecated.
[  267.720762][T11139] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  267.741175][T11175] loop2: detected capacity change from 0 to 2048
[  267.786216][T11184] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  267.827974][T11139] XFS (loop4): Ending clean mount
[  267.844577][T11139] XFS (loop4): Quotacheck needed: Please wait.
[  267.935761][T11139] XFS (loop4): Quotacheck: Done.
[  267.995474][   T29] audit: type=1800 audit(1726588842.207:46): pid=11139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2030" name="file1" dev="loop4" ino=1062 res=0 errno=0
[  268.016135][    C1] vkms_vblank_simulate: vblank timer overrun
[  268.120840][ T1744] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  268.143505][ T5219] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  268.160038][ T5287] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  268.308377][ T1744] usb 4-1: Using ep0 maxpacket: 32
[  268.318966][ T1744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.357250][ T1744] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.368610][ T5287] usb 2-1: Using ep0 maxpacket: 16
[  268.383514][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.404662][ T1744] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[  268.421142][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.440467][ T1744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.456249][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  268.479013][ T1744] usb 4-1: config 0 descriptor??
[  268.504132][ T5287] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  268.533713][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.536263][T11204] netlink: 'syz.5.2047': attribute type 1 has an invalid length.
[  268.567508][T11204] netlink: 9364 bytes leftover after parsing attributes in process `syz.5.2047'.
[  268.581299][ T5287] usb 2-1: config 0 descriptor??
[  268.610372][T11204] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2047'.
[  268.912481][ T1744] hid_mf 0003:0079:1801.004B: unknown main item tag 0x0
[  268.955144][ T1744] hid_mf 0003:0079:1801.004B: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.3-1/input0
[  268.981944][ T1744] hid_mf 0003:0079:1801.004B: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  268.987548][T11220] loop5: detected capacity change from 0 to 1024
[  269.045115][ T5287] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.004C/input/input56
[  269.076336][T11224] tipc: Enabling <eth:lo> not permitted
[  269.087610][T11224] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  269.115247][ T1744] usb 4-1: USB disconnect, device number 20
[  269.162247][ T1900] hfsplus: b-tree write err: -5, ino 4
[  269.215389][ T5287] microsoft 0003:045E:07DA.004C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  269.247801][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'.
[  269.260499][ T5287] usb 2-1: USB disconnect, device number 22
[  269.407491][T11238] nbd: must specify a device to reconfigure
[  269.526650][T11244] RDS: rds_bind could not find a transport for fe80::1c, load rds_tcp or rds_rdma?
[  269.763554][T11255] loop2: detected capacity change from 0 to 512
[  269.783477][T11258] CUSE: zero length info key specified
[  269.788173][T11255] EXT4-fs: Ignoring removed i_version option
[  269.807328][T11255] EXT4-fs: Ignoring removed mblk_io_submit option
[  269.841793][T11257] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2073'.
[  269.863327][T11255] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.2071: inode #13: comm syz.2.2071: iget: illegal inode #
[  269.875824][T11257] openvswitch: netlink: Actions may not be safe on all matching packets
[  269.886192][T11255] EXT4-fs (loop2): Remounting filesystem read-only
[  269.920083][T11255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.135039][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.183848][T11268] loop5: detected capacity change from 0 to 4096
[  270.210101][   T29] audit: type=1326 audit(1726588844.407:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  270.232405][    C1] vkms_vblank_simulate: vblank timer overrun
[  270.280221][   T29] audit: type=1326 audit(1726588844.407:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  270.302661][    C1] vkms_vblank_simulate: vblank timer overrun
[  270.365757][   T29] audit: type=1326 audit(1726588844.407:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  270.389709][T11278] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2082'.
[  270.399849][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2081'.
[  270.401032][T11250] loop0: detected capacity change from 0 to 32768
[  270.420143][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2082'.
[  270.436468][   T29] audit: type=1326 audit(1726588844.407:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  270.490184][T11250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2070 (11250)
[  270.520911][   T29] audit: type=1326 audit(1726588844.407:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  270.560136][T11250] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.598937][T11250] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  270.614407][   T29] audit: type=1326 audit(1726588844.417:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  270.648983][T11250] BTRFS info (device loop0): using free-space-tree
[  270.720106][   T29] audit: type=1326 audit(1726588844.417:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11271 comm="syz.3.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  271.000213][ T5224] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  271.104075][T11266] loop1: detected capacity change from 0 to 32768
[  271.147752][T11266] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  271.290073][  T935] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  271.356926][T11266] XFS (loop1): Ending clean mount
[  271.451370][  T935] usb 4-1: Using ep0 maxpacket: 16
[  271.472238][  T935] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.507804][  T935] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.530077][  T935] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  271.553326][  T935] usb 4-1: config 0 interface 0 has no altsetting 0
[  271.559096][T11301] loop2: detected capacity change from 0 to 32768
[  271.590207][  T935] usb 4-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  271.620028][  T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.666136][T11325] loop0: detected capacity change from 0 to 4096
[  271.689701][  T935] usb 4-1: config 0 descriptor??
[  271.696724][ T5221] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  271.719685][T11322] loop4: detected capacity change from 0 to 4096
[  271.765332][T11322] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  271.851712][   T29] audit: type=1800 audit(1726588846.067:54): pid=11325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2090" name="file1" dev="loop0" ino=30 res=0 errno=0
[  271.854428][T11322] ntfs3: loop4: ino=5, "/" directory corrupted
[  272.161120][  T935] hid-generic 0003:045E:05DA.004D: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.3-1/input0
[  272.380739][T11340] loop4: detected capacity change from 0 to 4096
[  272.391622][  T935] usb 4-1: USB disconnect, device number 21
[  272.422443][T11340] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  272.477793][T11340] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  272.527899][T11342] loop5: detected capacity change from 0 to 4096
[  272.549997][T11348] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  272.559332][T11342] NILFS (loop5): invalid segment: Checksum error in segment payload
[  272.577901][T11342] NILFS (loop5): trying rollback from an earlier position
[  272.609908][T11351] loop1: detected capacity change from 0 to 512
[  272.618230][T11342] NILFS (loop5): recovery complete
[  272.645757][T11351] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  272.647527][T11353] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  272.693270][T11351] EXT4-fs (loop1): Remounting filesystem read-only
[  272.738010][T11351] EXT4-fs (loop1): 1 truncate cleaned up
[  272.766785][T11351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.810344][T11359] overlayfs: lower data-only dirs require metacopy support.
[  272.991811][ T5221] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.087254][T11334] loop0: detected capacity change from 0 to 32768
[  273.128530][T11334] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2100 (11334)
[  273.184698][T11334] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  273.220117][T11334] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  273.260099][T11367] loop3: detected capacity change from 0 to 4096
[  273.262405][T11334] BTRFS info (device loop0): using free-space-tree
[  273.306648][T11367] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  273.389427][T11367] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  273.594606][    T9] IPVS: starting estimator thread 0...
[  273.620312][T11396] IPVS: sh: TCP 172.20.20.170:0 - no destination available
[  273.710100][T11397] IPVS: using max 16 ests per chain, 38400 per kthread
[  273.750441][ T5224] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  274.005000][T11407] netlink: 'syz.5.2126': attribute type 1 has an invalid length.
[  274.030451][T11407] netlink: 9384 bytes leftover after parsing attributes in process `syz.5.2126'.
[  274.169653][T11363] loop2: detected capacity change from 0 to 32768
[  274.310265][T11384] loop1: detected capacity change from 0 to 40427
[  274.341054][T11384] F2FS-fs (loop1): heap/no_heap options were deprecated
[  274.357638][T11363] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  274.367674][T11384] F2FS-fs (loop1): invalid crc value
[  274.399648][T11384] F2FS-fs (loop1): Found nat_bits in checkpoint
[  274.554806][T11384] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  274.614146][T11363] XFS (loop2): Ending clean mount
[  274.631716][T11363] XFS (loop2): Quotacheck needed: Please wait.
[  274.737198][ T5221] syz-executor: attempt to access beyond end of device
[  274.737198][ T5221] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  274.747906][T11363] XFS (loop2): Quotacheck: Done.
[  274.799552][ T5221] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  274.867848][T11451] loop5: detected capacity change from 0 to 512
[  274.900731][T11451] EXT4-fs: Ignoring removed mblk_io_submit option
[  274.936448][T11451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002]
[  274.963006][ T5222] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  275.025462][T11451] System zones: 1-12
[  275.081283][T11451] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.2143: corrupted in-inode xattr: e_value size too large
[  275.090048][  T935] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  275.123774][T11451] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2143: couldn't read orphan inode 15 (err -117)
[  275.187869][T11451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.280102][  T935] usb 5-1: Using ep0 maxpacket: 8
[  275.292206][  T935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  275.326030][  T935] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  275.332500][T10262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.335412][  T935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.379117][  T935] usb 5-1: config 0 descriptor??
[  275.402796][  T935] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  275.436579][T11465] loop2: detected capacity change from 0 to 256
[  275.493691][T11465] FAT-fs (loop2): Directory bread(block 64) failed
[  275.502498][T11465] FAT-fs (loop2): Directory bread(block 65) failed
[  275.509174][T11465] FAT-fs (loop2): Directory bread(block 66) failed
[  275.517072][T11465] FAT-fs (loop2): Directory bread(block 67) failed
[  275.524042][T11465] FAT-fs (loop2): Directory bread(block 68) failed
[  275.544563][T11465] FAT-fs (loop2): Directory bread(block 69) failed
[  275.562418][T11465] FAT-fs (loop2): Directory bread(block 70) failed
[  275.585048][T11465] FAT-fs (loop2): Directory bread(block 71) failed
[  275.599610][T11465] FAT-fs (loop2): Directory bread(block 72) failed
[  275.608720][T11465] FAT-fs (loop2): Directory bread(block 73) failed
[  275.666569][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2141'.
[  275.698997][  T935] usb 5-1: USB disconnect, device number 19
[  275.824142][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2156'.
[  275.984535][T11489] loop3: detected capacity change from 0 to 16
[  276.020660][T11489] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  276.188357][T11497] loop5: detected capacity change from 0 to 1024
[  276.304467][ T1900] hfsplus: b-tree write err: -5, ino 4
[  276.456099][T11509] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2169'.
[  276.674659][T11516] loop1: detected capacity change from 0 to 1024
[  276.721972][T11483] loop2: detected capacity change from 0 to 32768
[  276.788189][T11516] Invalid option length (0) for dns_resolver key
[  277.202845][T11531] loop0: detected capacity change from 0 to 2048
[  277.239032][T11531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.389259][T11505] loop5: detected capacity change from 0 to 40427
[  277.412428][ T5224] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.441475][T11505] F2FS-fs (loop5): Found nat_bits in checkpoint
[  277.479174][  T935] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  277.553499][T11505] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  277.656142][  T935] usb 3-1: Using ep0 maxpacket: 16
[  277.676520][  T935] usb 3-1: config 0 has no interfaces?
[  277.687370][  T935] usb 3-1: New USB device found, idVendor=15c2, idProduct=0040, bcdDevice= 7.fb
[  277.717032][  T935] usb 3-1: New USB device strings: Mfr=7, Product=130, SerialNumber=11
[  277.732455][   T29] audit: type=1326 audit(1726588851.937:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.2190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8db7def9 code=0x0
[  277.746374][  T935] usb 3-1: Product: syz
[  277.764843][  T935] usb 3-1: Manufacturer: syz
[  277.769463][  T935] usb 3-1: SerialNumber: syz
[  277.774961][T10262] syz-executor: attempt to access beyond end of device
[  277.774961][T10262] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  277.785068][  T935] usb 3-1: config 0 descriptor??
[  277.812248][T10262] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  277.850042][ T5287] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  277.991731][T11568] program syz.1.2194 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  278.006962][ T5287] usb 5-1: Using ep0 maxpacket: 32
[  278.030564][ T5287] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  278.053468][ T5287] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  278.070000][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  278.103295][ T5287] usb 5-1: Product: syz
[  278.107510][ T5287] usb 5-1: Manufacturer: syz
[  278.121630][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'.
[  278.127266][ T5287] usb 5-1: SerialNumber: syz
[  278.149813][    T9] usb 3-1: USB disconnect, device number 24
[  278.165009][ T5287] usb 5-1: config 0 descriptor??
[  278.193204][T11555] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  278.331587][T11576] netlink: 'syz.0.2198': attribute type 1 has an invalid length.
[  278.483826][ T5287] usb 5-1: USB disconnect, device number 20
[  278.528345][   T29] audit: type=1326 audit(1726588852.737:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11577 comm="syz.0.2199" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a8db7def9 code=0x0
[  278.670480][T11564] loop3: detected capacity change from 0 to 32768
[  278.707527][T11564] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  278.781611][ T6283] ocfs2: Unmounting device (7,3) on (node local)
[  278.822995][T11589] CUSE: unknown device info ""
[  278.828997][T11589] CUSE: unknown device info "appraise_type"
[  278.835429][T11589] CUSE: DEVNAME unspecified
[  278.919836][T11574] loop1: detected capacity change from 0 to 32768
[  278.994927][T11574] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  279.017151][T11598] loop3: detected capacity change from 0 to 64
[  279.030886][ T5287] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  279.112485][T11574] XFS (loop1): Ending clean mount
[  279.139688][T11574] XFS (loop1): Quotacheck needed: Please wait.
[  279.200079][ T5287] usb 6-1: Using ep0 maxpacket: 16
[  279.207108][ T5287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.213360][T11574] XFS (loop1): Quotacheck: Done.
[  279.252309][ T5287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.289417][ T5287] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  279.317122][ T5287] usb 6-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00
[  279.336571][ T5287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.379406][ T5287] usb 6-1: config 0 descriptor??
[  279.510022][ T5221] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  279.816086][T11631] loop0: detected capacity change from 0 to 164
[  279.882527][ T5287] hid-generic 0003:1E7D:71CE.004E: collection stack underflow
[  279.912634][ T5287] hid-generic 0003:1E7D:71CE.004E: item 0 2 0 12 parsing failed
[  279.954527][ T5287] hid-generic 0003:1E7D:71CE.004E: probe with driver hid-generic failed with error -22
[  279.996949][T11638] netlink: 'syz.1.2215': attribute type 29 has an invalid length.
[  280.027630][T11638] netlink: 'syz.1.2215': attribute type 29 has an invalid length.
[  280.096100][ T5287] usb 6-1: USB disconnect, device number 16
[  280.322014][T11651] loop3: detected capacity change from 0 to 16
[  280.352205][T11651] erofs: (device loop3): mounted with root inode @ nid 36.
[  280.376872][T11651] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 0
[  280.407438][T11653] loop4: detected capacity change from 0 to 2048
[  280.527170][T11653]  loop4: p1 < > p3 p4 < >
[  280.547575][T11653] loop4: p3 start 4284289 is beyond EOD, truncated
[  280.608034][T11633] loop2: detected capacity change from 0 to 32768
[  280.685514][T11633] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  280.795854][T11633] XFS (loop2): Ending clean mount
[  280.860135][T11633] XFS (loop2): Quotacheck needed: Please wait.
[  280.982493][T11633] XFS (loop2): Quotacheck: Done.
[  281.098320][ T5222] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  281.603635][T11679] loop5: detected capacity change from 0 to 32768
[  281.620786][T11679] btrfs: Deprecated parameter 'usebackuproot'
[  281.626881][T11679] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  281.666257][T11679] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2238 (11679)
[  281.690161][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  281.698460][  T935] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  281.716375][T11679] BTRFS info (device loop5): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  281.720727][T11653] loop4: detected capacity change from 0 to 128
[  281.753353][T11679] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  281.780788][T11679] BTRFS info (device loop5): using free-space-tree
[  281.798249][T11699] loop2: detected capacity change from 0 to 1024
[  281.831247][T11699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.847958][T11679] BTRFS info (device loop5): rebuilding free space tree
[  281.860198][    T9] usb 4-1: Using ep0 maxpacket: 8
[  281.867677][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.879277][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.897175][  T935] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  281.907711][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  281.916885][  T935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.926186][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.935165][  T935] usb 2-1: config 0 descriptor??
[  281.947475][    T9] usb 4-1: config 0 descriptor??
[  281.953974][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.978019][T10262] BTRFS info (device loop5): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  282.070089][ T5288] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  282.230123][ T5288] usb 5-1: Using ep0 maxpacket: 8
[  282.265077][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.299437][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.313075][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  282.326625][ T5288] usb 5-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[  282.336331][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.348281][ T5288] usb 5-1: config 0 descriptor??
[  282.386931][    T9] isku 0003:1E7D:319C.0050: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0
[  282.399258][  T935] aquacomputer_d5next 0003:0C70:F010.004F: hidraw1: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.1-1/input0
[  282.552211][T11729] loop5: detected capacity change from 0 to 2048
[  282.606722][T11729] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  282.623150][  T935] usb 4-1: USB disconnect, device number 22
[  282.629417][ T5287] usb 2-1: USB disconnect, device number 23
[  282.804512][ T5288] maltron 0003:058F:9410.0051: unknown main item tag 0x0
[  282.830120][ T5288] maltron 0003:058F:9410.0051: unknown main item tag 0x0
[  282.848897][ T5288] maltron 0003:058F:9410.0051: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.4-1/input0
[  282.875074][T11725] loop2: detected capacity change from 0 to 32768
[  282.924310][T11725] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  283.026810][T11725] XFS (loop2): Ending clean mount
[  283.032477][ T5288] usb 5-1: USB disconnect, device number 21
[  283.097814][ T5222] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  283.242541][T11750] binder: 11748:11750 ioctl c0306201 20000580 returned -22
[  283.909103][T11778] loop3: detected capacity change from 0 to 512
[  284.001961][T11778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.050113][ T5288] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  284.078223][T11778] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.177672][T11749] loop5: detected capacity change from 0 to 40427
[  284.196317][T11749] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  284.219002][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.224575][T11749] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  284.249550][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.250686][ T5288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.318427][T11796] loop4: detected capacity change from 0 to 256
[  284.319576][ T5288] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  284.335582][T11749] F2FS-fs (loop5): Found nat_bits in checkpoint
[  284.361490][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  284.369508][ T5288] usb 2-1: SerialNumber: syz
[  284.380219][T11796] FAT-fs (loop4): Directory bread(block 64) failed
[  284.407197][T11796] FAT-fs (loop4): Directory bread(block 65) failed
[  284.435660][T11796] FAT-fs (loop4): Directory bread(block 66) failed
[  284.465033][T11796] FAT-fs (loop4): Directory bread(block 67) failed
[  284.485221][T11796] FAT-fs (loop4): Directory bread(block 68) failed
[  284.509887][T11796] FAT-fs (loop4): Directory bread(block 69) failed
[  284.527514][T11796] FAT-fs (loop4): Directory bread(block 70) failed
[  284.539726][T11749] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  284.547063][T11796] FAT-fs (loop4): Directory bread(block 71) failed
[  284.557181][T11749] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  284.572266][T11796] FAT-fs (loop4): Directory bread(block 72) failed
[  284.594986][T11796] FAT-fs (loop4): Directory bread(block 73) failed
[  284.611845][ T5288] usb 2-1: 0:2 : does not exist
[  284.630271][ T5288] usb 2-1: unit 49 not found!
[  284.665347][ T5288] usb 2-1: USB disconnect, device number 24
[  284.867858][T11814] loop4: detected capacity change from 0 to 1024
[  284.878470][T11814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.270159][ T5286] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  285.416083][T11833] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2299'.
[  285.451806][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.460130][T11833] openvswitch: netlink: Actions may not be safe on all matching packets
[  285.478262][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.530111][ T5286] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  285.539191][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.580733][ T5286] usb 3-1: config 0 descriptor??
[  286.030814][ T5286] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor
[  286.079663][T11854] loop0: detected capacity change from 0 to 1024
[  286.087560][ T5286] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0052/input/input58
[  286.099619][T11856] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2308'.
[  286.224163][ T5286] keytouch 0003:0926:3333.0052: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  286.279395][ T5286] usb 3-1: USB disconnect, device number 25
[  286.336826][T11862] nbd: couldn't find device at index 50432
[  286.468478][T11835] loop5: detected capacity change from 0 to 32768
[  286.514955][T11835] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  286.684724][T11835] XFS (loop5): Ending clean mount
[  286.713506][T11882] bridge1: entered promiscuous mode
[  286.719040][T11882] bridge1: entered allmulticast mode
[  286.741003][T11882] team0: Port device bridge1 added
[  286.846114][T10262] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  287.055990][T11888] program syz.2.2322 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  287.594532][T11872] loop3: detected capacity change from 0 to 32768
[  287.723899][T11917] PKCS8: Unsupported PKCS#8 version
[  287.742867][T11872] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.842594][T11872] XFS (loop3): Ending clean mount
[  287.862426][T11872] XFS (loop3): Quotacheck needed: Please wait.
[  287.976349][T11872] XFS (loop3): Quotacheck: Done.
[  287.992285][T11925] loop2: detected capacity change from 0 to 4096
[  287.999794][T11925] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  288.019076][T11930] omfs: Invalid superblock (0)
[  288.077232][T11925] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  288.159077][ T6283] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  288.210120][ T5286] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  288.306389][T11925] Process accounting resumed
[  288.400072][ T5286] usb 2-1: Using ep0 maxpacket: 32
[  288.418816][ T5286] usb 2-1: config 0 has an invalid interface number: 219 but max is 0
[  288.450040][ T5286] usb 2-1: config 0 has no interface number 0
[  288.457129][ T5286] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  288.501467][ T5286] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  288.539982][ T5286] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  288.590102][ T5286] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  288.632294][ T5286] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  288.651819][ T5286] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  288.683654][ T5286] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  288.694941][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.719126][T11928] loop0: detected capacity change from 0 to 32768
[  288.724510][ T5286] usb 2-1: Product: syz
[  288.737937][ T5286] usb 2-1: Manufacturer: syz
[  288.753285][ T5286] usb 2-1: SerialNumber: syz
[  288.787664][ T5286] usb 2-1: config 0 descriptor??
[  288.802512][T11931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  288.810503][T11931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  289.045465][ T5286] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz)
[  289.255844][ T5286] etas_es58x 2-1:0.219: could not parse product info: '놹'
[  289.500486][ T1744] usb 2-1: USB disconnect, device number 25
[  289.507753][ T1744] etas_es58x 2-1:0.219: Disconnecting syz syz
[  289.603218][T11939] loop5: detected capacity change from 0 to 40427
[  289.632153][T11939] F2FS-fs (loop5): Found nat_bits in checkpoint
[  289.745679][T11950] loop2: detected capacity change from 0 to 32768
[  289.800912][T11950] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  289.820012][T11939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  289.926849][T11950] XFS (loop2): Ending clean mount
[  289.970145][   T29] audit: type=1800 audit(1726588864.177:57): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2346" name="file1" dev="loop2" ino=7430 res=0 errno=0
[  289.999282][T11952] loop4: detected capacity change from 0 to 32768
[  290.024091][T11952] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  290.041698][   T29] audit: type=1800 audit(1726588864.217:58): pid=11950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2346" name="file1" dev="loop2" ino=7430 res=0 errno=0
[  290.056030][T11952] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  290.147048][ T5222] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  290.162976][T11989] netlink: 'syz.1.2357': attribute type 10 has an invalid length.
[  290.198658][T11952] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  290.245930][ T1744] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  290.278567][ T1744] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  290.438277][ T1744] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms
[  290.480041][ T1744] gfs2: fsid=syz:syz.0: jid=0: Done
[  290.496950][T11952] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  290.732790][T11999] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2355'.
[  290.765231][T11999] tipc: Started in network mode
[  290.770922][T11999] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  290.784631][T11999] tipc: Enabled bearer <udp:syz0>, priority 10
[  290.796745][T12004] tipc: Started in network mode
[  290.801941][T12004] tipc: Node identity ac14142a, cluster identity 4711
[  290.812458][T12004] tipc: Enabled bearer <udp:s>, priority 10
[  290.901901][T12006] smc: net device ip6_vti0 applied user defined pnetid SYZ0
[  290.989658][T12010] loop0: detected capacity change from 0 to 64
[  291.085160][T12013] loop1: detected capacity change from 0 to 1764
[  291.259790][T12024] loop2: detected capacity change from 0 to 64
[  291.325377][T12022] loop0: detected capacity change from 0 to 2048
[  291.405329][T12022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.508241][T12037] loop3: detected capacity change from 0 to 512
[  291.598715][T12037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.689667][T12037] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.732432][T12048] loop0: detected capacity change from 0 to 64
[  291.755423][T12050] netlink: 'syz.2.2385': attribute type 58 has an invalid length.
[  291.820449][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.903031][    T9] tipc: Node number set to 4269801642
[  291.930635][    T9] tipc: Node number set to 2886997034
[  292.070917][T12064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2390'.
[  292.226550][T12067] loop2: detected capacity change from 0 to 1764
[  292.362109][ T4615] Bluetooth: hci1: ACL packet for unknown connection handle 200
[  292.362836][T12067] iso9660: Corrupted directory entry in block 2 of inode 1920
[  292.783568][T12054] loop5: detected capacity change from 0 to 32768
[  292.870262][T12084] sp0: Synchronizing with TNC
[  292.947793][T12058] loop3: detected capacity change from 0 to 32768
[  292.968735][T12058] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2388 (12058)
[  292.991304][T12090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2403'.
[  293.001171][T12090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2403'.
[  293.012633][T12058] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  293.043282][T12058] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  293.090053][T12058] BTRFS info (device loop3): using free-space-tree
[  293.262944][T12112] loop1: detected capacity change from 0 to 4096
[  293.337164][T12058] BTRFS warning (device loop3): can't clear the compat:24,compat:25 feature bits while mounted
[  293.494001][ T6283] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  293.558066][T12128] loop4: detected capacity change from 0 to 2048
[  293.639445][T12133] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  294.169596][T12151] autofs: Bad value for 'uid'
[  294.180103][T12151] autofs: Bad value for 'uid'
[  294.411931][ T1744] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  294.453219][T12158] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.467672][T12158] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.537136][T12138] loop2: detected capacity change from 0 to 32768
[  294.563979][T12163] loop4: detected capacity change from 0 to 65
[  294.583716][ T1744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.584112][T12163] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  294.600621][T12159] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.615507][T12159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.629371][T12138] JBD2: Ignoring recovery information on journal
[  294.634435][ T1744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.642156][T12159] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.647950][ T1744] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  294.653062][T12159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.662482][ T1744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.694860][ T1744] usb 2-1: config 0 descriptor??
[  294.731175][T12138] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  294.781200][   T29] audit: type=1800 audit(1726588868.987:59): pid=12138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2420" name="file1" dev="loop2" ino=16946 res=0 errno=0
[  294.854660][ T5222] ocfs2: Unmounting device (7,2) on (node local)
[  295.023677][T12173] loop5: detected capacity change from 0 to 1024
[  295.067567][T12173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.140359][ T1744] magicmouse 0003:05AC:0265.0053: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0
[  295.301774][T10262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.367590][    T9] usb 2-1: USB disconnect, device number 26
[  295.555963][T12194] loop5: detected capacity change from 0 to 4096
[  295.582710][T12194] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  295.648788][T12194] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  295.661426][T12194] ntfs3: loop5: Failed to load $Extend (-22).
[  295.667884][T12194] ntfs3: loop5: Failed to initialize $Extend.
[  295.701977][T12194] ntfs3: loop5: MFT: r=b, expect seq=0 instead of b!
[  295.910023][ T1744] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  295.944579][T12213] loop5: detected capacity change from 0 to 2048
[  295.979124][T12217] loop3: detected capacity change from 0 to 16
[  295.994631][T12217] erofs: (device loop3): mounted with root inode @ nid 36.
[  296.048093][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 320 @ nid 36
[  296.075097][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 299 @ nid 36
[  296.107794][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 298 @ nid 36
[  296.120518][ T1744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.135163][ T1744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.160078][ T1744] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  296.220068][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 297 @ nid 36
[  296.228071][ T1744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.259874][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 296 @ nid 36
[  296.282090][ T1744] usb 5-1: config 0 descriptor??
[  296.290208][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 288 @ nid 36
[  296.329577][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 280 @ nid 36
[  296.390900][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 186 @ nid 36
[  296.424195][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 185 @ nid 36
[  296.453835][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 184 @ nid 36
[  296.480465][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 155 @ nid 36
[  296.510077][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 154 @ nid 36
[  296.546490][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 153 @ nid 36
[  296.586457][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 152 @ nid 36
[  296.627087][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 139 @ nid 36
[  296.668174][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 138 @ nid 36
[  296.700155][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 137 @ nid 36
[  296.730272][T12221] loop0: detected capacity change from 0 to 32768
[  296.740026][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 136 @ nid 36
[  296.769726][ T1744] corsair-psu 0003:1B1C:1C0D.0054: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.4-1/input0
[  296.782212][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 128 @ nid 36
[  296.811822][T12221] JBD2: Ignoring recovery information on journal
[  296.850683][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 120 @ nid 36
[  296.900608][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 82 @ nid 36
[  296.920889][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 81 @ nid 36
[  296.942877][ T1744] corsair-psu 0003:1B1C:1C0D.0054: unable to initialize device (-71)
[  296.952363][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 80 @ nid 36
[  296.970180][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 72 @ nid 36
[  296.975638][T12221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  296.981894][ T1744] corsair-psu 0003:1B1C:1C0D.0054: probe with driver corsair-psu failed with error -71
[  297.008382][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 64 @ nid 36
[  297.042553][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 48 @ nid 36
[  297.060273][ T1744] usb 5-1: USB disconnect, device number 22
[  297.073050][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  297.103848][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  297.120100][   T29] audit: type=1800 audit(1726588871.317:60): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2457" name="file0" dev="loop0" ino=16947 res=0 errno=0
[  297.162722][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 37 @ nid 36
[  297.190310][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  297.199468][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 35 @ nid 36
[  297.225178][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 34 @ nid 36
[  297.241619][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 33 @ nid 36
[  297.262114][ T5224] ocfs2: Unmounting device (7,0) on (node local)
[  297.273271][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 32 @ nid 36
[  297.300198][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  297.309389][T12217] erofs: (device loop3): z_erofs_readahead: readahead error at folio 16 @ nid 36
[  297.318793][T12225] loop1: detected capacity change from 0 to 32768
[  297.342830][T12217] syz.3.2455: attempt to access beyond end of device
[  297.342830][T12217] loop3: rw=524288, sector=1049272, nr_sectors = 32 limit=16
[  297.361939][T12225] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2459 (12225)
[  297.374004][T12241] loop5: detected capacity change from 0 to 256
[  297.392865][T12217] syz.3.2455: attempt to access beyond end of device
[  297.392865][T12217] loop3: rw=524288, sector=376, nr_sectors = 32 limit=16
[  297.422724][T12225] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.427355][T12241] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  297.440156][T12217] syz.3.2455: attempt to access beyond end of device
[  297.440156][T12217] loop3: rw=524288, sector=384, nr_sectors = 32 limit=16
[  297.459375][T12225] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  297.480263][T12225] BTRFS info (device loop1): using free-space-tree
[  297.490412][T12217] syz.3.2455: attempt to access beyond end of device
[  297.490412][T12217] loop3: rw=524288, sector=720, nr_sectors = 32 limit=16
[  297.537554][T12217] syz.3.2455: attempt to access beyond end of device
[  297.537554][T12217] loop3: rw=524288, sector=728, nr_sectors = 32 limit=16
[  297.603224][T12217] syz.3.2455: attempt to access beyond end of device
[  297.603224][T12217] loop3: rw=524288, sector=525144, nr_sectors = 32 limit=16
[  297.665987][T12217] syz.3.2455: attempt to access beyond end of device
[  297.665987][T12217] loop3: rw=524288, sector=525152, nr_sectors = 32 limit=16
[  297.681844][T12217] syz.3.2455: attempt to access beyond end of device
[  297.681844][T12217] loop3: rw=524288, sector=13478624032, nr_sectors = 32 limit=16
[  297.696961][T12217] syz.3.2455: attempt to access beyond end of device
[  297.696961][T12217] loop3: rw=524288, sector=13478624040, nr_sectors = 32 limit=16
[  297.711500][T12217] syz.3.2455: attempt to access beyond end of device
[  297.711500][T12217] loop3: rw=524288, sector=14550774152, nr_sectors = 32 limit=16
[  297.790168][ T5221] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.802008][T12231] loop2: detected capacity change from 0 to 40427
[  297.828574][T12231] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  297.841384][T12231] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  297.896720][T12231] F2FS-fs (loop2): invalid crc value
[  297.902333][ T5287] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  297.940849][T12231] F2FS-fs (loop2): Found nat_bits in checkpoint
[  298.063964][T12231] F2FS-fs (loop2): Start checkpoint disabled!
[  298.095351][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.123706][T12231] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  298.132352][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.150469][T12231] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  298.161129][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  298.194602][ T5287] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  298.218578][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.238892][ T5287] usb 5-1: config 0 descriptor??
[  298.426232][T12286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2478'.
[  298.470170][   T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  298.481590][T12288] overlayfs: disabling nfs_export due to verity=require
[  298.491479][   T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  298.498604][   T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  298.506660][   T35] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  298.521109][T12288] overlayfs: missing 'lowerdir'
[  298.650081][  T935] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  298.658309][ T5287] logitech-hidpp-device 0003:046D:C262.0055: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.4-1/input0
[  298.744953][   T29] audit: type=1326 audit(1726588872.957:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12265 comm="syz.3.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7fc00000
[  298.795824][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'.
[  298.810337][  T935] usb 6-1: Using ep0 maxpacket: 8
[  298.824832][  T935] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  298.840193][  T935] usb 6-1: config 0 has too many interfaces: 241, using maximum allowed: 32
[  298.858754][  T935] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 241
[  298.859045][ T1744] usb 5-1: USB disconnect, device number 23
[  298.876774][  T935] usb 6-1: config 0 has no interface number 0
[  298.885211][  T935] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  298.901566][  T935] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  298.913282][  T935] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  298.933378][  T935] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  298.946592][  T935] usb 6-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0
[  298.955474][  T935] usb 6-1: Product: syz
[  298.960154][  T935] usb 6-1: Manufacturer: syz
[  298.967930][T12301] Bluetooth: MGMT ver 1.23
[  298.973097][  T935] usb 6-1: config 0 descriptor??
[  298.989080][T12284] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  299.060792][T12303] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  299.141852][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'.
[  299.320415][ T5287] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  299.490134][ T5287] usb 3-1: Using ep0 maxpacket: 16
[  299.501600][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.533037][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.535870][T12315] loop4: detected capacity change from 0 to 16
[  299.551935][T12315] erofs: (device loop4): mounted with root inode @ nid 36.
[  299.569332][ T5287] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  299.570675][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 87 @ nid 36
[  299.588083][ T5287] usb 3-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  299.588674][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 86 @ nid 36
[  299.629986][ T5287] usb 3-1: Product: syz
[  299.634971][ T5287] usb 3-1: Manufacturer: syz
[  299.637363][  T935] usb 6-1: USB disconnect, device number 17
[  299.647033][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36
[  299.659007][ T5287] usb 3-1: config 0 descriptor??
[  299.671969][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 83 @ nid 36
[  299.691656][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36
[  299.732936][T12311] loop3: detected capacity change from 0 to 32768
[  299.733041][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 82 @ nid 36
[  299.751446][T12311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2490 (12311)
[  299.770272][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 79 @ nid 36
[  299.782799][T12311] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.793498][T12311] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  299.803002][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 78 @ nid 36
[  299.812678][T12311] BTRFS info (device loop3): using free-space-tree
[  299.822407][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36
[  299.838258][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 76 @ nid 36
[  299.848757][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36
[  299.860332][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 75 @ nid 36
[  299.870221][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 74 @ nid 36
[  299.882503][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 72 @ nid 36
[  299.892432][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 71 @ nid 36
[  299.922482][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 70 @ nid 36
[  299.935763][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 63 @ nid 36
[  299.949128][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 61 @ nid 36
[  299.959094][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36
[  299.970626][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 59 @ nid 36
[  299.979856][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36
[  299.990893][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 58 @ nid 36
[  300.002832][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 56 @ nid 36
[  300.012443][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 54 @ nid 36
[  300.023939][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 50 @ nid 36
[  300.026208][T12311] BTRFS info (device loop3): checking UUID tree
[  300.049148][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  300.069426][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  300.113389][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  300.130467][ T5287] kovaplus 0003:1E7D:2D50.0056: unknown main item tag 0xd
[  300.146294][ T5287] kovaplus 0003:1E7D:2D50.0056: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.2-1/input0
[  300.157490][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  300.166805][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  300.178764][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  300.189638][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  300.199045][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  300.224047][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  300.235796][T12314] loop1: detected capacity change from 0 to 32768
[  300.252207][ T6283] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.254484][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  300.276449][T12314] BTRFS: device /dev/loop1 (7:1) using temp-fsid 925c398a-6806-493d-95a9-523f62577f95
[  300.283352][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  300.304917][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  300.319437][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  300.323853][T12314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2492 (12314)
[  300.344644][ T5287] kovaplus 0003:1E7D:2D50.0056: couldn't init struct kovaplus_device
[  300.363194][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  300.384454][T12314] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  300.384721][ T5287] kovaplus 0003:1E7D:2D50.0056: couldn't install mouse
[  300.420202][T12314] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  300.428951][T12314] BTRFS info (device loop1): using free-space-tree
[  300.430024][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  300.464448][ T5287] kovaplus 0003:1E7D:2D50.0056: probe with driver kovaplus failed with error -71
[  300.470559][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  300.482302][ T5287] usb 3-1: USB disconnect, device number 26
[  300.492928][T12315] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  300.513695][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  300.540933][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  300.550801][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  300.560166][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  300.569814][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 13 @ nid 36
[  300.580656][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 8 @ nid 36
[  300.590262][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 6 @ nid 36
[  300.619375][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 4 @ nid 36
[  300.657571][T12315] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  300.720758][T12315] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 36
[  300.953115][ T5221] BTRFS info (device loop1): last unmount of filesystem 925c398a-6806-493d-95a9-523f62577f95
[  301.068624][T12362] MPI: mpi too large (185152 bits)
[  301.430079][ T5287] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  301.652854][ T5287] usb 5-1: Using ep0 maxpacket: 8
[  301.659867][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  301.702672][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  301.730514][T12379] netlink: 'syz.1.2506': attribute type 1 has an invalid length.
[  301.734030][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  301.738603][T12379] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.2506'.
[  301.789024][T12380] loop2: detected capacity change from 0 to 1024
[  301.807942][ T5287] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=cf.dc
[  301.812367][T12379] netlink: 'syz.1.2506': attribute type 1 has an invalid length.
[  301.835952][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.864254][T12380] hfsplus: bad catalog entry type
[  301.873583][ T5287] usb 5-1: config 0 descriptor??
[  301.883131][ T5287] appletouch 5-1:0.0: Could not find int-in endpoint
[  301.915088][ T5287] appletouch 5-1:0.0: probe with driver appletouch failed with error -5
[  301.943375][ T5287] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  302.014113][   T35] hfsplus: b-tree write err: -5, ino 4
[  302.088682][ T5287] usb 5-1: USB disconnect, device number 24
[  302.340169][T12398] netlink: 'syz.0.2515': attribute type 3 has an invalid length.
[  302.390194][T12398] netlink: 'syz.0.2515': attribute type 1 has an invalid length.
[  302.410045][T12398] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2515'.
[  302.702682][T12408] loop2: detected capacity change from 0 to 512
[  302.768613][T12408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.839630][T12408] ext4 filesystem being mounted at /421/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  302.864639][T12408] EXT4-fs: Cannot change journaled quota options when quota turned on
[  302.942653][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.245500][T12395] loop1: detected capacity change from 0 to 32768
[  303.304762][T12395] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  303.465767][T12448] program syz.3.2534 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  303.546188][T12395] XFS (loop1): Ending clean mount
[  303.585364][   T29] audit: type=1800 audit(1726588877.797:62): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2514" name="file1" dev="loop1" ino=7430 res=0 errno=0
[  303.680252][ T5221] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  304.069653][T12444] loop4: detected capacity change from 0 to 32768
[  304.171331][T12444] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  304.180202][  T935] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  304.286784][T12444] XFS (loop4): Ending clean mount
[  304.318576][T12444] XFS (loop4): Quotacheck needed: Please wait.
[  304.360342][  T935] usb 3-1: Using ep0 maxpacket: 32
[  304.409529][  T935] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[  304.430591][  T935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.438621][  T935] usb 3-1: Product: syz
[  304.449487][T12444] XFS (loop4): Quotacheck: Done.
[  304.454871][ T5286] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  304.481122][   T29] audit: type=1800 audit(1726588878.697:63): pid=12444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2533" name="bus" dev="loop4" ino=9291 res=0 errno=0
[  304.503350][  T935] usb 3-1: Manufacturer: syz
[  304.534578][T12459] loop3: detected capacity change from 0 to 32768
[  304.551230][  T935] usb 3-1: SerialNumber: syz
[  304.567006][  T935] usb 3-1: config 0 descriptor??
[  304.581758][  T935] hub 3-1:0.0: bad descriptor, ignoring hub
[  304.600648][T12459] JBD2: Ignoring recovery information on journal
[  304.608903][  T935] hub 3-1:0.0: probe with driver hub failed with error -5
[  304.610866][ T5219] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  304.632859][  T935] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  304.642037][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.653261][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.664513][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  304.677424][ T5286] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  304.687080][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.700542][ T5286] usb 2-1: config 0 descriptor??
[  304.739644][T12459] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  304.952240][ T6283] ocfs2: Unmounting device (7,3) on (node local)
[  305.128396][ T5286] playstation 0003:054C:0BA0.0057: unknown main item tag 0x0
[  305.154533][ T5286] playstation 0003:054C:0BA0.0057: unknown main item tag 0x0
[  305.180230][ T5286] playstation 0003:054C:0BA0.0057: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0
[  305.197953][  T935] gspca_vc032x: reg_r err -71
[  305.203186][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.216311][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.223247][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.228557][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.264515][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.274607][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.282604][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.287989][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.297739][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.306475][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.320445][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.337256][ T5286] playstation 0003:054C:0BA0.0057: Failed to retrieve feature with reportID 18: -71
[  305.340059][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.362141][ T5286] playstation 0003:054C:0BA0.0057: Failed to retrieve DualShock4 pairing info: -71
[  305.375977][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.394871][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.395373][ T5286] playstation 0003:054C:0BA0.0057: Failed to get MAC address from DualShock4
[  305.409471][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.429730][ T5286] playstation 0003:054C:0BA0.0057: Failed to create dualshock4.
[  305.435392][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.451459][T12504] loop3: detected capacity change from 0 to 512
[  305.463051][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.468364][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.475785][ T5286] playstation 0003:054C:0BA0.0057: probe with driver playstation failed with error -71
[  305.485752][T12504] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  305.501288][  T935] gspca_vc032x: I2c Bus Busy Wait 00
[  305.513587][  T935] gspca_vc032x: Unknown sensor...
[  305.518882][  T935] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  305.526420][ T5286] usb 2-1: USB disconnect, device number 27
[  305.538940][T12504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  305.547718][T12504] System zones: 1-12
[  305.571801][  T935] usb 3-1: USB disconnect, device number 27
[  305.588756][T12504] EXT4-fs (loop3): 1 truncate cleaned up
[  305.605426][T12504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.682241][T12504] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full
[  305.740603][ T5288] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  305.766269][T12495] loop5: detected capacity change from 0 to 40427
[  305.782251][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.782376][T12495] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  305.806048][T12513] loop0: detected capacity change from 0 to 256
[  305.809819][T12495] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  305.862662][T12495] F2FS-fs (loop5): invalid crc_offset: 33558524
[  305.883492][T12495] F2FS-fs (loop5): Found nat_bits in checkpoint
[  305.900824][ T5288] usb 5-1: Using ep0 maxpacket: 16
[  305.917819][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.924565][T12518] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2562'.
[  305.935558][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.951671][ T5288] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00
[  305.977011][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.006267][ T5288] usb 5-1: config 0 descriptor??
[  306.046921][T12495] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  306.077604][T12495] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  306.141184][T12495] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix.
[  306.193782][T12528] loop3: detected capacity change from 0 to 512
[  306.231489][T12528] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  306.322695][T12528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.350103][T12528] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  306.463055][ T5288] hkems 0003:2006:0118.0058: unknown main item tag 0x1
[  306.480224][ T5288] hkems 0003:2006:0118.0058: unknown main item tag 0x0
[  306.488668][ T5288] hkems 0003:2006:0118.0058: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0
[  306.510142][ T5288] hkems 0003:2006:0118.0058: no inputs found
[  306.516148][ T5288] hkems 0003:2006:0118.0058: force feedback init failed
[  306.538061][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.615214][T12543] loop3: detected capacity change from 0 to 64
[  306.693274][ T5288] usb 5-1: USB disconnect, device number 25
[  306.767327][T12551] loop0: detected capacity change from 0 to 1024
[  306.803020][T12551] hfsplus: bad catalog entry type
[  306.881053][   T35] hfsplus: b-tree write err: -5, ino 4
[  306.920433][ T5308] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  306.948439][T12559] loop5: detected capacity change from 0 to 512
[  306.979322][T12563] loop0: detected capacity change from 0 to 64
[  306.999023][T12559] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.012692][T12559] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.094371][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.105454][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.115788][ T5308] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  307.125289][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.135640][ T5308] usb 2-1: config 0 descriptor??
[  307.202536][T10262] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.427622][T12579] batadv0: entered promiscuous mode
[  307.512858][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.582777][ T5308] magicmouse 0003:05AC:0269.0059: unbalanced delimiter at end of report description
[  307.610530][ T5308] magicmouse 0003:05AC:0269.0059: magicmouse hid parse failed
[  307.648618][ T5308] magicmouse 0003:05AC:0269.0059: probe with driver magicmouse failed with error -22
[  307.674672][T12594] loop0: detected capacity change from 0 to 64
[  307.722821][ T4615] Bluetooth: hci4: unexpected event for opcode 0x1004
[  307.765954][   T29] audit: type=1800 audit(1726588881.967:64): pid=12594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2597" name="file1" dev="loop0" ino=18 res=0 errno=0
[  307.805637][ T5286] usb 2-1: USB disconnect, device number 28
[  308.135018][T12613] loop2: detected capacity change from 0 to 256
[  308.222999][T12613] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  308.350966][   T29] audit: type=1326 audit(1726588882.567:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.3.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  308.400071][   T29] audit: type=1326 audit(1726588882.577:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.3.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  308.440083][ T5308] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  308.461605][   T29] audit: type=1326 audit(1726588882.577:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.3.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  308.510067][ T5287] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  308.531387][   T29] audit: type=1326 audit(1726588882.577:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.3.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  308.610061][ T5308] usb 5-1: Using ep0 maxpacket: 32
[  308.617511][ T5308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.638760][ T5308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.666966][ T5308] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  308.680864][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.701258][ T5287] usb 3-1: config 0 has no interfaces?
[  308.706760][ T5287] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.720006][ T5308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.740074][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.748951][ T5308] usb 5-1: config 0 descriptor??
[  308.762309][ T5287] usb 3-1: config 0 descriptor??
[  308.770076][ T5288] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  308.946512][ T5288] usb 2-1: Using ep0 maxpacket: 16
[  308.961601][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.990149][ T5288] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  309.001720][ T5287] usb 3-1: USB disconnect, device number 28
[  309.020184][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.031201][ T5288] usb 2-1: config 0 descriptor??
[  309.202833][ T5308] kovaplus 0003:1E7D:2D50.005A: unknown main item tag 0xe
[  309.232380][ T5308] kovaplus 0003:1E7D:2D50.005A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  309.372562][T12632] loop3: detected capacity change from 0 to 40427
[  309.391175][T12632] F2FS-fs (loop3): inline encryption not supported
[  309.424183][ T5308] usb 5-1: USB disconnect, device number 26
[  309.450665][T12632] F2FS-fs (loop3): Found nat_bits in checkpoint
[  309.478734][ T5288] cypress 0003:04B4:0001.005B: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0
[  309.592022][T12632] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  309.679048][ T5288] usb 2-1: USB disconnect, device number 29
[  309.876179][T12640] loop5: detected capacity change from 0 to 40427
[  309.912331][T12640] F2FS-fs (loop5): Found nat_bits in checkpoint
[  310.100931][T12640] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  310.494468][ T5286] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  310.541830][T12648] loop2: detected capacity change from 0 to 32768
[  310.577735][T12648] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2622 (12648)
[  310.600319][ T5287] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  310.620614][T12648] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  310.640787][T12648] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  310.660022][T12648] BTRFS info (device loop2): using free-space-tree
[  310.667541][T12668] tmpfs: Group quota inode hardlimit too large.
[  310.674909][ T5286] usb 5-1: Using ep0 maxpacket: 8
[  310.683252][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.704539][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.730326][ T5286] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  310.739441][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.780351][ T5287] usb 4-1: Using ep0 maxpacket: 16
[  310.805952][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  310.830937][ T5286] usb 5-1: config 0 descriptor??
[  310.848196][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  310.888203][T12690] netlink: 'syz.1.2633': attribute type 16 has an invalid length.
[  310.909999][ T5287] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  310.938779][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.961250][ T5287] usb 4-1: config 0 descriptor??
[  311.049425][ T5222] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  311.264723][ T5286] aquacomputer_d5next 0003:0C70:F014.005C: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0
[  311.415198][ T5287] hid-led 0003:1294:1320.005D: unbalanced collection at end of report description
[  311.435274][ T5287] hid-led 0003:1294:1320.005D: probe with driver hid-led failed with error -22
[  311.463372][ T5288] usb 5-1: USB disconnect, device number 27
[  311.635094][ T5286] usb 4-1: USB disconnect, device number 23
[  311.800395][ T4615] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  311.809380][ T4615] Bluetooth: hci4: Injecting HCI hardware error event
[  311.819913][ T4615] Bluetooth: hci4: hardware error 0x00
[  311.936893][T12723] program syz.1.2650 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  312.023439][T12707] loop5: detected capacity change from 0 to 32768
[  312.081487][T12707] JBD2: Ignoring recovery information on journal
[  312.227371][T12707] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  312.312961][T12742] block nbd2: not configured, cannot reconfigure
[  312.345073][T12744] loop3: detected capacity change from 0 to 256
[  312.423163][T10262] ocfs2: Unmounting device (7,5) on (node local)
[  312.799805][T12763] loop5: detected capacity change from 0 to 2048
[  312.815581][T12763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.880135][  T935] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  312.980286][T10262] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  313.011518][T10262] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh
[  313.040100][  T935] usb 4-1: Using ep0 maxpacket: 32
[  313.051743][  T935] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  313.081532][  T935] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.110036][  T935] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  313.139998][  T935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.162765][  T935] hub 4-1:4.0: USB hub found
[  313.236796][T12754] loop4: detected capacity change from 0 to 32768
[  313.274854][T12754] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  313.356567][T12754] XFS (loop4): Ending clean mount
[  313.379246][  T935] hub 4-1:4.0: 1 port detected
[  313.460636][ T5219] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  313.579869][T12768] loop2: detected capacity change from 0 to 32768
[  313.595246][  T935] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  313.602773][  T935] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  313.660296][  T935] usb 4-1: USB disconnect, device number 24
[  313.699280][T12768] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  313.791030][T12766] loop1: detected capacity change from 0 to 40427
[  313.798813][T12766] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  313.807796][T12766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  313.817550][T12768] XFS (loop2): Ending clean mount
[  313.818555][T12766] F2FS-fs (loop1): invalid crc value
[  313.827978][T12768] XFS (loop2): Quotacheck needed: Please wait.
[  313.842230][T12766] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  313.863387][T12766] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  313.901647][T12768] XFS (loop2): Quotacheck: Done.
[  313.970147][ T4615] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  314.007333][ T5222] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  314.027310][T12766] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[  314.069506][T12766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  314.283901][T12789] loop3: detected capacity change from 0 to 256
[  314.330791][T12789] exfat: Deprecated parameter 'utf8'
[  314.420159][T12789] exfat: Deprecated parameter 'utf8'
[  314.466951][T12786] loop4: detected capacity change from 0 to 32768
[  314.479091][T12789] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  314.547751][   T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.631251][T12786] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  314.862768][   T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.909176][   T29] audit: type=1326 audit(1726588889.117:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af57def9 code=0x7ffc0000
[  314.980430][ T5219] ocfs2: Unmounting device (7,4) on (node local)
[  315.020107][   T29] audit: type=1326 audit(1726588889.127:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af57def9 code=0x7ffc0000
[  315.042462][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.110301][   T29] audit: type=1326 audit(1726588889.127:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f57af57def9 code=0x7ffc0000
[  315.142083][T12809] nbd: must specify at least one socket
[  315.152809][   T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.200105][   T29] audit: type=1326 audit(1726588889.127:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af57def9 code=0x7ffc0000
[  315.222435][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.320622][   T29] audit: type=1326 audit(1726588889.127:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57af57def9 code=0x7ffc0000
[  315.342909][    C1] vkms_vblank_simulate: vblank timer overrun
[  315.408724][   T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.448027][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  315.487036][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  315.496538][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  315.520197][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  315.530880][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  315.539426][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  315.600168][ T5289] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  315.761872][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.784495][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.813217][ T5289] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  315.823587][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.836644][ T5289] usb 2-1: config 0 descriptor??
[  315.870190][   T35] bridge_slave_1: left allmulticast mode
[  315.877676][T12840] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in;
[  315.877676][T12840]    program syz.0.2697 not setting count and/or reply_len properly
[  315.886167][   T35] bridge_slave_1: left promiscuous mode
[  315.919541][T12838] loop3: detected capacity change from 0 to 1764
[  315.931332][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.952526][   T35] bridge_slave_0: left allmulticast mode
[  315.972139][T12838] iso9660: Corrupted directory entry in block 2 of inode 1920
[  315.979765][   T35] bridge_slave_0: left promiscuous mode
[  315.992613][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.188208][T12848] loop3: detected capacity change from 0 to 1024
[  316.256829][ T5289] zeroplus 0003:0C12:0030.005E: unbalanced collection at end of report description
[  316.286556][ T5289] zeroplus 0003:0C12:0030.005E: parse failed
[  316.295924][ T5289] zeroplus 0003:0C12:0030.005E: probe with driver zeroplus failed with error -22
[  316.463098][ T5289] usb 2-1: USB disconnect, device number 30
[  316.603930][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  316.624976][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  316.700739][ T5286] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  316.753154][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.788558][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.811226][   T35] bond0 (unregistering): Released all slaves
[  316.868976][ T5286] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  316.903232][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.917726][ T5286] usb 4-1: config 0 descriptor??
[  316.957437][   T35] tipc: Disabling bearer <udp:syz0>
[  316.980952][   T35] tipc: Left network mode
[  317.230420][T12816] chnl_net:caif_netlink_parms(): no params data found
[  317.262748][T12864] loop1: detected capacity change from 0 to 4096
[  317.280070][T12864] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  317.348033][T12864] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  317.351151][ T5286] gs_usb 4-1:0.0: Configuring for 198 interfaces
[  317.371736][ T5286] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  317.409370][ T5286] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[  317.509407][T12868] loop4: detected capacity change from 0 to 1024
[  317.520159][T12858] loop2: detected capacity change from 0 to 32768
[  317.540152][T12858] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2707 (12858)
[  317.555732][ T5286] usb 4-1: USB disconnect, device number 25
[  317.567488][ T5234] Bluetooth: hci4: command tx timeout
[  317.587202][T12871] loop1: detected capacity change from 0 to 256
[  317.597009][T12871] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  317.614819][   T35] hsr_slave_0: left promiscuous mode
[  317.644038][T12858] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  317.644047][   T35] hsr_slave_1: left promiscuous mode
[  317.644123][T12858] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  317.670695][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  317.672068][T12858] BTRFS info (device loop2): using free-space-tree
[  317.690113][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  317.707687][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  317.716211][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  317.776211][T12876] use of bytesused == 0 is deprecated and will be removed in the future,
[  317.777534][   T35] veth1_macvtap: left promiscuous mode
[  317.793457][T12876] use the actual size instead.
[  317.806183][   T35] veth0_macvtap: left promiscuous mode
[  317.819209][   T35] veth1_vlan: left promiscuous mode
[  317.842167][   T35] veth0_vlan: left promiscuous mode
[  317.960563][ T5222] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  319.141069][   T35] team0 (unregistering): Port device team_slave_1 removed
[  319.232148][   T35] team0 (unregistering): Port device team_slave_0 removed
[  319.611185][T12925] Falling back ldisc for ttyS3.
[  319.640169][ T5234] Bluetooth: hci4: command tx timeout
[  320.431712][T12916] pimreg: entered allmulticast mode
[  320.440299][T12922] pimreg: left allmulticast mode
[  320.615780][T12816] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.638813][T12816] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.653778][T12816] bridge_slave_0: entered allmulticast mode
[  320.675236][T12816] bridge_slave_0: entered promiscuous mode
[  320.705124][T12816] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.730242][T12816] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.737435][T12816] bridge_slave_1: entered allmulticast mode
[  320.781729][T12816] bridge_slave_1: entered promiscuous mode
[  320.940204][T12982] usb usb7: usbfs: process 12982 (syz.4.2756) did not claim interface 0 before use
[  320.983388][T12816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.045065][T12988] sp0: Synchronizing with TNC
[  321.053088][T12816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  321.270840][T12816] team0: Port device team_slave_0 added
[  321.307112][T12816] team0: Port device team_slave_1 added
[  321.408909][   T35] IPVS: stop unused estimator thread 0...
[  321.441781][T12816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  321.448752][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.495438][T12816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  321.541812][T12816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  321.569143][T12816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.626648][T12816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.723284][ T5234] Bluetooth: hci4: command tx timeout
[  321.884405][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2769'.
[  322.019074][T12816] hsr_slave_0: entered promiscuous mode
[  322.102120][T12816] hsr_slave_1: entered promiscuous mode
[  322.272310][T12983] loop2: detected capacity change from 0 to 40427
[  322.298279][T12983] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  322.320026][T12983] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  322.362516][T12983] F2FS-fs (loop2): invalid crc value
[  322.390053][ T5289] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  322.395600][T12983] F2FS-fs (loop2): Found nat_bits in checkpoint
[  322.442661][T13002] loop3: detected capacity change from 0 to 40427
[  322.497276][T13002] F2FS-fs (loop3): Found nat_bits in checkpoint
[  322.560414][ T5289] usb 2-1: config index 0 descriptor too short (expected 4114, got 18)
[  322.599770][ T5289] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94
[  322.614998][ T5289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.634465][T12983] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  322.650175][ T5289] usb 2-1: Product: syz
[  322.660517][T12983] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  322.666379][ T5289] usb 2-1: Manufacturer: syz
[  322.704515][ T5289] usb 2-1: SerialNumber: syz
[  322.734286][T13002] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  322.742832][ T5289] usb 2-1: config 0 descriptor??
[  322.785177][T13002] bio_check_eod: 42 callbacks suppressed
[  322.785197][T13002] syz.3.2765: attempt to access beyond end of device
[  322.785197][T13002] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  323.303030][T13025] loop4: detected capacity change from 0 to 32768
[  323.360343][ T5289] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  323.373085][ T5289] asix 2-1:0.0: probe with driver asix failed with error -71
[  323.381503][T13025] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  323.383626][ T5289] usb 2-1: USB disconnect, device number 31
[  323.461875][   T35] (kworker/u8:2,35,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7
[  323.513283][T12816] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  323.520839][T13044] (syz.4.2776,13044,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7
[  323.564566][T13044] (syz.4.2776,13044,0):ocfs2_prepare_dir_for_insert:4287 ERROR: status = -2
[  323.612909][T13044] (syz.4.2776,13044,0):__ocfs2_prepare_orphan_dir:2179 ERROR: status = -2
[  323.642142][T13044] (syz.4.2776,13044,0):ocfs2_prepare_orphan_dir:2223 ERROR: status = -2
[  323.664517][T13044] (syz.4.2776,13044,0):ocfs2_prepare_orphan_dir:2239 ERROR: status = -2
[  323.691183][T13044] (syz.4.2776,13044,0):ocfs2_unlink:963 ERROR: status = -2
[  323.800173][ T4615] Bluetooth: hci4: command tx timeout
[  324.122331][T12816] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  324.154209][T13046] loop2: detected capacity change from 0 to 32768
[  324.193287][T13046] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2780 (13046)
[  324.227668][ T5219] ocfs2: Unmounting device (7,4) on (node local)
[  324.238337][T13046] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  324.242452][T12816] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  324.261966][T13046] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  324.306665][T13046] BTRFS info (device loop2): using free-space-tree
[  324.315483][T12816] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  324.698809][T12816] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.780919][T12816] 8021q: adding VLAN 0 to HW filter on device team0
[  324.787950][ T5288] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  324.844151][ T1900] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.851342][ T1900] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.866613][ T5222] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  324.878835][ T1900] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.883948][T13090] loop4: detected capacity change from 0 to 1024
[  324.885955][ T1900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.940532][ T5288] usb 2-1: Using ep0 maxpacket: 16
[  324.982684][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.994247][T13090] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  325.015888][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.050281][ T5288] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  325.059368][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.105980][T12816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  325.141523][T13090] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2797: Invalid block bitmap block 0 in block_group 0
[  325.159768][ T5288] usb 2-1: config 0 descriptor??
[  325.175548][T13090] Quota error (device loop4): write_blk: dquota write failed
[  325.183600][T12816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  325.195176][T13090] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  325.210343][T13090] EXT4-fs error (device loop4): ext4_acquire_dquot:6848: comm syz.4.2797: Failed to acquire dquot type 0
[  325.232126][T13056] loop3: detected capacity change from 0 to 32768
[  325.233465][T13090] EXT4-fs error (device loop4): ext4_free_blocks:6590: comm syz.4.2797: Freeing blocks not in datazone - block = 0, count = 4096
[  325.250246][T13056] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2787 (13056)
[  325.291136][T13090] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.2797: Invalid inode bitmap blk 0 in block_group 0
[  325.321188][   T35] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[  325.352081][T13056] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  325.358852][   T35] EXT4-fs error (device loop4): ext4_release_dquot:6871: comm kworker/u8:2: Failed to release dquot type 0
[  325.362692][T13090] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem
[  325.427347][T13056] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  325.465983][T13056] BTRFS info (device loop3): using free-space-tree
[  325.473238][T13090] EXT4-fs (loop4): 1 orphan inode deleted
[  325.480547][T13090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.601750][ T5288] bigben 0003:146B:0902.005F: unexpected rdesc, please submit for review
[  325.620818][ T5288] bigben 0003:146B:0902.005F: item fetching failed at offset 1/5
[  325.650856][ T5288] bigben 0003:146B:0902.005F: parse failed
[  325.660703][ T5288] bigben 0003:146B:0902.005F: probe with driver bigben failed with error -22
[  325.727928][T13090] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  325.770378][T12816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.812379][  T935] usb 2-1: USB disconnect, device number 32
[  325.869782][ T5219] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.010293][ T6283] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  326.139080][T13132] program syz.2.2804 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  326.322715][T12816] veth0_vlan: entered promiscuous mode
[  326.372597][T12816] veth1_vlan: entered promiscuous mode
[  326.485230][T12816] veth0_macvtap: entered promiscuous mode
[  326.552430][T12816] veth1_macvtap: entered promiscuous mode
[  326.633888][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.680417][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.702944][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.750000][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.759828][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.790095][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.819995][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.856902][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.868552][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.889371][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.927708][T12816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.956412][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.016585][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.050233][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.081001][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.106815][   T29] audit: type=1326 audit(1726588901.317:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.134776][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.169543][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.176931][T13159] openvswitch: netlink: Unknown key attributes 1
[  327.193770][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.206227][   T29] audit: type=1326 audit(1726588901.317:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.219965][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.281107][T12816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.297124][   T29] audit: type=1326 audit(1726588901.337:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.330437][T12816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.357841][T13163] loop1: detected capacity change from 0 to 2048
[  327.370832][   T29] audit: type=1326 audit(1726588901.337:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.370881][   T29] audit: type=1326 audit(1726588901.337:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.370925][   T29] audit: type=1326 audit(1726588901.337:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.370968][   T29] audit: type=1326 audit(1726588901.337:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13152 comm="syz.3.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1637def9 code=0x7ffc0000
[  327.388920][T12816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.445148][T13136] loop2: detected capacity change from 0 to 32768
[  327.543008][T13163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.590838][T12816] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.601030][T12816] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.610291][T12816] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.619142][T12816] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.000657][ T6404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.008682][ T6404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.093093][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.129898][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.281913][T13197] loop4: detected capacity change from 0 to 1024
[  328.377003][T13202] loop3: detected capacity change from 0 to 256
[  328.388839][T13203] sg_write: data in/out 45479/14 bytes for SCSI command 0x0-- guessing data in;
[  328.388839][T13203]    program syz.1.2836 not setting count and/or reply_len properly
[  328.434302][T13202] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  328.522441][T13202] exFAT-fs (loop3): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295)
[  328.522441][T13202] 
[  328.540714][  T144] hfsplus: b-tree write err: -5, ino 4
[  328.840099][ T5308] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  329.040919][ T5308] usb 2-1: Using ep0 maxpacket: 16
[  329.060834][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  329.090226][ T5308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.107287][T13189] loop2: detected capacity change from 0 to 32768
[  329.120172][ T5308] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  329.147097][T13225] loop5: detected capacity change from 0 to 64
[  329.148031][ T5308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.161855][T13189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2824 (13189)
[  329.195901][ T5308] usb 2-1: config 0 descriptor??
[  329.201026][T13189] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  329.220294][T13189] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  329.249279][T13189] BTRFS info (device loop2): using free-space-tree
[  329.281588][  T935] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  329.348336][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2850'.
[  329.423563][T13189] BTRFS error (device loop2): balance: invalid convert metadata profile single
[  329.442731][  T935] usb 5-1: Using ep0 maxpacket: 32
[  329.472929][  T935] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  329.499630][  T935] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  329.541051][  T935] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  329.561375][ T5222] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  329.569689][  T935] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  329.597562][  T935] usb 5-1: config 0 interface 0 has no altsetting 0
[  329.618920][  T935] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  329.636499][T13254] loop5: detected capacity change from 0 to 256
[  329.646244][ T5308] elan 0003:04F3:0755.0060: failed to start in urb: -90
[  329.652617][T13250] loop3: detected capacity change from 0 to 4096
[  329.660929][ T5308] elan 0003:04F3:0755.0060: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  329.667595][  T935] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  329.693152][  T935] usb 5-1: Product: syz
[  329.709078][  T935] usb 5-1: Manufacturer: syz
[  329.716740][T13250] NILFS (loop3): invalid segment: Checksum error in segment payload
[  329.717991][  T935] usb 5-1: SerialNumber: syz
[  329.732068][T13254] FAT-fs (loop5): Directory bread(block 64) failed
[  329.746944][T13254] FAT-fs (loop5): Directory bread(block 65) failed
[  329.752986][  T935] usb 5-1: config 0 descriptor??
[  329.754112][T13250] NILFS (loop3): trying rollback from an earlier position
[  329.770085][T13254] FAT-fs (loop5): Directory bread(block 66) failed
[  329.777310][  T935] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  329.780431][T13254] FAT-fs (loop5): Directory bread(block 67) failed
[  329.814864][T13250] NILFS (loop3): recovery complete
[  329.820332][T13254] FAT-fs (loop5): Directory bread(block 68) failed
[  329.824203][  T935] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  329.829005][T13254] FAT-fs (loop5): Directory bread(block 69) failed
[  329.841664][T13254] FAT-fs (loop5): Directory bread(block 70) failed
[  329.854523][ T5308] usb 2-1: USB disconnect, device number 33
[  329.862398][T13254] FAT-fs (loop5): Directory bread(block 71) failed
[  329.863019][T13255] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  329.871559][T13254] FAT-fs (loop5): Directory bread(block 72) failed
[  329.893553][T13254] FAT-fs (loop5): Directory bread(block 73) failed
[  330.061455][ T5288] usb 5-1: USB disconnect, device number 28
[  330.069405][ T5288] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  330.249606][T13264] loop2: detected capacity change from 0 to 512
[  330.272877][T13265] loop3: detected capacity change from 0 to 2048
[  330.303428][T13265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.320615][T13264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.334657][T13264] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.338354][T13265] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  330.417439][T13265] fscrypt (loop3, inode 13): Error -61 getting encryption context
[  330.564097][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.806816][T13290] loop3: detected capacity change from 0 to 1024
[  330.831416][T13290] EXT4-fs: Ignoring removed orlov option
[  330.837089][T13290] EXT4-fs: Ignoring removed nomblk_io_submit option
[  330.892579][T13290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.020019][  T935] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  331.040828][ T6283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.123428][ T5222] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.211238][  T935] usb 6-1: Using ep0 maxpacket: 16
[  331.218372][  T935] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  331.240673][  T935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  331.270589][  T935] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  331.279848][  T935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.298629][  T935] usb 6-1: Product: syz
[  331.304183][  T935] usb 6-1: Manufacturer: syz
[  331.309023][  T935] usb 6-1: SerialNumber: syz
[  331.398675][T13292] loop4: detected capacity change from 0 to 32768
[  331.428181][T13292] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  331.502085][T13292] 
[  331.504464][T13292] ======================================================
[  331.511485][T13292] WARNING: possible circular locking dependency detected
[  331.518520][T13292] 6.11.0-syzkaller-04003-gfc1dc0d50780 #0 Not tainted
[  331.525351][T13292] ------------------------------------------------------
[  331.532380][T13292] syz.4.2871/13292 is trying to acquire lock:
[  331.538466][T13292] ffff88805b79ed80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_xattr_set+0xe9e/0x1930
[  331.547032][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2878'.
[  331.550693][T13292] 
[  331.550693][T13292] but task is already holding lock:
[  331.550706][T13292] ffff88805b7986f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x633/0x1930
[  331.550786][T13292] 
[  331.550786][T13292] which lock already depends on the new lock.
[  331.550786][T13292] 
[  331.550796][T13292] 
[  331.550796][T13292] the existing dependency chain (in reverse order) is:
[  331.550807][T13292] 
[  331.550807][T13292] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}:
[  331.550847][T13292]        lock_acquire+0x1ed/0x550
[  331.550883][T13292]        down_read+0xb1/0xa40
[  331.550921][T13292]        ocfs2_init_acl+0x397/0x930
[  331.550945][T13292]        ocfs2_mknod+0x1c05/0x2b40
[  331.550984][T13292]        ocfs2_create+0x1ab/0x480
[  331.551020][T13292]        path_openat+0x1c05/0x3590
[  331.551051][T13292]        do_filp_open+0x235/0x490
[  331.551082][T13292]        do_sys_openat2+0x13e/0x1d0
[  331.551106][T13292]        __x64_sys_creat+0x123/0x170
[  331.551132][T13292]        do_syscall_64+0xf3/0x230
[  331.551166][T13292]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.551199][T13292] 
[  331.551199][T13292] -> #1 (jbd2_handle){++++}-{0:0}:
[  331.668359][T13292]        lock_acquire+0x1ed/0x550
[  331.673416][T13292]        jbd2_journal_lock_updates+0xaa/0x380
[  331.679504][T13292]        __ocfs2_flush_truncate_log+0x2ea/0x1250
[  331.685839][T13292]        ocfs2_flush_truncate_log+0x4f/0x70
[  331.691914][T13292]        ocfs2_sync_fs+0x125/0x390
[  331.697039][T13292]        sync_filesystem+0x1ca/0x230
[  331.702341][T13292]        generic_shutdown_super+0x72/0x2d0
[  331.708246][T13292]        kill_block_super+0x44/0x90
[  331.713456][T13292]        deactivate_locked_super+0xc6/0x130
[  331.719360][T13292]        cleanup_mnt+0x41f/0x4b0
[  331.724303][T13292]        task_work_run+0x251/0x310
[  331.729416][T13292]        syscall_exit_to_user_mode+0x168/0x370
[  331.735581][T13292]        do_syscall_64+0x100/0x230
[  331.740723][T13292]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.747155][T13292] 
[  331.747155][T13292] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}:
[  331.757722][T13292]        validate_chain+0x18ef/0x5920
[  331.763099][T13292]        __lock_acquire+0x1384/0x2050
[  331.768491][T13292]        lock_acquire+0x1ed/0x550
[  331.773546][T13292]        down_write+0x99/0x220
[  331.778327][T13292]        ocfs2_xattr_set+0xe9e/0x1930
[  331.783702][T13292]        __vfs_setxattr+0x46a/0x4a0
[  331.788907][T13292]        __vfs_setxattr_noperm+0x12e/0x660
[  331.794719][T13292]        vfs_setxattr+0x221/0x430
[  331.799753][T13292]        path_setxattr+0x37e/0x4d0
[  331.804864][T13292]        __x64_sys_setxattr+0xbb/0xd0
[  331.810247][T13292]        do_syscall_64+0xf3/0x230
[  331.815278][T13292]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.821701][T13292] 
[  331.821701][T13292] other info that might help us debug this:
[  331.821701][T13292] 
[  331.831930][T13292] Chain exists of:
[  331.831930][T13292]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> jbd2_handle --> &oi->ip_xattr_sem
[  331.831930][T13292] 
[  331.847718][T13292]  Possible unsafe locking scenario:
[  331.847718][T13292] 
[  331.855170][T13292]        CPU0                    CPU1
[  331.860530][T13292]        ----                    ----
[  331.865889][T13292]   lock(&oi->ip_xattr_sem);
[  331.870489][T13292]                                lock(jbd2_handle);
[  331.877085][T13292]                                lock(&oi->ip_xattr_sem);
[  331.884372][T13292]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3);
[  331.891669][T13292] 
[  331.891669][T13292]  *** DEADLOCK ***
[  331.891669][T13292] 
[  331.900244][T13292] 3 locks held by syz.4.2871/13292:
[  331.905439][T13292]  #0: ffff8880590ec420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90
[  331.914708][T13292]  #1: ffff88805b7989c0 (&sb->s_type->i_mutex_key#35){+.+.}-{3:3}, at: vfs_setxattr+0x1e1/0x430
[  331.925203][T13292]  #2: ffff88805b7986f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x633/0x1930
[  331.935153][T13292] 
[  331.935153][T13292] stack backtrace:
[  331.941031][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.4.2871 Not tainted 6.11.0-syzkaller-04003-gfc1dc0d50780 #0
[  331.951437][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  331.961486][T13292] Call Trace:
[  331.964758][T13292]  <TASK>
[  331.967685][T13292]  dump_stack_lvl+0x241/0x360
[  331.972380][T13292]  ? __pfx_dump_stack_lvl+0x10/0x10
[  331.977587][T13292]  ? __pfx__printk+0x10/0x10
[  331.982190][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  331.987835][T13292]  print_circular_bug+0x13a/0x1b0
[  331.992866][T13292]  check_noncircular+0x36a/0x4a0
[  331.997814][T13292]  ? __pfx_check_noncircular+0x10/0x10
[  332.003277][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.008920][T13292]  ? lockdep_lock+0x123/0x2b0
[  332.013610][T13292]  ? bdev_getblk+0x6e/0x550
[  332.018122][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.023852][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.029495][T13292]  validate_chain+0x18ef/0x5920
[  332.034357][T13292]  ? __pfx_validate_chain+0x10/0x10
[  332.039553][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.045198][T13292]  ? __pfx_lock_acquire+0x10/0x10
[  332.050232][T13292]  ? ocfs2_inode_lock_full_nested+0x17b/0x1c30
[  332.056404][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.062046][T13292]  ? ocfs2_read_inode_block+0x14c/0x1e0
[  332.067590][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.073232][T13292]  ? look_up_lock_class+0x77/0x170
[  332.078358][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.084007][T13292]  ? register_lock_class+0x102/0x980
[  332.089300][T13292]  ? mark_lock+0x9a/0x360
[  332.093644][T13292]  ? __pfx_register_lock_class+0x10/0x10
[  332.099293][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.105031][T13292]  ? mark_lock+0x9a/0x360
[  332.109372][T13292]  __lock_acquire+0x1384/0x2050
[  332.114240][T13292]  lock_acquire+0x1ed/0x550
[  332.118753][T13292]  ? ocfs2_xattr_set+0xe9e/0x1930
[  332.123791][T13292]  ? __pfx_lock_acquire+0x10/0x10
[  332.128828][T13292]  ? do_raw_spin_unlock+0x13c/0x8b0
[  332.134029][T13292]  ? __pfx___might_resched+0x10/0x10
[  332.139323][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.144962][T13292]  ? _raw_spin_unlock+0x28/0x50
[  332.149823][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.155464][T13292]  ? ocfs2_inode_lock_tracker+0x45a/0x760
[  332.161189][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.166832][T13292]  ? ocfs2_xattr_block_find+0x17e/0x540
[  332.172384][T13292]  down_write+0x99/0x220
[  332.176638][T13292]  ? ocfs2_xattr_set+0xe9e/0x1930
[  332.181670][T13292]  ? __pfx_down_write+0x10/0x10
[  332.186531][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.192174][T13292]  ? __kmalloc_cache_noprof+0x19c/0x2c0
[  332.197733][T13292]  ocfs2_xattr_set+0xe9e/0x1930
[  332.202598][T13292]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  332.207889][T13292]  ? __lock_acquire+0x1384/0x2050
[  332.212933][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.218577][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.224225][T13292]  ? ocfs2_inode_unlock_tracker+0x23e/0x2b0
[  332.230125][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.235763][T13292]  ? do_raw_spin_unlock+0x13c/0x8b0
[  332.240977][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.246623][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.252289][T13292]  ? posix_xattr_acl+0xa9/0xd0
[  332.257079][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.262735][T13292]  ? evm_protect_xattr+0x4be/0xb30
[  332.267858][T13292]  ? __pfx_ocfs2_permission+0x10/0x10
[  332.273248][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.278987][T13292]  ? ocfs2_xattr_user_set+0xae/0x100
[  332.284289][T13292]  ? __pfx_ocfs2_xattr_user_set+0x10/0x10
[  332.290023][T13292]  __vfs_setxattr+0x46a/0x4a0
[  332.294719][T13292]  __vfs_setxattr_noperm+0x12e/0x660
[  332.300028][T13292]  vfs_setxattr+0x221/0x430
[  332.304644][T13292]  ? __pfx_vfs_setxattr+0x10/0x10
[  332.309690][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.315347][T13292]  path_setxattr+0x37e/0x4d0
[  332.319949][T13292]  ? __pfx_path_setxattr+0x10/0x10
[  332.325064][T13292]  ? do_futex+0x33b/0x560
[  332.329417][T13292]  ? srso_alias_return_thunk+0x5/0xfbef5
[  332.335063][T13292]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  332.341062][T13292]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  332.347489][T13292]  ? do_syscall_64+0x100/0x230
[  332.352268][T13292]  __x64_sys_setxattr+0xbb/0xd0
[  332.357133][T13292]  do_syscall_64+0xf3/0x230
[  332.361651][T13292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.367555][T13292] RIP: 0033:0x7f433a17def9
[  332.371970][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  332.391580][T13292] RSP: 002b:00007f4339bff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  332.400006][T13292] RAX: ffffffffffffffda RBX: 00007f433a335f80 RCX: 00007f433a17def9
[  332.407986][T13292] RDX: 0000000020000100 RSI: 00000000200000c0 RDI: 0000000020000080
[  332.416043][T13292] RBP: 00007f433a1f0b76 R08: 0000000000000001 R09: 0000000000000000
[  332.424012][T13292] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000000
[  332.431980][T13292] R13: 0000000000000000 R14: 00007f433a335f80 R15: 00007ffd6eca5fe8
[  332.439965][T13292]  </TASK>
[  332.496669][  T935] usb 6-1: 0:2 : does not exist
[  332.515443][  T935] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  332.526308][ T5219] ocfs2: Unmounting device (7,4) on (node local)
[  332.534945][  T935] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  332.547935][  T935] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  332.559885][  T935] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  332.578350][  T935] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  332.590879][  T935] usb 6-1: USB disconnect, device number 18